last executing test programs: 1m19.030923468s ago: executing program 1 (id=437): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x10, 0x200, &(0x7f0000000100)="000000000000000000000000000000000500"}) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) 1m18.876362718s ago: executing program 1 (id=438): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x61, 0x61, 0x38, 0x31, 0x64, 0x35, 0x35, 0xad, 0x67, 0x30, 0x65, 0x33, 0x30, 0x39, 0x32, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r1) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r1) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x61, 0x39, 0x30, 0x31, 0x30, 0x30, 0x33, 0x30, 0x30, 0x39, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) keyctl$unlink(0x9, r0, r1) 1m18.699744677s ago: executing program 1 (id=440): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000600), &(0x7f0000000780)={'syz', 0x0}, &(0x7f00000007c0)="c0344c27179aa76e20b248c3b957d291432ef8109961d90b782ffc243df10a9907a0639799d08e432693205925ce29384ac19145c3bb0dd16585b5d7d2d8346fcedfe5a43bd5fd70e17087d956796bb9542dc526c5e53b6378f3d58fe6d87214", 0x60, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x67, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1m18.468112015s ago: executing program 1 (id=442): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003000400000000000000030007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa0009058202507381430490bece4c9f091ef84926"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x701, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r6 = getuid() sendmsg$nl_xfrm(r2, &(0x7f0000000e80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000b40)=@migrate={0x300, 0x21, 0x4, 0x70bd2c, 0x25dfdbfc, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@local, 0x4e22, 0x8001, 0x4e20, 0x1, 0x2, 0x120, 0xa0, 0x32, r5, r6}, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d5, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3505, 0x0, 0x3, 0x7, 0xcc, 0x1000}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d5, 0xff}, 0xa, @in=@remote, 0x34ff, 0x1, 0x2, 0x6, 0x100, 0x2, 0xfffffff6}, {{@in6=@mcast2, 0x4d6, 0x2b}, 0x2, @in6=@empty, 0x0, 0x6, 0x1, 0x2, 0x10001}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d6, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3500, 0x0, 0x0, 0x6, 0x3, 0x3, 0x4}, {{@in=@local, 0x4d5, 0x2b}, 0xcad235d60338f7fa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x34ff, 0x2, 0x1, 0x9, 0x2, 0x9}, {{@in6=@remote, 0x4d4, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x3503, 0x2, 0x2, 0x9, 0xc1e, 0x1ff, 0x2}]}, @algo_aead={0x112, 0x12, {{'morus640-sse2\x00'}, 0x630, 0x80, "5bc03045316731faedeb90d828cccfbbe3a0b3b2598807f7ebaeeec8ed8e9faea1688a9025ca6cdb4914b761c3bbd754ad12be46e087f961550c0f35f35caa7d8fdc75cba4c3de0607ff83675e251348b0ff0631910306b36423abfd2cc90cb7d564a8caefb41b192071135632ad1260721cbe1473db55b16b4406cdd161188410d411ba8bc99270b27422015b6c2f8d2602179d07cbdda5bea7b34118cae315f0729ce2830b50169afb9bd3e2addf994ed3a9d32aefb0c6f885314b5f44aa0987940940b2e8"}}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd26}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x300}, 0x1, 0x0, 0x0, 0x48000}, 0x41) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x5, 0x23, {0x23, 0x21, "8652bb9fb248fd95f62cb1d788edcb96612feb69b257e1825f19b8e997752dae8e"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f00000009c0)={0x44, &(0x7f0000000700)={0x0, 0x17, 0x5c, "b008d16e3d0ae275e5058b783c870659660aef7e26db349a94ca6a5ead8634b78efea800f041376d3e05647c2e8f22bfc1d2ccf76cb1691e0aa453f236418d19cce3a8a00c58bd6f719e58479178535e70a17316bb507576b113a664"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r7 = fsmount(0xffffffffffffffff, 0x1, 0x7) userfaultfd(0x80000) fchdir(r7) 1m14.599844081s ago: executing program 1 (id=465): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb08000500010000ff", 0x34) 1m14.362328783s ago: executing program 1 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x90, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e0021002dbd700000000000070000000500000000000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_usb_connect(0x4, 0x39, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="205665819e9cd7094446bfade431d24c84a7a67dbaff0d9da3a862c18bcde3c060c1341614099f7784237b3befcd7b0446661c094740e6aa87bc931427cac3f8680f20e3d511adec84b1fd8d6a8bf16d076bb3a0118b6a469bec81b10ff4526d9799f4b5d730ff1ea24e9dd086955f62a8b0e4c0cbb4dd4a9c4940b73920db3193ca020ea23a1c20d3152cbe78082403ab5b9b6283b2bcdc01e602391ef7a1cd49e626e01fe80a9a8dbbfd82bfec687996237f049242a04a6b37156f1451eb8025097eac0c700b61683bb1f4bcf7256164836533f592654835e125d88fc3948b3e3b1170341e7802", @ANYRES16=0x0, @ANYRES16=r2], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0xc0104d08, &(0x7f0000002480)) 