last executing test programs: 4.980352039s ago: executing program 2 (id=910): r0 = gettid() rt_sigqueueinfo(r0, 0x1c, &(0x7f00000003c0)={0xa, 0x8, 0x5}) r1 = socket$alg(0x26, 0x5, 0x0) syz_io_uring_setup(0x1629, &(0x7f00000002c0)={0x0, 0x9ac4, 0x8, 0x3, 0x296}, &(0x7f0000000340)=0x0, &(0x7f0000000480), &(0x7f0000000540)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000980)=@IORING_OP_OPENAT2={0x1c, 0xe76c433ff7539d17, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x301040, 0x13a, 0x24}, 0x0, 0x18, 0x0, 0x12345}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) r3 = mmap$IORING_OFF_SQES(0x0, 0xffffff7f, 0xc, 0x10, 0xffffffffffffffff, 0x10000000) syz_open_dev$vcsu(&(0x7f0000000580), 0x8000, 0x200) syz_io_uring_submit(r2, 0x0, r3, &(0x7f0000001a00)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r1, &(0x7f0000000600)="633afe44abc19806694aceddc959ea9ce19cf7f2a3017cecc2667dbf1f133992", &(0x7f0000001ac0)="c2164a23c8d1c02434367c533b28c070847c567adf44f37aa4a7fcfdcf08398274a63e738b7bf65f14b26ed31eeec72ff812121eb4874bf5e304cf86ba9f833e3981165557c3aa3571a6a4289b36abb0163d074963829531b7429c2a3ea07b953163aa8553b8b0be177ee3fdd673322e80e06737eefaf218cd5b5750af448094146e0f49e3870759a1ca9c9caa360c7166b462f306138a7f0be115", 0x9b, 0x41, 0x0, {0x0, 0x0, 0x100}}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(r4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.848899291s ago: executing program 2 (id=911): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000040)=0x6) 4.846992884s ago: executing program 2 (id=912): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f00008cb000/0x400000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) socket$inet_udp(0x2, 0x2, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000040)={0x30, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5}]}, 0x30}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x50}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x27}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) mkdirat(r3, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00') creat(&(0x7f0000000200)='./file0\x00', 0x40) openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x48a200, 0x0) 3.933816024s ago: executing program 1 (id=915): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2800009, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000380)={0x6, @empty, 0x4e24, 0x0, 'sh\x00', 0x4, 0x8, 0x38}, 0x2c) r3 = fcntl$dupfd(r0, 0x406, r0) r4 = socket(0x11, 0x3, 0x0) setsockopt(r4, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r4, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r5, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="02013600002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x2a903, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r7, 0x1, &(0x7f0000000700)=[&(0x7f0000000100)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r6, 0x0, 0x0, 0xf}]) 3.569195249s ago: executing program 2 (id=916): r0 = userfaultfd(0x801) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000100)={0x6, 0x3, 0x9, 0xdedb, 0x2, '\v\x00\x00]\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000050601080000000000000000030000090900030073797a32000000000900020073797a3000000000050001"], 0x34}, 0x1, 0x0, 0x0, 0x4040041}, 0x800) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20044840) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r5 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.955989601s ago: executing program 1 (id=922): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000010) 2.777224577s ago: executing program 1 (id=923): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYRES32=r0, @ANYRESOCT=r1], 0xd0}}, 0x4048041) 2.75172356s ago: executing program 1 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup3(r0, r0, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_pts(r1, 0x80600) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, &(0x7f00000006c0)={0x2, 0x0, 0x13, 0x7, 0xb9, &(0x7f00000002c0)="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"}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x15c, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0xa0, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x90, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPR={0x50, 0x7, 0x0, 0x1, {{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_EXPR={0x2c, 0x7, 0x0, 0x1, {{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xf}]}}}, {0x44, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x9aefd1bf89cbe525}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x184}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) ioctl$KVM_SET_NR_MMU_PAGES(0xffffffffffffffff, 0xae44, 0x8) mount(&(0x7f0000000000)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0x2000000, &(0x7f0000000180)='syz1\x00') syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x1e, 0xb9, 0x3a, 0x10, 0x8086, 0x110, 0xe0b2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x2, 0x70, 0x9, "", [{{0x9, 0x4, 0xa0, 0x8, 0x0, 0x7a, 0xa8, 0x4, 0xf8}}]}}]}}, 0x0) 2.345242991s ago: executing program 3 (id=926): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 2.23122072s ago: executing program 3 (id=927): write(0xffffffffffffffff, &(0x7f0000000040)="66000000220047000500fc0f8980e8ff06006d20002b1ffec0906849199f90e90101c7bb0000d3e7ff0b317cfdc617ab685b77fa89b5843e9fb69ea04aab8950a19d1cb58605cc23e7c515927d", 0x4d) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500"], 0xd0}}, 0x571f68543cec8180) 2.153904945s ago: executing program 3 (id=928): sysfs$3(0x3) 2.0250288s ago: executing program 3 (id=929): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0xc000054) syz_genetlink_get_family_id$gtp(0x0, r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/time\x00') socket$kcm(0xa, 0x3, 0x3a) mknodat$null(0xffffffffffffff9c, 0x0, 0x161, 0x103) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00004e", @ANYRES64=r3], 0xb2) 1.821241897s ago: executing program 3 (id=930): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0xfffc, {0xaaaaaaaaaaaa0102}}}, 0x52) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x2}}, 0x14) (async) setreuid(0x0, 0xee01) (async) clock_adjtime(0x0, &(0x7f0000001300)={0x6, 0x4, 0x1ff, 0x5, 0x2, 0x0, 0x6, 0x2, 0x4, 0x5, 0x6, 0x3, 0x7, 0x4, 0x8, 0x7, 0x3, 0x1, 0xe7, 0xaa1b, 0xc46, 0x4, 0xf34, 0x2, 0x7, 0x4}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xa, 0x6aa3bf4ad4a8ae77, 0x8, {0x8, 0xb, 0x0, 0x2, 0x1, 0x25, 0x30, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x10001}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0x7, 0x8, {0xa, 0x25, 0x25, 0xf30f, 0x5, 0xaf8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x643d641a7afc8a0c, 0x10, 0x9, 0x6, {0xa, 0x25, 0x25, 0x9, 0xa5, 0x18}}}}}}}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) (async) socket$can_raw(0x1d, 0x3, 0x1) 1.23999081s ago: executing program 1 (id=931): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000010) 1.232408762s ago: executing program 0 (id=932): r0 = syz_ublk_setup_io_uring(0x0, &(0x7f0000000180)={0x0, 0xd3b, 0x400, 0x3, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r4) sendmsg$FOU_CMD_DEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x1, 0x70bd2a, 0xd22d, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x20010080) syz_io_uring_submit(r1, r2, r3, &(0x7f00000000c0)=@IORING_OP_OPENAT={0x12, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x150, 0x202840, 0x12345}) syz_ublk_setup_io_uring(0x20, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r0, r1, r2, r6, &(0x7f00000003c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x2, 0x901, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2d}}}, &(0x7f0000000440)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48010) sendmsg$NFT_BATCH(r7, 0x0, 0xb4a1373b0c52cf0b) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x80) 1.057063491s ago: executing program 1 (id=933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x146b, 0x902, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x3, "", [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xc259, 0xf8, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xb4, 0x84, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000000)={0x40, 0x8, 0x35, {0x35, 0x8, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479ca31a1413491fef7c7b08fc0a59a737f52509e38bf7914077366b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) 1.025490769s ago: executing program 0 (id=934): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000000140)=""/226, 0xe2}, {&(0x7f0000004c00)=""/4092, 0xffc}, {&(0x7f0000000040)=""/17, 0x11}], 0x4}}], 0x1, 0x6103, 0x0) r1 = timerfd_create(0x0, 0x800) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, &(0x7f0000000000)=0x8) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 868.66096ms ago: executing program 0 (id=935): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000400), 0x12) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 784.679836ms ago: executing program 0 (id=936): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000ffd9dd000000100001000b0808004149014006040800", 0x58}], 0x1) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r1, 0x400448e7, 0x0) r2 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r2, 0x80106f53, &(0x7f0000000040)={0x23, &(0x7f0000000600)=[{0xa, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x0, @uvalue=0x5774}, {0x1, @svalue}, {0x1, @uvalue=0x2}]}, 0x7f}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xe}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 673.525872ms ago: executing program 0 (id=937): r0 = socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="674466980100000000000300d47a56927417a1ba6f092511f7ba68e4cbf5ad2f081ce5a638092bbadf1bc0ee0007991bf165244e51d00000ead6faa666f83f36413aba917fe6fba1a3c58b7f1e9c91d0750000000000762be6903004e1d38e1f59dd8608a795fe5dd73c1c168a256ece0c42421b5518d41bc5ac6d3bbe7a686a9521f4019e872815d916e7608e83a589b5b72c233deea356498ddb2f1f011b1aee2de55b"], 0x56) r3 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'ip6gre0\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xffffa000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x14, 0x2, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4800) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000040)={@remote, @rand_addr=0x64010101}, 0xc) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) landlock_create_ruleset(&(0x7f0000000080)={0x110, 0x9, 0x0, 0x8006, 0x3}, 0x30, 0x0) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) 651.75557ms ago: executing program 0 (id=938): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x10001}]}) r1 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000200)={r2, 0x0, r3, 0x6, 0x1, 0xa4, 0x0, 0xfffffffe, 0x7, 0x9, 0x7fff, 0x320}) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x18, 0x2, 0x5, 0x4, 0x0, 0x8100}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x74, r6, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x1) clock_settime(0xfffffffb, &(0x7f0000000140)) 568.761806ms ago: executing program 3 (id=939): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122070009058103"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x11a, 0x5, 0x0, 0x0) migrate_pages(0x0, 0x7ffb, &(0x7f00000000c0)=0x1, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000800)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, &(0x7f0000000080)={0x14, &(0x7f0000001780)=ANY=[@ANYRES16=r0, @ANYBLOB="2260636b7e79e281b0b832d5337dc99a8fc5671d6fe321a3094e9493c93718b47c58d6fd086a49db6d4b0df22da84f33fffcb79655d928d219611785769e38aa8d84bc441d06c5b183fcd695aca23474a6d594a225a5a28f185a0354afaf9684c886a9f024b2e11ee1d0b176d7af0efce8106b596508dfdb56af84303ae6c5024730c6ca2c2a9d5eae4235068efbd6597102dfad77fca956a807383f7a41d78bfb07539c3dbf3b6fd5930a220b61da13", @ANYRES8=r1], &(0x7f0000000180)={0x0, 0x3, 0x8c, @string={0x8c, 0x3, "0e60f3ed42e831b5d0f45e0c2fac29a98932a87e0ab029a82464e2d8d6320e59ab4bc4a24af1320eb8ffa4ff042d5ee3467cc2415c2400826a96e55b0534e77545570656718570aee66231d21d62ea7a6bb28803dc99ec4115f0ab92ea97e32c1f111647007787146aa09acd02f3894b3c722804a76f32b50ea0440ee4b40e85f3daecc70f41358bcddb"}}}, &(0x7f00000007c0)={0x1c, &(0x7f0000001740)=ANY=[], &(0x7f0000000340)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000000000062b3c2fbb7190a941a611200000000000000"]}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001180)='./binderfs2/custom0\x00', 0xc1929698943093e9, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001480)={0xa4, 0x0, &(0x7f0000001340)=[@increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000011c0)={@flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @fda={0x66646185, 0x7, 0x0, 0x25}, @fda={0x66646185, 0x5, 0x1, 0x40}}, &(0x7f0000001240)={0x0, 0x18, 0x38}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000001280)={@flat=@weak_handle={0x77682a85, 0x10b, 0x1}, @fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000001300)={0x0, 0x18, 0x30}}}], 0x46, 0x0, &(0x7f0000001400)="4c3adad1f0cc5d6d6ab565f96f6635d2b590380ee45d5b1e451d25c8d87e51bd7c1a14fc8d0a681398adb3bd6b6f2c535085776b6da6c207373ec14587c0f78cb0f58096206f"}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/vmstat\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) syz_usb_control_io$hid(r0, 0x0, 0x0) 279.437683ms ago: executing program 2 (id=940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r1, &(0x7f0000000100)=ANY=[@ANYRES8=r1], 0xfffffcd9) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000001c0)={0x6, "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"}) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="003950323030302e7554daf99367e982c9aa96f5feff0729adb6b86aa01ab7f787f4b1c896cc027af6e64749efdd51bf66a6991cd441aa047d617f9302c1d4a5d8f5e872a015596f8dcfe7211d190e8d0de8e16e32610d844b4a7d53af63706c362792927660f4819c52598580"], 0x33) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000005c0)={0x0, 0x8, 0x5}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f00000009c0)={{r1}, {@val={r2}, @max}}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000000000000000000003379"], 0x40) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x1}, 0x8) 0s ago: executing program 2 (id=941): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000300)="80", 0x1}], 0x1}, 0x800) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000010) kernel console output (not intermixed with test programs): 8226] netlink_sendmsg+0x813/0xb40 [ 265.471276][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.471293][ T8226] ? aa_sock_msg_perm+0x122/0x200 [ 265.471313][ T8226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.471328][ T8226] sock_sendmsg_nosec+0x13a/0x180 [ 265.471341][ T8226] ____sys_sendmsg+0x565/0x870 [ 265.471355][ T8226] ? __might_fault+0xaf/0x130 [ 265.471371][ T8226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.471391][ T8226] ? import_iovec+0x73/0xa0 [ 265.471406][ T8226] ___sys_sendmsg+0x2a5/0x360 [ 265.471420][ T8226] ? __lock_acquire+0x683/0x2ce0 [ 265.471438][ T8226] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.471472][ T8226] ? __fget_files+0x2a/0x420 [ 265.471483][ T8226] ? __fget_files+0x3a8/0x420 [ 265.471501][ T8226] __x64_sys_sendmsg+0x1b7/0x290 [ 265.471517][ T8226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.471542][ T8226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.471555][ T8226] do_syscall_64+0x174/0x580 [ 265.471567][ T8226] ? trace_irq_disable+0x3b/0x140 [ 265.471582][ T8226] ? clear_bhb_loop+0x40/0x90 [ 265.471596][ T8226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.471607][ T8226] RIP: 0033:0x7f1cc7aece59 [ 265.471619][ T8226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.471629][ T8226] RSP: 002b:00007f1cc5d3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.471643][ T8226] RAX: ffffffffffffffda RBX: 00007f1cc7d65fa0 RCX: 00007f1cc7aece59 [ 265.471651][ T8226] RDX: 0000000000008000 RSI: 0000200000000880 RDI: 0000000000000003 [ 265.471659][ T8226] RBP: 00007f1cc5d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 265.471666][ T8226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.471672][ T8226] R13: 00007f1cc7d66038 R14: 00007f1cc7d65fa0 R15: 00007fff1c6fe3b8 [ 265.471690][ T8226] [ 265.702456][ T8230] fuse: Unknown parameter '0x0000000000000004' [ 265.971060][ T8239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.644'. [ 266.100563][ T5712] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 266.264641][ T5712] usb 1-1: unable to get BOS descriptor or descriptor too short [ 266.266502][ T5712] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.266527][ T5712] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 266.266579][ T5712] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 266.266619][ T5712] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 266.266662][ T5712] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 266.266689][ T5712] usb 1-1: config 1 interface 1 has no altsetting 0 [ 266.324109][ T7385] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 266.356691][ T5712] usb 1-1: string descriptor 0 read error: -22 [ 266.356854][ T5712] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 266.356879][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.485791][ T7385] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 266.485825][ T7385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.485845][ T7385] usb 3-1: Product: syz [ 266.485859][ T7385] usb 3-1: Manufacturer: syz [ 266.485874][ T7385] usb 3-1: SerialNumber: syz [ 266.514062][ T7385] usb 3-1: config 0 descriptor?? [ 266.539910][ T7385] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 266.820658][ T5712] usb 1-1: 2:0: cannot get min/max values for control 2 (id 2) [ 266.820702][ T5712] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 266.820720][ T5712] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 266.913455][ T8257] netlink: 332 bytes leftover after parsing attributes in process `syz.1.654'. [ 267.444058][ T8265] fuse: Unknown parameter 'fd0x0000000000000004' [ 267.544128][ T8243] Bluetooth: MGMT ver 1.23 [ 267.842046][ T8268] batadv_slave_0: entered promiscuous mode [ 267.857581][ T7385] gspca_stk1135: reg_w 0x7 err -110 [ 267.858624][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858640][ T7385] gspca_stk1135: Sensor write failed [ 267.858670][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858680][ T7385] gspca_stk1135: Sensor write failed [ 267.858709][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858718][ T7385] gspca_stk1135: Sensor read failed [ 267.858747][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858756][ T7385] gspca_stk1135: Sensor read failed [ 267.858763][ T7385] gspca_stk1135: Detected sensor type unknown (0x0) [ 267.858797][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858806][ T7385] gspca_stk1135: Sensor read failed [ 267.858834][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858843][ T7385] gspca_stk1135: Sensor read failed [ 267.858870][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858879][ T7385] gspca_stk1135: Sensor write failed [ 267.858908][ T7385] gspca_stk1135: serial bus timeout: status=0x00 [ 267.858918][ T7385] gspca_stk1135: Sensor write failed [ 267.859008][ T7385] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 268.003685][ T5712] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 268.201054][ T5712] usb 1-1: USB disconnect, device number 55 [ 268.644958][ T5684] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 268.834480][ T5684] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 268.834513][ T5684] usb 4-1: config 0 has no interface number 0 [ 268.834562][ T5684] usb 4-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 268.837607][ T5684] usb 4-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 268.837822][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.837844][ T5684] usb 4-1: Product: syz [ 268.837859][ T5684] usb 4-1: Manufacturer: syz [ 268.837873][ T5684] usb 4-1: SerialNumber: syz [ 268.856967][ T5684] usb 4-1: config 0 descriptor?? [ 268.857992][ T8275] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 269.022279][ T32] usb 3-1: USB disconnect, device number 37 [ 269.054170][ T5802] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 269.087204][ T5684] plusb 4-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 1e:86:d9:7e:3d:2a [ 269.141943][ T5684] usb 4-1: USB disconnect, device number 42 [ 269.182349][ T5684] plusb 4-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.3-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 269.225859][ T5802] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.225910][ T5802] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 269.225934][ T5802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.295746][ T5802] usb 1-1: config 0 descriptor?? [ 269.461227][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 270.403942][ T8293] netlink: 'syz.2.663': attribute type 12 has an invalid length. [ 270.403967][ T8293] netlink: 132 bytes leftover after parsing attributes in process `syz.2.663'. [ 270.804308][ T8299] fuse: Unknown parameter 'fd0x0000000000000004' [ 271.185248][ T8302] FAULT_INJECTION: forcing a failure. [ 271.185248][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 271.185293][ T8302] CPU: 0 UID: 0 PID: 8302 Comm: syz.1.667 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.185364][ T8302] Tainted: [L]=SOFTLOCKUP [ 271.185371][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 271.185384][ T8302] Call Trace: [ 271.185392][ T8302] [ 271.185401][ T8302] dump_stack_lvl+0xe8/0x150 [ 271.185435][ T8302] should_fail_ex+0x467/0x600 [ 271.185472][ T8302] should_failslab+0xa8/0x100 [ 271.185502][ T8302] __kvmalloc_node_noprof+0x17a/0x8a0 [ 271.185532][ T8302] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 271.185557][ T8302] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 271.185581][ T8302] ? __pfx_kvm_hv_setup_tsc_page+0x10/0x10 [ 271.185617][ T8302] __kvm_mmu_topup_memory_cache+0x461/0x600 [ 271.185646][ T8302] ? kvm_msr_allowed+0x9a/0x490 [ 271.185683][ T8302] mmu_topup_memory_caches+0x21/0x170 [ 271.185714][ T8302] kvm_mmu_load+0x9d/0x22b0 [ 271.185744][ T8302] ? kvm_msr_allowed+0x3f4/0x490 [ 271.185769][ T8302] ? kvm_msr_allowed+0x9a/0x490 [ 271.185793][ T8302] ? kvm_msr_allowed+0x9a/0x490 [ 271.185824][ T8302] ? kvm_apic_has_interrupt+0x740/0x770 [ 271.185860][ T8302] vcpu_run+0x4c13/0x73e0 [ 271.185887][ T8302] ? rcu_is_watching+0x15/0xb0 [ 271.185960][ T8302] ? __lock_acquire+0x683/0x2ce0 [ 271.186013][ T8302] ? __pfx_vcpu_run+0x10/0x10 [ 271.186037][ T8302] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 271.186062][ T8302] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 271.186098][ T8302] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 271.186127][ T8302] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 271.186163][ T8302] kvm_vcpu_ioctl+0xa64/0xfe0 [ 271.186196][ T8302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 271.186223][ T8302] ? hook_file_ioctl+0x1f3/0x600 [ 271.186249][ T8302] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.186295][ T8302] ? __fget_files+0x2a/0x420 [ 271.186331][ T8302] ? __fget_files+0x2a/0x420 [ 271.186355][ T8302] ? __fget_files+0x3a8/0x420 [ 271.186374][ T8302] ? __fget_files+0x2a/0x420 [ 271.186401][ T8302] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.186428][ T8302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 271.186456][ T8302] __se_sys_ioctl+0xff/0x170 [ 271.186484][ T8302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.186508][ T8302] do_syscall_64+0x174/0x580 [ 271.186534][ T8302] ? trace_irq_disable+0x3b/0x140 [ 271.186561][ T8302] ? clear_bhb_loop+0x40/0x90 [ 271.186587][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.186608][ T8302] RIP: 0033:0x7f64f509ce59 [ 271.186631][ T8302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.186647][ T8302] RSP: 002b:00007f64f32cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.186672][ T8302] RAX: ffffffffffffffda RBX: 00007f64f5316090 RCX: 00007f64f509ce59 [ 271.186686][ T8302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 271.186702][ T8302] RBP: 00007f64f32cd090 R08: 0000000000000000 R09: 0000000000000000 [ 271.186714][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.186728][ T8302] R13: 00007f64f5316128 R14: 00007f64f5316090 R15: 00007ffce8646888 [ 271.186763][ T8302] [ 271.410519][ T5711] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 271.560532][ T5711] usb 3-1: Using ep0 maxpacket: 8 [ 271.566173][ T5711] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 271.566206][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.566226][ T5711] usb 3-1: Product: syz [ 271.566241][ T5711] usb 3-1: Manufacturer: syz [ 271.566255][ T5711] usb 3-1: SerialNumber: syz [ 271.582072][ T5711] usb 3-1: config 0 descriptor?? [ 271.607363][ T5711] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 271.637241][ T5711] dvb-usb: bulk message failed: -22 (2/0) [ 271.754803][ T5802] usbhid 1-1:0.0: can't add hid device: -71 [ 271.754932][ T5802] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 271.782879][ T5802] usb 1-1: USB disconnect, device number 56 [ 271.981074][ T5711] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 271.982261][ T5711] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 271.982359][ T5711] usb 3-1: media controller created [ 272.182788][ T5711] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.552872][ T8320] fuse: Unknown parameter 'fd0x0000000000000004' [ 272.592531][ T5711] cxusb: set interface failed [ 272.592551][ T5711] dvb-usb: bulk message failed: -22 (1/0) [ 272.720144][ T5711] DVB: Unable to find symbol mt352_attach() [ 272.720157][ T5711] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 272.841829][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.677'. [ 272.870783][ T5712] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 272.893499][ T5711] rc_core: IR keymap rc-dvico-portable not found [ 272.893523][ T5711] Registered IR keymap rc-empty [ 272.894970][ T5711] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 272.904398][ T5711] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input51 [ 272.907442][ T5711] dvb-usb: schedule remote query interval to 100 msecs. [ 272.907462][ T5711] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 272.922742][ T5711] usb 3-1: USB disconnect, device number 38 [ 273.025245][ T5712] usb 2-1: Using ep0 maxpacket: 8 [ 273.029401][ T5712] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 273.029432][ T5712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.029452][ T5712] usb 2-1: Product: syz [ 273.029461][ T5712] usb 2-1: Manufacturer: syz [ 273.029469][ T5712] usb 2-1: SerialNumber: syz [ 273.100091][ T5712] usb 2-1: config 0 descriptor?? [ 273.195950][ T5712] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 273.196004][ T5712] dvb-usb: bulk message failed: -22 (2/0) [ 273.317193][ T5712] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.319444][ T5712] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 273.319510][ T5712] usb 2-1: media controller created [ 273.383636][ T8326] FAULT_INJECTION: forcing a failure. [ 273.383636][ T8326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.383685][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.1.676 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.383714][ T8326] Tainted: [L]=SOFTLOCKUP [ 273.383721][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.383733][ T8326] Call Trace: [ 273.383741][ T8326] [ 273.383751][ T8326] dump_stack_lvl+0xe8/0x150 [ 273.383782][ T8326] should_fail_ex+0x467/0x600 [ 273.383820][ T8326] _copy_from_user+0x2d/0xb0 [ 273.383847][ T8326] kstrtouint_from_user+0xd6/0x180 [ 273.383883][ T8326] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 273.383934][ T8326] proc_fail_nth_write+0x8e/0x210 [ 273.383957][ T8326] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.383990][ T8326] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 273.384012][ T8326] vfs_write+0x29f/0xbb0 [ 273.384049][ T8326] ? __pfx_vfs_write+0x10/0x10 [ 273.384079][ T8326] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.384110][ T8326] ? lockdep_hardirqs_on+0x7a/0x110 [ 273.384136][ T8326] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 273.384161][ T8326] ? mutex_lock_nested+0x152/0x1d0 [ 273.384191][ T8326] ? fdget_pos+0x252/0x320 [ 273.384224][ T8326] ksys_write+0x156/0x270 [ 273.384253][ T8326] ? __pfx_ksys_write+0x10/0x10 [ 273.384289][ T8326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.384311][ T8326] do_syscall_64+0x174/0x580 [ 273.384336][ T8326] ? trace_irq_disable+0x3b/0x140 [ 273.384364][ T8326] ? clear_bhb_loop+0x40/0x90 [ 273.384389][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.384411][ T8326] RIP: 0033:0x7f64f505d68e [ 273.384431][ T8326] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 273.384449][ T8326] RSP: 002b:00007f64f32edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 273.384472][ T8326] RAX: ffffffffffffffda RBX: 00007f64f32ee6c0 RCX: 00007f64f505d68e [ 273.384488][ T8326] RDX: 0000000000000001 RSI: 00007f64f32ee0a0 RDI: 0000000000000004 [ 273.384501][ T8326] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 273.384513][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.384526][ T8326] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 273.384560][ T8326] [ 273.536768][ T5712] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 273.611921][ T5711] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 273.774919][ T5684] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 273.817790][ T5712] cxusb: set interface failed [ 273.817811][ T5712] dvb-usb: bulk message failed: -22 (1/0) [ 273.929435][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.929470][ T5684] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 273.929484][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.939117][ T5684] usb 1-1: config 0 descriptor?? [ 273.940509][ T5711] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 273.995036][ T5712] DVB: Unable to find symbol mt352_attach() [ 273.995048][ T5712] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 274.090703][ T5712] rc_core: IR keymap rc-dvico-portable not found [ 274.090727][ T5712] Registered IR keymap rc-empty [ 274.112856][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 274.124653][ T5712] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 274.128020][ T5712] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input52 [ 274.143051][ T5712] dvb-usb: schedule remote query interval to 100 msecs. [ 274.143073][ T5712] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 274.153325][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.153379][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 274.153461][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 274.153484][ T5711] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 274.153504][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.155184][ T5711] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 274.155214][ T5711] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 274.155284][ T5711] usb 3-1: Manufacturer: syz [ 274.178519][ T5684] usbhid 1-1:0.0: can't add hid device: -71 [ 274.178641][ T5684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 274.188855][ T5712] usb 2-1: USB disconnect, device number 45 [ 274.285439][ T5684] usb 1-1: USB disconnect, device number 57 [ 274.316561][ T5711] usb 3-1: config 0 descriptor?? [ 274.686679][ T5712] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 274.691182][ T5711] rc_core: IR keymap rc-hauppauge not found [ 274.691202][ T5711] Registered IR keymap rc-empty [ 274.691355][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.711390][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.737320][ T5711] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 274.753960][ T5711] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input53 [ 274.767781][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.790616][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.810652][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.830735][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.850721][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.872845][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.896931][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.910658][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.931785][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 274.950836][ T5711] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 275.005973][ T5711] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 275.006064][ T5711] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 275.058904][ T8360] FAULT_INJECTION: forcing a failure. [ 275.058904][ T8360] name failslab, interval 1, probability 0, space 0, times 0 [ 275.058944][ T8360] CPU: 0 UID: 0 PID: 8360 Comm: syz.3.689 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.058973][ T8360] Tainted: [L]=SOFTLOCKUP [ 275.058980][ T8360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.058992][ T8360] Call Trace: [ 275.059000][ T8360] [ 275.059009][ T8360] dump_stack_lvl+0xe8/0x150 [ 275.059037][ T8360] should_fail_ex+0x467/0x600 [ 275.059075][ T8360] should_failslab+0xa8/0x100 [ 275.059099][ T8360] __kmalloc_cache_noprof+0xa0/0x6b0 [ 275.059121][ T8360] ? nsim_fib_event_nb+0x180/0x1200 [ 275.059142][ T8360] ? nsim_fib_event_nb+0x180/0x1200 [ 275.059170][ T8360] nsim_fib_event_nb+0x180/0x1200 [ 275.059193][ T8360] ? atomic_notifier_call_chain+0x26/0x180 [ 275.059223][ T8360] notifier_call_chain+0x1a5/0x3d0 [ 275.059249][ T8360] ? atomic_notifier_call_chain+0x26/0x180 [ 275.059278][ T8360] atomic_notifier_call_chain+0xda/0x180 [ 275.059314][ T8360] call_fib_notifiers+0x31/0x60 [ 275.059340][ T8360] fib6_del+0x1009/0x15f0 [ 275.059367][ T8360] ? fib6_del+0x5b1/0x15f0 [ 275.059409][ T8360] ? __pfx_fib6_del+0x10/0x10 [ 275.059431][ T8360] ? rcu_is_watching+0x15/0xb0 [ 275.059459][ T8360] ? rt_spin_lock+0x20e/0x400 [ 275.059484][ T8360] ? rcu_is_watching+0x15/0xb0 [ 275.059511][ T8360] ? __local_bh_disable_ip+0x3c/0x420 [ 275.059544][ T8360] ? __ip6_del_rt+0x8b/0x1a0 [ 275.059568][ T8360] ? __ip6_del_rt+0x8b/0x1a0 [ 275.059594][ T8360] __ip6_del_rt+0xab/0x1a0 [ 275.059625][ T8360] ip6_del_rt+0xc1/0x120 [ 275.059646][ T8360] ? __pfx_ip6_del_rt+0x10/0x10 [ 275.059664][ T8360] ? addrconf_leave_solict+0x11c/0x1a0 [ 275.059694][ T8360] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.059726][ T8360] __ipv6_dev_ac_dec+0x5f5/0x6c0 [ 275.059749][ T8360] ? __ipv6_dev_ac_dec+0x2b/0x6c0 [ 275.059774][ T8360] ? in6_dev_get+0x1a/0x290 [ 275.059800][ T8360] __ipv6_sock_ac_close+0x24c/0x440 [ 275.059831][ T8360] inet6_release+0x4f/0x70 [ 275.059851][ T8360] __sock_release+0xa0/0x1f0 [ 275.059870][ T8360] ? __pfx_sock_close+0x10/0x10 [ 275.059898][ T8360] sock_close+0x1c/0x30 [ 275.059925][ T8360] __fput+0x42a/0xa80 [ 275.059957][ T8360] fput_close_sync+0x11f/0x240 [ 275.059979][ T8360] ? __pfx_fput_close_sync+0x10/0x10 [ 275.060008][ T8360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.060032][ T8360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.060055][ T8360] __x64_sys_close+0x7e/0x110 [ 275.060079][ T8360] do_syscall_64+0x174/0x580 [ 275.060102][ T8360] ? trace_irq_disable+0x3b/0x140 [ 275.060128][ T8360] ? clear_bhb_loop+0x40/0x90 [ 275.060154][ T8360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.060175][ T8360] RIP: 0033:0x7f8bd6f8ce59 [ 275.060196][ T8360] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.060214][ T8360] RSP: 002b:00007f8bd51de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 275.060237][ T8360] RAX: ffffffffffffffda RBX: 00007f8bd7205fa0 RCX: 00007f8bd6f8ce59 [ 275.060251][ T8360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 275.060262][ T8360] RBP: 00007f8bd51de090 R08: 0000000000000000 R09: 0000000000000000 [ 275.060275][ T8360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.060287][ T8360] R13: 00007f8bd7206038 R14: 00007f8bd7205fa0 R15: 00007fff82066498 [ 275.060332][ T8360] [ 275.070908][ T5711] usb 3-1: USB disconnect, device number 39 [ 275.078515][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'. [ 275.465844][ T8365] FAULT_INJECTION: forcing a failure. [ 275.465844][ T8365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.465881][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.0.690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.465907][ T8365] Tainted: [L]=SOFTLOCKUP [ 275.465912][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.465921][ T8365] Call Trace: [ 275.465929][ T8365] [ 275.465938][ T8365] dump_stack_lvl+0xe8/0x150 [ 275.465968][ T8365] should_fail_ex+0x467/0x600 [ 275.466003][ T8365] _copy_from_user+0x2d/0xb0 [ 275.466026][ T8365] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 275.466046][ T8365] ? __lock_acquire+0x683/0x2ce0 [ 275.466072][ T8365] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 275.466117][ T8365] ? __task_pid_nr_ns+0x28/0x470 [ 275.466144][ T8365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466161][ T8365] do_syscall_64+0x174/0x580 [ 275.466183][ T8365] ? clear_bhb_loop+0x40/0x90 [ 275.466202][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.466218][ T8365] RIP: 0033:0x7f3175c3e1d9 [ 275.466234][ T8365] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 275.466259][ T8365] RSP: 002b:00007f3173ed4a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 275.466278][ T8365] RAX: ffffffffffffffda RBX: 00007f3175f16090 RCX: 00007f3175c3e1d9 [ 275.466295][ T8365] RDX: 00007f3173ed4a80 RSI: 00007f3173ed4bb0 RDI: 0000000000000021 [ 275.466306][ T8365] RBP: 00007f3173ed5090 R08: 0000000000000000 R09: 0000000000000000 [ 275.466317][ T8365] R10: 0000000000000006 R11: 0000000000000202 R12: 0000000000000001 [ 275.466327][ T8365] R13: 00007f3175f16128 R14: 00007f3175f16090 R15: 00007ffec4d04cd8 [ 275.466355][ T8365] [ 275.787900][ T61] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 275.901863][ T8375] FAULT_INJECTION: forcing a failure. [ 275.901863][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.901900][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.901929][ T8375] Tainted: [L]=SOFTLOCKUP [ 275.901936][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 275.901948][ T8375] Call Trace: [ 275.901956][ T8375] [ 275.901965][ T8375] dump_stack_lvl+0xe8/0x150 [ 275.901994][ T8375] should_fail_ex+0x467/0x600 [ 275.902032][ T8375] _copy_to_user+0x31/0xb0 [ 275.902059][ T8375] simple_read_from_buffer+0xe1/0x170 [ 275.902088][ T8375] proc_fail_nth_read+0x1be/0x230 [ 275.902115][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.902140][ T8375] ? rw_verify_area+0x250/0x4d0 [ 275.902167][ T8375] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.902188][ T8375] vfs_read+0x219/0xa90 [ 275.902223][ T8375] ? __pfx_vfs_read+0x10/0x10 [ 275.902251][ T8375] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 275.902278][ T8375] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.902304][ T8375] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.902330][ T8375] ? mutex_lock_nested+0x152/0x1d0 [ 275.902361][ T8375] ? fdget_pos+0x252/0x320 [ 275.902392][ T8375] ksys_read+0x156/0x270 [ 275.902421][ T8375] ? __pfx_ksys_read+0x10/0x10 [ 275.902445][ T8375] ? __pfx_sg_ioctl+0x10/0x10 [ 275.902472][ T8375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.902495][ T8375] do_syscall_64+0x174/0x580 [ 275.902521][ T8375] ? trace_irq_disable+0x3b/0x140 [ 275.902547][ T8375] ? clear_bhb_loop+0x40/0x90 [ 275.902572][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.902592][ T8375] RIP: 0033:0x7f64f505d68e [ 275.902617][ T8375] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 275.902634][ T8375] RSP: 002b:00007f64f32edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.902665][ T8375] RAX: ffffffffffffffda RBX: 00007f64f32ee6c0 RCX: 00007f64f505d68e [ 275.902681][ T8375] RDX: 000000000000000f RSI: 00007f64f32ee0a0 RDI: 0000000000000004 [ 275.902694][ T8375] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 275.902707][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.902720][ T8375] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 275.902754][ T8375] [ 275.980281][ T8367] netlink: 822 bytes leftover after parsing attributes in process `syz.3.691'. [ 276.287372][ T5712] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 276.350577][ T5684] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 276.465453][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 276.465488][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.467105][ T5712] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 276.467132][ T5712] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 276.467151][ T5712] usb 1-1: Manufacturer: syz [ 276.484871][ T5712] usb 1-1: config 0 descriptor?? [ 276.513979][ T5684] usb 4-1: config 2 has an invalid descriptor of length 170, skipping remainder of the config [ 276.514033][ T5684] usb 4-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.514057][ T5684] usb 4-1: config 2 interface 0 has no altsetting 0 [ 276.587462][ T5684] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 276.587498][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.587519][ T5684] usb 4-1: Product: syz [ 276.587534][ T5684] usb 4-1: Manufacturer: syz [ 276.587549][ T5684] usb 4-1: SerialNumber: syz [ 276.657612][ T8386] ceph: Path missing in source [ 276.711095][ T5802] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 276.877119][ T5802] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.877174][ T5802] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 276.877200][ T5802] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.917065][ T5802] usb 3-1: config 0 descriptor?? [ 277.164493][ T5802] usbhid 3-1:0.0: can't add hid device: -71 [ 277.164914][ T5802] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.207750][ T5802] usb 3-1: USB disconnect, device number 40 [ 277.269873][ T5712] hid_parser_main: 1 callbacks suppressed [ 277.269892][ T5712] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 277.269911][ T5712] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 277.269925][ T5712] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 277.269939][ T5712] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 277.269953][ T5712] cougar 0003:060B:700A.0009: unknown main item tag 0x0 [ 277.418302][ T5712] cougar 0003:060B:700A.0009: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 277.508542][ T5712] usb 1-1: USB disconnect, device number 58 [ 277.647311][ T8389] fido_id[8389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 278.390498][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 278.428212][ T8263] batadv_slave_0: left promiscuous mode [ 278.567610][ T38] audit: type=1800 audit(1782498705.165:2): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.691" name="/" dev="fuse" ino=2 res=0 errno=0 [ 278.575615][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.575648][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 278.575667][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.575721][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 278.575748][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 278.579776][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.579816][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.579835][ T9] usb 3-1: Product: syz [ 278.579849][ T9] usb 3-1: Manufacturer: syz [ 278.695676][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 278.695700][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 278.730762][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 278.730796][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 278.827644][ T5684] ims_pcu 4-1:2.0: Zero length descriptor [ 278.827714][ T5684] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22 [ 278.889102][ T5684] usb 4-1: USB disconnect, device number 43 [ 279.153924][ T9] usb 3-1: USB disconnect, device number 41 [ 279.294733][ T8411] FAULT_INJECTION: forcing a failure. [ 279.294733][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.294774][ T8411] CPU: 1 UID: 0 PID: 8411 Comm: syz.0.709 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 279.294803][ T8411] Tainted: [L]=SOFTLOCKUP [ 279.294811][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 279.294823][ T8411] Call Trace: [ 279.294831][ T8411] [ 279.294840][ T8411] dump_stack_lvl+0xe8/0x150 [ 279.294870][ T8411] should_fail_ex+0x467/0x600 [ 279.294907][ T8411] strncpy_from_user+0x36/0x2c0 [ 279.294940][ T8411] do_getname+0x77/0x250 [ 279.294972][ T8411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.294994][ T8411] __se_sys_rename+0x3a/0x2c0 [ 279.295014][ T8411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.295036][ T8411] do_syscall_64+0x174/0x580 [ 279.295064][ T8411] ? clear_bhb_loop+0x40/0x90 [ 279.295089][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.295108][ T8411] RIP: 0033:0x7f3175c9ce59 [ 279.295127][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.295145][ T8411] RSP: 002b:00007f3173ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 279.295168][ T8411] RAX: ffffffffffffffda RBX: 00007f3175f15fa0 RCX: 00007f3175c9ce59 [ 279.295184][ T8411] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 00002000000003c0 [ 279.295198][ T8411] RBP: 00007f3173ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 279.295212][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.295223][ T8411] R13: 00007f3175f16038 R14: 00007f3175f15fa0 R15: 00007ffec4d04cd8 [ 279.295255][ T8411] [ 279.820331][ T8420] fuse: Bad value for 'fd' [ 279.851076][ T5684] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 280.003166][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.003216][ T5684] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 280.003230][ T5684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.061120][ T5684] usb 1-1: config 0 descriptor?? [ 280.100930][ T5712] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 280.242485][ T9] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 280.250535][ T5712] usb 4-1: Using ep0 maxpacket: 32 [ 280.266405][ T5712] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.267583][ T5712] usb 4-1: config 6 has an invalid interface number: 191 but max is 1 [ 280.267609][ T5712] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 280.267627][ T5712] usb 4-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 280.267690][ T5712] usb 4-1: config 6 has no interface number 0 [ 280.267730][ T5712] usb 4-1: config 6 interface 191 altsetting 208 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 280.267759][ T5712] usb 4-1: config 6 interface 191 has no altsetting 0 [ 280.333819][ T5684] usbhid 1-1:0.0: can't add hid device: -71 [ 280.334465][ T5684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 280.334784][ T5712] usb 4-1: string descriptor 0 read error: -22 [ 280.334920][ T5712] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 280.334941][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.395713][ T5684] usb 1-1: USB disconnect, device number 59 [ 280.438333][ T5712] ums-jumpshot 4-1:6.191: USB Mass Storage device detected [ 280.440465][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 280.457635][ T9] usb 3-1: config 7 has an invalid interface number: 68 but max is 0 [ 280.457665][ T9] usb 3-1: config 7 has no interface number 0 [ 280.457697][ T9] usb 3-1: config 7 interface 68 has no altsetting 0 [ 280.469227][ T5712] ums-jumpshot 4-1:6.191: Quirks match for vid 05dc pid 0001: 2 [ 280.501567][ T9] usb 3-1: New USB device found, idVendor=04cb, idProduct=010f, bcdDevice=1c.ad [ 280.501601][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.501620][ T9] usb 3-1: Product: syz [ 280.501634][ T9] usb 3-1: Manufacturer: syz [ 280.501649][ T9] usb 3-1: SerialNumber: syz [ 280.664767][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.665366][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.719996][ T8427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.730074][ T8427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.762888][ T9] gspca_main: finepix-2.14.0 probing 04cb:010f [ 280.804964][ T9] usb 3-1: USB disconnect, device number 42 [ 280.811767][ T5684] usb 4-1: USB disconnect, device number 44 [ 281.442937][ T8442] binder: 8440:8442 ioctl c0306201 200000000680 returned -14 [ 281.667800][ T8451] fuse: Bad value for 'fd' [ 282.160513][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 282.348866][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.348924][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 282.348950][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.440151][ T9] usb 4-1: config 0 descriptor?? [ 282.619261][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619298][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619323][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619346][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619369][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619393][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619416][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619440][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619464][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.619488][ T32] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 282.701880][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 282.702035][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 282.783650][ T9] usb 4-1: USB disconnect, device number 45 [ 283.047784][ T32] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.03 Device [syz1] on syz1 [ 283.410608][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 283.491079][ T5684] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 283.571880][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 283.603155][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.603189][ T9] usb 1-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 283.603213][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 283.605862][ T9] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 283.605895][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.605915][ T9] usb 1-1: Product: syz [ 283.605929][ T9] usb 1-1: Manufacturer: syz [ 283.605944][ T9] usb 1-1: SerialNumber: syz [ 283.619958][ T9] usb 1-1: config 0 descriptor?? [ 283.693035][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 283.698635][ T5684] usb 2-1: not running at top speed; connect to a high speed hub [ 283.698711][ T5684] usb 2-1: too many configurations: 178, using maximum allowed: 8 [ 