last executing test programs: 39.45353369s ago: executing program 3 (id=571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000340)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x8, 0x4, 0xc08}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000180), 0x4) write$UHID_INPUT(r1, &(0x7f00000011c0)={0x8, {"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", 0xfffffffffffffcb7}}, 0x1006) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) 38.567057002s ago: executing program 3 (id=576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffedb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 38.039029653s ago: executing program 3 (id=579): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = accept(r1, 0x0, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 37.6424953s ago: executing program 3 (id=581): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x20, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 34.54980452s ago: executing program 3 (id=593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f00000001c0)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4138ae84, &(0x7f00000004c0)=@arm64={0x7, 0x9, 0xeb, '\x00', 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 33.91982935s ago: executing program 3 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='127.0.0.1\n', 0xa) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write(r2, &(0x7f0000000380)="0600000000000000020000000400000000000000000000006c733100"/120, 0x78) 18.667484944s ago: executing program 32 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/1/nodeid\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='127.0.0.1\n', 0xa) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write(r2, &(0x7f0000000380)="0600000000000000020000000400000000000000000000006c733100"/120, 0x78) 12.844518234s ago: executing program 2 (id=662): r0 = socket(0xa, 0x3, 0x87) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) close(0x3) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922196c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150c781f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xa, {0x8, 0xfffffffe, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x6000, 0xfffffffc, r3, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) 12.321885992s ago: executing program 2 (id=663): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$video(&(0x7f0000000200), 0x4, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000400)={0x2, 0x1, 0x1}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000500)=@mmap={0x0, 0x1, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x1, {}, 0x1000, 0x0, 0x0}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r3, &(0x7f0000000000)='7', 0x1) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000700)=0x1) 11.369215722s ago: executing program 2 (id=664): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 8.35052769s ago: executing program 0 (id=669): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000980)}) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.905137563s ago: executing program 0 (id=672): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="201019"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000013c0)={0x34, &(0x7f00000011c0)={0x20, 0x10, 0x5d, "cbfb10f05b9dad72af82d93eff972cbd4ab6196314536d6715db3ec6d3fae577659cac0b0e26da6557d10dd0366c24e019e5e3f14f653e0d6c301e4ed78a713899c9e5af8492785e441f1784c72e415178bffbd7a4101ea2ff9b096871"}, 0x0, &(0x7f00000012c0)={0x0, 0x8, 0x1, 0x5}, 0x0, &(0x7f0000001340)={0x40, 0xa0, 0x4, 0x7fffffff}, &(0x7f0000001380)={0xc0, 0xa2, 0x2f, "33a0af3ae98ef93fd1ce073cc37c59f454241b2521497150203187639f9464ae735bd4f6dbb7aef3f0d52532e2f88f"}}) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000001600)={0x14, &(0x7f0000001400)={0x0, 0x22, 0x2, {0x2, 0x21}}, 0x0}, &(0x7f0000001800)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.614549307s ago: executing program 2 (id=674): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) 7.472251749s ago: executing program 1 (id=675): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000400)="0b624cf850487eb4554e56bc0ee346716bfa77d5e1caa7113414f39f1cddcc8d9d1070024fc9bdb9213239c5adc4cba0ede014b9d5d70b4d921eeb9073698f35f688c37e76a95ad0d11973ce3b110dbf53f6216f2b724aa8c9a0e4d609d5fd9cb9e8a2", 0x63}], 0x1}}], 0x1, 0x20004080) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x4, 0xe9b, 0x22, 0x20000008, 0x7, 0x911d, 0x7, 0x87, 0xaf9, 0x5, 0x1006, 0xc, 0x8, 0x8000000000000001, 0xffffffffffffffff], 0x1000, 0x42080}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x20005, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.723329501s ago: executing program 1 (id=676): r0 = memfd_create(&(0x7f0000000040)='dummy\x00', 0x0) ftruncate(r0, 0x6400000) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r2, 0x4c80, 0x1) r3 = memfd_create(&(0x7f0000000100)='dummy2\x00', 0x0) ftruncate(r3, 0x6400000) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='md0\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='7:0\x00', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r6, &(0x7f0000000380)='7:1\x00', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r7, &(0x7f0000000400)='raid1\x00', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r8, &(0x7f0000000480)='2\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x101081, 0x0) write(r9, &(0x7f0000000500)="3002", 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r10, &(0x7f0000000580)='1\x00', 0x2) r11 = openat(r7, &(0x7f00000005c0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x40) write(r11, &(0x7f0000000600)='external\x00', 0x9) r12 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/block/md0/md/bitmap/chunksize\x00', 0x1, 0x0) write(r12, &(0x7f0000000680)='4096\x00', 0x5) r13 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/block/md0/md/bitmap/time_base\x00', 0x1, 0x0) write(r13, &(0x7f0000000700)='1\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000840)="2b34004a33b1c29bff10a1b65650361254c779ff0e588623d10cf8abc7226b5be8da90184d21d159c88b716c0d786ce83e7c8427f66c74e9abe34d7df9b7e3c045873c733496b180fffd4847b35d4751b7f90d58026e71261c", 0x59) r14 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r14, &(0x7f0000000800)='readonly\x00', 0x9) 6.613040785s ago: executing program 2 (id=677): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800448f1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.742437259s ago: executing program 1 (id=679): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)=ANY=[@ANYBLOB="200e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="001602"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000200)={0x40, 0x9, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.371289268s ago: executing program 0 (id=680): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000440)={0x11, 0x17, 0x1, {0x8, './config'}}, 0x11) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x20000041}}], 0x1, 0xc004) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, &(0x7f0000000000)={'\x00', 0x9, 0x8, 0x7, 0x183b, 0x3ff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) 4.05186929s ago: executing program 0 (id=681): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.789764675s ago: executing program 0 (id=682): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x40, 0x8, 0x3, "fe602a"}, 0x0, 0x0}) 3.399803976s ago: executing program 2 (id=683): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 3.365884119s ago: executing program 4 (id=684): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000140)={0x1d}) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 2.934313651s ago: executing program 4 (id=685): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x5ada985dea50982f) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0xfffffffffffffffd, 0xc0f41) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a3000000000540003"], 0xa8}}, 0x0) 2.309645835s ago: executing program 4 (id=686): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x40, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) writev(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0xfdef, 0x805, 0x0, 0x0) 2.039368546s ago: executing program 4 (id=687): socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000001040)="99d3c9f30f09b993080000b800000000ba000000800f30660f38dfb1e4000000f4cfc4e1fe12230f01c3b9800000c00f3235010000000f30", 0x38}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.886763391s ago: executing program 1 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) 816.013295ms ago: executing program 1 (id=689): timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000340)={{}, {0x77359400}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) read$FUSE(r0, 0x0, 0x0) rename(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='./file2\x00') 725.902814ms ago: executing program 4 (id=690): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="4400000010000104000000000000000000000000000000000000000000000000240012000a00010076786c616e00000014000200080001007b0000000800020001020304", 0x44}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000320000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000330000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000340000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000350000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000360000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000370000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000380000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c000104000000000000000007000000390000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c0001040000000000000000070000003a0000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c0001040000000000000000070000003b0000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="300000001c0001040000000000000000070000003c0000008000020008000100010203040a0002000011223344550000", 0x30}], 0x1}, 0x0) 318.536968ms ago: executing program 1 (id=691): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) r2 = dup(r1) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x6}}, 0x20) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[], 0x32600) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x2}, 0xb) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x1, 0x80000001}, 0x20) 318.185771ms ago: executing program 4 (id=692): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x2f, 0x0}}], 0x1, 0x800) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) sendmsg(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b80)="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", 0x4f6}], 0x1}, 0x44000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 0 (id=693): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b"], 0x88) accept(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 84.895724][ T7044] ? __fget_files+0x2a/0x420 [ 184.895767][ T7044] ksys_write+0x150/0x270 [ 184.895805][ T7044] ? __pfx_ksys_write+0x10/0x10 [ 184.895854][ T7044] do_syscall_64+0x166/0x520 [ 184.895878][ T7044] ? trace_irq_disable+0x3b/0x140 [ 184.895913][ T7044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.895940][ T7044] ? clear_bhb_loop+0x70/0xc0 [ 184.895972][ T7044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.896006][ T7044] RIP: 0033:0x7fc144d9e159 [ 184.896030][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.896052][ T7044] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.896080][ T7044] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 184.896100][ T7044] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 184.896117][ T7044] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 184.896134][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.896150][ T7044] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 184.896191][ T7044] [ 185.709130][ T5722] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 185.880419][ T5722] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 185.889425][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.889449][ T5722] usb 1-1: Product: syz [ 185.889464][ T5722] usb 1-1: Manufacturer: syz [ 185.889480][ T5722] usb 1-1: SerialNumber: syz [ 185.968466][ T7061] FAULT_INJECTION: forcing a failure. [ 185.968466][ T7061] name failslab, interval 1, probability 0, space 0, times 0 [ 185.968512][ T7061] CPU: 0 UID: 0 PID: 7061 Comm: syz.2.416 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.968546][ T7061] Tainted: [L]=SOFTLOCKUP [ 185.968556][ T7061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 185.968570][ T7061] Call Trace: [ 185.968579][ T7061] [ 185.968590][ T7061] dump_stack_lvl+0xe8/0x150 [ 185.968625][ T7061] should_fail_ex+0x3eb/0x540 [ 185.968657][ T7061] should_failslab+0xa8/0x100 [ 185.968684][ T7061] __kmalloc_node_noprof+0xfb/0x720 [ 185.968719][ T7061] ? __kmalloc_node_noprof+0x2eb/0x720 [ 185.968751][ T7061] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 185.968778][ T7061] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 185.968813][ T7061] blk_mq_alloc_tag_set+0x5f8/0x1000 [ 185.968854][ T7061] loop_add+0x436/0xb40 [ 185.968887][ T7061] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 185.968978][ T7061] ? __pfx_loop_add+0x10/0x10 [ 185.969137][ T7061] loop_control_ioctl+0x12b/0x5a0 [ 185.969172][ T7061] ? __fget_files+0x2a/0x420 [ 185.969201][ T7061] ? __pfx_loop_control_ioctl+0x10/0x10 [ 185.969232][ T7061] ? __fget_files+0x2a/0x420 [ 185.969264][ T7061] ? bpf_lsm_file_ioctl+0x9/0x20 [ 185.969293][ T7061] ? __pfx_loop_control_ioctl+0x10/0x10 [ 185.969327][ T7061] __se_sys_ioctl+0xfc/0x170 [ 185.969365][ T7061] do_syscall_64+0x166/0x520 [ 185.969393][ T7061] ? trace_irq_disable+0x3b/0x140 [ 185.969427][ T7061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.969452][ T7061] ? clear_bhb_loop+0x70/0xc0 [ 185.969480][ T7061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.969503][ T7061] RIP: 0033:0x7fc144d9e159 [ 185.969525][ T7061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.969545][ T7061] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 185.969570][ T7061] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 185.969587][ T7061] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 185.969603][ T7061] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 185.969618][ T7061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.969650][ T7061] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 185.969687][ T7061] [ 186.441203][ T5722] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 187.146800][ T31] audit: type=1800 audit(1789583476.896:5): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.422" name=09 dev="sda1" ino=2047 res=0 errno=0 [ 187.367955][ T7079] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 187.912771][ T5722] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 187.983237][ T5722] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 188.012896][ T5722] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 188.081723][ T5722] usb 1-1: USB disconnect, device number 25 [ 188.180236][ T7092] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.455418][ T7085] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input27 [ 188.807005][ T1227] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 188.957213][ T1227] usb 4-1: Using ep0 maxpacket: 8 [ 188.961646][ T1227] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.963074][ T1227] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 188.963146][ T1227] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.963170][ T1227] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.963196][ T1227] usb 4-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.963219][ T1227] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.963280][ T1227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.991600][ C1] net_ratelimit: 57 callbacks suppressed [ 189.068983][ T1227] usbtmc 4-1:16.0: bulk endpoints not found [ 189.239288][ T7104] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 189.239307][ T7104] rust_binder: Read failure Err(EFAULT) in pid:356 [ 189.258271][ T7104] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 189.258317][ T7104] rust_binder: Read failure Err(EFAULT) in pid:356 [ 189.268309][ T7104] rust_binder: Failure in copy_transaction_data: EFAULT [ 189.268414][ T7104] rust_binder: 7103:7104 transaction call to 7103:0 failed EFAULT, code 0 size 120-24 [ 189.272057][ T10] rust_binder: 7103: undelivered TRANSACTION_ERROR: 29201 [ 189.339258][ T5729] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 189.490138][ T5729] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 189.494077][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.494101][ T5729] usb 1-1: Product: syz [ 189.494118][ T5729] usb 1-1: Manufacturer: syz [ 189.494135][ T5729] usb 1-1: SerialNumber: syz [ 189.524646][ T5729] usb 1-1: config 0 descriptor?? [ 189.554665][ T5729] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 190.030609][ T7112] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 190.030637][ T7112] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 190.411513][ T7115] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.980767][ T31] audit: type=1326 audit(1789583480.736:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 190.982339][ T31] audit: type=1326 audit(1789583480.736:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.041942][ T31] audit: type=1326 audit(1789583480.796:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.042155][ T31] audit: type=1326 audit(1789583480.796:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.043035][ T31] audit: type=1326 audit(1789583480.796:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f98a4b5e98e code=0x7ffc0000 [ 191.043366][ T31] audit: type=1326 audit(1789583480.796:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.044312][ T31] audit: type=1326 audit(1789583480.796:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.044487][ T31] audit: type=1326 audit(1789583480.796:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.045056][ T31] audit: type=1326 audit(1789583480.796:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.1.439" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98a4b9e159 code=0x7ffc0000 [ 191.097124][ T1227] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 191.338355][ T1227] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 191.341738][ T1227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.341769][ T1227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 191.341795][ T1227] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 191.343637][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 191.343659][ T1227] usb 3-1: Product: syz [ 191.343676][ T1227] usb 3-1: Manufacturer: syz [ 191.406873][ T7121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 191.414369][ T7121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 191.414524][ T7121] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 191.508924][ T5722] usb 4-1: USB disconnect, device number 25 [ 191.657140][ T5729] gspca_stk1135: reg_w 0x203 err -71 [ 191.658233][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.658272][ T5729] gspca_stk1135: Sensor write failed [ 191.658366][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.658404][ T5729] gspca_stk1135: Sensor write failed [ 191.658497][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.658528][ T5729] gspca_stk1135: Sensor read failed [ 191.658655][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.658719][ T5729] gspca_stk1135: Sensor read failed [ 191.658741][ T5729] gspca_stk1135: Detected sensor type unknown (0x0) [ 191.663212][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.663253][ T5729] gspca_stk1135: Sensor read failed [ 191.663355][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.663386][ T5729] gspca_stk1135: Sensor read failed [ 191.663477][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.663500][ T5729] gspca_stk1135: Sensor write failed [ 191.663590][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 191.663620][ T5729] gspca_stk1135: Sensor write failed [ 191.663822][ T5729] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 191.705537][ T5729] usb 1-1: USB disconnect, device number 26 [ 192.642955][ T1227] redrat3 3-1:1.0: Firmware rev:  [ 192.871510][ T5729] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 193.012980][ T1227] redrat3 3-1:1.0: Failed to read timeout from hardware [ 193.026503][ T5729] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 193.032479][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.060445][ T5729] usb 2-1: config 0 descriptor?? [ 193.085067][ T5729] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 193.216986][ T1227] rc_core: IR keymap rc-hauppauge not found [ 193.217006][ T1227] Registered IR keymap rc-empty [ 193.219159][ T1227] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0 [ 193.221711][ T1227] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/rc/rc0/input28 [ 193.240326][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 193.268737][ T1227] redrat3 3-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 193.269389][ T1227] redrat3 3-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 193.269437][ T1227] redrat3 3-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 193.333598][ T1227] redrat3 3-1:1.0: probe with driver redrat3 failed with error -5 [ 193.350726][ T1227] usb 3-1: USB disconnect, device number 19 [ 193.408586][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 193.410975][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 193.454136][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.454161][ T10] usb 4-1: Product: syz [ 193.454180][ T10] usb 4-1: Manufacturer: syz [ 193.454198][ T10] usb 4-1: SerialNumber: syz [ 193.501678][ T10] usb 4-1: config 0 descriptor?? [ 193.536559][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 194.187008][ C1] net_ratelimit: 277 callbacks suppressed [ 194.217044][ T1227] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.349201][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.367001][ T1227] usb 3-1: Using ep0 maxpacket: 8 [ 194.372969][ T1227] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 194.391417][ T1227] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.391438][ T1227] usb 3-1: Product: syz [ 194.391453][ T1227] usb 3-1: Manufacturer: syz [ 194.391469][ T1227] usb 3-1: SerialNumber: syz [ 194.421525][ T1227] usb 3-1: config 0 descriptor?? [ 194.435477][ T1227] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 194.737045][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 194.889292][ T5729] usb 2-1: USB disconnect, device number 21 [ 194.890007][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 194.890876][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 194.892381][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 194.892412][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.896480][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.896530][ T25] usb 1-1: Product: syz [ 194.896547][ T25] usb 1-1: Manufacturer: syz [ 194.896564][ T25] usb 1-1: SerialNumber: syz [ 194.980600][ T25] usb 1-1: config 0 descriptor?? [ 195.012389][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.012417][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 195.614000][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 195.615075][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 195.650571][ T1227] gspca_sonixj: reg_w1 err -71 [ 195.687115][ T1227] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 195.690486][ T1227] usb 3-1: USB disconnect, device number 20 [ 195.819352][ T10] gspca_sonixj: reg_w1 err -71 [ 195.854308][ T7202] syzkaller0: entered promiscuous mode [ 195.854327][ T7202] syzkaller0: entered allmulticast mode [ 195.858342][ T10] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 195.884143][ T10] usb 4-1: USB disconnect, device number 26 [ 196.666879][ T25] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 196.877894][ T25] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 196.878389][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 196.878907][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 196.879423][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 196.879902][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 196.880347][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 196.931013][ T25] usb 1-1: USB disconnect, device number 27 [ 198.369354][ T7258] kvm: user requested TSC rate below hardware speed [ 198.429089][ T7265] FAULT_INJECTION: forcing a failure. [ 198.429089][ T7265] name failslab, interval 1, probability 0, space 0, times 0 [ 198.429135][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.1.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.429167][ T7265] Tainted: [L]=SOFTLOCKUP [ 198.429177][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 198.429190][ T7265] Call Trace: [ 198.429199][ T7265] [ 198.429210][ T7265] dump_stack_lvl+0xe8/0x150 [ 198.429247][ T7265] should_fail_ex+0x3eb/0x540 [ 198.429279][ T7265] should_failslab+0xa8/0x100 [ 198.429307][ T7265] __kmalloc_cache_noprof+0x9e/0x600 [ 198.429342][ T7265] ? trace_kmalloc+0x2a/0xf0 [ 198.429371][ T7265] ? snd_hrtimer_open+0x4f/0xd0 [ 198.429401][ T7265] ? snd_hrtimer_open+0x4f/0xd0 [ 198.429439][ T7265] snd_hrtimer_open+0x4f/0xd0 [ 198.429472][ T7265] snd_timer_open+0xee0/0x1350 [ 198.429511][ T7265] snd_seq_timer_open+0x2de/0x620 [ 198.429555][ T7265] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 198.429604][ T7265] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.429644][ T7265] snd_seq_queue_alloc+0x3ba/0x740 [ 198.429684][ T7265] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 198.429716][ T7265] snd_seq_oss_open+0x657/0xf40 [ 198.429750][ T7265] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 198.429816][ T7265] ? rcu_is_watching+0x16/0xb0 [ 198.429841][ T7265] ? trace_contention_end+0x3d/0x140 [ 198.429887][ T7265] ? __pfx___mutex_lock+0x10/0x10 [ 198.429915][ T7265] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 198.429943][ T7265] ? __pfx_free_devinfo+0x10/0x10 [ 198.429968][ T7265] ? do_raw_spin_unlock+0xf5/0x200 [ 198.430001][ T7265] ? soundcore_open+0x2da/0x490 [ 198.430032][ T7265] odev_open+0x67/0xa0 [ 198.430057][ T7265] chrdev_open+0x4d9/0x600 [ 198.430084][ T7265] ? __pfx_chrdev_open+0x10/0x10 [ 198.430110][ T7265] ? devcgroup_check_permission+0x31/0x8f0 [ 198.430155][ T7265] ? __pfx_chrdev_open+0x10/0x10 [ 198.430177][ T7265] do_dentry_open+0x80e/0x1360 [ 198.430215][ T7265] vfs_open_consume+0x4a/0x350 [ 198.430238][ T7265] ? path_openat+0x14bb/0x1e40 [ 198.430274][ T7265] path_openat+0x14d7/0x1e40 [ 198.430329][ T7265] do_file_open+0x23e/0x4a0 [ 198.430370][ T7265] ? __pfx_do_file_open+0x10/0x10 [ 198.430427][ T7265] ? _raw_spin_unlock+0x28/0x50 [ 198.430456][ T7265] ? alloc_fd+0x651/0x6c0 [ 198.430496][ T7265] do_sys_openat2+0x115/0x200 [ 198.430522][ T7265] ? __se_sys_futex+0x3a8/0x450 [ 198.430548][ T7265] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.430580][ T7265] ? rcu_is_watching+0x16/0xb0 [ 198.430609][ T7265] __x64_sys_openat+0x138/0x170 [ 198.430641][ T7265] do_syscall_64+0x166/0x520 [ 198.430660][ T7265] ? trace_irq_disable+0x3b/0x140 [ 198.430691][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.430716][ T7265] ? clear_bhb_loop+0x70/0xc0 [ 198.430745][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.430769][ T7265] RIP: 0033:0x7f98a4b9e159 [ 198.430790][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.430810][ T7265] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 198.430835][ T7265] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 198.430853][ T7265] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 198.430868][ T7265] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 198.430882][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.430896][ T7265] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 198.430932][ T7265] [ 199.386976][ C1] net_ratelimit: 54 callbacks suppressed [ 199.617023][ T5729] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 199.768753][ T5729] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.770417][ T5729] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 199.770481][ T5729] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 199.770522][ T5729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 199.770554][ T5729] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.770592][ T5729] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65522, setting to 64 [ 199.770622][ T5729] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255 [ 199.772047][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 199.772070][ T5729] usb 3-1: SerialNumber: syz [ 199.804447][ T1227] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 199.835110][ T7286] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.885643][ T7279] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 199.929596][ T7286] kvm: pic: single mode not supported [ 199.931944][ T7286] kvm: pic: non byte read [ 199.932489][ T7286] kvm: pic: level sensitive irq not supported [ 199.932593][ T7286] kvm: pic: non byte read [ 199.935507][ T7286] kvm: pic: level sensitive irq not supported [ 199.935619][ T7286] kvm: pic: non byte read [ 199.935868][ T7286] kvm: pic: level sensitive irq not supported [ 199.935986][ T7286] kvm: pic: non byte read [ 199.936223][ T7286] kvm: pic: level sensitive irq not supported [ 199.936310][ T7286] kvm: pic: non byte read [ 199.936544][ T7286] kvm: pic: level sensitive irq not supported [ 199.963496][ T7286] kvm: pic: non byte read [ 199.993269][ T7286] kvm: pic: level sensitive irq not supported [ 199.993525][ T7286] kvm: pic: non byte read [ 199.994114][ T7286] kvm: pic: level sensitive irq not supported [ 199.994318][ T7286] kvm: pic: non byte read [ 199.996869][ T1227] usb 1-1: Using ep0 maxpacket: 32 [ 200.032091][ T1227] usb 1-1: unable to get BOS descriptor or descriptor too short [ 200.032137][ T1227] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 200.033447][ T1227] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 200.033470][ T1227] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 200.033494][ T1227] usb 1-1: config 14 has no interface number 0 [ 200.033511][ T1227] usb 1-1: config 14 has no interface number 1 [ 200.033571][ T1227] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 200.033599][ T1227] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 200.033628][ T1227] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 200.033658][ T1227] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 200.033690][ T1227] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 200.033721][ T1227] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.033753][ T1227] usb 1-1: config 14 interface 57 has no altsetting 0 [ 200.033775][ T1227] usb 1-1: config 14 interface 228 has no altsetting 0 [ 200.036620][ T1227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.036642][ T1227] usb 1-1: Product: syz [ 200.036658][ T1227] usb 1-1: Manufacturer: syz [ 200.036676][ T1227] usb 1-1: SerialNumber: syz [ 200.317264][ T5729] usb 3-1: USB disconnect, device number 21 [ 200.633915][ T1227] legousbtower 1-1:14.57: interrupt endpoints not found [ 200.748727][ T5732] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.899945][ T5732] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 200.900422][ T681] Bluetooth: hci5: Frame reassembly failed (-84) [ 200.901543][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.901618][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.942210][ T5732] usb 2-1: config 0 descriptor?? [ 200.964492][ T5732] pwc: Askey VC010 type 2 USB webcam detected. [ 201.045779][ T1227] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 201.084157][ T1227] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 201.389896][ T5732] pwc: recv_control_msg error -32 req 02 val 2b00 [ 201.394139][ T5732] pwc: recv_control_msg error -32 req 02 val 2700 [ 201.394817][ T5732] pwc: recv_control_msg error -32 req 02 val 2c00 [ 201.395478][ T5732] pwc: recv_control_msg error -32 req 04 val 1000 [ 201.396173][ T5732] pwc: recv_control_msg error -32 req 04 val 1300 [ 201.396863][ T5732] pwc: recv_control_msg error -32 req 04 val 1400 [ 201.650274][ T5729] usb 1-1: USB disconnect, device number 28 [ 201.650470][ C0] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 201.693273][ T5729] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 201.851734][ T5732] pwc: recv_control_msg error -71 req 04 val 1500 [ 201.855031][ T5732] pwc: recv_control_msg error -71 req 02 val 2500 [ 201.855839][ T5732] pwc: recv_control_msg error -71 req 02 val 2400 [ 201.857068][ T5732] pwc: recv_control_msg error -71 req 02 val 2600 [ 201.863031][ T5732] pwc: recv_control_msg error -71 req 02 val 2900 [ 201.868897][ T5732] pwc: recv_control_msg error -71 req 02 val 2800 [ 201.872518][ T5732] pwc: recv_control_msg error -71 req 04 val 1100 [ 201.883719][ T5732] pwc: recv_control_msg error -71 req 04 val 1200 [ 201.941798][ T5732] pwc: Registered as video103. [ 201.962168][ T5732] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 202.004943][ T5732] usb 2-1: USB disconnect, device number 22 [ 202.601751][ T7333] random: crng reseeded on system resumption [ 202.910081][ T4937] Bluetooth: hci5: command 0x1003 tx timeout [ 202.910209][ T5633] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 202.987524][ T5722] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 203.149265][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 203.150509][ T5722] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 203.151726][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.151755][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.151780][ T5722] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.151846][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.155125][ T5722] usb 1-1: config 0 descriptor?? [ 203.337011][ T5729] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 203.487291][ T10] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 203.489805][ T5729] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 203.491453][ T5729] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 64703, setting to 1024 [ 203.491488][ T5729] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 203.491582][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.500543][ T7347] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 203.567723][ T5729] spcp8x5 2-1:1.0: SPCP8x5 converter detected [ 203.589993][ T5729] usb 2-1: SPCP8x5 converter now attached to ttyUSB0 [ 203.650012][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 203.671949][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.671971][ T10] usb 4-1: Product: syz [ 203.671988][ T10] usb 4-1: Manufacturer: syz [ 203.672005][ T10] usb 