59.263300793s ago: executing program 32 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x90, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@afid}]}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001e0021002dbd700000000000070000000500000000000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x4014}, 0x0) syz_usb_connect(0x4, 0x39, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="205665819e9cd7094446bfade431d24c84a7a67dbaff0d9da3a862c18bcde3c060c1341614099f7784237b3befcd7b0446661c094740e6aa87bc931427cac3f8680f20e3d511adec84b1fd8d6a8bf16d076bb3a0118b6a469bec81b10ff4526d9799f4b5d730ff1ea24e9dd086955f62a8b0e4c0cbb4dd4a9c4940b73920db3193ca020ea23a1c20d3152cbe78082403ab5b9b6283b2bcdc01e602391ef7a1cd49e626e01fe80a9a8dbbfd82bfec687996237f049242a04a6b37156f1451eb8025097eac0c700b61683bb1f4bcf7256164836533f592654835e125d88fc3948b3e3b1170341e7802", @ANYRES16=0x0, @ANYRES16=r2], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r4, 0xc0104d08, &(0x7f0000002480)) 5.439016078s ago: executing program 4 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.379656029s ago: executing program 2 (id=767): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x4e22, 0x8000, 0x4e24, 0x3, 0xa, 0x20, 0x20, 0x33}, {0x80000000, 0x7, 0x8, 0x5, 0xd50, 0x81, 0x2, 0x408}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x4, 0x3, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) mount(&(0x7f0000000000), &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbmon(&(0x7f0000000000), 0x202, 0x40) socket$tipc(0x1e, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0xed, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x9}, 0x0, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x100000000000000) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r4, 0x0, 0x0) 4.063105015s ago: executing program 4 (id=769): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='3', 0x1) 3.037377024s ago: executing program 0 (id=770): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000200)={0x40, 0x12, 0x1, "f5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.974589836s ago: executing program 4 (id=771): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1.0\n\x00', 0x4) 2.927120951s ago: executing program 2 (id=772): r0 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) 2.821625245s ago: executing program 4 (id=773): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000006ec0)="b99774b274e5322ef9627d67", 0xc}], 0x2}}], 0x1, 0x24008090) 2.744821092s ago: executing program 2 (id=774): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@local}, {@any, 0x800000}, 0x400, "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"}, 0x418}) 2.611508978s ago: executing program 4 (id=775): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) 2.572600066s ago: executing program 2 (id=776): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4c040) 2.483183548s ago: executing program 2 (id=777): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x0, 0x0}) 2.399042478s ago: executing program 3 (id=778): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = dup(r0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}}}, 0x84) 2.308096563s ago: executing program 0 (id=779): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000140)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x9a}], 0x1) close(0x3) 2.292861895s ago: executing program 3 (id=780): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) read(r0, &(0x7f0000000200), 0x1000) 2.146780219s ago: executing program 3 (id=781): r0 = socket(0x2b, 0x1, 0x1) bind$unix(r0, &(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e) 1.890968829s ago: executing program 3 (id=782): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.890682576s ago: executing program 0 (id=783): socket(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x1a}], 0x1, 0x91) close_range(r0, 0xffffffffffffffff, 0x0) 1.756019303s ago: executing program 2 (id=784): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x2, {0x2, 0x21}}, 0x0, &(0x7f0000000280)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x40, 0xe, 0x19, "73fd13e22fa92039ac64c41221110a447441b6b067615b745e"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xe}, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000000c0)={0x20, 0x0, 0x8, {0x120, 0x1, [0xff]}}, 0x0, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x3}, 0x0, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xc}, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x8}, 0x0, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$uac2(r0, &(0x7f00000009c0)={0x14, 