283.700181][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.700282][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.799303][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.799409][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.804748][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.804851][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.806285][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.806397][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.813519][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.813623][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.818846][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.818938][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.823841][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.823946][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.825239][ T5684] usb 2-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 283.825332][ T5684] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 283.876357][ T5684] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 283.876391][ T5684] usb 2-1: New USB device strings: Mfr=27, Product=198, SerialNumber=18 [ 283.876414][ T5684] usb 2-1: Product: syz [ 283.876427][ T5684] usb 2-1: Manufacturer: syz [ 283.876440][ T5684] usb 2-1: SerialNumber: syz [ 284.139067][ T5684] snd-ua101 2-1:1.1: sample format descriptor not found [ 284.139090][ T5684] snd-ua101 2-1:1.0: invalid num_altsetting [ 284.171259][ T9] gs_usb 1-1:0.0: Configuring for 154 interfaces [ 284.318362][ T5684] usb 2-1: USB disconnect, device number 46 [ 284.539724][ T8477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.540275][ T8477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.595335][ T9] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 284.595746][ T9] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71 [ 284.623418][ T9] usb 1-1: USB disconnect, device number 60 [ 284.646296][ T8487] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.736'. [ 284.646314][ T8487] openvswitch: netlink: Message has 512 unknown bytes. [ 285.445813][ T5613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.472857][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.480857][ T5711] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 285.489603][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.518633][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.519378][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 285.593221][ T32] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 285.650026][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.654032][ T5711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.654060][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.654080][ T5711] usb 2-1: Product: syz [ 285.654093][ T5711] usb 2-1: Manufacturer: syz [ 285.654107][ T5711] usb 2-1: SerialNumber: syz [ 285.762745][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.762847][ T32] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 285.762981][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.809746][ T5847] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.873275][ T32] usb 3-1: config 0 descriptor?? [ 285.915614][ T8496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.916334][ T8496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.103438][ T32] usbhid 3-1:0.0: can't add hid device: -71 [ 286.103568][ T32] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 286.138710][ T5711] cdc_ether 2-1:1.0: skipping garbage [ 286.138885][ T5711] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 286.173155][ T5711] usb 2-1: USB disconnect, device number 47 [ 286.175121][ T32] usb 3-1: USB disconnect, device number 43 [ 286.268157][ T8494] netlink: 80 bytes leftover after parsing attributes in process `syz.1.738'. [ 286.592621][ T5847] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.630577][ T5711] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 286.704312][ T32] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 286.792718][ T5711] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.797329][ T5711] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.797362][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.797384][ T5711] usb 2-1: Product: syz [ 286.797398][ T5711] usb 2-1: Manufacturer: syz [ 286.797412][ T5711] usb 2-1: SerialNumber: syz [ 286.851019][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 286.863998][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 286.879997][ T32] usb 1-1: config 86 has an invalid interface number: 78 but max is 0 [ 286.880026][ T32] usb 1-1: config 86 has no interface number 0 [ 286.880133][ T32] usb 1-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 286.880160][ T32] usb 1-1: config 86 interface 78 altsetting 128 endpoint 0x5 has invalid wMaxPacketSize 0 [ 286.880183][ T32] usb 1-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 0 [ 286.880206][ T32] usb 1-1: config 86 interface 78 has no altsetting 0 [ 286.939091][ T32] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 286.939199][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.939221][ T32] usb 1-1: Product: syz [ 286.939235][ T32] usb 1-1: Manufacturer: syz [ 286.939250][ T32] usb 1-1: SerialNumber: syz [ 286.974849][ T8518] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 287.033650][ T5802] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 287.080008][ T5847] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.098035][ T5711] cdc_ether 2-1:1.0: skipping garbage [ 287.098297][ T5711] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 287.135736][ T5711] usb 2-1: USB disconnect, device number 48 [ 287.160811][ T5802] usb 3-1: device descriptor read/64, error -71 [ 287.326224][ T32] kvaser_usb 1-1:86.78: error -EMSGSIZE: Cannot get software info [ 287.326511][ T32] kvaser_usb 1-1:86.78: probe with driver kvaser_usb failed with error -90 [ 287.354271][ T32] usb 1-1: USB disconnect, device number 61 [ 287.410785][ T5802] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 287.512709][ T5847] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.550804][ T5802] usb 3-1: device descriptor read/64, error -71 [ 287.661078][ T5802] usb usb3-port1: attempt power cycle [ 287.717431][ T8525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.717927][ T8525] batadv_slave_0: entered promiscuous mode [ 287.717947][ T8525] batadv_slave_0: entered allmulticast mode [ 287.722472][ T61] Bluetooth: hci2: command tx timeout [ 288.062124][ T5802] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 288.085318][ T5802] usb 3-1: device descriptor read/8, error -71 [ 288.340567][ T5802] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 288.374804][ T5802] usb 3-1: device descriptor read/8, error -71 [ 288.480906][ T5802] usb usb3-port1: unable to enumerate USB device [ 288.560663][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 288.775625][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 288.776385][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 288.778361][ T9] usb 2-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 288.778386][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.831353][ T5847] bridge_slave_1: left allmulticast mode [ 288.831391][ T5847] bridge_slave_1: left promiscuous mode [ 288.831476][ T9] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 288.831502][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.831520][ T9] usb 2-1: Product: syz [ 288.831534][ T9] usb 2-1: Manufacturer: syz [ 288.831548][ T9] usb 2-1: SerialNumber: syz [ 288.831699][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.893956][ T8556] netlink: 112 bytes leftover after parsing attributes in process `syz.0.754'. [ 289.037900][ T5847] bridge_slave_0: left allmulticast mode [ 289.037938][ T5847] bridge_slave_0: left promiscuous mode [ 289.038236][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.136734][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 289.158794][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 289.179834][ T9] usb 2-1: 3:0: cannot get min/max values for control 11 (id 3) [ 289.189521][ T9] usb 2-1: 3:0: failed to get current value for ch 0 (-71) [ 289.262189][ T9] usb 2-1: USB disconnect, device number 49 [ 289.299377][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.810925][ T61] Bluetooth: hci2: command tx timeout [ 290.162171][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 290.191552][ T5847] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.271706][ T5847] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.313501][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.313547][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=000d, bcdDevice= 0.00 [ 290.313571][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.318444][ T5847] bond0 (unregistering): Released all slaves [ 290.332862][ T9] usb 2-1: config 0 descriptor?? [ 290.471852][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 290.774818][ T5847] tipc: Disabling bearer [ 290.797072][ T9] ntrig 0003:1B96:000D.000B: collection stack underflow [ 290.797094][ T9] ntrig 0003:1B96:000D.000B: item 0 2 0 12 parsing failed [ 290.797506][ T9] ntrig 0003:1B96:000D.000B: parse failed [ 290.797573][ T9] ntrig 0003:1B96:000D.000B: probe with driver ntrig failed with error -22 [ 290.841460][ T5847] tipc: Left network mode [ 291.367434][ T8566] ALSA: mixer_oss: invalid OSS volume '' [ 291.390727][ T5711] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 291.560242][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 291.560279][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 291.594802][ T5711] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 291.594834][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.594856][ T5711] usb 3-1: Product: syz [ 291.594870][ T5711] usb 3-1: Manufacturer: syz [ 291.594885][ T5711] usb 3-1: SerialNumber: syz [ 291.646318][ T5711] usb 3-1: config 0 descriptor?? [ 291.773250][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.773884][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.796115][ T8501] bridge_slave_0: entered allmulticast mode [ 291.811725][ T8501] bridge_slave_0: entered promiscuous mode [ 291.875940][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.876201][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.876426][ T8501] bridge_slave_1: entered allmulticast mode [ 291.890847][ T61] Bluetooth: hci2: command tx timeout [ 291.894092][ T8501] bridge_slave_1: entered promiscuous mode [ 292.119261][ T8587] snd-usb-audio 3-1:0.0: Runtime PM usage count underflow! [ 292.157621][ T5711] usb 3-1: USB disconnect, device number 48 [ 292.523974][ T8501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.657088][ T8501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.781900][ T5802] usb 2-1: USB disconnect, device number 50 [ 292.894099][ T5847] hsr_slave_0: left promiscuous mode [ 292.935789][ T5847] hsr_slave_1: left promiscuous mode [ 292.953112][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.953142][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.993641][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 293.035144][ T5847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.035173][ T5847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.220317][ T5847] veth1_macvtap: left promiscuous mode [ 293.230195][ T5847] veth0_macvtap: left promiscuous mode [ 293.231012][ T5847] veth1_vlan: left promiscuous mode [ 293.249378][ T5847] veth0_vlan: left promiscuous mode [ 293.341283][ T5711] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 293.508329][ T5711] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 293.508365][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.508385][ T5711] usb 2-1: Product: syz [ 293.508400][ T5711] usb 2-1: Manufacturer: syz [ 293.508415][ T5711] usb 2-1: SerialNumber: syz [ 293.534023][ T5711] usb 2-1: config 0 descriptor?? [ 293.558786][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 293.589109][ T8632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.774'. [ 293.681036][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 293.840531][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 293.844778][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.844814][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.844837][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 293.844877][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 293.844898][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.920325][ T9] usb 3-1: config 0 descriptor?? [ 293.961034][ T61] Bluetooth: hci2: command tx timeout [ 294.418741][ T9] hid_parser_main: 73 callbacks suppressed [ 294.418768][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418797][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418823][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418848][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418873][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418897][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418922][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418947][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418972][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.418995][ T9] microsoft 0003:045E:07DA.000C: unknown main item tag 0x0 [ 294.537442][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000C/input/input54 [ 294.713292][ T9] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 295.202544][ T5847] team0 (unregistering): Port device team_slave_1 removed [ 295.263947][ T5711] gspca_sunplus: reg_r err -71 [ 295.264051][ T5711] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 295.264196][ T5847] team0 (unregistering): Port device team_slave_0 removed [ 295.300139][ T5711] usb 2-1: USB disconnect, device number 51 [ 295.621739][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 295.627098][ T5269] 8021q: adding VLAN 0 to HW filter on device eth2 [ 295.639089][ T9] usb 3-1: USB disconnect, device number 49 [ 295.667465][ T8501] team0: Port device team_slave_0 added [ 295.691154][ T8501] team0: Port device team_slave_1 added [ 295.767177][ T8639] FAULT_INJECTION: forcing a failure. [ 295.767177][ T8639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 295.767218][ T8639] CPU: 1 UID: 0 PID: 8639 Comm: syz.0.775 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 295.767255][ T8639] Tainted: [L]=SOFTLOCKUP [ 295.767262][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 295.767275][ T8639] Call Trace: [ 295.767283][ T8639] [ 295.767292][ T8639] dump_stack_lvl+0xe8/0x150 [ 295.767322][ T8639] should_fail_ex+0x467/0x600 [ 295.767358][ T8639] _copy_from_user+0x2d/0xb0 [ 295.767384][ T8639] snd_seq_oss_write+0x6e2/0x950 [ 295.767423][ T8639] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 295.767449][ T8639] ? apparmor_file_permission+0x1f4/0x300 [ 295.767478][ T8639] ? security_file_permission+0x75/0x260 [ 295.767508][ T8639] odev_write+0x5d/0x80 [ 295.767538][ T8639] ? __pfx_odev_write+0x10/0x10 [ 295.767567][ T8639] vfs_write+0x29f/0xbb0 [ 295.767602][ T8639] ? __pfx_vfs_write+0x10/0x10 [ 295.767630][ T8639] ? __fget_files+0x2a/0x420 [ 295.767655][ T8639] ? __fget_files+0x2a/0x420 [ 295.767681][ T8639] ? __fget_files+0x3a8/0x420 [ 295.767701][ T8639] ? __fget_files+0x2a/0x420 [ 295.767731][ T8639] ksys_write+0x156/0x270 [ 295.767759][ T8639] ? __pfx_ksys_write+0x10/0x10 [ 295.767793][ T8639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.767817][ T8639] do_syscall_64+0x174/0x580 [ 295.767842][ T8639] ? trace_irq_disable+0x3b/0x140 [ 295.767869][ T8639] ? clear_bhb_loop+0x40/0x90 [ 295.767894][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.767915][ T8639] RIP: 0033:0x7f3175c9ce59 [ 295.767934][ T8639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.767952][ T8639] RSP: 002b:00007f3173ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 295.767977][ T8639] RAX: ffffffffffffffda RBX: 00007f3175f15fa0 RCX: 00007f3175c9ce59 [ 295.767992][ T8639] RDX: 0000000000000233 RSI: 0000200000000080 RDI: 0000000000000003 [ 295.768005][ T8639] RBP: 00007f3173ef6090 R08: 0000000000000000 R09: 0000000000000000 [ 295.768019][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.768031][ T8639] R13: 00007f3175f16038 R14: 00007f3175f15fa0 R15: 00007ffec4d04cd8 [ 295.768063][ T8639] [ 296.148465][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.148478][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.148493][ T8501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.224209][ T8501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.224222][ T8501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.224502][ T8501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.675552][ T8501] hsr_slave_0: entered promiscuous mode [ 296.686862][ T8501] hsr_slave_1: entered promiscuous mode [ 296.693248][ T8501] debugfs: 'hsr0' already exists in 'hsr' [ 296.693275][ T8501] Cannot create hsr debugfs directory [ 298.140156][ T5684] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 298.261925][ T5269] 8021q: adding VLAN 0 to HW filter on device eth3 [ 298.281068][ T5684] usb 1-1: device descriptor read/64, error -71 [ 298.543336][ T5684] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 298.671734][ T5684] usb 1-1: device descriptor read/64, error -71 [ 298.796051][ T5684] usb