4-1: SerialNumber: syz [ 203.675187][ T5722] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 203.675223][ T5722] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 203.675253][ T5722] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 203.675283][ T5722] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 203.675312][ T5722] shield 0003:0955:7214.000A: unknown main item tag 0x0 [ 203.736605][ T5722] input: HID 0955:7214 Haptics as /devices/virtual/input/input30 [ 203.789676][ T10] usb 4-1: config 0 descriptor?? [ 203.938471][ T5722] shield 0003:0955:7214.000A: Registered Thunderstrike controller [ 203.938849][ T5722] shield 0003:0955:7214.000A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 204.018508][ T7347] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 204.022263][ T7347] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 204.025092][ T7347] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 204.101953][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 204.135765][ T7347] SPCP8x5 ttyUSB0: Set UART format 0x1411 failed (error = -32) [ 204.136322][ T7347] SPCP8x5 ttyUSB0: failed to set work mode: -32 [ 204.279423][ T7346] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 204.282409][ T5729] usb 2-1: USB disconnect, device number 23 [ 204.366538][ T5729] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 204.382126][ T5729] spcp8x5 2-1:1.0: device disconnected [ 204.503446][ T9] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.503906][ T9] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.504394][ T9] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.505235][ T9] shield 0003:0955:7214.000A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 204.518227][ T9] usb 1-1: USB disconnect, device number 29 [ 204.587000][ C1] net_ratelimit: 43 callbacks suppressed [ 205.303316][ T7383] FAULT_INJECTION: forcing a failure. [ 205.303316][ T7383] name failslab, interval 1, probability 0, space 0, times 0 [ 205.303354][ T7383] CPU: 1 UID: 0 PID: 7383 Comm: syz.0.484 Tainted: G L syzkaller #0 PREEMPT(full) [ 205.303386][ T7383] Tainted: [L]=SOFTLOCKUP [ 205.303396][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 205.303410][ T7383] Call Trace: [ 205.303420][ T7383] [ 205.303431][ T7383] dump_stack_lvl+0xe8/0x150 [ 205.303467][ T7383] should_fail_ex+0x3eb/0x540 [ 205.303511][ T7383] should_failslab+0xa8/0x100 [ 205.303540][ T7383] __kmalloc_noprof+0xf9/0x710 [ 205.303575][ T7383] ? kernfs_fop_write_iter+0x157/0x540 [ 205.303601][ T7383] ? kernfs_fop_write_iter+0x157/0x540 [ 205.303636][ T7383] kernfs_fop_write_iter+0x157/0x540 [ 205.303670][ T7383] vfs_write+0x612/0xba0 [ 205.303711][ T7383] ? __pfx_vfs_write+0x10/0x10 [ 205.303753][ T7383] ? __fget_files+0x2a/0x420 [ 205.303793][ T7383] ksys_write+0x150/0x270 [ 205.303828][ T7383] ? __pfx_ksys_write+0x10/0x10 [ 205.303872][ T7383] do_syscall_64+0x166/0x520 [ 205.303895][ T7383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.303920][ T7383] ? clear_bhb_loop+0x70/0xc0 [ 205.303951][ T7383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.303980][ T7383] RIP: 0033:0x7f978639e159 [ 205.304002][ T7383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.304023][ T7383] RSP: 002b:00007f9787316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 205.304049][ T7383] RAX: ffffffffffffffda RBX: 00007f9786625fa0 RCX: 00007f978639e159 [ 205.304067][ T7383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 205.304082][ T7383] RBP: 00007f978643506b R08: 0000000000000000 R09: 0000000000000000 [ 205.304097][ T7383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.304112][ T7383] R13: 00007f9786626038 R14: 00007f9786625fa0 R15: 00007fff1b7ab2a8 [ 205.304148][ T7383] [ 205.470166][ T5627] Bluetooth: hci3: command 0x0406 tx timeout [ 205.682272][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 205.745730][ T10] usb 4-1: USB disconnect, device number 27 [ 205.893872][ T7385] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 206.097197][ T5722] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 206.249997][ T5722] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 206.251792][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.251823][ T5722] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.251887][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.303939][ T5722] usb 1-1: config 0 descriptor?? [ 206.378093][ T30] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 206.527407][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 206.528322][ T30] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 206.533379][ T30] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 206.533405][ T30] usb 2-1: config 0 has no interface number 0 [ 206.533451][ T30] usb 2-1: config 0 interface 184 has no altsetting 0 [ 206.536611][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.536635][ T30] usb 2-1: Product: syz [ 206.536653][ T30] usb 2-1: Manufacturer: syz [ 206.536671][ T30] usb 2-1: SerialNumber: syz [ 206.573344][ T30] usb 2-1: config 0 descriptor?? [ 206.667195][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 206.668690][ T5627] Bluetooth: hci0: command 0x0406 tx timeout [ 206.681319][ T5732] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 206.743792][ T5722] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 206.743834][ T5722] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 206.743875][ T5722] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 206.743920][ T5722] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 206.743949][ T5722] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 206.788935][ T5722] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 206.847400][ T5732] usb 4-1: Using ep0 maxpacket: 16 [ 206.848575][ T5732] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 206.850238][ T5732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.850263][ T5732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 206.863538][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.863656][ T5732] usb 4-1: Product: syz [ 206.863697][ T5732] usb 4-1: Manufacturer: syz [ 206.863739][ T5732] usb 4-1: SerialNumber: syz [ 206.941557][ T5722] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00 [ 206.949757][ T5732] usb 4-1: 0:2 : does not exist [ 207.144955][ T5732] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 207.238610][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 207.238641][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 207.252975][ T5732] usb 4-1: USB disconnect, device number 28 [ 207.416336][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 207.549285][ T4937] Bluetooth: hci3: command 0x0406 tx timeout [ 207.570405][ T5722] cp2112 0003:10C4:EA90.000B: error reading lock byte: -71 [ 207.602925][ T5722] usb 1-1: USB disconnect, device number 30 [ 208.046394][ T5722] rust_binder: 7399: undelivered TRANSACTION_COMPLETE [ 208.073158][ T5722] rust_binder: 7399: undelivered transaction 58, process died [ 208.449693][ T7405] FAULT_INJECTION: forcing a failure. [ 208.449693][ T7405] name failslab, interval 1, probability 0, space 0, times 0 [ 208.449729][ T7405] CPU: 1 UID: 0 PID: 7405 Comm: syz.3.493 Tainted: G L syzkaller #0 PREEMPT(full) [ 208.449766][ T7405] Tainted: [L]=SOFTLOCKUP [ 208.449776][ T7405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 208.449791][ T7405] Call Trace: [ 208.449801][ T7405] [ 208.449813][ T7405] dump_stack_lvl+0xe8/0x150 [ 208.449851][ T7405] should_fail_ex+0x3eb/0x540 [ 208.449884][ T7405] should_failslab+0xa8/0x100 [ 208.449911][ T7405] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 208.449946][ T7405] kmem_cache_alloc_noprof+0x9c/0x600 [ 208.449979][ T7405] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 208.450010][ T7405] ? kmem_cache_alloc_noprof+0x151/0x600 [ 208.450043][ T7405] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 208.450084][ T7405] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 208.450131][ T7405] mmu_topup_memory_caches+0x21/0x170 [ 208.450177][ T7405] kvm_mmu_load+0x9d/0x21e0 [ 208.450213][ T7405] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.450250][ T7405] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.450284][ T7405] ? ___ratelimit+0x584/0x8e0 [ 208.450332][ T7405] ? lock_acquire+0x115/0x350 [ 208.450374][ T7405] kvm_arch_vcpu_pre_fault_memory+0x713/0x7b0 [ 208.450420][ T7405] kvm_vcpu_pre_fault_memory+0x241/0x4d0 [ 208.450462][ T7405] ? kvm_vcpu_pre_fault_memory+0x15f/0x4d0 [ 208.450505][ T7405] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 208.450548][ T7405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.450583][ T7405] ? hook_file_ioctl+0x1f2/0x600 [ 208.450632][ T7405] ? __fget_files+0x2a/0x420 [ 208.450677][ T7405] ? bpf_lsm_file_ioctl+0x9/0x20 [ 208.450707][ T7405] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 208.450744][ T7405] __se_sys_ioctl+0xfc/0x170 [ 208.450784][ T7405] do_syscall_64+0x166/0x520 [ 208.450806][ T7405] ? trace_irq_disable+0x3b/0x140 [ 208.450841][ T7405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.450865][ T7405] ? clear_bhb_loop+0x70/0xc0 [ 208.450896][ T7405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.450920][ T7405] RIP: 0033:0x7f708b99e159 [ 208.450942][ T7405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.450963][ T7405] RSP: 002b:00007f708c8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.450990][ T7405] RAX: ffffffffffffffda RBX: 00007f708bc25fa0 RCX: 00007f708b99e159 [ 208.451008][ T7405] RDX: 0000200000000200 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 208.451025][ T7405] RBP: 00007f708ba3506b R08: 0000000000000000 R09: 0000000000000000 [ 208.451040][ T7405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.451055][ T7405] R13: 00007f708bc26038 R14: 00007f708bc25fa0 R15: 00007ffc819c6888 [ 208.451093][ T7405] [ 208.794257][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 208.794286][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 208.794310][ T30] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 208.794568][ T30] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 208.857819][ T30] usb 2-1: USB disconnect, device number 24 [ 209.125293][ T7413] syzkaller0: entered promiscuous mode [ 209.125316][ T7413] syzkaller0: entered allmulticast mode [ 209.754589][ T5712] net_ratelimit: 526 callbacks suppressed [ 210.057955][ T31] kauditd_printk_skb: 5 callbacks suppressed [ 210.057970][ T31] audit: type=1800 audit(1789583499.816:20): pid=7412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.495" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 210.452283][ T7430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 211.314711][ T7441] svc: failed to register lockdv1 RPC service (errno 111). [ 211.355353][ T7441] lockd_up: makesock failed, error=-111 [ 211.502870][ T7453] r8a66597_hcd pcspkr: platform_get_resource error. [ 211.690171][ T7441] svc: failed to register nfsdv3 RPC service (errno 111). [ 211.690956][ T7441] svc: failed to register nfsaclv3 RPC service (errno 512). [ 211.690979][ T7441] failed to unregister tcp with rpcbind [ 211.696623][ T7441] svc: failed to register nfsdv3 RPC service (errno 97). [ 211.696646][ T7441] svc: failed to register nfsaclv3 RPC service (errno 97). [ 211.696661][ T7441] failed to unregister tcp with rpcbind [ 213.093376][ T5722] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 213.247752][ T5722] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 213.248969][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.248999][ T5722] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.249058][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.309752][ T5722] usb 3-1: config 0 descriptor?? [ 213.335186][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888065bf4c00: rx timeout, send abort [ 213.745539][ T5722] hid_parser_main: 2 callbacks suppressed [ 213.745561][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745591][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745618][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745644][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745671][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745700][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.745727][ T5722] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x0 [ 213.816051][ T5722] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 213.835297][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888065bf4c00: abort rx timeout. Force session deactivation [ 213.926973][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 214.107946][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.109644][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.109683][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.109704][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.109800][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.112158][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.112206][ T9] usb 1-1: Product: syz [ 214.112223][ T9] usb 1-1: Manufacturer: syz [ 214.194227][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 214.194243][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 214.218096][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 214.218118][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 214.429262][ T9] usb 1-1: USB disconnect, device number 31 [ 214.838097][ C0] net_ratelimit: 61 callbacks suppressed [ 214.977511][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 215.139172][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.140843][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.140869][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.140892][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.141000][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.143421][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.143470][ T9] usb 1-1: Product: syz [ 215.143486][ T9] usb 1-1: Manufacturer: syz [ 215.218740][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 215.218755][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 215.225952][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 215.225969][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 215.396209][ T5722] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 215.396258][ T5722] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 215.422213][ T5722] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 215.451777][ T5722] usb 3-1: USB disconnect, device number 22 [ 216.405117][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 216.405647][ C0] wdm_int_callback: 6 callbacks suppressed [ 216.405680][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.405700][ C0] wdm_int_callback: 6 callbacks suppressed [ 216.405716][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.406019][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.406041][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.406357][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.406383][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.406673][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.406698][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.407203][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.407251][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.408248][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.408311][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.408862][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.408907][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.409410][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.409466][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.409975][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.410039][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.410545][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 216.410594][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 216.424294][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 216.503103][ T5722] usb 1-1: USB disconnect, device number 32 [ 216.503260][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 216.919163][ T7527] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 217.279067][ T7543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.279083][ T7543] rust_binder: Read failure Err(EFAULT) in pid:393 [ 217.286847][ T7543] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 217.286866][ T7543] rust_binder: Read failure Err(EFAULT) in pid:393 [ 217.304290][ T7543] rust_binder: Error in use_page_slow: EFAULT [ 217.304374][ T7543] rust_binder: use_range failure EFAULT [ 217.304444][ T7543] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 217.304489][ T7543] rust_binder: Failure in copy_transaction_data: EFAULT [ 217.304593][ T7543] rust_binder: 7540:7543 transaction call to 7540:0 failed EFAULT, code 0 size 0-24 [ 217.311283][ T9] rust_binder: 7540: undelivered TRANSACTION_ERROR: 29201 [ 218.101604][ T7562] syzkaller0: entered promiscuous mode [ 218.101622][ T7562] syzkaller0: entered allmulticast mode [ 218.242680][ T7565] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 218.242699][ T7565] rust_binder: Failure in copy_transaction_data: ENOSPC [ 218.242717][ T7565] rust_binder: 7563:7565 transaction async to 7563:0 failed ENOSPC, code 0 size 0-0 [ 218.245770][ T30] rust_binder: 7563: undelivered TRANSACTION_COMPLETE [ 218.245807][ T30] rust_binder: 7563: undelivered TRANSACTION_ERROR: 29201 [ 