0x0, 0x0}, &(0x7f0000000cc0)={0x44, &(0x7f0000000a00)={0x20, 0x15}, 0x0, 0x0, &(0x7f0000000b80)={0x20, 0x81, 0x1, "15"}, 0x0, 0x0, 0x0, 0x0}) 1.546873104s ago: executing program 4 (id=785): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@1&'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="0016e7"], 0x0, 0x0, 0x0, 0x0}) 850.845264ms ago: executing program 0 (id=786): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r0, 0x0, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000097c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000006ec0)="b99774b274e5322ef9627d67", 0xc}], 0x2}}], 0x1, 0x24008090) 804.679998ms ago: executing program 3 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4c040) 748.415375ms ago: executing program 0 (id=788): r0 = syz_usb_connect(0x0, 0x39, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0xa, 0x2, "9cf3"}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 587.336281ms ago: executing program 3 (id=789): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x17) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fspick(0xffffffffffffffff, 0x0, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECCOMP(0x15) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000100)={0x80, 0x1, 0x4, 0x0, 0x8}) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000400)={0xf0f020}) 0s ago: executing program 0 (id=790): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='3', 0x1) kernel console output (not intermixed with test programs): 94][ T5775] usb 4-1: Manufacturer: syz [ 121.054557][ T5775] usb 4-1: SerialNumber: syz [ 121.057246][ T5719] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 121.087182][ T5775] usb 4-1: config 0 descriptor?? [ 121.111473][ T5775] ums-freecom 4-1:0.0: USB Mass Storage device detected [ 121.206876][ T6360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.218446][ T5775] usb 1-1: USB disconnect, device number 13 [ 121.308085][ T5762] usb 4-1: USB disconnect, device number 11 [ 121.364079][ T190] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 121.505743][ T923] gud 2-1:1.0: Failed to get connectors (error=-71) [ 121.505815][ T923] gud 2-1:1.0: probe with driver gud failed with error -71 [ 121.523757][ T190] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 121.538845][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.538915][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.538966][ T190] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.538997][ T190] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.539047][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.606985][ T923] usb 2-1: USB disconnect, device number 12 [ 121.844193][ T6375] capability: warning: `syz.0.194' uses deprecated v2 capabilities in a way that may be insecure [ 121.844509][ T6375] netlink: 264 bytes leftover after parsing attributes in process `syz.0.194'. [ 122.108322][ T6380] socket: no more sockets [ 122.375745][ T6389] support for cryptoloop has been removed. Use dm-crypt instead. [ 122.397479][ T6389] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 122.434796][ T6389] 9p: Bad value for 'rfdno' [ 122.436289][ T6393] jffs2: notice: (6393) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.462715][ T6389] fuse: Bad value for 'group_id' [ 122.462761][ T6389] fuse: Bad value for 'group_id' [ 122.762245][ T923] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.882274][ T190] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 122.913002][ T923] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 122.915637][ T923] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 122.915718][ T923] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 122.915771][ T923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 122.915885][ T923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 122.915956][ T923] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 122.920472][ T923] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 122.920545][ T923] usb 2-1: Product: syz [ 122.920586][ T923] usb 2-1: Manufacturer: syz [ 122.943944][ T923] cdc_wdm 2-1:1.0: skipping garbage [ 122.945339][ T923] cdc_wdm 2-1:1.0: skipping garbage [ 122.945648][ T923] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 123.072249][ T5762] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 123.080226][ T190] usb 1-1: device descriptor read/64, error -71 [ 123.158033][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.169097][ T923] usb 2-1: USB disconnect, device number 13 [ 123.212688][ T5762] usb 4-1: device descriptor read/64, error -71 [ 123.312323][ T190] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 123.442242][ T190] usb 1-1: device descriptor