usb1-port1: attempt power cycle [ 299.153699][ T5684] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 299.166563][ T8710] FAULT_INJECTION: forcing a failure. [ 299.166563][ T8710] name failslab, interval 1, probability 0, space 0, times 0 [ 299.166612][ T8710] CPU: 1 UID: 0 PID: 8710 Comm: syz.1.793 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 299.166639][ T8710] Tainted: [L]=SOFTLOCKUP [ 299.166645][ T8710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.166656][ T8710] Call Trace: [ 299.166663][ T8710] [ 299.166671][ T8710] dump_stack_lvl+0xe8/0x150 [ 299.166698][ T8710] should_fail_ex+0x467/0x600 [ 299.166731][ T8710] should_failslab+0xa8/0x100 [ 299.166755][ T8710] __kvmalloc_node_noprof+0x17a/0x8a0 [ 299.166779][ T8710] ? simple_xattr_alloc+0x5e/0x100 [ 299.166801][ T8710] ? simple_xattr_alloc+0x5e/0x100 [ 299.166831][ T8710] simple_xattr_alloc+0x5e/0x100 [ 299.166857][ T8710] simple_xattr_set+0x69/0x2820 [ 299.166886][ T8710] ? do_raw_spin_unlock+0xf5/0x210 [ 299.166913][ T8710] shmem_xattr_handler_set+0x1a7/0x2e0 [ 299.166940][ T8710] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 299.166962][ T8710] __vfs_setxattr+0x442/0x480 [ 299.166995][ T8710] __vfs_setxattr_noperm+0x12a/0x660 [ 299.167023][ T8710] vfs_setxattr+0x163/0x360 [ 299.167049][ T8710] ? __pfx_vfs_setxattr+0x10/0x10 [ 299.167068][ T8710] ? mnt_get_write_access+0x66/0x2d0 [ 299.167101][ T8710] ovl_check_setxattr+0x15a/0x320 [ 299.167131][ T8710] ovl_set_origin_fh+0x6c/0xb0 [ 299.167153][ T8710] ovl_lookup+0xbc6/0x1c90 [ 299.167216][ T8710] ? __pfx_ovl_lookup+0x10/0x10 [ 299.167242][ T8710] ? rt_spin_unlock+0x157/0x200 [ 299.167266][ T8710] ? rt_spin_unlock+0x163/0x200 [ 299.167287][ T8710] ? d_alloc+0x144/0x190 [ 299.167311][ T8710] lookup_one_qstr_excl+0x12d/0x360 [ 299.167334][ T8710] ? lock_two_directories+0x1cc/0x220 [ 299.167358][ T8710] __start_renaming+0x185/0x410 [ 299.167390][ T8710] filename_renameat2+0x3a0/0x9b0 [ 299.167407][ T8710] ? __might_fault+0xaf/0x130 [ 299.167439][ T8710] ? __pfx_filename_renameat2+0x10/0x10 [ 299.167475][ T8710] ? do_getname+0x151/0x250 [ 299.167505][ T8710] __se_sys_renameat2+0x5a/0x2c0 [ 299.167523][ T8710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.167543][ T8710] do_syscall_64+0x174/0x580 [ 299.167565][ T8710] ? trace_irq_disable+0x3b/0x140 [ 299.167594][ T8710] ? clear_bhb_loop+0x40/0x90 [ 299.167618][ T8710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.167636][ T8710] RIP: 0033:0x7f64f509ce59 [ 299.167654][ T8710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.167669][ T8710] RSP: 002b:00007f64f32ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 299.167691][ T8710] RAX: ffffffffffffffda RBX: 00007f64f5315fa0 RCX: 00007f64f509ce59 [ 299.167704][ T8710] RDX: ffffffffffffff9c RSI: 0000200000000780 RDI: ffffffffffffff9c [ 299.167717][ T8710] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 299.167728][ T8710] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 299.167740][ T8710] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 299.167772][ T8710] [ 299.171307][ T5684] usb 1-1: device descriptor read/8, error -71 [ 299.421947][ T5684] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 299.442318][ T5684] usb 1-1: device descriptor read/8, error -71 [ 299.528757][ T61] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 299.557225][ T5684] usb usb1-port1: unable to enumerate USB device [ 299.777582][ T8708] bpf: Bad value for 'mode' [ 299.780554][ T5802] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 299.945071][ T5802] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 299.945130][ T5802] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.946888][ T5802] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 299.946917][ T5802] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 299.946938][ T5802] usb 2-1: Manufacturer: syz [ 299.946953][ T5802] usb 2-1: SerialNumber: syz [ 300.010489][ T7385] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 300.170578][ T7385] usb 3-1: Using ep0 maxpacket: 16 [ 300.190796][ T7385] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 300.190827][ T7385] usb 3-1: config 1 has no interface number 0 [ 300.190942][ T7385] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 300.190968][ T7385] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 300.190992][ T7385] usb 3-1: config 1 interface 105 has no altsetting 0 [ 300.262715][ T7385] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 300.262748][ T7385] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 300.262770][ T7385] usb 3-1: Product: syz [ 300.262784][ T7385] usb 3-1: Manufacturer: syz [ 300.262799][ T7385] usb 3-1: SerialNumber: syz [ 300.269419][ T8708] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 300.269648][ T8708] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 300.333739][ T5802] usbhid 2-1:36.0: couldn't find an input interrupt endpoint [ 300.366861][ T5802] usb 2-1: USB disconnect, device number 52 [ 300.474729][ T8708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.494249][ T8708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.513633][ T7385] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 300.545882][ T7385] usb 3-1: USB disconnect, device number 50 [ 301.275788][ T8745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.797'. [ 301.874285][ T8763] netlink: 20 bytes leftover after parsing attributes in process `syz.0.802'. [ 301.899358][ T8763] netlink: 'syz.0.802': attribute type 21 has an invalid length. [ 301.899381][ T8763] netlink: 'syz.0.802': attribute type 22 has an invalid length. [ 301.899395][ T8763] netlink: 'syz.0.802': attribute type 23 has an invalid length. [ 301.899407][ T8763] netlink: 'syz.0.802': attribute type 25 has an invalid length. [ 301.899419][ T8763] netlink: 'syz.0.802': attribute type 26 has an invalid length. [ 301.899431][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz.0.802'. [ 302.274920][ T8774] netlink: 'syz.1.804': attribute type 12 has an invalid length. [ 302.481148][ T5684] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 302.582539][ T8501] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 302.632243][ T5684] usb 1-1: Using ep0 maxpacket: 16 [ 302.642737][ T5684] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.645285][ T5684] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 302.645310][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.645328][ T5684] usb 1-1: Product: syz [ 302.645341][ T5684] usb 1-1: Manufacturer: syz [ 302.645354][ T5684] usb 1-1: SerialNumber: syz [ 302.654290][ T5684] usb 1-1: config 0 descriptor?? [ 302.709782][ T5684] hub 1-1:0.0: bad descriptor, ignoring hub [ 302.709841][ T5684] hub 1-1:0.0: probe with driver hub failed with error -5 [ 302.746130][ T5684] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 302.773330][ T5802] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 302.831318][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 302.834580][ T8501] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 302.836314][ T5847] usb 1-1: Failed to submit usb control message: -71 [ 302.836351][ T5847] usb 1-1: unable to send the bmi data to the device: -71 [ 302.836369][ T5847] usb 1-1: unable to get target info from device [ 302.836384][ T5847] usb 1-1: could not get target info (-71) [ 302.836401][ T5847] usb 1-1: could not probe fw (-71) [ 302.928995][ T5684] usb 1-1: USB disconnect, device number 66 [ 302.939723][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 302.942100][ T8501] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 302.962484][ T5802] usb 3-1: Using ep0 maxpacket: 16 [ 302.964833][ T5802] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 302.964860][ T5802] usb 3-1: config 0 has no interface number 0 [ 302.964908][ T5802] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 302.964934][ T5802] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 302.967765][ T5802] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 302.967794][ T5802] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.967815][ T5802] usb 3-1: Product: syz [ 302.967830][ T5802] usb 3-1: Manufacturer: syz [ 302.967844][ T5802] usb 3-1: SerialNumber: syz [ 303.019236][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.072790][ T8501] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.081962][ T5802] usb 3-1: config 0 descriptor?? [ 303.083284][ T8786] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.083412][ T8786] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.239218][ T8501] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 303.442308][ T8785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.442431][ T8785] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 303.477494][ T5802] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 303.698680][ T8806] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 303.698924][ T8806] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 304.497261][ T5802] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 304.497283][ T5802] asix 3-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 304.497459][ T5802] asix 3-1:0.34: probe with driver asix failed with error -71 [ 304.546858][ T5802] usb 3-1: USB disconnect, device number 51 [ 304.911447][ T8501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.974797][ T8836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.810'. [ 305.179138][ T8501] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.214962][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.221167][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.392428][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.392640][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.706210][ T8854] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 306.094969][ T5711] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 306.266090][ T5711] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 306.266125][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.266146][ T5711] usb 1-1: Product: syz [ 306.266160][ T5711] usb 1-1: Manufacturer: syz [ 306.266174][ T5711] usb 1-1: SerialNumber: syz [ 306.286836][ T5711] usb 1-1: config 0 descriptor?? [ 306.294981][ T5711] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 306.809789][ T8501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.840537][ T7385] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 307.013833][ T7385] usb 2-1: Using ep0 maxpacket: 32 [ 307.023114][ T7385] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 307.023143][ T7385] usb 2-1: config 0 has no interface number 0 [ 307.023190][ T7385] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.023214][ T7385] usb 2-1: config 0 interface 89 has no altsetting 0 [ 307.062316][ T7385] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 307.062350][ T7385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.062370][ T7385] usb 2-1: Product: syz [ 307.062385][ T7385] usb 2-1: Manufacturer: syz [ 307.062400][ T7385] usb 2-1: SerialNumber: syz [ 307.076959][ T7385] usb 2-1: config 0 descriptor?? [ 307.107014][ T7385] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 307.107051][ T7385] em28xx 2-1:0.89: Video interface 89 found: [ 307.484070][ T8501] veth0_vlan: entered promiscuous mode [ 307.541411][ T8501] veth1_vlan: entered promiscuous mode [ 307.698534][ T7385] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 307.943486][ T8501] veth0_macvtap: entered promiscuous mode [ 308.034429][ T8501] veth1_macvtap: entered promiscuous mode [ 308.333535][ T5711] gspca_sunplus: reg_w_riv err -110 [ 308.333648][ T5711] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 308.390581][ T7385] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 308.390617][ T7385] em28xx 2-1:0.89: board has no eeprom [ 308.450779][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.542741][ T8501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.662508][ T5850] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.662560][ T5850] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.662598][ T5850] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.662651][ T5850] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.692819][ T7385] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 308.692849][ T7385] em28xx 2-1:0.89: analog set to bulk mode. [ 308.722500][ T9] em28xx 2-1:0.89: Registering V4L2 extension [ 308.796230][ T7385] usb 2-1: USB disconnect, device number 53 [ 308.834430][ T7385] em28xx 2-1:0.89: Disconnecting em28xx [ 308.889520][ T5711] usb 1-1: USB disconnect, device number 67 [ 308.965641][ T9] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 308.965666][ T9] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 308.965679][ T9] em28xx 2-1:0.89: No AC97 audio processor [ 309.112374][ T9] usb 2-1: Decoder not found [ 309.112394][ T9] em28xx 2-1:0.89: failed to create media graph [ 309.133192][ T9] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 309.389780][ T9] em28xx 2-1:0.89: Registering snapshot button... [ 309.447127][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input55 [ 309.821180][ T8907] loop9: detected capacity change from 0 to 255852544 [ 309.844264][ T8908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.828'. [ 309.844295][ T8908] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 310.136789][ T8909] FAULT_INJECTION: forcing a failure. [ 310.136789][ T8909] name failslab, interval 1, probability 0, space 0, times 0 [ 310.136828][ T8909] CPU: 1 UID: 0 PID: 8909 Comm: syz.2.829 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.136855][ T8909] Tainted: [L]=SOFTLOCKUP [ 310.136861][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.136871][ T8909] Call Trace: [ 310.136879][ T8909] [ 310.136888][ T8909] dump_stack_lvl+0xe8/0x150 [ 310.136917][ T8909] should_fail_ex+0x467/0x600 [ 310.136949][ T8909] should_failslab+0xa8/0x100 [ 310.136974][ T8909] kmem_cache_alloc_node_noprof+0xae/0x670 [ 310.136997][ T8909] ? __alloc_skb+0x1d7/0x7a0 [ 310.137019][ T8909] ? __alloc_skb+0x1d7/0x7a0 [ 310.137047][ T8909] __alloc_skb+0x1d7/0x7a0 [ 310.137072][ T8909] alloc_uevent_skb+0x7d/0x230 [ 310.137097][ T8909] kobject_uevent_net_broadcast+0x2fd/0x560 [ 310.137122][ T8909] kobject_uevent_env+0x569/0x9e0 [ 310.137151][ T8909] lo_ioctl+0x17d0/0x1fe0 [ 310.137187][ T8909] ? __kernel_text_address+0xd/0x30 [ 310.137214][ T8909] ? __pfx_lo_ioctl+0x10/0x10 [ 310.137240][ T8909] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 310.137262][ T8909] ? lock_acquire+0x106/0x350 [ 310.137300][ T8909] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 310.137327][ T8909] ? ktime_expiry_to_cycles+0x4e/0x1e0 [ 310.137350][ T8909] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 310.137378][ T8909] ? ktime_expiry_to_cycles+0x176/0x1e0 [ 310.137410][ T8909] ? clockevents_program_event+0x1a6/0x630 [ 310.137433][ T8909] ? __pfx_clockevents_program_event+0x10/0x10 [ 310.137468][ T8909] ? __lock_acquire+0x683/0x2ce0 [ 310.137503][ T8909] ? __lock_acquire+0x683/0x2ce0 [ 310.137537][ T8909] ? __schedule+0x171f/0x5530 [ 310.137570][ T8909] ? unwind_next_frame+0x8f/0x2550 [ 310.137607][ T8909] ? is_bpf_text_address+0x26/0x2b0 [ 310.137649][ T8909] ? is_bpf_text_address+0x26/0x2b0 [ 310.137683][ T8909] ? is_bpf_text_address+0x292/0x2b0 [ 310.137712][ T8909] ? is_bpf_text_address+0x26/0x2b0 [ 310.137744][ T8909] ? kernel_text_address+0xa5/0xe0 [ 310.137772][ T8909] ? __kernel_text_address+0xd/0x30 [ 310.137797][ T8909] ? unwind_get_return_address+0x4d/0x90 [ 310.137825][ T8909] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.137851][ T8909] ? arch_stack_walk+0xfb/0x150 [ 310.137893][ T8909] ? stack_trace_save+0xa9/0x100 [ 310.137918][ T8909] ? __pfx_stack_trace_save+0x10/0x10 [ 310.137940][ T8909] ? format_decode+0x83/0xda0 [ 310.137962][ T8909] ? stack_depot_save_flags+0x33/0x800 [ 310.137993][ T8909] ? __lock_acquire+0x683/0x2ce0 [ 310.138024][ T8909] ? kasan_save_track+0x4f/0x80 [ 310.138043][ T8909] ? kasan_save_track+0x3e/0x80 [ 310.138062][ T8909] ? kasan_save_free_info+0x40/0x50 [ 310.138087][ T8909] ? __kasan_slab_free+0x5c/0x80 [ 310.138105][ T8909] ? kfree+0x1c5/0x6c0 [ 310.138122][ T8909] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 310.138147][ T8909] ? security_file_ioctl+0xc3/0x2a0 [ 310.138169][ T8909] ? __se_sys_ioctl+0x47/0x170 [ 310.138194][ T8909] ? do_syscall_64+0x174/0x580 [ 310.138218][ T8909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.138245][ T8909] ? __asan_memset+0x22/0x50 [ 310.138275][ T8909] ? blk_get_meta_cap+0x19d/0x780 [ 310.138307][ T8909] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 310.138344][ T8909] ? blkdev_common_ioctl+0x14b7/0x3250 [ 310.138379][ T8909] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 310.138408][ T8909] ? kasan_quarantine_put+0xbb/0x1f0 [ 310.138446][ T8909] ? tomoyo_path_number_perm+0x219/0x5f0 [ 310.138474][ T8909] ? tomoyo_path_number_perm+0x219/0x5f0 [ 310.138504][ T8909] ? do_vfs_ioctl+0x1184/0x1550 [ 310.138536][ T8909] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 310.138577][ T8909] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 310.138602][ T8909] ? hook_file_ioctl+0x1f3/0x600 [ 310.138628][ T8909] ? lockdep_hardirqs_on+0x7a/0x110 [ 310.138671][ T8909] ? __pfx_lo_ioctl+0x10/0x10 [ 310.138704][ T8909] blkdev_ioctl+0x5e6/0x750 [ 310.138734][ T8909] ? __pfx_blkdev_ioctl+0x10/0x10 [ 310.138759][ T8909] ? __fget_files+0x2a/0x420 [ 310.138784][ T8909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 310.138808][ T8909] ? __pfx_blkdev_ioctl+0x10/0x10 [ 310.138833][ T8909] __se_sys_ioctl+0xff/0x170 [ 310.138857][ T8909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.138878][ T8909] do_syscall_64+0x174/0x580 [ 310.138897][ T8909] ? trace_irq_disable+0x3b/0x140 [ 310.138919][ T8909] ? clear_bhb_loop+0x40/0x90 [ 310.138943][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.138961][ T8909] RIP: 0033:0x7f1cc7aece59 [ 310.138981][ T8909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.138997][ T8909] RSP: 002b:00007f1cc5d1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.139021][ T8909] RAX: ffffffffffffffda RBX: 00007f1cc7d66090 RCX: 00007f1cc7aece59 [ 310.139036][ T8909] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000006 [ 310.139047][ T8909] RBP: 00007f1cc5d1d090 R08: 0000000000000000 R09: 0000000000000000 [ 310.139059][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.139072][ T8909] R13: 00007f1cc7d66128 R14: 00007f1cc7d66090 R15: 00007fff1c6fe3b8 [ 310.139104][ T8909] [ 310.336406][ T9] em28xx 2-1:0.89: Remote control support is not available for this card. [ 310.370951][ T7385] em28xx 2-1:0.89: Closing input extension [ 310.438873][ T7385] em28xx 2-1:0.89: Deregistering snapshot button [ 311.226517][ T8916] FAULT_INJECTION: forcing a failure. [ 311.226517][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 311.226555][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.1.832 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 311.226580][ T8916] Tainted: [L]=SOFTLOCKUP [ 311.226585][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 311.226595][ T8916] Call Trace: [ 311.226601][ T8916] [ 311.226608][ T8916] dump_stack_lvl+0xe8/0x150 [ 311.226634][ T8916] should_fail_ex+0x467/0x600 [ 311.226664][ T8916] should_failslab+0xa8/0x100 [ 311.226687][ T8916] kmem_cache_alloc_noprof+0xa4/0x650 [ 311.226705][ T8916] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 311.226724][ T8916] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 311.226751][ T8916] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 311.226783][ T8916] mmu_topup_memory_caches+0x21/0x170 [ 311.226809][ T8916] kvm_mmu_load+0x9d/0x22b0 [ 311.226836][ T8916] ? kvm_msr_allowed+0x3f4/0x490 [ 311.226856][ T8916] ? kvm_msr_allowed+0x9a/0x490 [ 311.226874][ T8916] ? kvm_msr_allowed+0x9a/0x490 [ 311.226899][ T8916] ? kvm_apic_has_interrupt+0x740/0x770 [ 311.226927][ T8916] vcpu_run+0x4c13/0x73e0 [ 311.226947][ T8916] ? __pfx_kvm_arch_vcpu_load+0x10/0x10 [ 311.227022][ T8916] ? __lock_acquire+0x683/0x2ce0 [ 311.227067][ T8916] ? __pfx_vcpu_run+0x10/0x10 [ 311.227085][ T8916] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 311.227106][ T8916] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 311.227138][ T8916] kvm_arch_vcpu_ioctl_run+0xe51/0x1960 [ 311.227161][ T8916] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x1960 [ 311.227190][ T8916] kvm_vcpu_ioctl+0xa64/0xfe0 [ 311.227218][ T8916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 311.227238][ T8916] ? hook_file_ioctl+0x1f3/0x600 [ 311.227259][ T8916] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.227297][ T8916] ? __fget_files+0x2a/0x420 [ 311.227318][ T8916] ? __fget_files+0x2a/0x420 [ 311.227334][ T8916] ? __fget_files+0x3a8/0x420 [ 311.227350][ T8916] ? __fget_files+0x2a/0x420 [ 311.227370][ T8916] ? bpf_lsm_file_ioctl+0x9/0x20 [ 311.227390][ T8916] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 311.227413][ T8916] __se_sys_ioctl+0xff/0x170 [ 311.227434][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.227453][ T8916] do_syscall_64+0x174/0x580 [ 311.227473][ T8916] ? trace_irq_disable+0x3b/0x140 [ 311.227495][ T8916] ? clear_bhb_loop+0x40/0x90 [ 311.227516][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.227534][ T8916] RIP: 0033:0x7f64f509ce59 [ 311.227552][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.227567][ T8916] RSP: 002b:00007f64f32ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 311.227586][ T8916] RAX: ffffffffffffffda RBX: 00007f64f5315fa0 RCX: 00007f64f509ce59 [ 311.227599][ T8916] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 311.227609][ T8916] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 311.227618][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.227627][ T8916] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 311.227655][ T8916] [ 311.954210][ T7505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.954234][ T7505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.230601][ T37] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 312.230865][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 312.361606][ T37] usb 1-1: device descriptor read/64, error -32 [ 312.621227][ T37] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 312.621774][ T7505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.621791][ T7505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.786441][ T7385] em28xx 2-1:0.89: Freeing device [ 312.844536][ T37] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 312.846235][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 312.846274][ T37] usb 1-1: can't read configurations, error -61 [ 312.913703][ T37] usb usb1-port1: attempt power cycle [ 313.151654][ T7385] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 313.305153][ T7385] usb 2-1: Using ep0 maxpacket: 16 [ 313.310305][ T7385] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 313.310790][ T7385] usb 2-1: config 0 has no interface number 0 [ 313.310839][ T7385] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 313.310861][ T7385] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 313.320567][ T37] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 313.342208][ T37] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 313.344869][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 313.344907][ T37] usb 1-1: can't read configurations, error -61 [ 313.394638][ T7385] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 313.394663][ T7385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.394674][ T7385] usb 2-1: Product: syz [ 313.394682][ T7385] usb 2-1: Manufacturer: syz [ 313.394690][ T7385] usb 2-1: SerialNumber: syz [ 313.447417][ T7385] usb 2-1: config 0 descriptor?? [ 313.448421][ T8944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.448558][ T8944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.491086][ T37] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 313.516698][ T37] usb 1-1: too many configurations: 228, using maximum allowed: 8 [ 313.534409][ T37] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 313.534451][ T37] usb 1-1: can't read configurations, error -61 [ 313.534866][ T37] usb usb1-port1: unable to enumerate USB device [ 313.658474][ T8944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.658678][ T8944] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 313.872986][ T7385] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 314.227689][ T8971] FAULT_INJECTION: forcing a failure. [ 314.227689][ T8971] name failslab, interval 1, probability 0, space 0, times 0 [ 314.227716][ T8971] CPU: 1 UID: 0 PID: 8971 Comm: syz.2.848 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.227743][ T8971] Tainted: [L]=SOFTLOCKUP [ 314.227751][ T8971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.227762][ T8971] Call Trace: [ 314.227770][ T8971] [ 314.227779][ T8971] dump_stack_lvl+0xe8/0x150 [ 314.227808][ T8971] should_fail_ex+0x467/0x600 [ 314.227843][ T8971] should_failslab+0xa8/0x100 [ 314.227870][ T8971] __kmalloc_noprof+0xfe/0x780 [ 314.227893][ T8971] ? tomoyo_encode+0x2ad/0x570 [ 314.227921][ T8971] ? tomoyo_encode+0x2ad/0x570 [ 314.227954][ T8971] tomoyo_encode+0x2ad/0x570 [ 314.227989][ T8971] tomoyo_realpath_from_path+0x5fa/0x640 [ 314.228030][ T8971] ? tomoyo_path_number_perm+0x219/0x5f0 [ 314.228050][ T8971] tomoyo_path_number_perm+0x246/0x5f0 [ 314.228078][ T8971] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.228103][ T8971] ? __lock_acquire+0x683/0x2ce0 [ 314.228143][ T8971] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.228166][ T8971] ? hook_file_ioctl+0x1f3/0x600 [ 314.228182][ T8971] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.228207][ T8971] ? __fget_files+0x2a/0x420 [ 314.228228][ T8971] ? __fget_files+0x2a/0x420 [ 314.228249][ T8971] ? __fget_files+0x3a8/0x420 [ 314.228268][ T8971] ? __fget_files+0x2a/0x420 [ 314.228293][ T8971] security_file_ioctl+0xc3/0x2a0 [ 314.228319][ T8971] __se_sys_ioctl+0x47/0x170 [ 314.228342][ T8971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.228355][ T8971] do_syscall_64+0x174/0x580 [ 314.228368][ T8971] ? trace_irq_disable+0x3b/0x140 [ 314.228386][ T8971] ? clear_bhb_loop+0x40/0x90 [ 314.228410][ T8971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.228430][ T8971] RIP: 0033:0x7f1cc7aece59 [ 314.228458][ T8971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.228474][ T8971] RSP: 002b:00007f1cc5d3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.228496][ T8971] RAX: ffffffffffffffda RBX: 00007f1cc7d65fa0 RCX: 00007f1cc7aece59 [ 314.228509][ T8971] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 314.228516][ T8971] RBP: 00007f1cc5d3e090 R08: 0000000000000000 R09: 0000000000000000 [ 314.228523][ T8971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.228529][ T8971] R13: 00007f1cc7d66038 R14: 00007f1cc7d65fa0 R15: 00007fff1c6fe3b8 [ 314.228551][ T8971] [ 314.270264][ T8971] ERROR: Out of memory at tomoyo_realpath_from_path. [ 314.869593][ T8981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 314.879754][ T8981] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 315.505887][ T8990] netlink: 20 bytes leftover after parsing attributes in process `syz.0.855'. [ 315.523182][ T7385] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 315.523212][ T7385] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 315.523492][ T7385] asix 2-1:0.34: probe with driver asix failed with error -71 [ 315.530292][ T7385] usb 2-1: USB disconnect, device number 54 [ 315.799524][ T9000] FAULT_INJECTION: forcing a failure. [ 315.799524][ T9000] name failslab, interval 1, probability 0, space 0, times 0 [ 315.799561][ T9000] CPU: 0 UID: 0 PID: 9000 Comm: syz.1.858 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 315.799588][ T9000] Tainted: [L]=SOFTLOCKUP [ 315.799595][ T9000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 315.799607][ T9000] Call Trace: [ 315.799614][ T9000] [ 315.799623][ T9000] dump_stack_lvl+0xe8/0x150 [ 315.799652][ T9000] should_fail_ex+0x467/0x600 [ 315.799688][ T9000] should_failslab+0xa8/0x100 [ 315.799713][ T9000] __kmalloc_noprof+0xfe/0x780 [ 315.799733][ T9000] ? rcu_is_watching+0x15/0xb0 [ 315.799767][ T9000] ? tomoyo_realpath_from_path+0xef/0x640 [ 315.799794][ T9000] ? tomoyo_realpath_from_path+0xef/0x640 [ 315.799831][ T9000] tomoyo_realpath_from_path+0xef/0x640 [ 315.799872][ T9000] ? tomoyo_path_number_perm+0x219/0x5f0 [ 315.799899][ T9000] tomoyo_path_number_perm+0x246/0x5f0 [ 315.799927][ T9000] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 315.799962][ T9000] ? __lock_acquire+0x683/0x2ce0 [ 315.800006][ T9000] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 315.800030][ T9000] ? hook_file_ioctl+0x1f3/0x600 [ 315.800057][ T9000] ? lockdep_hardirqs_on+0x7a/0x110 [ 315.800102][ T9000] ? __fget_files+0x2a/0x420 [ 315.800128][ T9000] ? __fget_files+0x2a/0x420 [ 315.800148][ T9000] ? __fget_files+0x3a8/0x420 [ 315.800169][ T9000] ? __fget_files+0x2a/0x420 [ 315.800194][ T9000] security_file_ioctl+0xc3/0x2a0 [ 315.800220][ T9000] __se_sys_ioctl+0x47/0x170 [ 315.800247][ T9000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.800269][ T9000] do_syscall_64+0x174/0x580 [ 315.800294][ T9000] ? trace_irq_disable+0x3b/0x140 [ 315.800319][ T9000] ? clear_bhb_loop+0x40/0x90 [ 315.800342][ T9000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.800361][ T9000] RIP: 0033:0x7f64f509ce59 [ 315.800380][ T9000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.800397][ T9000] RSP: 002b:00007f64f32ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 315.800418][ T9000] RAX: ffffffffffffffda RBX: 00007f64f5315fa0 RCX: 00007f64f509ce59 [ 315.800433][ T9000] RDX: 00002000000002c0 RSI: 0000000000004605 RDI: 0000000000000004 [ 315.800446][ T9000] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 315.800458][ T9000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.800469][ T9000] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 315.800501][ T9000] [ 315.874624][ T9000] ERROR: Out of memory at tomoyo_realpath_from_path. [ 317.057766][ T9036] FAULT_FLAG_ALLOW_RETRY missing 801 [ 317.057795][ T9036] CPU: 0 UID: 0 PID: 9036 Comm: syz.3.871 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 317.057824][ T9036] Tainted: [L]=SOFTLOCKUP [ 317.057831][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.057844][ T9036] Call Trace: [ 317.057852][ T9036] [ 317.057862][ T9036] dump_stack_lvl+0xe8/0x150 [ 317.057894][ T9036] handle_userfault+0x155b/0x1800 [ 317.057938][ T9036] ? __pfx___folio_put+0x10/0x10 [ 317.057965][ T9036] ? __pfx_handle_userfault+0x10/0x10 [ 317.057999][ T9036] ? do_pte_missing+0x26ce/0x28f0 [ 317.058040][ T9036] handle_mm_fault+0xe0b/0x1520 [ 317.058070][ T9036] ? handle_mm_fault+0xe9/0x1520 [ 317.058095][ T9036] ? __pfx_handle_mm_fault+0x10/0x10 [ 317.058118][ T9036] ? follow_page_pte+0xaf1/0xe80 [ 317.058150][ T9036] ? __pfx_follow_page_pte+0x10/0x10 [ 317.058188][ T9036] __get_user_pages+0x166b/0x2590 [ 317.058256][ T9036] populate_vma_page_range+0x2be/0x3c0 [ 317.058292][ T9036] ? __pfx_populate_vma_page_range+0x10/0x10 [ 317.058324][ T9036] ? vma_wants_writenotify+0xb2/0x340 [ 317.058358][ T9036] ? vma_set_page_prot+0xc3/0x100 [ 317.058394][ T9036] mprotect_fixup+0x9a3/0xb10 [ 317.058437][ T9036] ? __pfx_mprotect_fixup+0x10/0x10 [ 317.058463][ T9036] ? mas_next_slot+0xc94/0xd70 [ 317.058508][ T9036] ? apparmor_file_mprotect+0x1d0/0x400 [ 317.058531][ T9036] ? security_file_mprotect+0x1a/0x290 [ 317.058566][ T9036] do_mprotect_pkey+0x9d3/0xcd0 [ 317.058608][ T9036] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 317.058667][ T9036] ? rcu_is_watching+0x15/0xb0 [ 317.058706][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.058731][ T9036] __x64_sys_mprotect+0x80/0x90 [ 317.058760][ T9036] do_syscall_64+0x174/0x580 [ 317.058786][ T9036] ? trace_irq_disable+0x3b/0x140 [ 317.058814][ T9036] ? clear_bhb_loop+0x40/0x90 [ 317.058841][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.058862][ T9036] RIP: 0033:0x7f764c5cce59 [ 317.058882][ T9036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.058901][ T9036] RSP: 002b:00007f764a81e028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 317.058924][ T9036] RAX: ffffffffffffffda RBX: 00007f764c845fa0 RCX: 00007f764c5cce59 [ 317.058940][ T9036] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 317.058954][ T9036] RBP: 00007f764c662e6f R08: 0000000000000000 R09: 0000000000000000 [ 317.058968][ T9036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.058980][ T9036] R13: 00007f764c846038 R14: 00007f764c845fa0 R15: 00007ffd89bf9068 [ 317.059015][ T9036] [ 317.152410][ T5684] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 317.243379][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.243472][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.312693][ T5684] usb 2-1: Using ep0 maxpacket: 8 [ 317.315217][ T5684] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.315239][ T5684] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.315284][ T5684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 317.315310][ T5684] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 317.315348][ T5684] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.315369][ T5684] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.374525][ T5684] hub 2-1:1.0: bad descriptor, ignoring hub [ 317.374562][ T5684] hub 2-1:1.0: probe with driver hub failed with error -5 [ 317.380795][ T5684] cdc_wdm 2-1:1.0: skipping garbage [ 317.380814][ T5684] cdc_wdm 2-1:1.0: skipping garbage [ 317.448094][ T5684] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 317.448120][ T5684] cdc_wdm 2-1:1.0: Unknown control protocol [ 317.598089][ T9045] tipc: Started in network mode [ 317.598109][ T9045] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 317.598292][ T9045] FAULT_INJECTION: forcing a failure. [ 317.598292][ T9045] name failslab, interval 1, probability 0, space 0, times 0 [ 