219.046978][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 219.197010][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 219.197968][ T9] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 219.199454][ T9] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 219.199479][ T9] usb 2-1: config 0 has no interface number 0 [ 219.199522][ T9] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 219.203934][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.203956][ T9] usb 2-1: Product: syz [ 219.203972][ T9] usb 2-1: Manufacturer: syz [ 219.203988][ T9] usb 2-1: SerialNumber: syz [ 219.228619][ T9] usb 2-1: config 0 descriptor?? [ 219.236672][ T7582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.534954][ T7582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 219.877241][ C0] net_ratelimit: 596 callbacks suppressed [ 220.661428][ T7628] zram0: detected capacity change from 0 to 8 [ 221.111439][ T7637] ªªªªªª: renamed from vlan0 (while UP) [ 221.619593][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 221.619619][ T9] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 221.619874][ T9] asix 2-1:0.188: probe with driver asix failed with error -71 [ 221.660564][ T9] usb 2-1: USB disconnect, device number 25 [ 221.717268][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 221.878094][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 221.879740][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.879824][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.885880][ T10] usb 1-1: config 0 descriptor?? [ 221.928641][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 222.257754][ T30] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 222.304031][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.305472][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.306502][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 222.329628][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 222.329962][ T7654] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 222.330709][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 222.331516][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 222.344600][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 222.360640][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 222.401273][ T5633] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 222.401297][ T5633] CPU: 1 UID: 0 PID: 5633 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.401329][ T5633] Tainted: [L]=SOFTLOCKUP [ 222.401339][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 222.401353][ T5633] Workqueue: hci0 hci_rx_work [ 222.401384][ T5633] Call Trace: [ 222.401392][ T5633] [ 222.401402][ T5633] dump_stack_lvl+0xe8/0x150 [ 222.401431][ T5633] sysfs_create_dir_ns+0x271/0x2a0 [ 222.401462][ T5633] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 222.401494][ T5633] ? do_raw_spin_unlock+0xf5/0x200 [ 222.401523][ T5633] kobject_add_internal+0x622/0xcd0 [ 222.401554][ T5633] kobject_add+0x163/0x240 [ 222.401582][ T5633] ? __pfx_kobject_add+0x10/0x10 [ 222.401611][ T5633] ? get_device_parent+0x366/0x3a0 [ 222.401641][ T5633] device_add+0x3fa/0xb80 [ 222.401668][ T5633] hci_conn_add_sysfs+0xd5/0x210 [ 222.401699][ T5633] le_conn_complete_evt+0x10b2/0x17a0 [ 222.401734][ T5633] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 222.401761][ T5633] ? skb_pull_data+0xf0/0x200 [ 222.401791][ T5633] hci_le_conn_complete_evt+0x187/0x470 [ 222.401830][ T5633] hci_event_packet+0x67a/0xf10 [ 222.401866][ T5633] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 222.401899][ T5633] ? __pfx_hci_event_packet+0x10/0x10 [ 222.401935][ T5633] ? audit_tree_freeing_mark+0x670/0xb20 [ 222.401968][ T5633] ? hci_send_to_monitor+0xe2/0x590 [ 222.401996][ T5633] hci_rx_work+0x3ee/0x1020 [ 222.402037][ T5633] ? process_scheduled_works+0x97a/0x1630 [ 222.402063][ T5633] process_scheduled_works+0xc3d/0x1630 [ 222.402116][ T5633] ? __pfx_process_scheduled_works+0x10/0x10 [ 222.402146][ T5633] ? assign_work+0x3cf/0x5d0 [ 222.402176][ T5633] worker_thread+0xa47/0xfb0 [ 222.402226][ T5633] ? __kthread_parkme+0x71/0x1f0 [ 222.402271][ T5633] kthread+0x38b/0x480 [ 222.402304][ T5633] ? __pfx_worker_thread+0x10/0x10 [ 222.402330][ T5633] ? __pfx_kthread+0x10/0x10 [ 222.402365][ T5633] ret_from_fork+0x514/0xb70 [ 222.402404][ T5633] ? __pfx_ret_from_fork+0x10/0x10 [ 222.402437][ T5633] ? __switch_to+0xc89/0x1420 [ 222.402469][ T5633] ? __pfx_kthread+0x10/0x10 [ 222.402499][ T5633] ret_from_fork_asm+0x1a/0x30 [ 222.402544][ T5633] [ 222.402631][ T5633] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 222.402706][ T5633] Bluetooth: hci0: failed to register connection device [ 222.413190][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 222.419719][ T30] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 222.432361][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 222.484509][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.484583][ T30] usb 4-1: Product: syz [ 222.484630][ T30] usb 4-1: Manufacturer: syz [ 222.484672][ T30] usb 4-1: SerialNumber: syz [ 222.582316][ T30] usb 4-1: config 0 descriptor?? [ 222.650533][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 222.658060][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 222.663823][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 222.683595][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 222.683914][ T30] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 222.684036][ T30] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 222.710727][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 222.750281][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 222.771684][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 222.776595][ T10] pwc: Registered as video103. [ 222.798074][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input31 [ 222.820391][ T10] usb 1-1: USB disconnect, device number 33 [ 223.267012][ T7395] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 223.301866][ T30] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 223.409648][ T5633] Bluetooth: hci3: SCO packet too small [ 223.423707][ T7395] usb 3-1: not running at top speed; connect to a high speed hub [ 223.423741][ T7395] usb 3-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 223.425528][ T7395] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 223.434394][ T7395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.434495][ T7395] usb 3-1: Product: syz [ 223.434536][ T7395] usb 3-1: Manufacturer: syz [ 223.434576][ T7395] usb 3-1: SerialNumber: syz [ 223.492402][ T7395] oti6858 3-1:1.0: oti6858 converter detected [ 223.515413][ T7395] usb 3-1: oti6858 converter now attached to ttyUSB0 [ 223.607080][ T5732] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 223.744096][ T30] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 223.744154][ T30] em28xx 4-1:0.0: board has no eeprom [ 223.763904][ T5732] usb 2-1: Using ep0 maxpacket: 8 [ 223.769604][ T5732] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.774527][ T5732] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 223.774590][ T5732] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.774650][ T5732] usb 2-1: config 0 has no interfaces? [ 223.774785][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.824584][ T5732] usb 2-1: config 0 descriptor?? [ 224.231279][ T7666] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 224.668108][ T7675] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 224.668504][ T7675] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 224.668536][ T7675] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 224.967037][ T30] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 224.967085][ T30] em28xx 4-1:0.0: dvb set to bulk mode. [ 224.982488][ T5732] em28xx 4-1:0.0: Binding DVB extension [ 225.018612][ T30] usb 4-1: USB disconnect, device number 29 [ 225.025583][ T30] em28xx 4-1:0.0: Disconnecting em28xx [ 225.070872][ C0] net_ratelimit: 73 callbacks suppressed [ 225.191791][ T5732] em28xx 4-1:0.0: Registering input extension [ 225.195991][ T30] em28xx 4-1:0.0: Closing input extension [ 225.249847][ T30] em28xx: Freeing device [ 225.858683][ T31] audit: type=1804 audit(1789583515.616:21): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.570" name="/newroot/130/file1" dev="fuse" ino=1 res=1 errno=0 [ 225.858984][ T31] audit: type=1800 audit(1789583515.616:22): pid=7686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.570" name="/" dev="fuse" ino=1 res=0 errno=0 [ 225.937664][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.937700][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938385][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938420][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938451][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938482][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938612][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938644][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938669][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 225.938711][ T7395] hid-generic 0006:0008:0008.000D: unknown main item tag 0x0 [ 226.028184][ T7395] hid-generic 0006:0008:0008.000D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 226.074812][ T10] usb 3-1: USB disconnect, device number 23 [ 226.134070][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 226.153895][ T10] oti6858 3-1:1.0: device disconnected [ 226.172862][ T9] usb 2-1: USB disconnect, device number 26 [ 226.201226][ T7692] FAULT_INJECTION: forcing a failure. [ 226.201226][ T7692] name failslab, interval 1, probability 0, space 0, times 0 [ 226.201261][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.2.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 226.201294][ T7692] Tainted: [L]=SOFTLOCKUP [ 226.201303][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 226.201319][ T7692] Call Trace: [ 226.201328][ T7692] [ 226.201340][ T7692] dump_stack_lvl+0xe8/0x150 [ 226.201376][ T7692] should_fail_ex+0x3eb/0x540 [ 226.201409][ T7692] should_failslab+0xa8/0x100 [ 226.201438][ T7692] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 226.201476][ T7692] ? alloc_inode+0xb8/0x1b0 [ 226.201502][ T7692] ? alloc_inode+0xb8/0x1b0 [ 226.201535][ T7692] alloc_inode+0xb8/0x1b0 [ 226.201564][ T7692] alloc_anon_inode+0x1e/0x330 [ 226.201600][ T7692] dma_buf_export+0x21a/0xab0 [ 226.201637][ T7692] udmabuf_create+0xe49/0xf50 [ 226.201700][ T7692] ? __pfx_udmabuf_create+0x10/0x10 [ 226.201745][ T7692] ? __might_fault+0xaf/0x130 [ 226.201783][ T7692] udmabuf_ioctl+0x1f3/0x300 [ 226.201822][ T7692] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 226.201865][ T7692] ? __fget_files+0x2a/0x420 [ 226.201898][ T7692] ? __fget_files+0x2a/0x420 [ 226.201940][ T7692] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.201971][ T7692] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 226.202007][ T7692] __se_sys_ioctl+0xfc/0x170 [ 226.202047][ T7692] do_syscall_64+0x166/0x520 [ 226.202070][ T7692] ? trace_irq_disable+0x3b/0x140 [ 226.202104][ T7692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.202129][ T7692] ? clear_bhb_loop+0x70/0xc0 [ 226.202164][ T7692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.202188][ T7692] RIP: 0033:0x7fc144d9e159 [ 226.202209][ T7692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.202230][ T7692] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.202256][ T7692] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 226.202274][ T7692] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 226.202290][ T7692] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 226.202305][ T7692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.202320][ T7692] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 226.202356][ T7692] [ 226.593095][ T7690] fido_id[7690]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 226.770431][ T7698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.349880][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 227.499262][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 227.502189][ T10] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.524567][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 227.524620][ T10] usb 2-1: Product: syz [ 227.524669][ T10] usb 2-1: Manufacturer: syz [ 227.524721][ T10] usb 2-1: SerialNumber: syz [ 227.671399][ T7713] syzkaller0: entered promiscuous mode [ 227.671418][ T7713] syzkaller0: entered allmulticast mode [ 227.795137][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 227.876986][ T7395] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 228.027879][ T7395] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 228.031296][ T7395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.031318][ T7395] usb 4-1: Product: syz [ 228.031335][ T7395] usb 4-1: Manufacturer: syz [ 228.031351][ T7395] usb 4-1: SerialNumber: syz [ 228.094569][ T10] usb 2-1: USB disconnect, device number 27 [ 228.115886][ T10] usblp0: removed [ 228.490724][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 228.872858][ T7733] futex_wake_op: syz.1.587 tries to shift op by 144; fix this program [ 228.873174][ T7733] futex_wake_op: syz.1.587 tries to shift op by 144; fix this program [ 229.589837][ T10] rust_binder: 7735: undelivered TRANSACTION_COMPLETE [ 229.619132][ T10] rust_binder: 7735: undelivered transaction 74, process died [ 230.106068][ T7395] net_ratelimit: 99 callbacks suppressed [ 230.106087][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 230.113289][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 230.115080][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 230.115130][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 230.138792][ T7395] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 230.176332][ T7395] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 230.220349][ T7395] usb 4-1: USB disconnect, device number 30 [ 231.027926][ T7755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.594'. [ 231.028869][ T7755] FAULT_INJECTION: forcing a failure. [ 231.028869][ T7755] name failslab, interval 1, probability 0, space 0, times 0 [ 231.028909][ T7755] CPU: 1 UID: 0 PID: 7755 Comm: syz.1.594 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.028939][ T7755] Tainted: [L]=SOFTLOCKUP [ 231.028948][ T7755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 231.028962][ T7755] Call Trace: [ 231.028970][ T7755] [ 231.028980][ T7755] dump_stack_lvl+0xe8/0x150 [ 231.029015][ T7755] should_fail_ex+0x3eb/0x540 [ 231.029048][ T7755] should_failslab+0xa8/0x100 [ 231.029075][ T7755] __kmalloc_noprof+0xf9/0x710 [ 231.029105][ T7755] ? trace_kmem_cache_alloc+0x29/0xe0 [ 231.029133][ T7755] ? fib_insert_alias+0x300/0x10f0 [ 231.029155][ T7755] ? tnode_new+0xc7/0x3b0 [ 231.029176][ T7755] ? tnode_new+0xc7/0x3b0 [ 231.029206][ T7755] tnode_new+0xc7/0x3b0 [ 231.029234][ T7755] fib_insert_alias+0x9e0/0x10f0 [ 231.029266][ T7755] fib_trie_unmerge+0x312/0xce0 [ 231.029300][ T7755] fib_unmerge+0xc5/0x350 [ 231.029332][ T7755] fib4_rule_configure+0x2c9/0x9d0 [ 231.029366][ T7755] ? fib_nl2rule_locked+0x169/0x5f0 [ 231.029394][ T7755] ? fib_nl2rule_locked+0x4b4/0x5f0 [ 231.029425][ T7755] fib_newrule+0x61e/0xf20 [ 231.029457][ T7755] ? __lock_acquire+0x747/0x2de0 [ 231.029492][ T7755] ? __pfx_fib_newrule+0x10/0x10 [ 231.029555][ T7755] ? __pfx_fib_nl_newrule+0x10/0x10 [ 231.029582][ T7755] rtnetlink_rcv_msg+0x802/0xc00 [ 231.029608][ T7755] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 231.029630][ T7755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.029650][ T7755] ? ref_tracker_free+0x689/0x830 [ 231.029679][ T7755] ? __pfx_ref_tracker_free+0x10/0x10 [ 231.029706][ T7755] ? __asan_memcpy+0x40/0x70 [ 231.029735][ T7755] ? __skb_clone+0x5c/0x6c0 [ 231.029784][ T7755] netlink_rcv_skb+0x226/0x4a0 [ 231.029814][ T7755] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.029849][ T7755] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.029892][ T7755] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.029921][ T7755] ? netlink_deliver_tap+0x2e/0x1b0 [ 231.029956][ T7755] netlink_unicast+0x7bd/0x940 [ 231.029994][ T7755] netlink_sendmsg+0x7c3/0xae0 [ 231.030031][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.030069][ T7755] ? apparmor_socket_sendmsg+0x98/0x360 [ 231.030096][ T7755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.030125][ T7755] sock_sendmsg_nosec+0x13a/0x180 [ 231.030161][ T7755] ____sys_sendmsg+0x54e/0x850 [ 231.030193][ T7755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.030230][ T7755] ? import_iovec+0x73/0xa0 [ 231.030263][ T7755] ___sys_sendmsg+0x2a5/0x360 [ 231.030288][ T7755] ? __lock_acquire+0x747/0x2de0 [ 231.030325][ T7755] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.030355][ T7755] ? futex_wait+0x2a2/0x390 [ 231.030416][ T7755] ? __fget_files+0x2a/0x420 [ 231.030446][ T7755] ? __fget_files+0x3a2/0x420 [ 231.030487][ T7755] __x64_sys_sendmsg+0x1b1/0x290 [ 231.030516][ T7755] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 231.030567][ T7755] do_syscall_64+0x166/0x520 [ 231.030588][ T7755] ? trace_irq_disable+0x3b/0x140 [ 231.030620][ T7755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.030645][ T7755] ? clear_bhb_loop+0x70/0xc0 [ 231.030673][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.030697][ T7755] RIP: 0033:0x7f98a4b9e159 [ 231.030719][ T7755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.030740][ T7755] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.030766][ T7755] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 231.030784][ T7755] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 231.030800][ T7755] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 231.030815][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.030837][ T7755] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 231.030873][ T7755] [ 231.600761][ T7758] FAULT_INJECTION: forcing a failure. [ 231.600761][ T7758] name failslab, interval 1, probability 0, space 0, times 0 [ 231.600799][ T7758] CPU: 0 UID: 0 PID: 7758 Comm: syz.2.595 Tainted: G L syzkaller #0 PREEMPT(full) [ 231.600834][ T7758] Tainted: [L]=SOFTLOCKUP [ 231.600844][ T7758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 231.600868][ T7758] Call Trace: [ 231.600879][ T7758] [ 231.600891][ T7758] dump_stack_lvl+0xe8/0x150 [ 231.600931][ T7758] should_fail_ex+0x3eb/0x540 [ 231.600966][ T7758] should_failslab+0xa8/0x100 [ 231.600993][ T7758] ? ep_insert+0x508/0x1af0 [ 231.601031][ T7758] kmem_cache_alloc_noprof+0x9c/0x600 [ 231.601067][ T7758] ? ep_insert+0x2b1/0x1af0 [ 231.601101][ T7758] ? kmem_cache_alloc_noprof+0x151/0x600 [ 231.601136][ T7758] ? ep_insert+0x508/0x1af0 [ 231.601180][ T7758] ep_insert+0x508/0x1af0 [ 231.601234][ T7758] ? __pfx_ep_insert+0x10/0x10 [ 231.601271][ T7758] ? __pfx___mutex_lock+0x10/0x10 [ 231.601308][ T7758] ? bpf_lsm_capable+0x9/0x20 [ 231.601341][ T7758] ? security_capable+0x7e/0x2c0 [ 231.601395][ T7758] do_epoll_ctl_file+0x8c2/0xee0 [ 231.601444][ T7758] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 231.601486][ T7758] ? __fget_files+0x3a2/0x420 [ 231.601518][ T7758] ? __fget_files+0x2a/0x420 [ 231.601568][ T7758] __se_sys_epoll_ctl+0x162/0x230 [ 231.601610][ T7758] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 231.601674][ T7758] do_syscall_64+0x166/0x520 [ 231.601697][ T7758] ? trace_irq_disable+0x3b/0x140 [ 231.601733][ T7758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.601763][ T7758] ? clear_bhb_loop+0x70/0xc0 [ 231.601795][ T7758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.601822][ T7758] RIP: 0033:0x7fc144d9e159 [ 231.601845][ T7758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.601876][ T7758] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 231.601904][ T7758] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 231.601924][ T7758] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 231.601940][ T7758] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 231.601957][ T7758] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 231.601974][ T7758] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 231.602013][ T7758] [ 231.822201][ T7759] dlm: Using TCP for communications [ 231.947132][ T7759] dlm: ls1: joining the lockspace group... [ 231.968889][ T7766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 232.218709][ T7769] ci_hdrc pcspkr: platform data missing [ 233.107044][ T5697] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 233.259845][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 233.260650][ T5697] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 233.265355][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.265378][ T5697] usb 1-1: Product: syz [ 233.265396][ T5697] usb 1-1: Manufacturer: syz [ 233.265412][ T5697] usb 1-1: SerialNumber: syz [ 233.312669][ T5697] usb 1-1: config 0 descriptor?? [ 233.464841][ T7795] FAULT_INJECTION: forcing a failure. [ 233.464841][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 233.464884][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.1.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.464918][ T7795] Tainted: [L]=SOFTLOCKUP [ 233.464928][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 233.464944][ T7795] Call Trace: [ 233.464954][ T7795] [ 233.464965][ T7795] dump_stack_lvl+0xe8/0x150 [ 233.465005][ T7795] should_fail_ex+0x3eb/0x540 [ 233.465038][ T7795] should_failslab+0xa8/0x100 [ 233.465067][ T7795] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 233.465107][ T7795] ? request_key_auth_new+0x17f/0xa00 [ 233.465135][ T7795] ? request_key_auth_new+0x17f/0xa00 [ 233.465164][ T7795] ? request_key_auth_new+0xff/0xa00 [ 233.465196][ T7795] kmemdup_noprof+0x2b/0x70 [ 233.465236][ T7795] request_key_auth_new+0x17f/0xa00 [ 233.465294][ T7795] ? __pfx_request_key_auth_new+0x10/0x10 [ 233.465340][ T7795] request_key_and_link+0xe6b/0x1580 [ 233.465377][ T7795] ? __pfx_request_key_and_link+0x10/0x10 [ 233.465416][ T7795] ? __pfx_key_default_cmp+0x10/0x10 [ 233.465449][ T7795] ? __pfx_keyring_search_iterator+0x10/0x10 [ 233.465487][ T7795] ? down_read+0x2b9/0x320 [ 233.465513][ T7795] ? _copy_from_user+0x94/0xb0 [ 233.465552][ T7795] __se_sys_request_key+0x29a/0x350 [ 233.465600][ T7795] ? __pfx___se_sys_request_key+0x10/0x10 [ 233.465656][ T7795] do_syscall_64+0x166/0x520 [ 233.465681][ T7795] ? trace_irq_disable+0x3b/0x140 [ 233.465718][ T7795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.465745][ T7795] ? clear_bhb_loop+0x70/0xc0 [ 233.465776][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.465802][ T7795] RIP: 0033:0x7f98a4b9e159 [ 233.465838][ T7795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.465860][ T7795] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 233.465888][ T7795] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 233.465906][ T7795] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 233.465924][ T7795] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.465957][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.465973][ T7795] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 233.466013][ T7795] [ 233.658095][ T5697] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 233.949799][ T7802] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 233.969956][ T7804] FAULT_INJECTION: forcing a failure. [ 233.969956][ T7804] name failslab, interval 1, probability 0, space 0, times 0 [ 233.969995][ T7804] CPU: 0 UID: 0 PID: 7804 Comm: syz.1.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.970061][ T7804] Tainted: [L]=SOFTLOCKUP [ 233.970071][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 233.970088][ T7804] Call Trace: [ 233.970098][ T7804] [ 233.970109][ T7804] dump_stack_lvl+0xe8/0x150 [ 233.970148][ T7804] should_fail_ex+0x3eb/0x540 [ 233.970182][ T7804] should_failslab+0xa8/0x100 [ 233.970213][ T7804] __kmalloc_cache_noprof+0x9e/0x600 [ 233.970248][ T7804] ? do_raw_spin_lock+0x12b/0x2f0 [ 233.970279][ T7804] ? wakeup_source_register+0x57/0x380 [ 233.970306][ T7804] ? wakeup_source_register+0x57/0x380 [ 233.970343][ T7804] wakeup_source_register+0x57/0x380 [ 233.970377][ T7804] ep_insert+0xfaf/0x1af0 [ 233.970430][ T7804] ? __pfx_ep_insert+0x10/0x10 [ 233.970479][ T7804] ? bpf_lsm_capable+0x9/0x20 [ 233.970511][ T7804] ? security_capable+0x7e/0x2c0 [ 233.970544][ T7804] do_epoll_ctl_file+0x8c2/0xee0 [ 233.970590][ T7804] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 233.970640][ T7804] ? __fget_files+0x3a2/0x420 [ 233.970671][ T7804] ? __fget_files+0x2a/0x420 [ 233.970732][ T7804] __se_sys_epoll_ctl+0x162/0x230 [ 233.970774][ T7804] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 233.970839][ T7804] do_syscall_64+0x166/0x520 [ 233.970861][ T7804] ? trace_irq_disable+0x3b/0x140 [ 233.970896][ T7804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.970922][ T7804] ? clear_bhb_loop+0x70/0xc0 [ 233.970953][ T7804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.970978][ T7804] RIP: 0033:0x7f98a4b9e159 [ 233.971000][ T7804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.971021][ T7804] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 233.971048][ T7804] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 233.971086][ T7804] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 233.971101][ T7804] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.971118][ T7804] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 233.971146][ T7804] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 233.971183][ T7804] [ 234.348127][ T5697] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.350747][ T5697] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 234.350808][ T5697] usb 1-1: media controller created [ 234.415048][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.597668][ T5697] i2c i2c-1: Added multiplexed i2c bus 2 [ 234.597687][ T5697] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 234.599724][ T5697] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 234.629429][ T5697] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 234.856155][ T5697] DVB: Unable to find symbol qt1010_attach() [ 234.975568][ T7817] FAULT_INJECTION: forcing a failure. [ 234.975568][ T7817] name failslab, interval 1, probability 0, space 0, times 0 [ 234.975603][ T7817] CPU: 0 UID: 0 PID: 7817 Comm: syz.1.611 Tainted: G L syzkaller #0 PREEMPT(full) [ 234.975635][ T7817] Tainted: [L]=SOFTLOCKUP [ 234.975645][ T7817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 234.975659][ T7817] Call Trace: [ 234.975669][ T7817] [ 234.975680][ T7817] dump_stack_lvl+0xe8/0x150 [ 234.975716][ T7817] should_fail_ex+0x3eb/0x540 [ 234.975748][ T7817] should_failslab+0xa8/0x100 [ 234.975777][ T7817] __kmalloc_cache_noprof+0x9e/0x600 [ 234.975814][ T7817] ? assoc_array_insert+0x90/0x2f60 [ 234.975840][ T7817] ? assoc_array_insert+0x90/0x2f60 [ 234.975875][ T7817] assoc_array_insert+0x90/0x2f60 [ 234.975906][ T7817] ? __key_link_lock+0x9b/0xb0 [ 234.975938][ T7817] ? __pfx___mutex_lock+0x10/0x10 [ 234.975969][ T7817] ? __pfx_down_write+0x10/0x10 [ 234.975991][ T7817] ? _get_random_bytes+0x1e7/0x260 [ 234.976030][ T7817] ? __pfx__get_random_bytes+0x10/0x10 [ 234.976065][ T7817] __key_link_begin+0xd6/0x1f0 [ 234.976100][ T7817] key_instantiate_and_link+0x235/0x4b0 [ 234.976134][ T7817] ? __pfx_key_instantiate_and_link+0x10/0x10 [ 234.976185][ T7817] keyring_alloc+0x6f/0xb0 [ 234.976217][ T7817] keyctl_get_persistent+0x593/0x790 [ 234.976256][ T7817] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 234.976285][ T7817] ? futex_wait+0x2a2/0x390 [ 234.976318][ T7817] ? __pfx_futex_wait+0x10/0x10 [ 234.976366][ T7817] __se_sys_keyctl+0x83e/0xbc0 [ 234.976391][ T7817] ? __pfx___se_sys_keyctl+0x10/0x10 [ 234.976418][ T7817] ? __pfx_do_futex+0x10/0x10 [ 234.976452][ T7817] ? __se_sys_futex+0x3a8/0x450 [ 234.976487][ T7817] ? rcu_is_watching+0x16/0xb0 [ 234.976521][ T7817] ? __x64_sys_keyctl+0x20/0xc0 [ 234.976546][ T7817] do_syscall_64+0x166/0x520 [ 234.976567][ T7817] ? trace_irq_disable+0x3b/0x140 [ 234.976599][ T7817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.976623][ T7817] ? clear_bhb_loop+0x70/0xc0 [ 234.976651][ T7817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.976674][ T7817] RIP: 0033:0x7f98a4b9e159 [ 234.976696][ T7817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.976717][ T7817] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 234.976742][ T7817] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 234.976759][ T7817] RDX: 000000001f041d9c RSI: 000000000000ee00 RDI: 0000000000000016 [ 234.976774][ T7817] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 234.976789][ T7817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.976804][ T7817] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 234.976840][ T7817] [ 235.147112][ C0] net_ratelimit: 70 callbacks suppressed [ 235.322893][ T7818] befs: (nbd1): No write support. Marking filesystem read-only [ 235.323591][ T7818] befs: (nbd1): unable to read superblock [ 235.376293][ T7820] ath9k pcspkr: error -EINVAL: invalid resource (null) [ 235.376329][ T7820] ath9k pcspkr: ioremap failed [ 235.376344][ T7820] ath9k pcspkr: probe with driver ath9k failed with error -22 [ 235.436627][ T5697] usb 1-1: USB disconnect, device number 34 [ 235.960841][ T7837] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 236.009726][ T7837] netlink: 'syz.1.615': attribute type 4 has an invalid length. [ 236.039382][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 236.194589][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 236.195614][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 236.207219][ T9] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 236.207276][ T9] usb 3-1: config 0 has no interface number 0 [ 236.225461][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.225483][ T9] usb 3-1: Product: syz [ 236.225518][ T9] usb 3-1: Manufacturer: syz [ 236.225571][ T9] usb 3-1: SerialNumber: syz [ 236.260137][ T9] usb 3-1: config 0 descriptor?? [ 236.386545][ T7845] kvm: pic: non byte read [ 236.391727][ T7845] kvm: pic: non byte read [ 236.700525][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 236.700553][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 236.856983][ T5697] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 236.967011][ T5770] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 237.016959][ T5697] usb 1-1: Using ep0 maxpacket: 8 [ 237.018781][ T5697] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 237.025495][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.025518][ T5697] usb 1-1: Product: syz [ 237.025534][ T5697] usb 1-1: Manufacturer: syz [ 237.025551][ T5697] usb 1-1: SerialNumber: syz [ 237.033792][ T5697] usb 1-1: config 0 descriptor?? [ 237.078052][ T5697] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 237.148036][ T5770] usb 2-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 237.149919][ T5770] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 237.149966][ T5770] usb 2-1: config 1 has no interface number 0 [ 237.153729][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.153751][ T5770] usb 2-1: Product: syz [ 237.153796][ T5770] usb 2-1: Manufacturer: syz [ 237.153813][ T5770] usb 2-1: SerialNumber: syz [ 237.211561][ T5770] usb 2-1: 3:1 : does not exist [ 237.211581][ T5770] usb 2-1: 3:2 : does not exist [ 237.976438][ T5770] usb 2-1: USB disconnect, device number 28 [ 238.525492][ T9] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 238.525748][ T9] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 238.561408][ T9] usb 3-1: USB disconnect, device number 24 [ 239.298848][ T7395] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 239.303274][ T5697] gspca_sonixj: reg_w1 err -71 [ 239.303345][ T5697] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 239.310301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3ca800: rx timeout, send abort [ 239.314829][ T5697] usb 1-1: USB disconnect, device number 35 [ 239.447021][ T7395] usb 2-1: Using ep0 maxpacket: 8 [ 239.449685][ T7395] usb 2-1: unable to get BOS descriptor or descriptor too short [ 239.449731][ T7395] usb 2-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 239.455765][ T7395] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.455788][ T7395] usb 2-1: Product: syz [ 239.455804][ T7395] usb 2-1: Manufacturer: syz [ 239.455820][ T7395] usb 2-1: SerialNumber: syz [ 239.809139][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880207cf400: rx timeout, send abort [ 239.810390][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3ca800: abort rx timeout. Force session deactivation [ 240.129558][ C1] vcan0: j1939_xtp_rx_rts_session_active: 0xffff8880207cf400: connection exists (fe ff). last cmd: 20 [ 240.379498][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066545000: rx timeout, send abort [ 240.409480][ T5732] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 240.560062][ T5732] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 240.565277][ T5732] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.565324][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 240.565359][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 240.565388][ T5732] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 240.565412][ T5732] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.586222][ T5732] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 240.586276][ T5732] usb 1-1: Product: syz [ 240.586314][ T5732] usb 1-1: Manufacturer: syz [ 240.586351][ T5732] usb 1-1: SerialNumber: syz [ 240.659478][ T5732] usb 1-1: config 0 descriptor?? [ 240.784275][ T7395] usb 2-1: USB disconnect, device number 29 [ 240.879546][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066545000: abort rx timeout. Force session deactivation [ 240.987391][ C1] net_ratelimit: 54 callbacks suppressed [ 241.040968][ T5732] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 241.040992][ T5732] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 241.115226][ T5983] udevd[5983]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.241541][ T5732] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 241.241564][ T5732] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 241.241586][ T5732] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 241.442553][ T5732] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 242.103304][ T7902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.629'. [ 242.106699][ T7902] netlink: 60 bytes leftover after parsing attributes in process `syz.1.629'. [ 242.128804][ T7902] netlink: 'syz.1.629': attribute type 11 has an invalid length. [ 242.296023][ T7904] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.503542][ T7906] FAULT_INJECTION: forcing a failure. [ 242.503542][ T7906] name failslab, interval 1, probability 0, space 0, times 0 [ 242.503582][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.1.631 