read/64, error -71 [ 123.452309][ T5762] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 123.552564][ T190] usb usb1-port1: attempt power cycle [ 123.592232][ T5762] usb 4-1: device descriptor read/64, error -71 [ 123.710895][ T5762] usb usb4-port1: attempt power cycle [ 123.892314][ T190] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.912712][ T190] usb 1-1: device descriptor read/8, error -71 [ 124.033873][ T5719] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 124.052316][ T5762] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 124.073003][ T5762] usb 4-1: device descriptor read/8, error -71 [ 124.149761][ T10] usb 3-1: USB disconnect, device number 14 [ 124.165452][ T190] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 124.182318][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 124.188024][ T190] usb 1-1: device descriptor read/8, error -71 [ 124.195883][ T5719] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 124.208328][ T5719] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.208379][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 124.208430][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.240158][ T5719] usb 2-1: config 0 descriptor?? [ 124.293188][ T190] usb usb1-port1: unable to enumerate USB device [ 124.312762][ T5762] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.333013][ T5762] usb 4-1: device descriptor read/8, error -71 [ 124.442678][ T5762] usb usb4-port1: unable to enumerate USB device [ 124.659979][ T5719] mcp2221 0003:04D8:00DD.0008: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 125.058585][ T5762] usb 2-1: USB disconnect, device number 14 [ 125.272287][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 125.423768][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 125.427576][ T10] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 125.427652][ T10] usb 3-1: config 0 has no interface number 0 [ 125.427758][ T10] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 125.436091][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.436226][ T10] usb 3-1: Product: syz [ 125.436270][ T10] usb 3-1: Manufacturer: syz [ 125.436314][ T10] usb 3-1: SerialNumber: syz [ 125.452725][ T10] usb 3-1: config 0 descriptor?? [ 125.494466][ T10] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 125.760077][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.212'. [ 125.793101][ T6425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.806110][ T6425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.012991][ T5775] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 126.060903][ T6431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.216'. [ 126.142324][ T5775] usb 1-1: device descriptor read/64, error -71 [ 126.242228][ T5719] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 126.312617][ T923] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 126.372217][ T5719] usb 4-1: device descriptor read/64, error -71 [ 126.382915][ T5775] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 126.463064][ T923] usb 2-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 126.472637][ T923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.472666][ T923] usb 2-1: Product: syz [ 126.472683][ T923] usb 2-1: Manufacturer: syz [ 126.472700][ T923] usb 2-1: SerialNumber: syz [ 126.480912][ T923] usb 2-1: config 0 descriptor?? [ 126.491765][ T923] usb 2-1: Waiting for MOTU Microbook II to boot up... [ 126.491846][ T923] usb 2-1: failed setting the sample rate for Motu MicroBook II: -22 [ 126.491981][ T923] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 126.514983][ T5775] usb 1-1: device descriptor read/64, error -71 [ 126.612231][ T5719] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 126.622618][ T5775] usb usb1-port1: attempt power cycle [ 126.697448][ T923] usb 2-1: USB disconnect, device number 15 [ 126.742329][ T5719] usb 4-1: device descriptor read/64, error -71 [ 126.852695][ T5719] usb usb4-port1: attempt power cycle [ 126.962209][ T5775] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 126.982989][ T5775] usb 1-1: device descriptor read/8, error -71 [ 127.192214][ T5719] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 127.212864][ T5719] usb 4-1: device descriptor read/8, error -71 [ 127.222413][ T5775] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 127.244448][ T5775] usb 1-1: device descriptor read/8, error -71 [ 127.352932][ T5775] usb usb1-port1: unable to enumerate USB device [ 127.474286][ T5719] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 127.504859][ T5719] usb 4-1: device descriptor read/8, error -71 [ 127.614130][ T5719] usb usb4-port1: unable to enumerate USB device [ 127.632501][ T6448] netlink: 14 bytes leftover after parsing attributes in process `syz.1.221'. [ 127.708595][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 127.717069][ C0] usb 3-1: yurex_control_callback - control failed: -32 [ 127.728519][ T5775] usb 3-1: USB disconnect, device number 15 [ 127.742152][ T5775] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 128.172276][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 128.336342][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.347584][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.358702][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.371555][ T10] usb 2-1: config 0 descriptor?? [ 128.449109][ T4932] Bluetooth: hci4: setting up ROME/QCA6390 H[ 128.538377][ T6462] FAULT_INJECTION: forcing a failure. [ 128.538377][ T6462] name failslab, interval 1, probability 0, space 0, times 0 [ 128.538437][ T6462] CPU: 1 UID: 0 PID: 6462 Comm: syz.2.228 Not tainted syzkaller #0 PREEMPT(full) [ 128.538464][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.538479][ T6462] Call Trace: [ 128.538489][ T6462] [ 128.538500][ T6462] dump_stack_lvl+0xe8/0x150 [ 128.538536][ T6462] should_fail_ex+0x410/0x560 [ 128.538577][ T6462] should_failslab+0xa8/0x100 [ 128.538604][ T6462] __kmalloc_noprof+0xfe/0x720 [ 128.538638][ T6462] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 128.538665][ T6462] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 128.538715][ T6462] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 128.538752][ T6462] genl_family_rcv_msg_doit+0xda/0x340 [ 128.538785][ T6462] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 128.538821][ T6462] ? apparmor_capable+0x126/0x170 [ 128.538851][ T6462] ? bpf_lsm_capable+0x9/0x20 [ 128.538881][ T6462] ? security_capable+0x7e/0x2c0 [ 128.538922][ T6462] genl_rcv_msg+0x614/0x7a0 [ 128.538954][ T6462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.538982][ T6462] ? __pfx_ieee802154_del_iface+0x10/0x10 [ 128.539030][ T6462] netlink_rcv_skb+0x226/0x4a0 [ 128.539064][ T6462] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.539090][ T6462] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.539140][ T6462] ? down_read+0x2be/0x330 [ 128.539170][ T6462] genl_rcv+0x28/0x40 [ 128.539191][ T6462] netlink_unicast+0x7bd/0x940 [ 128.539230][ T6462] netlink_sendmsg+0x813/0xb40 [ 128.539275][ T6462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.539318][ T6462] ? apparmor_socket_sendmsg+0x98/0x360 [ 128.539353][ T6462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.539385][ T6462] sock_sendmsg_nosec+0x13a/0x180 [ 128.539426][ T6462] ____sys_sendmsg+0x54e/0x850 [ 128.539462][ T6462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.539504][ T6462] ? import_iovec+0x73/0xa0 [ 128.539531][ T6462] ___sys_sendmsg+0x2a5/0x360 [ 128.539559][ T6462] ? __lock_acquire+0x6df/0x2e50 [ 128.539596][ T6462] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.539887][ T6462] ? __fget_files+0x2a/0x420 [ 128.539951][ T6462] ? __fget_files+0x3a2/0x420 [ 128.540047][ T6462] __x64_sys_sendmsg+0x1b1/0x290 [ 128.540131][ T6462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.540254][ T6462] do_syscall_64+0x166/0x520 [ 128.540307][ T6462] ? trace_irq_disable+0x3b/0x140 [ 128.540390][ T6462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.540450][ T6462] ? clear_bhb_loop+0x70/0xc0 [ 128.540524][ T6462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.540578][ T6462] RIP: 0033:0x7f9751d9e0d9 [ 128.540638][ T6462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.540682][ T6462] RSP: 002b:00007f9752baf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.540753][ T6462] RAX: ffffffffffffffda RBX: 00007f9752025fa0 RCX: 00007f9751d9e0d9 [ 128.540795][ T6462] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000004 [ 128.540829][ T6462] RBP: 00007f9752baf090 R08: 0000000000000000 R09: 0000000000000000 [ 128.540869][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.540902][ T6462] R13: 00007f9752026038 R14: 00007f9752025fa0 R15: 00007ffd0f8621c8 [ 128.540995][ T6462] [ 128.732832][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 128.732954][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.897131][ T10] usb 2-1: USB disconnect, device number 16 [ 129.222284][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 129.385597][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 129.397872][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 129.409128][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.430836][ T10] usb 2-1: config 0 descriptor?? [ 129.438578][ T6476] loop0: detected capacity change from 0 to 3904 [ 129.496971][ T6476] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 