317.598312][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.3.875 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 317.598329][ T9045] Tainted: [L]=SOFTLOCKUP [ 317.598333][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.598340][ T9045] Call Trace: [ 317.598344][ T9045] [ 317.598350][ T9045] dump_stack_lvl+0xe8/0x150 [ 317.598367][ T9045] should_fail_ex+0x467/0x600 [ 317.598389][ T9045] should_failslab+0xa8/0x100 [ 317.598412][ T9045] __kmalloc_noprof+0xfe/0x780 [ 317.598424][ T9045] ? trace_kmem_cache_alloc+0x29/0xe0 [ 317.598435][ T9045] ? security_sk_alloc+0x52/0x360 [ 317.598447][ T9045] ? security_sk_alloc+0x52/0x360 [ 317.598462][ T9045] security_sk_alloc+0x52/0x360 [ 317.598476][ T9045] sk_prot_alloc+0x101/0x210 [ 317.598493][ T9045] sk_alloc+0x3a/0x390 [ 317.598509][ T9045] inet6_create+0x81a/0x1280 [ 317.598522][ T9045] ? inet6_create+0x80/0x1280 [ 317.598536][ T9045] __sock_create+0x4e8/0x960 [ 317.598553][ T9045] udp_sock_create6+0xd2/0x650 [ 317.598572][ T9045] ? __pfx_udp_sock_create6+0x10/0x10 [ 317.598590][ T9045] ? __ipv6_chk_addr_and_flags+0x691/0x7e0 [ 317.598606][ T9045] ? __ipv6_chk_addr_and_flags+0x184/0x7e0 [ 317.598629][ T9045] tipc_udp_enable+0x928/0xc20 [ 317.598649][ T9045] ? __pfx_tipc_udp_enable+0x10/0x10 [ 317.598663][ T9045] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 317.598709][ T9045] ? __kmalloc_cache_noprof+0x3d2/0x6b0 [ 317.598721][ T9045] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 317.598734][ T9045] ? __tipc_nl_bearer_enable+0xb6b/0x1480 [ 317.598752][ T9045] __tipc_nl_bearer_enable+0xcd9/0x1480 [ 317.598771][ T9045] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 317.598801][ T9045] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 317.598816][ T9045] ? lockdep_hardirqs_on+0x7a/0x110 [ 317.598829][ T9045] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 317.598843][ T9045] ? mutex_lock_nested+0x152/0x1d0 [ 317.598858][ T9045] ? tipc_nl_bearer_enable+0x17/0x40 [ 317.598874][ T9045] tipc_nl_bearer_enable+0x22/0x40 [ 317.598888][ T9045] genl_family_rcv_msg_doit+0x233/0x340 [ 317.598907][ T9045] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 317.598932][ T9045] ? bpf_lsm_capable+0x9/0x20 [ 317.598946][ T9045] ? security_capable+0x7e/0x2c0 [ 317.598965][ T9045] genl_rcv_msg+0x614/0x7a0 [ 317.598981][ T9045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.598992][ T9045] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 317.599009][ T9045] ? do_raw_spin_unlock+0xf5/0x210 [ 317.599028][ T9045] netlink_rcv_skb+0x226/0x4a0 [ 317.599044][ T9045] ? __pfx_genl_rcv_msg+0x10/0x10 [ 317.599056][ T9045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.599084][ T9045] genl_rcv+0x28/0x40 [ 317.599094][ T9045] netlink_unicast+0x7f5/0x990 [ 317.599115][ T9045] netlink_sendmsg+0x813/0xb40 [ 317.599136][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.599153][ T9045] ? aa_sock_msg_perm+0x122/0x200 [ 317.599173][ T9045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.599187][ T9045] sock_sendmsg_nosec+0x13a/0x180 [ 317.599201][ T9045] ____sys_sendmsg+0x565/0x870 [ 317.599216][ T9045] ? __might_fault+0xaf/0x130 [ 317.599232][ T9045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.599252][ T9045] ? import_iovec+0x73/0xa0 [ 317.599268][ T9045] ___sys_sendmsg+0x2a5/0x360 [ 317.599282][ T9045] ? __lock_acquire+0x683/0x2ce0 [ 317.599300][ T9045] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.599336][ T9045] ? __fget_files+0x2a/0x420 [ 317.599348][ T9045] ? __fget_files+0x3a8/0x420 [ 317.599366][ T9045] __x64_sys_sendmsg+0x1b7/0x290 [ 317.599383][ T9045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.599415][ T9045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.599427][ T9045] do_syscall_64+0x174/0x580 [ 317.599441][ T9045] ? trace_irq_disable+0x3b/0x140 [ 317.599456][ T9045] ? clear_bhb_loop+0x40/0x90 [ 317.599470][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.599481][ T9045] RIP: 0033:0x7f764c5cce59 [ 317.599493][ T9045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.599503][ T9045] RSP: 002b:00007f764a81e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.599518][ T9045] RAX: ffffffffffffffda RBX: 00007f764c845fa0 RCX: 00007f764c5cce59 [ 317.599526][ T9045] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 317.599534][ T9045] RBP: 00007f764a81e090 R08: 0000000000000000 R09: 0000000000000000 [ 317.599541][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 317.599548][ T9045] R13: 00007f764c846038 R14: 00007f764c845fa0 R15: 00007ffd89bf9068 [ 317.599567][ T9045] [ 317.618384][ T9045] tipc: Enabling of bearer rejected, failed to enable media [ 318.007516][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.008152][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.342956][ T9057] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 318.367270][ T37] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 318.379411][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.379530][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.379742][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.379754][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.379959][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.379971][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.380277][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.380289][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.380525][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.380544][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.380764][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.380781][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.380998][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.381014][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.381365][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.381390][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.381655][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.381671][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.381890][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 318.381906][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 318.382494][ T5712] usb 2-1: USB disconnect, device number 55 [ 318.382567][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 318.518350][ T37] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 318.518382][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.518471][ T37] usb 1-1: Product: syz [ 318.518484][ T37] usb 1-1: Manufacturer: syz [ 318.518496][ T37] usb 1-1: SerialNumber: syz [ 318.564663][ T37] usb 1-1: config 0 descriptor?? [ 318.937898][ T37] usb 1-1: Firmware version (0.0) predates our first public release. [ 318.937921][ T37] usb 1-1: Please update to version 0.2 or newer [ 319.035218][ T37] usb 1-1: USB disconnect, device number 72 [ 319.407302][ T9073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.407939][ T9073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.683531][ T7385] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 319.876811][ T7385] usb 4-1: Using ep0 maxpacket: 32 [ 319.886910][ T7385] usb 4-1: unable to get BOS descriptor or descriptor too short [ 319.914119][ T7385] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 319.914153][ T7385] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.914174][ T7385] usb 4-1: Product: syz [ 319.914188][ T7385] usb 4-1: Manufacturer: syz [ 319.914203][ T7385] usb 4-1: SerialNumber: syz [ 320.177804][ T7385] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 320.202187][ T7385] usb 4-1: unit 37 not found! [ 320.202211][ T7385] usb 4-1: unit 0 not found! [ 320.337294][ T7385] usb 4-1: USB disconnect, device number 46 [ 320.570798][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.690968][ T9106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 320.691008][ T9106] netlink: 128 bytes leftover after parsing attributes in process `syz.0.893'. [ 320.692071][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.893'. [ 320.692121][ T9107] netlink: 128 bytes leftover after parsing attributes in process `syz.0.893'. [ 321.587739][ T9139] FAULT_INJECTION: forcing a failure. [ 321.587739][ T9139] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 321.587779][ T9139] CPU: 1 UID: 0 PID: 9139 Comm: syz.1.903 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.587808][ T9139] Tainted: [L]=SOFTLOCKUP [ 321.587814][ T9139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.587824][ T9139] Call Trace: [ 321.587831][ T9139] [ 321.587840][ T9139] dump_stack_lvl+0xe8/0x150 [ 321.587869][ T9139] should_fail_ex+0x467/0x600 [ 321.587892][ T9139] prepare_alloc_pages+0x223/0x690 [ 321.587913][ T9139] __alloc_frozen_pages_noprof+0x12f/0x380 [ 321.587929][ T9139] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 321.587945][ T9139] ? __pfx_policy_nodemask+0x10/0x10 [ 321.587960][ T9139] ? __lock_acquire+0x683/0x2ce0 [ 321.587978][ T9139] alloc_pages_mpol+0xce/0x280 [ 321.588000][ T9139] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 321.588015][ T9139] vma_alloc_folio_noprof+0xe1/0x1e0 [ 321.588031][ T9139] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 321.588046][ T9139] ? __pte_offset_map+0x29/0x200 [ 321.588067][ T9139] do_pte_missing+0x835/0x28f0 [ 321.588086][ T9139] ? handle_mm_fault+0xe9/0x1520 [ 321.588099][ T9139] handle_mm_fault+0xe0b/0x1520 [ 321.588115][ T9139] ? handle_mm_fault+0xe9/0x1520 [ 321.588127][ T9139] ? __pfx_handle_mm_fault+0x10/0x10 [ 321.588147][ T9139] ? __lock_acquire+0x683/0x2ce0 [ 321.588164][ T9139] ? lock_mm_and_find_vma+0xa7/0x340 [ 321.588179][ T9139] do_user_addr_fault+0x744/0x1340 [ 321.588203][ T9139] exc_page_fault+0x6a/0xc0 [ 321.588218][ T9139] asm_exc_page_fault+0x26/0x30 [ 321.588229][ T9139] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 321.588241][ T9139] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 321.588251][ T9139] RSP: 0018:ffffc9000490f8f8 EFLAGS: 00050206 [ 321.588263][ T9139] RAX: 000000230000000b RBX: ffff88805d5b6700 RCX: 0000000000000038 [ 321.588272][ T9139] RDX: 0000000000000000 RSI: ffff88805d5b6700 RDI: 0000200000001480 [ 321.588280][ T9139] RBP: ffffc9000490fa70 R08: ffff88805d5b6737 R09: 1ffff1100bab6ce6 [ 321.588288][ T9139] R10: dffffc0000000000 R11: ffffed100bab6ce7 R12: 1ffff92000921f7b [ 321.588297][ T9139] R13: 0000200000001480 R14: ffffc9000490fbe8 R15: 0000000000000038 [ 321.588315][ T9139] _copy_to_iter+0x255/0x1810 [ 321.588331][ T9139] ? rt_spin_unlock+0x157/0x200 [ 321.588345][ T9139] ? rt_spin_unlock+0x163/0x200 [ 321.588355][ T9139] ? __pfx__copy_to_iter+0x10/0x10 [ 321.588366][ T9139] ? __skb_recv_datagram+0x2a1/0x2d0 [ 321.588390][ T9139] bcm_recvmsg+0x151/0x4e0 [ 321.588417][ T9139] ? __pfx_bcm_recvmsg+0x10/0x10 [ 321.588439][ T9139] ? __pfx_aa_file_perm+0x10/0x10 [ 321.588473][ T9139] ? aa_sock_msg_perm+0x122/0x200 [ 321.588499][ T9139] ? __pfx_bcm_recvmsg+0x10/0x10 [ 321.588518][ T9139] sock_recvmsg_nosec+0x130/0x170 [ 321.588533][ T9139] sock_read_iter+0x26d/0x330 [ 321.588551][ T9139] ? __pfx_sock_read_iter+0x10/0x10 [ 321.588572][ T9139] ? bpf_lsm_file_permission+0x9/0x20 [ 321.588585][ T9139] ? security_file_permission+0x75/0x260 [ 321.588604][ T9139] vfs_read+0x59e/0xa90 [ 321.588624][ T9139] ? __pfx_vfs_read+0x10/0x10 [ 321.588643][ T9139] ? __fget_files+0x2a/0x420 [ 321.588661][ T9139] ksys_read+0x156/0x270 [ 321.588676][ T9139] ? __pfx_ksys_read+0x10/0x10 [ 321.588695][ T9139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.588707][ T9139] do_syscall_64+0x174/0x580 [ 321.588721][ T9139] ? trace_irq_disable+0x3b/0x140 [ 321.588735][ T9139] ? clear_bhb_loop+0x40/0x90 [ 321.588749][ T9139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.588760][ T9139] RIP: 0033:0x7f64f509ce59 [ 321.588771][ T9139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.588781][ T9139] RSP: 002b:00007f64f32ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 321.588793][ T9139] RAX: ffffffffffffffda RBX: 00007f64f5315fa0 RCX: 00007f64f509ce59 [ 321.588801][ T9139] RDX: 0000000000000038 RSI: 0000200000001480 RDI: 0000000000000003 [ 321.588808][ T9139] RBP: 00007f64f32ee090 R08: 0000000000000000 R09: 0000000000000000 [ 321.588815][ T9139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.588822][ T9139] R13: 00007f64f5316038 R14: 00007f64f5315fa0 R15: 00007ffce8646888 [ 321.588840][ T9139] [ 321.740842][ T37] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 321.764209][ T7385] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 321.891144][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 321.895414][ T37] usb 3-1: config 8 has an invalid interface number: 128 but max is 0 [ 321.895447][ T37] usb 3-1: config 8 has no interface number 0 [ 321.895476][ T37] usb 3-1: config 8 interface 128 has no altsetting 0 [ 321.900745][ T37] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=62.b8 [ 321.900772][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.900791][ T37] usb 3-1: Product: syz [ 321.900803][ T37] usb 3-1: Manufacturer: syz [ 321.900816][ T37] usb 3-1: SerialNumber: syz [ 322.070470][ T7385] usb 1-1: Using ep0 maxpacket: 32 [ 322.117507][ T7385] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 322.117548][ T7385] usb 1-1: config 0 has no interface number 0 [ 322.117597][ T7385] usb 1-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 322.117620][ T7385] usb 1-1: config 0 interface 89 has no altsetting 0 [ 322.156102][ T7385] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 322.156134][ T7385] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.156156][ T7385] usb 1-1: Product: syz [ 322.156171][ T7385] usb 1-1: Manufacturer: syz [ 322.156186][ T7385] usb 1-1: SerialNumber: syz [ 322.202744][ T7385] usb 1-1: config 0 descriptor?? [ 322.210037][ T7385] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 322.210074][ T7385] em28xx 1-1:0.89: Video interface 89 found: [ 322.229654][ T37] upd78f0730 3-1:8.128: upd78f0730 converter detected [ 322.261120][ T37] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 322.347084][ T37] usb 3-1: USB disconnect, device number 52 [ 322.488631][ T37] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 322.493396][ T37] upd78f0730 3-1:8.128: device disconnected [ 322.700530][ T5712] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 322.700694][ T5684] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 322.808992][ T7385] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 322.841149][ T5712] usb 4-1: device descriptor read/64, error -71 [ 322.870838][ T5684] usb 2-1: Using ep0 maxpacket: 16 [ 322.873846][ T5684] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 322.873879][ T5684] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 322.876809][ T5684] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 322.876839][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.876858][ T5684] usb 2-1: Product: syz [ 322.876873][ T5684] usb 2-1: Manufacturer: syz [ 322.876887][ T5684] usb 2-1: SerialNumber: syz [ 322.888607][ T5684] usb 2-1: config 0 descriptor?? [ 322.957616][ T5684] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 323.080946][ T5712] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 323.160212][ T5684] usb 2-1: USB disconnect, device number 56 [ 323.224379][ T5712] usb 4-1: device descriptor read/64, error -71 [ 323.332338][ T5712] usb usb4-port1: attempt power cycle [ 323.672703][ T5712] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 323.699408][ T5712] usb 4-1: device descriptor read/8, error -71 [ 323.699938][ T7385] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 323.699968][ T7385] em28xx 1-1:0.89: board has no eeprom [ 323.780553][ T7385] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 323.780584][ T7385] em28xx 1-1:0.89: analog set to bulk mode. [ 323.780963][ T9] em28xx 1-1:0.89: Registering V4L2 extension [ 323.816503][ T9164] nbd: must specify an index to disconnect [ 323.831362][ T7385] usb 1-1: USB disconnect, device number 73 [ 323.841495][ T7385] em28xx 1-1:0.89: Disconnecting em28xx [ 323.926932][ T9162] overlayfs: failed to resolve './file0': -2 [ 323.947852][ T9169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 323.951320][ T5712] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 323.973605][ T5712] usb 4-1: device descriptor read/8, error -71 [ 324.009076][ T9] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 324.009102][ T9] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 324.009116][ T9] em28xx 1-1:0.89: No AC97 audio processor [ 324.074533][ T9] usb 1-1: Decoder not found [ 324.074555][ T9] em28xx 1-1:0.89: failed to create media graph [ 324.074587][ T9] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 324.084320][ T5712] usb usb4-port1: unable to enumerate USB device [ 324.133475][ T9] em28xx 1-1:0.89: Registering snapshot button... [ 324.187504][ T9] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input56 [ 324.202055][ T9] em28xx 1-1:0.89: Remote control support is not available for this card. [ 324.211547][ T7385] em28xx 1-1:0.89: Closing