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.503615][ T7906] Tainted: [L]=SOFTLOCKUP [ 242.503625][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 242.503682][ T7906] Call Trace: [ 242.503693][ T7906] [ 242.503705][ T7906] dump_stack_lvl+0xe8/0x150 [ 242.503745][ T7906] should_fail_ex+0x3eb/0x540 [ 242.503787][ T7906] should_failslab+0xa8/0x100 [ 242.503818][ T7906] __kmalloc_cache_noprof+0x9e/0x600 [ 242.503857][ T7906] ? __kmalloc_cache_noprof+0x148/0x600 [ 242.503893][ T7906] ? sctp_auth_init+0x1f3/0x400 [ 242.503926][ T7906] ? sctp_auth_init+0x1f3/0x400 [ 242.503967][ T7906] sctp_auth_init+0x1f3/0x400 [ 242.504006][ T7906] sctp_setsockopt_auth_supported+0x302/0x530 [ 242.504043][ T7906] sctp_setsockopt+0x599/0x12c0 [ 242.504081][ T7906] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 242.504121][ T7906] do_sock_setsockopt+0x17c/0x1b0 [ 242.504153][ T7906] __x64_sys_setsockopt+0x13d/0x1b0 [ 242.504203][ T7906] do_syscall_64+0x166/0x520 [ 242.504227][ T7906] ? trace_irq_disable+0x3b/0x140 [ 242.504263][ T7906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.504289][ T7906] ? clear_bhb_loop+0x70/0xc0 [ 242.504320][ T7906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.504346][ T7906] RIP: 0033:0x7f98a4b9e159 [ 242.504369][ T7906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.504391][ T7906] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 242.504419][ T7906] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 242.504438][ T7906] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 242.504454][ T7906] RBP: 00007f98a4c3506b R08: 0000000000000008 R09: 0000000000000000 [ 242.504471][ T7906] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.504487][ T7906] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 242.504526][ T7906] [ 243.118934][ T5732] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 243.172099][ T5732] usb 1-1: USB disconnect, device number 36 [ 243.295631][ T7919] FAULT_INJECTION: forcing a failure. [ 243.295631][ T7919] name failslab, interval 1, probability 0, space 0, times 0 [ 243.295675][ T7919] CPU: 1 UID: 0 PID: 7919 Comm: syz.2.636 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.295707][ T7919] Tainted: [L]=SOFTLOCKUP [ 243.295716][ T7919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 243.295730][ T7919] Call Trace: [ 243.295740][ T7919] [ 243.295751][ T7919] dump_stack_lvl+0xe8/0x150 [ 243.295786][ T7919] should_fail_ex+0x3eb/0x540 [ 243.295816][ T7919] ? __pfx_proc_alloc_inode+0x10/0x10 [ 243.295851][ T7919] should_failslab+0xa8/0x100 [ 243.295878][ T7919] ? __pfx_proc_alloc_inode+0x10/0x10 [ 243.295911][ T7919] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 243.295945][ T7919] ? proc_alloc_inode+0x2a/0xc0 [ 243.295978][ T7919] ? proc_alloc_inode+0x2a/0xc0 [ 243.296034][ T7919] ? __pfx_proc_alloc_inode+0x10/0x10 [ 243.296070][ T7919] proc_alloc_inode+0x2a/0xc0 [ 243.296124][ T7919] alloc_inode+0x6a/0x1b0 [ 243.296155][ T7919] new_inode+0x1f/0x170 [ 243.296189][ T7919] proc_setup_self+0x5c/0x1c0 [ 243.296228][ T7919] proc_fill_super+0x578/0x760 [ 243.296253][ T7919] ? __pfx_proc_fill_super+0x10/0x10 [ 243.296281][ T7919] get_tree_nodev+0xbb/0x150 [ 243.296318][ T7919] vfs_get_tree+0x92/0x2a0 [ 243.296355][ T7919] do_new_mount+0x319/0xdc0 [ 243.296391][ T7919] ? __pfx_do_new_mount+0x10/0x10 [ 243.296427][ T7919] ? ns_capable+0x84/0xe0 [ 243.296456][ T7919] ? path_mount+0x647/0x1050 [ 243.296489][ T7919] ? user_path_at+0xd4/0x160 [ 243.296525][ T7919] __se_sys_mount+0x31d/0x420 [ 243.296562][ T7919] ? __pfx___se_sys_mount+0x10/0x10 [ 243.296600][ T7919] ? __x64_sys_mount+0x20/0xc0 [ 243.296632][ T7919] do_syscall_64+0x166/0x520 [ 243.296655][ T7919] ? trace_irq_disable+0x3b/0x140 [ 243.296697][ T7919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.296723][ T7919] ? clear_bhb_loop+0x70/0xc0 [ 243.296752][ T7919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.296777][ T7919] RIP: 0033:0x7fc144d9e159 [ 243.296800][ T7919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.296822][ T7919] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 243.296848][ T7919] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 243.296866][ T7919] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 243.296883][ T7919] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 243.296897][ T7919] R10: 0000000002000008 R11: 0000000000000246 R12: 0000000000000000 [ 243.296912][ T7919] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 243.296947][ T7919] [ 243.314871][ T7919] proc_fill_super: can't allocate /proc/self [ 243.937034][ T5722] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 244.039232][ T7927] kvm_do_msr_access: 1041 callbacks suppressed [ 244.087810][ T5722] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 244.089162][ T5722] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 244.089186][ T5722] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 244.092477][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.092498][ T5722] usb 3-1: Product: syz [ 244.092512][ T5722] usb 3-1: Manufacturer: syz [ 244.092527][ T5722] usb 3-1: SerialNumber: syz [ 244.312061][ T7936] jffs2: notice: (7936) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 244.422106][ T7940] netlink: 56 bytes leftover after parsing attributes in process `syz.0.643'. [ 244.422125][ T7940] FAULT_INJECTION: forcing a failure. [ 244.422125][ T7940] name failslab, interval 1, probability 0, space 0, times 0 [ 244.422153][ T7940] CPU: 1 UID: 0 PID: 7940 Comm: syz.0.643 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.422183][ T7940] Tainted: [L]=SOFTLOCKUP [ 244.422192][ T7940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 244.422206][ T7940] Call Trace: [ 244.422216][ T7940] [ 244.422225][ T7940] dump_stack_lvl+0xe8/0x150 [ 244.422262][ T7940] should_fail_ex+0x3eb/0x540 [ 244.422295][ T7940] should_failslab+0xa8/0x100 [ 244.422323][ T7940] __kmalloc_cache_noprof+0x9e/0x600 [ 244.422359][ T7940] ? nfnetlink_rcv+0x1021/0x28c0 [ 244.422385][ T7940] ? nfnetlink_rcv+0x1021/0x28c0 [ 244.422418][ T7940] nfnetlink_rcv+0x1021/0x28c0 [ 244.422480][ T7940] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 244.422521][ T7940] ? ref_tracker_free+0x689/0x830 [ 244.422575][ T7940] ? skb_clone+0x246/0x3a0 [ 244.422606][ T7940] ? __netlink_deliver_tap+0x811/0x860 [ 244.422645][ T7940] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.422674][ T7940] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.422710][ T7940] netlink_unicast+0x7bd/0x940 [ 244.422747][ T7940] netlink_sendmsg+0x7c3/0xae0 [ 244.422784][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.422834][ T7940] ? apparmor_socket_sendmsg+0x18b/0x360 [ 244.422860][ T7940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.422904][ T7940] sock_sendmsg_nosec+0x13a/0x180 [ 244.422952][ T7940] ____sys_sendmsg+0x54e/0x850 [ 244.422986][ T7940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.423020][ T7940] ? import_iovec+0x73/0xa0 [ 244.423066][ T7940] ___sys_sendmsg+0x2a5/0x360 [ 244.423090][ T7940] ? __lock_acquire+0x747/0x2de0 [ 244.423127][ T7940] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.423155][ T7940] ? futex_wait+0x2a2/0x390 [ 244.423212][ T7940] ? __fget_files+0x2a/0x420 [ 244.423238][ T7940] ? __fget_files+0x3a2/0x420 [ 244.423275][ T7940] __x64_sys_sendmsg+0x1b1/0x290 [ 244.423303][ T7940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 244.423356][ T7940] do_syscall_64+0x166/0x520 [ 244.423377][ T7940] ? trace_irq_disable+0x3b/0x140 [ 244.423408][ T7940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.423432][ T7940] ? clear_bhb_loop+0x70/0xc0 [ 244.423459][ T7940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.423481][ T7940] RIP: 0033:0x7f978639e159 [ 244.423502][ T7940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.423521][ T7940] RSP: 002b:00007f9787316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.423544][ T7940] RAX: ffffffffffffffda RBX: 00007f9786625fa0 RCX: 00007f978639e159 [ 244.423561][ T7940] RDX: 0000000020004080 RSI: 00002000000006c0 RDI: 0000000000000005 [ 244.423576][ T7940] RBP: 00007f978643506b R08: 0000000000000000 R09: 0000000000000000 [ 244.423591][ T7940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 244.423605][ T7940] R13: 00007f9786626038 R14: 00007f9786625fa0 R15: 00007fff1b7ab2a8 [ 244.423638][ T7940] [ 244.433275][ T5722] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 244.913169][ T7945] CIFS: Attempting to mount //127.0.0.1/share [ 244.948142][ T7945] CIFS: VFS: Error connecting to socket. Aborting operation. [ 244.948259][ T7945] CIFS: VFS: cifs_mount failed w/return code = -111 [ 245.000006][ T5722] usb 3-1: USB disconnect, device number 25 [ 245.025676][ T5722] usblp0: removed [ 245.825460][ T7954] FAULT_INJECTION: forcing a failure. [ 245.825460][ T7954] name failslab, interval 1, probability 0, space 0, times 0 [ 245.825495][ T7954] CPU: 0 UID: 0 PID: 7954 Comm: syz.1.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.825529][ T7954] Tainted: [L]=SOFTLOCKUP [ 245.825539][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 245.825559][ T7954] Call Trace: [ 245.825569][ T7954] [ 245.825580][ T7954] dump_stack_lvl+0xe8/0x150 [ 245.825619][ T7954] should_fail_ex+0x3eb/0x540 [ 245.825653][ T7954] should_failslab+0xa8/0x100 [ 245.825682][ T7954] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 245.825718][ T7954] ? __d_alloc+0x37/0x6f0 [ 245.825750][ T7954] ? __d_alloc+0x37/0x6f0 [ 245.825788][ T7954] __d_alloc+0x37/0x6f0 [ 245.825821][ T7954] ? hashlen_string+0x54/0x110 [ 245.825854][ T7954] d_alloc_name+0xba/0x270 [ 245.825891][ T7954] ? __pfx_d_alloc_name+0x10/0x10 [ 245.825936][ T7954] proc_setup_self+0x48/0x1c0 [ 245.825976][ T7954] proc_fill_super+0x578/0x760 [ 245.826002][ T7954] ? __pfx_proc_fill_super+0x10/0x10 [ 245.826030][ T7954] get_tree_nodev+0xbb/0x150 [ 245.826068][ T7954] vfs_get_tree+0x92/0x2a0 [ 245.826105][ T7954] do_new_mount+0x319/0xdc0 [ 245.826141][ T7954] ? __pfx_do_new_mount+0x10/0x10 [ 245.826185][ T7954] ? ns_capable+0x84/0xe0 [ 245.826213][ T7954] ? path_mount+0x647/0x1050 [ 245.826244][ T7954] ? user_path_at+0xd4/0x160 [ 245.826277][ T7954] __se_sys_mount+0x31d/0x420 [ 245.826311][ T7954] ? __pfx___se_sys_mount+0x10/0x10 [ 245.826352][ T7954] ? __x64_sys_mount+0x20/0xc0 [ 245.826383][ T7954] do_syscall_64+0x166/0x520 [ 245.826404][ T7954] ? trace_irq_disable+0x3b/0x140 [ 245.826436][ T7954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.826460][ T7954] ? clear_bhb_loop+0x70/0xc0 [ 245.826487][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.826529][ T7954] RIP: 0033:0x7f98a4b9e159 [ 245.826552][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 245.826573][ T7954] RSP: 002b:00007f98a5b01028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.826600][ T7954] RAX: ffffffffffffffda RBX: 00007f98a4e25fa0 RCX: 00007f98a4b9e159 [ 245.826618][ T7954] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 245.826635][ T7954] RBP: 00007f98a4c3506b R08: 0000000000000000 R09: 0000000000000000 [ 245.826650][ T7954] R10: 0000000002000008 R11: 0000000000000246 R12: 0000000000000000 [ 245.826666][ T7954] R13: 00007f98a4e26038 R14: 00007f98a4e25fa0 R15: 00007ffcf3e9b0a8 [ 245.826704][ T7954] [ 245.826757][ T7954] proc_fill_super: can't allocate /proc/self [ 246.196933][ C1] net_ratelimit: 289 callbacks suppressed [ 247.011923][ T4937] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.026539][ T4937] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.038106][ T4937] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.043245][ T4937] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.044951][ T4937] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 247.342175][ T7969] device-mapper: table: 248:0: thin-pool: Error creating metadata object (-EIO) [ 247.342211][ T7969] device-mapper: ioctl: error adding target to table [ 247.458245][ T9] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 247.567601][ T5732] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 247.607730][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 247.611054][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.611074][ T9] usb 1-1: Product: syz [ 247.611089][ T9] usb 1-1: Manufacturer: syz [ 247.611104][ T9] usb 1-1: SerialNumber: syz [ 247.728013][ T5732] usb 2-1: Using ep0 maxpacket: 16 [ 247.761124][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 247.761180][ T5732] usb 2-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 247.762642][ T5732] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 247.762676][ T5732] usb 2-1: can't read configurations, error -71 [ 248.057686][ T30] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 248.065735][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 248.226972][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 248.236023][ T30] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.236067][ T30] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 248.254229][ T30] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 248.254252][ T30] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 248.254272][ T30] usb 3-1: config 14 has no interface number 0 [ 248.254288][ T30] usb 3-1: config 14 has no interface number 1 [ 248.254347][ T30] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 248.254369][ T30] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 248.254391][ T30] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 248.254416][ T30] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 248.254443][ T30] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 248.254465][ T30] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.254492][ T30] usb 3-1: config 14 interface 57 has no altsetting 0 [ 248.254510][ T30] usb 3-1: config 14 interface 228 has no altsetting 0 [ 248.377436][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.377457][ T30] usb 3-1: Product: syz [ 248.377473][ T30] usb 3-1: Manufacturer: syz [ 248.377488][ T30] usb 3-1: SerialNumber: syz [ 248.812855][ T30] legousbtower 3-1:14.57: interrupt endpoints not found [ 248.996972][ T5732] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 249.147127][ T5633] Bluetooth: hci5: command tx timeout [ 249.157718][ T5732] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 249.159145][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.240085][ T30] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 249.244329][ T30] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 249.380373][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.380691][ T7971] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.380882][ T7971] bridge_slave_0: entered allmulticast mode [ 249.383348][ T7971] bridge_slave_0: entered promiscuous mode [ 249.419512][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.419715][ T7971] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.419924][ T7971] bridge_slave_1: entered allmulticast mode [ 249.423928][ T7971] bridge_slave_1: entered promiscuous mode [ 249.532586][ T7971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.549210][ T7971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.624312][ T7971] team0: Port device team_slave_0 added [ 249.635438][ T7971] team0: Port device team_slave_1 added [ 249.708302][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.708315][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.708341][ T7971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.750510][ T7971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.750524][ T7971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.750553][ T7971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.918326][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 249.925711][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 249.949649][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 249.966257][ T9] usb 1-1: USB disconnect, device number 37 [ 250.094356][ T7971] hsr_slave_0: entered promiscuous mode [ 250.105518][ T7971] hsr_slave_1: entered promiscuous mode [ 250.117676][ T7971] debugfs: 'hsr0' already exists in 'hsr' [ 250.117694][ T7971] Cannot create hsr debugfs directory [ 250.228366][ T5732] hid_parser_main: 7 callbacks suppressed [ 250.228386][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228423][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228452][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228505][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228532][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228559][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228586][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228637][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228664][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.228692][ T5732] ryos 0003:1E7D:3138.000E: unknown main item tag 0x0 [ 250.343804][ T5732] ryos 0003:1E7D:3138.000E: hidraw0: USB HID v1.11 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 250.536679][ T7989] usb 3-1: LEGO USB Tower reset control request failed [ 250.555795][ T8000] usb 3-1: LEGO USB Tower reset control request failed [ 250.945718][ T9] usb 2-1: USB disconnect, device number 32 [ 251.116289][ T10] usb 3-1: USB disconnect, device number 26 [ 251.200747][ T10] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 251.227109][ T5633] Bluetooth: hci5: command tx timeout [ 251.386974][ C1] net_ratelimit: 83 callbacks suppressed [ 251.505606][ T8016] CIFS: Attempting to mount //127.0.0.1/share [ 251.954362][ T7971] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.005223][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.019112][ T7971] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.070866][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.084673][ T7971] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.133884][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.135426][ T7971] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.189374][ T7971] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.227063][ T5697] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 252.261175][ T8016] CIFS: VFS: cifs_mount failed w/return code = -512 [ 252.408044][ T5697] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.409238][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 252.409264][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 192, setting to 64 [ 252.410412][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 252.410432][ T5697] usb 1-1: Product: syz [ 252.413557][ T5697] usb 1-1: config 0 descriptor?? [ 252.414283][ T8028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 252.477094][ T5697] hub 1-1:0.0: USB hub found [ 252.618494][ T5697] hub 1-1:0.0: 1 port detected [ 252.812997][ T7971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.857970][ T7971] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.875703][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.875801][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.923715][ T100] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.923814][ T100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.977400][ T30] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 253.142561][ T30] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 253.144037][ T30] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.144059][ T30] usb 2-1: config 0 has no interfaces? [ 253.144109][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.181469][ T30] usb 2-1: config 0 descriptor?? [ 253.307055][ T5633] Bluetooth: hci5: command tx timeout [ 253.385469][ T8051] FAULT_INJECTION: forcing a failure. [ 253.385469][ T8051] name failslab, interval 1, probability 0, space 0, times 0 [ 253.385498][ T8051] CPU: 0 UID: 0 PID: 8051 Comm: syz.2.663 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.385528][ T8051] Tainted: [L]=SOFTLOCKUP [ 253.385540][ T8051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 253.385554][ T8051] Call Trace: [ 253.385563][ T8051] [ 253.385573][ T8051] dump_stack_lvl+0xe8/0x150 [ 253.385607][ T8051] should_fail_ex+0x3eb/0x540 [ 253.385636][ T8051] should_failslab+0xa8/0x100 [ 253.385665][ T8051] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 253.385701][ T8051] ? media_pipeline_add_pad+0x297/0x760 [ 253.385727][ T8051] ? media_pipeline_add_pad+0x297/0x760 [ 253.385755][ T8051] ? media_pipeline_add_pad+0x297/0x760 [ 253.385784][ T8051] krealloc_node_align_noprof+0x19a/0x390 [ 253.385824][ T8051] media_pipeline_add_pad+0x297/0x760 [ 253.385857][ T8051] __media_pipeline_start+0x1fb/0x2440 [ 253.385880][ T8051] ? __pfx___schedule+0x10/0x10 [ 253.385924][ T8051] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 253.385953][ T8051] media_pipeline_start+0x51/0x70 [ 253.385977][ T8051] vimc_capture_start_streaming+0x7c/0x410 [ 253.386005][ T8051] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 253.386031][ T8051] vb2_start_streaming+0x11e/0x450 [ 253.386059][ T8051] ? __bitmap_weight+0xac/0x100 [ 253.386093][ T8051] vb2_core_streamon+0x2c0/0x4d0 [ 253.386132][ T8051] __video_do_ioctl+0x8af/0xc70 [ 253.386171][ T8051] ? __pfx___video_do_ioctl+0x10/0x10 [ 253.386203][ T8051] ? __might_fault+0xaf/0x130 [ 253.386238][ T8051] video_usercopy+0x860/0x1430 [ 253.386274][ T8051] ? __pfx___video_do_ioctl+0x10/0x10 [ 253.386304][ T8051] ? __pfx_video_usercopy+0x10/0x10 [ 253.386344][ T8051] ? __fget_files+0x2a/0x420 [ 253.386375][ T8051] ? __fget_files+0x2a/0x420 [ 253.386400][ T8051] ? __fget_files+0x3a2/0x420 [ 253.386431][ T8051] v4l2_ioctl+0x18d/0x1e0 [ 253.386459][ T8051] ? __pfx_v4l2_ioctl+0x10/0x10 [ 253.386485][ T8051] __se_sys_ioctl+0xfc/0x170 [ 253.386521][ T8051] do_syscall_64+0x166/0x520 [ 253.386541][ T8051] ? trace_irq_disable+0x3b/0x140 [ 253.386571][ T8051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.386595][ T8051] ? clear_bhb_loop+0x70/0xc0 [ 253.386621][ T8051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.386643][ T8051] RIP: 0033:0x7fc144d9e159 [ 253.386664][ T8051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.386684][ T8051] RSP: 002b:00007fc145cc7028 EFLAGS: 00000246 [ 253.386697][ T8051] ORIG_RAX: 0000000000000010 [ 253.386706][ T8051] RAX: ffffffffffffffda RBX: 00007fc145025fa0 RCX: 00007fc144d9e159 [ 253.386723][ T8051] RDX: 0000200000000700 RSI: 0000000040045612 RDI: 0000000000000003 [ 253.386739][ T8051] RBP: 00007fc144e3506b R08: 0000000000000000 R09: 0000000000000000 [ 253.386753][ T8051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.386767][ T8051] R13: 00007fc145026038 R14: 00007fc145025fa0 R15: 00007fff6088ecb8 [ 253.386801][ T8051] [ 253.718556][ T9] usb 1-1: USB disconnect, device number 38 [ 254.309191][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 254.459437][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 254.460208][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 254.462478][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.491627][ T9] usb 3-1: config 0 descriptor?? [ 254.525629][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 254.737614][ T7971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.387518][ T7971] veth0_vlan: entered promiscuous mode [ 255.388158][ T5633] Bluetooth: hci5: command tx timeout [ 255.427358][ T7971] veth1_vlan: entered promiscuous mode [ 255.541051][ T7971] veth0_macvtap: entered promiscuous mode [ 255.567765][ T7971] veth1_macvtap: entered promiscuous mode [ 255.676301][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.734218][ T7971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.789974][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.794705][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.794903][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.794959][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.907475][ T681] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.959668][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.959686][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.154418][ T681] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.154437][ T681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.252637][ T5729] usb 2-1: USB disconnect, device number 33 [ 256.426965][ C0] net_ratelimit: 142 callbacks suppressed [ 257.015065][ T9] gspca_sonixj: reg_w1 err -71 [ 257.015143][ T9] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 257.045677][ T9] usb 3-1: USB disconnect, device number 27 [ 257.657545][ T5770] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 257.687005][ T10] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 257.822561][ T5770] usb 5-1: not running at top speed; connect to a high speed hub [ 257.822595][ T5770] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 257.824363][ T5770] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.826280][ T5770] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 257.826302][ T5770] usb 5-1: Product: syz [ 257.826318][ T5770] usb 5-1: Manufacturer: syz [ 257.861061][ T10] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.884357][ T10] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 257.884384][ T10] usb 1-1: config 0 has no interface number 0 [ 257.884429][ T10] usb 1-1: config 0 interface 41 has no altsetting 0 [ 257.913298][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.913321][ T10] usb 1-1: Product: syz [ 257.913338][ T10] usb 1-1: Manufacturer: syz [ 257.913354][ T10] usb 1-1: SerialNumber: syz [ 257.949868][ T10] usb 1-1: config 0 descriptor?? [ 257.994249][ T5770] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 258.135244][ T8116] kvm: pic: non byte write [ 258.141674][ T5770] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 258.144023][ T5770] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 258.144105][ T5770] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 258.173546][ T8114] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 258.185223][ T5770] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 258.201657][ T5770] usb 5-1: USB disconnect, device number 2 [ 258.699186][ T8129] loop0: detected capacity change from 0 to 204800 [ 258.776280][ T8129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 258.875434][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 259.407043][ T5770] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 259.428740][ T8129] md: pers->run() failed ... [ 259.567863][ T5770] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 259.569593][ T5770] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.569620][ T5770] usb 3-1: config 0 has no interfaces? [ 259.569680][ T5770] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.575300][ T5770] usb 3-1: config 0 descriptor?? [ 259.876974][ T5770] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 260.027149][ T5770] usb 2-1: Using ep0 maxpacket: 32 [ 260.027991][ T5770] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 260.029180][ T5770] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 260.029203][ T5770] usb 2-1: config 0 has no interface number 0 [ 260.029243][ T5770] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 260.032441][ T5770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.032490][ T5770] usb 2-1: Product: syz [ 260.032507][ T5770] usb 2-1: Manufacturer: syz [ 260.032524][ T5770] usb 2-1: SerialNumber: syz [ 260.100878][ T5770] usb 2-1: config 0 descriptor?? [ 260.108372][ T8152] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 260.322677][ T8152] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 260.341627][ T10] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 260.341898][ T10] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 260.378669][ T10] usb 1-1: USB disconnect, device number 39 [ 261.379351][ T30] rust_binder: 8189: undelivered TRANSACTION_COMPLETE [ 261.379394][ T30] rust_binder: 8189: undelivered TRANSACTION_COMPLETE [ 261.379416][ T30] rust_binder: 8189: undelivered TRANSACTION_COMPLETE [ 261.455792][ T30] rust_binder: 8189: undelivered transaction 92, process died [ 261.455847][ T30] rust_binder: 8189: undelivered transaction 93, process died [ 261.455890][ T30] rust_binder: 8189: undelivered transaction 91, process died [ 261.758826][ T10] usb 3-1: USB disconnect, device number 28 [ 261.776969][ T30] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 261.866959][ C1] net_ratelimit: 229 callbacks suppressed [ 261.927002][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 261.930387][ T30] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 261.940208][ T30] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 261.940259][ T30] usb 1-1: config 0 has no interface number 0 [ 261.940392][ T30] usb 1-1: config 0 interface 12 has no altsetting 0 [ 261.955157][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.955248][ T30] usb 1-1: Product: syz [ 261.955289][ T30] usb 1-1: Manufacturer: syz [ 261.955346][ T30] usb 1-1: SerialNumber: syz [ 261.990768][ T30] usb 1-1: config 0 descriptor?? [ 262.307214][ T7395] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 262.460895][ T7395] usb 3-1: Using ep0 maxpacket: 16 [ 262.461918][ T7395] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 262.465272][ T7395] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.465333][ T7395] usb 3-1: config 0 interface 0 has no altsetting 0 [ 262.484783][ T7395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.484844][ T7395] usb 3-1: Product: syz [ 262.484960][ T7395] usb 3-1: Manufacturer: syz [ 262.485015][ T7395] usb 3-1: SerialNumber: syz [ 262.532873][ T7395] usb 3-1: config 0 descriptor?? [ 262.592092][ T5770] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 262.592119][ T5770] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 262.592366][ T5770] asix 2-1:0.188: probe with driver asix failed with error -71 [ 262.632246][ T5770] usb 2-1: USB disconnect, device number 34 [ 262.810632][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 262.831267][ T7395] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input33 [ 262.900727][ T7395] imon:send_packet: packet tx failed (-71) [ 262.929378][ T7395] imon 3-1:0.0: panel buttons/knobs setup failed [ 263.151482][ T7395] rc_core: IR keymap rc-imon-pad not found [ 263.151524][ T7395] Registered IR keymap rc-empty [ 263.156231][ T7395] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 263.156248][ T7395] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 263.159521][ T7395] imon:send_packet: packet tx failed (-71) [ 263.187385][ T7395] imon 3-1:0.0: remote input dev register failed [ 263.188355][ T7395] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 263.430962][ T7395] imon 3-1:0.0: unable to initialize intf0, err 0 [ 263.430978][ T7395] imon:imon_probe: failed to initialize context! [ 263.430991][ T7395] imon 3-1:0.0: unable to register, err -19 [ 263.474736][ T7395] usb 3-1: USB disconnect, device number 29 [ 263.577171][ T31] audit: type=1800 audit(1789583553.326:23): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.688" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 263.796758][ T8233] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 263.840515][ T7395] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 264.035785][ T7395] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 264.046295][ T7395] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 264.046323][ T7395] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 264.046378][ T7395] usb 3-1: config 0 interface 0 has no altsetting 0 [ 264.072734][ T7395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.072785][ T7395] usb 3-1: Product: syz [ 264.072802][ T7395] usb 3-1: Manufacturer: syz [ 264.072818][ T7395] usb 3-1: SerialNumber: syz [ 264.076408][ T7395] usb 3-1: config 0 descriptor?? [ 264.111875][ T8195] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 264.387521][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 264.407963][ T7395] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input35 [ 264.553329][ T30] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 264.553402][ T30] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 264.553420][ T30] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 264.553500][ T30] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 264.607654][ T30] usb 1-1: USB disconnect, device number 40 [ 264.637464][ T31] audit: type=1800 audit(1789583554.386:24): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.689" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 264.828976][ T8244] veth0_virt_wifi: entered promiscuous mode [ 264.837427][ T7395] rc_core: IR keymap rc-imon-pad not found [ 264.837443][ T7395] Registered IR keymap rc-empty [ 264.837555][ T7395] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 264.837571][ T7395] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 264.867456][ T7395] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 264.902932][ T7395] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input36 [ 264.926785][ T7395] imon 3-1:0.0: iMON device (15c2:0045, intf0) on usb<3:30> initialized [ 265.078700][ T8195] imon:lcd_write: invalid payload size: 0 (expected 8) [ 265.079193][ T8195] imon:display_open: display port is already open [ 265.082093][ T7395] usb 3-1: USB disconnect, device number 30 [ 265.286579][ T8194] ================================================================== [ 265.286593][ T8194] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 265.286622][ T8194] Read of size 8 at addr ffff88807e7da0e0 by task syz.2.683/8194 [ 265.286640][ T8194] [ 265.286654][ T8194] CPU: 1 UID: 0 PID: 8194 Comm: syz.2.