129.497038][ T6476] ldm_validate_privheads(): Disk read failed. [ 129.500749][ T6476] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be 'Y宕0E l'. [ 129.500821][ T6476] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 129.500862][ T6476] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 129.500904][ T6476] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 129.500937][ T6476] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 129.501070][ T6476] loop0: [ 129.501130][ T6476] loop0: partition table partially beyond EOD, truncated [ 129.553299][ T923] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 129.661809][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.670768][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.685297][ T923] usb 4-1: device descriptor read/64, error -71 [ 129.928905][ T923] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 129.967062][ T6483] jffs2: notice: (6483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.985798][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 129.994083][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007051][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007126][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007160][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007193][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007224][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007257][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007290][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.007323][ T10] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x0 [ 130.072676][ T923] usb 4-1: device descriptor read/64, error -71 [ 130.082348][ T10] logitech-djreceiver 0003:046D:C71F.0009: collection stack underflow [ 130.091430][ T10] logitech-djreceiver 0003:046D:C71F.0009: item 0 0 0 12 parsing failed [ 130.102720][ T10] logitech-djreceiver 0003:046D:C71F.0009: logi_dj_probe: parse failed [ 130.111214][ T10] logitech-djreceiver 0003:046D:C71F.0009: probe with driver logitech-djreceiver failed with error -22 [ 130.183187][ T923] usb usb4-port1: attempt power cycle [ 130.367189][ T5775] usb 2-1: USB disconnect, device number 17 [ 130.523469][ T923] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 130.544605][ T923] usb 4-1: device descriptor read/8, error -71 [ 130.688754][ T6497] FAULT_INJECTION: forcing a failure. [ 130.688754][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 130.720730][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.2.241 Not tainted syzkaller #0 PREEMPT(full) [ 130.720764][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.720778][ T6497] Call Trace: [ 130.720786][ T6497] [ 130.720796][ T6497] dump_stack_lvl+0xe8/0x150 [ 130.720830][ T6497] should_fail_ex+0x410/0x560 [ 130.720869][ T6497] should_failslab+0xa8/0x100 [ 130.720893][ T6497] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 130.720924][ T6497] kmem_cache_alloc_noprof+0xa1/0x600 [ 130.720953][ T6497] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 130.720982][ T6497] ? kmem_cache_alloc_noprof+0x156/0x600 [ 130.721012][ T6497] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 130.721050][ T6497] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 130.721095][ T6497] mmu_topup_memory_caches+0x21/0x170 [ 130.721132][ T6497] kvm_mmu_load+0x9d/0x21e0 [ 130.721169][ T6497] ? kvm_msr_allowed+0x9a/0x490 [ 130.721201][ T6497] ? kvm_msr_allowed+0x9a/0x490 [ 130.721234][ T6497] ? kvm_msr_allowed+0x9a/0x490 [ 130.721264][ T6497] ? kvm_msr_allowed+0x3f4/0x490 [ 130.721297][ T6497] ? kvm_msr_allowed+0x9a/0x490 [ 130.721329][ T6497] ? kvm_apic_has_interrupt+0x740/0x770 [ 130.721369][ T6497] vcpu_run+0x4f68/0x79b0 [ 130.721434][ T6497] ? update_se+0x90/0x1020 [ 130.721511][ T6497] ? __pfx_vcpu_run+0x10/0x10 [ 130.721543][ T6497] ? lock_acquire+0x115/0x350 [ 130.721594][ T6497] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 130.721631][ T6497] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 130.721665][ T6497] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 130.721705][ T6497] kvm_vcpu_ioctl+0xa61/0xfd0 [ 130.721746][ T6497] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.721778][ T6497] ? hook_file_ioctl+0x1f2/0x600 [ 130.721830][ T6497] ? __fget_files+0x2a/0x420 [ 130.721857][ T6497] ? __fget_files+0x2a/0x420 [ 130.721882][ T6497] ? __fget_files+0x3a2/0x420 [ 130.721906][ T6497] ? __fget_files+0x2a/0x420 [ 130.721935][ T6497] ? bpf_lsm_file_ioctl+0x9/0x20 [ 130.721961][ T6497] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 130.721990][ T6497] __se_sys_ioctl+0xfc/0x170 [ 130.722022][ T6497] do_syscall_64+0x166/0x520 [ 130.722042][ T6497] ? trace_irq_disable+0x3b/0x140 [ 