input extension [ 324.211576][ T7385] em28xx 1-1:0.89: Deregistering snapshot button [ 324.377518][ T7385] em28xx 1-1:0.89: Freeing device [ 324.528495][ T38] audit: type=1326 audit(1782498751.155:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.916" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1cc7aece59 code=0x0 [ 324.890560][ T9] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 325.051207][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 325.060544][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.060619][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.060648][ T9] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.062288][ T9] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.062319][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.062355][ T9] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 325.062380][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.151342][ T9] usb 3-1: config 0 descriptor?? [ 325.200639][ T7380] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 325.384298][ T7380] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.384426][ T7380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.384448][ T7380] usb 1-1: Product: syz [ 325.384463][ T7380] usb 1-1: Manufacturer: syz [ 325.384478][ T7380] usb 1-1: SerialNumber: syz [ 325.514098][ T5684] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 325.618968][ T9] hid_parser_main: 5 callbacks suppressed [ 325.618996][ T9] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 325.619085][ T9] hid-thrustmaster 0003:044F:B65D.000D: unknown main item tag 0x0 [ 325.619110][ T9] hid-thrustmaster 0003:044F:B65D.000D: item fetching failed at offset 2/5 [ 325.637693][ T9] hid-thrustmaster 0003:044F:B65D.000D: parse failed with error -22 [ 325.649665][ T9] hid-thrustmaster 0003:044F:B65D.000D: probe with driver hid-thrustmaster failed with error -22 [ 325.660529][ T5684] usb 2-1: Using ep0 maxpacket: 16 [ 325.663930][ T5684] usb 2-1: config 9 has an invalid interface number: 160 but max is 0 [ 325.663957][ T5684] usb 2-1: config 9 has no interface number 0 [ 325.663990][ T5684] usb 2-1: config 9 interface 160 has no altsetting 0 [ 325.669747][ T5684] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=e0.b2 [ 325.669882][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.669903][ T5684] usb 2-1: Product: syz [ 325.669918][ T5684] usb 2-1: Manufacturer: syz [ 325.669932][ T5684] usb 2-1: SerialNumber: syz [ 325.755753][ T9205] netlink: 128 bytes leftover after parsing attributes in process `syz.3.927'. [ 325.938001][ T7380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 325.938071][ T7380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 326.022180][ T5684] gspca_main: spca508-2.14.0 probing 8086:0110 [ 326.023578][ T5684] gspca_spca508: reg_read err -71 [ 326.023958][ T5684] gspca_spca508: reg_read err -71 [ 326.024336][ T5684] gspca_spca508: reg_read err -71 [ 326.024744][ T5684] gspca_spca508: reg_read err -71 [ 326.025127][ T5684] gspca_spca508: reg_read err -71 [ 326.025509][ T5684] gspca_spca508: reg write: error -71 [ 326.025581][ T5684] spca508 2-1:9.160: probe with driver spca508 failed with error -71 [ 326.027183][ T9209] sg_write: data in/out 478684/136 bytes for SCSI command 0x0-- guessing data in; [ 326.027183][ T9209] program syz.3.929 not setting count and/or reply_len properly [ 326.032516][ T5684] usb 2-1: USB disconnect, device number 57 [ 326.147657][ T7380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 326.148372][ T7380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 326.149489][ T7380] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 326.184758][ T7380] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 326.223259][ T7380] usb 1-1: USB disconnect, device number 74 [ 326.440577][ T5711] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 326.592723][ T5711] usb 4-1: unable to get BOS descriptor or descriptor too short [ 326.593270][ T5711] usb 4-1: not running at top speed; connect to a high speed hub [ 326.594485][ T5711] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 326.594540][ T5711] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 35340, setting to 1023 [ 326.596806][ T5711] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 326.596833][ T5711] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.596851][ T5711] usb 4-1: Product: syz [ 326.596866][ T5711] usb 4-1: Manufacturer: syz [ 326.596878][ T5711] usb 4-1: SerialNumber: syz [ 326.835563][ T5711] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 326.836457][ T5711] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 326.988198][ T5711] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 327.007542][ T5711] usb 4-1: USB disconnect, device number 51 [ 327.091492][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.200701][ T37] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 327.243959][ T9227] netlink: 72 bytes leftover after parsing attributes in process `syz.0.937'. [ 327.306087][ T38] audit: type=1326 audit(1782498753.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.0.938" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3175c9ce59 code=0x10000 [ 327.350674][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 327.355020][ T37] usb 2-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 327.355058][ T37] usb 2-1: config 0 interface 0 has no altsetting 0 [ 327.355094][ T37] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 327.355119][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.408738][ T37] usb 2-1: config 0 descriptor?? [ 327.590657][ T1247] usb 3-1: USB disconnect, device number 53 [ 327.692349][ T5711] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 327.878429][ T5711] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 327.878460][ T5711] usb 4-1: config 0 has no interface number 0 [ 327.878568][ T5711] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.878596][ T5711] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.878620][ T5711] usb 4-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.878728][ T5711] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 327.878754][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.910869][ T37] bigben 0003:146B:0902.000E: unexpected rdesc, please submit for review [ 327.924978][ T5711] usb 4-1: config 0 descriptor?? [ 327.928936][ T37] bigben 0003:146B:0902.000E: ignoring exceeding usage max [ 327.946426][ T37] bigben 0003:146B:0902.000E: unknown main item tag 0x1 [ 328.110713][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.138327][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.217052][ T37] bigben 0003:146B:0902.000E: hidraw0: USB HID vc2.59 Device [HID 146b:0902] on usb-dummy_hcd.1-1/input0 [ 328.217091][ T37] bigben 0003:146B:0902.000E: missing HID_OUTPUT_REPORT 0 [ 328.217499][ T37] bigben 0003:146B:0902.000E: no output report found [ 328.295186][ T9236] ================================================================== [ 328.295203][ T9236] BUG: KASAN: slab-use-after-free in report_descriptor_read+0xb5/0x100 [ 328.295235][ T9236] Read of size 40 at addr ffff88802a002800 by task fido_id/9236 [ 328.295250][ T9236] [ 328.295264][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.295291][ T9236] Tainted: [L]=SOFTLOCKUP [ 328.295298][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.295310][ T9236] Call Trace: [ 328.295326][ T9236] [ 328.295335][ T9236] dump_stack_lvl+0xe8/0x150 [ 328.295360][ T9236] print_address_description+0x55/0x1e0 [ 328.295387][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.295411][ T9236] print_report+0x58/0x70 [ 328.295434][ T9236] kasan_report+0x117/0x150 [ 328.295458][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.295486][ T9236] kasan_check_range+0x264/0x2c0 [ 328.295509][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.295534][ T9236] __asan_memcpy+0x29/0x70 [ 328.295561][ T9236] report_descriptor_read+0xb5/0x100 [ 328.295585][ T9236] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 328.295614][ T9236] kernfs_fop_read_iter+0x435/0x6a0 [ 328.295642][ T9236] vfs_read+0x59e/0xa90 [ 328.295668][ T9236] ? __pfx_vfs_read+0x10/0x10 [ 328.295690][ T9236] ? do_sys_openat2+0x14e/0x200 [ 328.295708][ T9236] ? kmem_cache_free+0x187/0x6c0 [ 328.295735][ T9236] ksys_read+0x156/0x270 [ 328.295758][ T9236] ? __pfx_ksys_read+0x10/0x10 [ 328.295783][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.295804][ T9236] do_syscall_64+0x174/0x580 [ 328.295825][ T9236] ? trace_irq_disable+0x3b/0x140 [ 328.295848][ T9236] ? clear_bhb_loop+0x40/0x90 [ 328.295868][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.295885][ T9236] RIP: 0033:0x7fac16eb5407 [ 328.295901][ T9236] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 328.295918][ T9236] RSP: 002b:00007fff8d5bd980 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 328.295940][ T9236] RAX: ffffffffffffffda RBX: 00007fac16dc7880 RCX: 00007fac16eb5407 [ 328.295955][ T9236] RDX: 0000000000001000 RSI: 00007fff8d5bd9d0 RDI: 0000000000000004 [ 328.295969][ T9236] RBP: 0000557e80109730 R08: 0000000000000000 R09: 0000000000000000 [ 328.295981][ T9236] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e80108930 [ 328.295994][ T9236] R13: 00007fff8d5bd9d0 R14: 0000000000000004 R15: 0000557e42ab54d8 [ 328.296015][ T9236] [ 328.296022][ T9236] [ 328.296026][ T9236] Allocated by task 37: [ 328.296036][ T9236] kasan_save_track+0x3e/0x80 [ 328.296054][ T9236] __kasan_kmalloc+0x93/0xb0 [ 328.296072][ T9236] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 328.296091][ T9236] kmemdup_noprof+0x2b/0x70 [ 328.296115][ T9236] hid_open_report+0x1fa/0xf00 [ 328.296131][ T9236] bigben_probe+0xc3/0x820 [ 328.296154][ T9236] hid_device_probe+0x42c/0x7c0 [ 328.296173][ T9236] really_probe+0x254/0xae0 [ 328.296198][ T9236] __driver_probe_device+0x1e8/0x360 [ 328.296222][ T9236] driver_probe_device+0x4f/0x240 [ 328.296245][ T9236] __device_attach_driver+0x270/0x410 [ 328.296269][ T9236] bus_for_each_drv+0x25b/0x2f0 [ 328.296287][ T9236] __device_attach+0x2c7/0x450 [ 328.296308][ T9236] device_initial_probe+0xa1/0xd0 [ 328.296339][ T9236] bus_probe_device+0x12d/0x220 [ 328.296357][ T9236] device_add+0x7d7/0xb80 [ 328.296377][ T9236] hid_add_device+0x272/0x3e0 [ 328.296396][ T9236] usbhid_probe+0x9dc/0xde0 [ 328.296411][ T9236] usb_probe_interface+0x653/0xc60 [ 328.296435][ T9236] really_probe+0x254/0xae0 [ 328.296459][ T9236] __driver_probe_device+0x1e8/0x360 [ 328.296482][ T9236] driver_probe_device+0x4f/0x240 [ 328.296506][ T9236] __device_attach_driver+0x270/0x410 [ 328.296530][ T9236] bus_for_each_drv+0x25b/0x2f0 [ 328.296547][ T9236] __device_attach+0x2c7/0x450 [ 328.296569][ T9236] device_initial_probe+0xa1/0xd0 [ 328.296591][ T9236] bus_probe_device+0x12d/0x220 [ 328.296608][ T9236] device_add+0x7d7/0xb80 [ 328.296627][ T9236] usb_set_configuration+0x1ad8/0x2180 [ 328.296647][ T9236] usb_generic_driver_probe+0x8d/0x150 [ 328.296668][ T9236] usb_probe_device+0x1c3/0x3b0 [ 328.296689][ T9236] really_probe+0x254/0xae0 [ 328.296713][ T9236] __driver_probe_device+0x1e8/0x360 [ 328.296735][ T9236] driver_probe_device+0x4f/0x240 [ 328.296758][ T9236] __device_attach_driver+0x270/0x410 [ 328.296783][ T9236] bus_for_each_drv+0x25b/0x2f0 [ 328.296800][ T9236] __device_attach+0x2c7/0x450 [ 328.296822][ T9236] device_initial_probe+0xa1/0xd0 [ 328.296844][ T9236] bus_probe_device+0x12d/0x220 [ 328.296862][ T9236] device_add+0x7d7/0xb80 [ 328.296882][ T9236] usb_new_device+0x98d/0x1610 [ 328.296899][ T9236] hub_event+0x28cf/0x4cf0 [ 328.296919][ T9236] process_one_work+0x93a/0x12b0 [ 328.296943][ T9236] worker_thread+0xb05/0x10d0 [ 328.296968][ T9236] kthread+0x388/0x470 [ 328.296985][ T9236] ret_from_fork+0x514/0xb70 [ 328.297004][ T9236] ret_from_fork_asm+0x1a/0x30 [ 328.297026][ T9236] [ 328.297030][ T9236] The buggy address belongs to the object at ffff88802a002800 [ 328.297030][ T9236] which belongs to the cache kmalloc-64 of size 64 [ 328.297048][ T9236] The buggy address is located 0 bytes inside of [ 328.297048][ T9236] freed 64-byte region [ffff88802a002800, ffff88802a002840) [ 328.297068][ T9236] [ 328.297073][ T9236] The buggy address belongs to the physical page: [ 328.297082][ T9236] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a002 [ 328.297101][ T9236] flags: 0x80000000000000(node=0|zone=1) [ 328.297115][ T9236] page_type: f5(slab) [ 328.297134][ T9236] raw: 0080000000000000 ffff88813fea98c0 dead000000000100 dead000000000122 [ 328.297150][ T9236] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 328.297157][ T9236] page dumped because: kasan: bad access detected [ 328.297165][ T9236] page_owner tracks the page as allocated [ 328.297172][ T9236] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 157, tgid 157 (kworker/u8:6), ts 9705089127, free_ts 0 [ 328.297204][ T9236] post_alloc_hook+0x1f9/0x250 [ 328.297221][ T9236] get_page_from_freelist+0x2639/0x26b0 [ 328.297242][ T9236] __alloc_frozen_pages_noprof+0x18d/0x380 [ 328.297264][ T9236] allocate_slab+0x79/0x5e0 [ 328.297287][ T9236] refill_objects+0x2d8/0x350 [ 328.297310][ T9236] __pcs_replace_empty_main+0x330/0x690 [ 328.297342][ T9236] __kmalloc_noprof+0x544/0x780 [ 328.297359][ T9236] security_task_alloc+0x4d/0x330 [ 328.297380][ T9236] copy_process+0x1ca8/0x43f0 [ 328.297405][ T9236] kernel_clone+0x2d7/0x940 [ 328.297421][ T9236] user_mode_thread+0x110/0x180 [ 328.297436][ T9236] call_usermodehelper_exec_work+0x5c/0x230 [ 328.297459][ T9236] process_one_work+0x93a/0x12b0 [ 328.297484][ T9236] worker_thread+0xb05/0x10d0 [ 328.297510][ T9236] kthread+0x388/0x470 [ 328.297528][ T9236] ret_from_fork+0x514/0xb70 [ 328.297547][ T9236] page_owner free stack trace missing [ 328.297555][ T9236] [ 328.297559][ T9236] Memory state around the buggy address: [ 328.297570][ T9236] ffff88802a002700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 328.297583][ T9236] ffff88802a002780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 328.297597][ T9236] >ffff88802a002800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 328.297606][ T9236] ^ [ 328.297615][ T9236] ffff88802a002880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 328.297627][ T9236] ffff88802a002900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 328.297637][ T9236] ================================================================== [ 328.297648][ T9236] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 328.297664][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: fido_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.297691][ T9236] Tainted: [L]=SOFTLOCKUP [ 328.297698][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.297708][ T9236] Call Trace: [ 328.297716][ T9236] [ 328.297723][ T9236] vpanic+0x56c/0xa60 [ 328.297753][ T9236] ? __pfx_vpanic+0x10/0x10 [ 328.297784][ T9236] panic+0xc5/0xd0 [ 328.297810][ T9236] ? __pfx_panic+0x10/0x10 [ 328.297835][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.297859][ T9236] ? rcu_is_watching+0x15/0xb0 [ 328.297890][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.297913][ T9236] check_panic_on_warn+0x89/0xb0 [ 328.297936][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.297959][ T9236] end_report+0x73/0x170 [ 328.297982][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.298004][ T9236] kasan_report+0x128/0x150 [ 328.298027][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.298055][ T9236] kasan_check_range+0x264/0x2c0 [ 328.298078][ T9236] ? report_descriptor_read+0xb5/0x100 [ 328.298103][ T9236] __asan_memcpy+0x29/0x70 [ 328.298131][ T9236] report_descriptor_read+0xb5/0x100 [ 328.298155][ T9236] ? __pfx_sysfs_kf_bin_read+0x10/0x10 [ 328.298185][ T9236] kernfs_fop_read_iter+0x435/0x6a0 [ 328.298212][ T9236] vfs_read+0x59e/0xa90 [ 328.298239][ T9236] ? __pfx_vfs_read+0x10/0x10 [ 328.298263][ T9236] ? do_sys_openat2+0x14e/0x200 [ 328.298282][ T9236] ? kmem_cache_free+0x187/0x6c0 [ 328.298310][ T9236] ksys_read+0x156/0x270 [ 328.298344][ T9236] ? __pfx_ksys_read+0x10/0x10 [ 328.298370][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.298390][ T9236] do_syscall_64+0x174/0x580 [ 328.298415][ T9236] ? trace_irq_disable+0x3b/0x140 [ 328.298439][ T9236] ? clear_bhb_loop+0x40/0x90 [ 328.298462][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.298481][ T9236] RIP: 0033:0x7fac16eb5407 [ 328.298498][ T9236] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 328.298514][ T9236] RSP: 002b:00007fff8d5bd980 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 328.298535][ T9236] RAX: ffffffffffffffda RBX: 00007fac16dc7880 RCX: 00007fac16eb5407 [ 328.298550][ T9236] RDX: 0000000000001000 RSI: 00007fff8d5bd9d0 RDI: 0000000000000004 [ 328.298564][ T9236] RBP: 0000557e80109730 R08: 0000000000000000 R09: 0000000000000000 [ 328.298577][ T9236] R10: 0000000000000000 R11: 0000000000000202 R12: 0000557e80108930 [ 328.298590][ T9236] R13: 00007fff8d5bd9d0 R14: 0000000000000004 R15: 0000557e42ab54d8 [ 328.298612][ T9236] [ 328.298777][ T9236] Kernel Offset: disabled