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.286682][ T8194] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 265.286690][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 265.286704][ T8194] Call Trace: [ 265.286712][ T8194] [ 265.286722][ T8194] dump_stack_lvl+0xe8/0x150 [ 265.286749][ T8194] print_address_description+0x55/0x1e0 [ 265.286779][ T8194] ? dev_driver_string+0x35/0xd0 [ 265.286799][ T8194] print_report+0x58/0x70 [ 265.286826][ T8194] kasan_report+0x117/0x150 [ 265.286853][ T8194] ? dev_driver_string+0x35/0xd0 [ 265.286878][ T8194] dev_driver_string+0x35/0xd0 [ 265.286900][ T8194] __dynamic_dev_dbg+0x1ae/0x2e0 [ 265.286926][ T8194] ? __mutex_lock+0x305/0x15a0 [ 265.286948][ T8194] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 265.286974][ T8194] ? __pfx_ima_file_free+0x10/0x10 [ 265.287007][ T8194] ? __asan_memset+0x22/0x50 [ 265.287036][ T8194] ? __fsnotify_parent+0x267/0x620 [ 265.287067][ T8194] ? display_close+0x4b/0x240 [ 265.287099][ T8194] display_close+0x1f9/0x240 [ 265.287122][ T8194] ? __pfx_display_close+0x10/0x10 [ 265.287142][ T8194] __fput+0x413/0xa50 [ 265.287168][ T8194] task_work_run+0x1d9/0x260 [ 265.287201][ T8194] ? __pfx_task_work_run+0x10/0x10 [ 265.287236][ T8194] exit_to_user_mode_loop+0x204/0x770 ** replaying previous printk message ** [ 265.287236][ T8194] exit_to_user_mode_loop+0x204/0x770 [ 265.287266][ T8194] ? rcu_is_watching+0x16/0xb0 [ 265.287289][ T8194] do_syscall_64+0x328/0x520 [ 265.287308][ T8194] ? trace_irq_disable+0x3b/0x140 [ 265.287337][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.287359][ T8194] ? clear_bhb_loop+0x70/0xc0 [ 265.287382][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.287403][ T8194] RIP: 0033:0x7fc144d9e159 [ 265.287420][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.287439][ T8194] RSP: 002b:00007fff6088ee18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 265.287462][ T8194] RAX: 0000000000000000 RBX: 00007fff6088ef00 RCX: 00007fc144d9e159 [ 265.287477][ T8194] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 265.287490][ T8194] RBP: 000000000003ff56 R08: 0000000000000001 R09: 0000000000000000 [ 265.287503][ T8194] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007fff6088ef40 [ 265.287517][ T8194] R13: 00007fc145025fac R14: 0000000000040ca9 R15: 00007fc145025fa0 [ 265.287541][ T8194] [ 265.287550][ T8194] [ 265.287562][ T8194] Allocated by task 7395: [ 265.287573][ T8194] kasan_save_track+0x3e/0x80 [ 265.287603][ T8194] __kasan_kmalloc+0x93/0xb0 [ 265.287620][ T8194] __kmalloc_cache_noprof+0x31c/0x600 [ 265.287648][ T8194] usb_set_configuration+0x3cc/0x2180 [ 265.287667][ T8194] usb_generic_driver_probe+0x8d/0x150 [ 265.287696][ T8194] usb_probe_device+0x1c3/0x3b0 [ 265.287714][ T8194] really_probe+0x254/0xae0 [ 265.287739][ T8194] __driver_probe_device+0x1e8/0x360 [ 265.287763][ T8194] driver_probe_device+0x4f/0x240 [ 265.287787][ T8194] __device_attach_driver+0x270/0x410 [ 265.287812][ T8194] bus_for_each_drv+0x258/0x2f0 [ 265.287829][ T8194] __device_attach+0x2c4/0x450 [ 265.287851][ T8194] device_initial_probe+0xa1/0xd0 [ 265.287874][ T8194] bus_probe_device+0x12a/0x220 [ 265.287891][ T8194] device_add+0x7d7/0xb80 [ 265.287910][ T8194] usb_new_device+0x9aa/0x1690 [ 265.287936][ T8194] hub_event+0x28e8/0x4d30 [ 265.287952][ T8194] process_scheduled_works+0xc3d/0x1630 [ 265.287974][ T8194] worker_thread+0xa47/0xfb0 [ 265.288002][ T8194] kthread+0x38b/0x480 [ 265.288027][ T8194] ret_from_fork+0x514/0xb70 [ 265.288052][ T8194] ret_from_fork_asm+0x1a/0x30 [ 265.288076][ T8194] [ 265.288082][ T8194] Freed by task 7395: [ 265.288092][ T8194] kasan_save_track+0x3e/0x80 [ 265.288120][ T8194] kasan_save_free_info+0x40/0x50 [ 265.288142][ T8194] __kasan_slab_free+0x5c/0x80 [ 265.288159][ T8194] kfree+0x1c5/0x650 [ 265.288181][ T8194] device_release+0xc4/0x1f0 [ 265.288207][ T8194] kobject_put+0x222/0x550 [ 265.288227][ T8194] usb_disable_device+0x611/0x8d0 [ 265.288255][ T8194] usb_disconnect+0x346/0x9a0 [ 265.288281][ T8194] hub_event+0x1bbb/0x4d30 [ 265.288296][ T8194] process_scheduled_works+0xc3d/0x1630 [ 265.288336][ T8194] worker_thread+0xa47/0xfb0 [ 265.288358][ T8194] kthread+0x38b/0x480 [ 265.288385][ T8194] ret_from_fork+0x514/0xb70 [ 265.288412][ T8194] ret_from_fork_asm+0x1a/0x30 [ 265.288437][ T8194] [ 265.288444][ T8194] The buggy address belongs to the object at ffff88807e7da000 [ 265.288444][ T8194] which belongs to the cache kmalloc-2k of size 2048 [ 265.288461][ T8194] The buggy address is located 224 bytes inside of [ 265.288461][ T8194] freed 2048-byte region [ffff88807e7da000, ffff88807e7da800) [ 265.288483][ T8194] [ 265.288489][ T8194] The buggy address belongs to the physical page: [ 265.288507][ T8194] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7e7d8 [ 265.288527][ T8194] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 265.288544][ T8194] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 265.288563][ T8194] page_type: f5(slab) [ 265.288583][ T8194] raw: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 265.288602][ T8194] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 265.288623][ T8194] head: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 265.288641][ T8194] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 265.288661][ T8194] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 265.288680][ T8194] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 265.288692][ T8194] page dumped because: kasan: bad access detected [ 265.288710][ T8194] page_owner tracks the page as allocated [ 265.288718][ T8194] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5617, tgid 5617 (syz-executor), ts 85979694050 [ 265.288753][ T8194] post_alloc_hook+0x1f9/0x250 [ 265.288781][ T8194] get_page_from_freelist+0x2209/0x2280 [ 265.288813][ T8194] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 265.288845][ T8194] allocate_slab+0x7d/0x620 [ 265.288866][ T8194] refill_objects+0x2d5/0x350 [ 265.288889][ T8194] __pcs_replace_empty_main+0x2c8/0x6c0 [ 265.288911][ T8194] __kmalloc_node_track_caller_noprof+0x543/0x720 [ 265.288942][ T8194] pskb_expand_head+0x22c/0x13a0 [ 265.288966][ T8194] netlink_trim+0x1b3/0x2c0 [ 265.288995][ T8194] netlink_broadcast_filtered+0x6d/0xea0 [ 265.289017][ T8194] nlmsg_notify+0xe3/0x1a0 [ 265.289039][ T8194] rtnetlink_event+0x224/0x270 [ 265.289056][ T8194] notifier_call_chain+0x1a5/0x3d0 [ 265.289083][ T8194] netif_set_mac_address+0x393/0x4d0 [ 265.289104][ T8194] dev_set_mac_address+0x10e/0x220 [ 265.289125][ T8194] bond_set_mac_address+0x2e0/0x910 [ 265.289157][ T8194] page last free pid 9 tgid 9 ts 85908072399 stack trace: [ 265.289172][ T8194] __free_frozen_pages+0xc93/0xd90 [ 265.289199][ T8194] __slab_free+0x274/0x2c0 [ 265.289227][ T8194] qlist_free_all+0x99/0x100 [ 265.289256][ T8194] kasan_quarantine_reduce+0x148/0x160 [ 265.289286][ T8194] __kasan_slab_alloc+0x22/0x80 [ 265.289305][ T8194] __kmalloc_cache_noprof+0x29a/0x600 [ 265.289334][ T8194] nsim_fib_event+0x4c8/0xa3a0 [ 265.289361][ T8194] nsim_fib_event_work+0x244/0x3b0 [ 265.289387][ T8194] process_scheduled_works+0xc3d/0x1630 [ 265.289410][ T8194] worker_thread+0xa47/0xfb0 [ 265.289432][ T8194] kthread+0x38b/0x480 [ 265.289459][ T8194] ret_from_fork+0x514/0xb70 [ 265.289485][ T8194] ret_from_fork_asm+0x1a/0x30 [ 265.289522][ T8194] [ 265.289528][ T8194] Memory state around the buggy address: [ 265.289539][ T8194] ffff88807e7d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 265.289553][ T8194] ffff88807e7da000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.289567][ T8194] >ffff88807e7da080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.289578][ T8194] ^ [ 265.289589][ T8194] ffff88807e7da100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.289603][ T8194] ffff88807e7da180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.289613][ T8194] ================================================================== [ 265.289637][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.289818][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 265.289841][ C1] kcov: kcov_start: t = ffff88801e2bddc0, size = 262144, area = ffffc900020e1000 [ 265.289877][ C1] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc900020e1000 21 [ 265.299942][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.311762][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.324211][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.327235][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 265.327261][ C1] kcov: kcov_start: t = ffff88801e2bddc0, size = 262144, area = ffffc900020e1000 [ 265.327301][ C1] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc900020e1000 21 [ 265.337927][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.341449][ C0] virtqueue callback for ffff888027697200 (ffffffff86c736f0) [ 265.341528][ C0] No more buffers in queue [ 265.343091][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 265.343159][ C0] No more buffers in queue [ 265.345053][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.345300][ T8248] sctp: sctp_setsockopt: sk:ffff888034e22300, optname:10 [ 265.349873][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.365070][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.368145][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 265.368171][ C1] kcov: kcov_start: t = ffff88801e2bddc0, size = 262144, area = ffffc900020e1000 [ 265.368210][ C1] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc900020e1000 21 [ 265.368289][ T7395] usb usb3-port1: debounce total 100ms stable 100ms status 0x100 [ 265.368330][ T7395] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc90017e98000 223959 [ 265.368740][ T7395] kcov: kcov_remote_start: handle = 100000000000003, context: task [ 265.368762][ T7395] kcov: kcov_start: t = ffff888027b99f40, size = 1048576, area = ffffc90017e98000 [ 265.368789][ T7395] hub 3-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 265.368963][ C1] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 265.368997][ C1] kcov: kcov_start: t = ffff88801e2bddc0, size = 262144, area = ffffc900020e1000 [ 265.369035][ C1] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc900020e1000 21 [ 265.369148][ T7395] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc90017e98000 1153 [ 265.374500][ T100] hub 3-0:1.0: hub_suspend [ 265.374869][ C0] kcov: kcov_remote_start: handle = 100000000000003, context: softirq [ 265.374902][ C0] kcov: kcov_start: t = ffff88801db55dc0, size = 262144, area = ffffc900020e1000 [ 265.374959][ C0] kcov: kcov_move_area: ffffc90016694000 1048576 <= ffffc900020e1000 3 [ 265.386143][ T5607] eth0: xmit ffff88807b27f770 42:01:0a:80:00:01 [ 265.386226][ T5607] Added buffer head 7 to ffff888027697000 [ 265.386368][ C0] virtqueue callback for ffff888027697000 (ffffffff86c73830) [ 265.388043][ C0] virtqueue callback for ffff888027696e00 (ffffffff86c736f0) [ 265.390795][ C0] eth0: xmit ffff888066e9b780 42:01:0a:80:00:01 [ 265.390885][ C0] Added buffer head 9 to ffff888027697000 [ 265.391024][ C0] virtqueue callback for ffff888027697000 (ffffffff86c73830) [ 265.391507][ C0] Sent skb ffff88807b27f770 [ 265.391564][ C0] Sent skb ffff888066e9b780 [ 265.391699][ C0] No more buffers in queue [ 265.391740][ C0] No more buffers in queue [ 265.391897][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 265.392108][ C0] No more buffers in queue [ 265.393230][ C0] No more buffers in queue [ 265.393599][ T100] usb usb3: bus auto-suspend, wakeup 1 [ 265.393655][ T100] usb usb3: dummy_bus_suspend [ 265.403955][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.411076][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.424511][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.431205][ T8246] sctp: sctp_wait_for_sndbuf: asoc:ffff888064856000, timeo:9223372036854775807, msg_len:11 [ 265.437022][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff8880291d7c00, EVENT_T_TIMEOUT, TIMEOUT_SACK, asoc:ffff888064856000[STATE_ESTABLISHED], sctp_sf_do_6_2_sack [ 265.437101][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888064856000, status:DISPOSITION_CONSUME [ 265.437155][ C0] sctp: sctp_make_sack: sackCTSNAck sent:0x22dbb0dc [ 265.437340][ C0] sctp: sctp_outq_tail: outq:ffff8880648567e0, chunk:ffff8880753a9500[SACK] [ 265.437400][ C0] sctp: sctp_packet_config: packet:ffff888020696b08 vtag:0x44eb72bc [ 265.437484][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff888020696b08 size:32 chunk:ffff8880753a9500 size:16 [ 265.437616][ C0] sctp: sctp_packet_append_chunk: packet:ffff888020696b08 chunk:ffff8880753a9500 [ 265.437680][ C0] sctp: sctp_packet_transmit: packet:ffff888020696b08 [ 265.437831][ C0] sctp: *** Chunk:ffff8880753a9500[SACK] No TSN 0x0, length:16, chunk->skb->len:16, rtt_in_progress:0 [ 265.438029][ C0] sctp: ***sctp_transmit_packet*** skb->len:28 [ 265.438065][ C0] sctp: sctp_v4_xmit: skb:ffff888031343140, len:28, src:172.20.20.170, dst:172.20.20.170 [ 265.438227][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888064856000[STATE_ESTABLISHED] [ 265.438486][ C0] sctp: +++sctp_inq_pop+++ chunk:ffff8880753a9640[SACK], length:16, skb->len:12 [ 265.438540][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff8880291d7c00, EVENT_T_CHUNK, SACK, asoc:ffff888064856000[STATE_ESTABLISHED], sctp_sf_eat_sack_6_2 [ 265.438608][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888064856000, status:DISPOSITION_CONSUME [ 265.439681][ C0] sctp: sctp_outq_sack: sack cumulative tsn ack:0x22dbb0dc [ 265.439720][ C0] sctp: sctp_outq_sack: cumulative tsn ack of assoc:ffff888064856000 is 0x22dbb0dc, advertised peer ack point:0x22dbb0dc [ 265.439765][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff8880291d7c00, EVENT_T_OTHER, NO_PENDING_TSN, asoc:ffff888064856000[STATE_ESTABLISHED], sctp_sf_do_no_pending_tsn [ 265.439898][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888064856000, status:DISPOSITION_CONSUME [ 265.439934][ C0] sctp: sctp_cmd_interpreter: sm_sideff: event_up:ffff8880263ca3e8, ulpq:ffff888064856850 [ 265.440124][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888064856000[STATE_ESTABLISHED] [ 265.440180][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888064856000[STATE_ESTABLISHED] [ 265.445379][ T8246] sctp: sctp_do_sm[pre-fn]: ep:ffff8880291d7c00, EVENT_T_PRIMITIVE, PRIMITIVE_SEND, asoc:ffff888064856000[STATE_ESTABLISHED], sctp_sf_do_prm_send [ 265.445500][ T8246] sctp: sctp_do_sm[post-fn]: asoc:ffff888064856000, status:DISPOSITION_CONSUME [ 265.445548][ T8246] sctp: sctp_outq_tail: outq:ffff8880648567e0, chunk:ffff8880753a93c0[DATA] [ 265.445604][ T8246] sctp: sctp_outq_tail: outqueueing: outq:ffff8880648567e0, chunk:ffff8880753a93c0[DATA]) [ 265.445664][ T8246] sctp: sctp_packet_config: packet:ffff888020696b08 vtag:0x44eb72bc [ 265.445721][ T8246] sctp: sctp_outq_flush_data: outq:ffff8880648567e0, chunk:ffff8880753a93c0[DATA], tx-tsn:0x0 skb->head:ffff88807b3c0d00 skb->users:1 [ 265.445795][ T8246] sctp: sctp_packet_transmit_chunk: packet:ffff888020696b08 size:32 chunk:ffff8880753a93c0 size:27 [ 265.445854][ T8246] sctp: sctp_packet_append_chunk: packet:ffff888020696b08 chunk:ffff8880753a93c0 [ 265.445958][ T8246] sctp: sctp_packet_transmit: packet:ffff888020696b08 [ 265.446071][ T8246] sctp: *** Chunk:ffff8880753a93c0[DATA] TSN 0x22dbb0dd, length:27, chunk->skb->len:28, rtt_in_progress:1 [ 265.446197][ T8246] sctp: ***sctp_transmit_packet*** skb->len:40 [ 265.446243][ T8246] sctp: sctp_v4_xmit: skb:ffff88807cde3a00, len:40, src:172.20.20.170, dst:172.20.20.170 [ 265.446551][ T8246] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888064856000[STATE_ESTABLISHED] [ 265.446607][ T8246] sctp: sctp_sendmsg_to_asoc: we sent primitively [ 265.446653][ T8246] sctp: +++sctp_inq_pop+++ chunk:ffff8880753a9280[DATA], length:27, skb->len:24 [ 265.446709][ T8246] sctp: sctp_do_sm[pre-fn]: ep:ffff8880291d7c00, EVENT_T_CHUNK, DATA, asoc:ffff888064856000[STATE_ESTABLISHED], sctp_sf_eat_data_6_2 [ 265.447202][ T8194] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.907020][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.2.683 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.917788][ T8194] Tainted: [L]=SOFTLOCKUP [ 266.922124][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 266.932208][ T8194] Call Trace: [ 266.935507][ T8194] [ 266.938451][ T8194] vpanic+0x56d/0xa70 [ 266.942469][ T8194] ? __pfx_vpanic+0x10/0x10 [ 266.946992][ T8194] panic+0xc5/0xd0 [ 266.950736][ T8194] ? __pfx_panic+0x10/0x10 [ 266.955177][ T8194] ? preempt_schedule_thunk+0x16/0x40 [ 266.960573][ T8194] ? dev_driver_string+0x35/0xd0 [ 266.965523][ T8194] ? preempt_schedule_thunk+0x16/0x40 [ 266.970922][ T8194] ? dev_driver_string+0x35/0xd0 [ 266.975879][ T8194] check_panic_on_warn+0x89/0xb0 [ 266.980873][ T8194] ? dev_driver_string+0x35/0xd0 [ 266.985821][ T8194] end_report+0x73/0x170 [ 266.990081][ T8194] ? dev_driver_string+0x35/0xd0 [ 266.995034][ T8194] kasan_report+0x128/0x150 [ 266.999550][ T8194] ? dev_driver_string+0x35/0xd0 [ 267.004504][ T8194] dev_driver_string+0x35/0xd0 [ 267.009280][ T8194] __dynamic_dev_dbg+0x1ae/0x2e0 [ 267.014231][ T8194] ? __mutex_lock+0x305/0x15a0 [ 267.019008][ T8194] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 267.024495][ T8194] ? __pfx_ima_file_free+0x10/0x10 [ 267.029616][ T8194] ? __asan_memset+0x22/0x50 [ 267.034230][ T8194] ? __fsnotify_parent+0x267/0x620 [ 267.039364][ T8194] ? display_close+0x4b/0x240 [ 267.044075][ T8194] display_close+0x1f9/0x240 [ 267.048707][ T8194] ? __pfx_display_close+0x10/0x10 [ 267.053840][ T8194] __fput+0x413/0xa50 [ 267.057842][ T8194] task_work_run+0x1d9/0x260 [ 267.062470][ T8194] ? __pfx_task_work_run+0x10/0x10 [ 267.067603][ T8194] exit_to_user_mode_loop+0x204/0x770 [ 267.072998][ T8194] ? rcu_is_watching+0x16/0xb0 [ 267.077782][ T8194] do_syscall_64+0x328/0x520 [ 267.082388][ T8194] ? trace_irq_disable+0x3b/0x140 [ 267.087445][ T8194] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.093522][ T8194] ? clear_bhb_loop+0x70/0xc0 [ 267.098325][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.104234][ T8194] RIP: 0033:0x7fc144d9e159 [ 267.108689][ T8194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.128303][ T8194] RSP: 002b:00007fff6088ee18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 267.136734][ T8194] RAX: 0000000000000000 RBX: 00007fff6088ef00 RCX: 00007fc144d9e159 [ 267.144713][ T8194] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 267.152707][ T8194] RBP: 000000000003ff56 R08: 0000000000000001 R09: 0000000000000000 [ 267.160691][ T8194] R10: 0000001b32f20000 R11: 0000000000000246 R12: 00007fff6088ef40 [ 267.168698][ T8194] R13: 00007fc145025fac R14: 0000000000040ca9 R15: 00007fc145025fa0 [ 267.176712][ T8194] [ 267.179921][ T8194] Kernel Offset: disabled [ 267.184246][ T8194] Rebooting in 86400 seconds..