130.722073][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.722094][ T6497] ? clear_bhb_loop+0x70/0xc0 [ 130.722122][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.722144][ T6497] RIP: 0033:0x7f9751d9e0d9 H[ 130.722165][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.722184][ T6497] RSP: 002b:00007f9752b8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.722209][ T6497] RAX: ffffffffffffffda RBX: 00007f9752026090 RCX: 00007f9751d9e0d9 [ 130.722226][ T6497] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 130.722240][ T6497] RBP: 00007f9752b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 130.722254][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.722268][ T6497] R13: 00007f9752026128 R14: 00007f9752026090 R15: 00007ffd0f8621c8 [ 130.722304][ T6497] [ 130.802439][ T923] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 130.825087][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 130.837413][ T4932] Bluetooth: hci4: Reading QCA version information failed (-110) [ 130.837533][ T4932] Bluetooth: hci4: Retry BT power ON:0 [ 130.896747][ T923] usb 4-1: device descriptor read/8, error -71 [ 131.018429][ T923] usb usb4-port1: unable to enumerate USB device [ 131.392201][ T5719] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 131.493779][ T5775] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.543251][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 131.546939][ T5719] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 131.551865][ T5719] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.568648][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.568707][ T5719] usb 1-1: Product: syz [ 131.568741][ T5719] usb 1-1: Manufacturer: syz [ 131.568798][ T5719] usb 1-1: SerialNumber: syz [ 131.591409][ T5719] usb 1-1: config 0 descriptor?? [ 131.597466][ T6506] jffs2: notice: (6506) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.616968][ T5719] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 131.634739][ T5719] nokiaca42v2 ttyUSB0: required endpoint is missing [ 131.660171][ T5775] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.673437][ T5775] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.673502][ T5775] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 131.673523][ T5775] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.673663][ T5775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 131.673764][ T5775] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 131.678675][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.678745][ T5775] usb 2-1: Product: syz [ 131.678789][ T5775] usb 2-1: Manufacturer: syz [ 131.749888][ T5775] cdc_wdm 2-1:1.0: skipping garbage [ 131.749948][ T5775] cdc_wdm 2-1:1.0: skipping garbage [ 131.750198][ T5775] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 131.820041][ T5775] usb 1-1: USB disconnect, device number 22 [ 131.849675][ T5775] cypress_m8 1-1:0.0: device disconnected [ 131.949446][ T6501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.959131][ T5719] usb 2-1: USB disconnect, device number 18 [ 132.102265][ T5695] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 132.259184][ T5695] usb 3-1: not running at top speed; connect to a high speed hub [ 132.259242][ T5695] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 132.278654][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.278741][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.324629][ T5695] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 132.726957][ T5695] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 132.770831][ T5695] videodev: could not get a free minor [ 132.770875][ T5695] uvcvideo 3-1:1.1: Failed to register meta-cap device (-23). [ 132.907152][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.907266][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959753][ T6524] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.971121][ T5695] usb 3-1: USB disconnect, device number 16 [ 133.137258][ T6528] loop0: detected capacity change from 0 to 2049 [ 133.144992][ T6529] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 133.150935][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.255'. [ 133.217104][ T6528] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.227806][ T6528] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 133.235321][ T6528] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.242167][ T6528] loop0: [ 133.302661][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout H[ 133.308898][ T4932] Bluetooth: hci4: Reading QCA version information failed (-110) [ 133.308927][ T4932] Bluetooth: hci4: Retry BT power ON:1 [ 133.702225][ T5695] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 133.722381][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 133.825310][ T6548] loop0: detected capacity change from 0 to 2049 [ 133.864112][ T5695] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 133.878974][ T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 133.892276][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 133.892373][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 133.892416][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 133.892446][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.892524][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.906300][ T6548] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.906386][ T6548] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 133.906426][ T6548] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.906568][ T6548] loop0: [ 133.962403][ T5695] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.962442][ T5695] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.962479][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.005002][ T5695] usb 1-1: config 0 descriptor?? [ 134.132869][ T5762] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 134.294494][ T5762] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 134.318205][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.318278][ T5762] usb 2-1: Product: syz [ 134.318313][ T5762] usb 2-1: Manufacturer: syz [ 134.318335][ T5762] usb 2-1: SerialNumber: syz [ 134.347923][ T5762] usb 2-1: config 0 descriptor?? [ 134.440628][ T6557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.444701][ T6557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.511931][ T5695] usbhid 1-1:0.0: can't add hid device: -71 [ 134.512239][ T5695] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 134.542937][ T5695] usb 1-1: USB disconnect, device number 23 [ 134.773740][ T6564] smpboot: CPU 1 is now offline [ 134.861750][ T6567] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 134.980235][ T6546] process 'syz.1.265' launched './file0' with NULL argv: empty string added [ 135.006662][ T5762] usb 2-1: Firmware version (0.0) predates our first public release. [ 135.006716][ T5762] usb 2-1: Please update to version 0.2 or newer [ 135.137087][ T5762] usb 2-1: USB disconnect, device number 19 [ 135.625214][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 135.632578][ T4932] Bluetooth: hci4: Reading QCA version information failed (-110) [ 135.632606][ T4932] Bluetooth: hci4: Retry BT power ON:2 H[ 135.936441][ T6594] Zero length message leads to an empty skb [ 136.261672][ T6601] loop0: detected capacity change from 0 to 3904 [ 136.338544][ T6604] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 136.338624][ T6604] ldm_validate_privheads(): Disk read failed. [ 136.343641][ T6604] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 136.343704][ T6604] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 136.343751][ T6604] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 136.348364][ T6604] ldm_parse_vmdb(): Cannot find the VMDB, database may be corrupt. [ 136.348508][ T6604] loop0: [ 136.348567][ T6604] loop0: partition table partially beyond EOD, truncated [ 136.474330][ T923] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 136.633944][ T5719] usb 4-1: USB disconnect, device number 24 [ 136.644227][ T923] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 136.649703][ T923] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 136.649787][ T923] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 136.649842][ T923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 136.649966][ T923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 136.650039][ T923] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 136.693450][ T923] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 136.693535][ T923] usb 3-1: Product: syz [ 136.693578][ T923] usb 3-1: Manufacturer: syz [ 136.767494][ T923] cdc_wdm 3-1:1.0: skipping garbage [ 136.767551][ T923] cdc_wdm 3-1:1.0: skipping garbage [ 136.777249][ T923] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 136.914581][ T6612] FAULT_INJECTION: forcing a failure. [ 136.914581][ T6612] name failslab, interval 1, probability 0, space 0, times 0 [ 136.914653][ T6612] CPU: 1 UID: 0 PID: 6612 Comm: syz.3.283 Not tainted syzkaller #0 PREEMPT(full) [ 136.914679][ T6612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.914693][ T6612] Call Trace: [ 136.914725][ T6612] [ 136.914766][ T6612] dump_stack_lvl+0xe8/0x150 [ 136.914888][ T6612] should_fail_ex+0x410/0x560 [ 136.914979][ T6612] ? __alloc_skb+0x1db/0x7a0 [ 136.915043][ T6612] should_failslab+0xa8/0x100 [ 136.915117][ T6612] ? __alloc_skb+0x1db/0x7a0 [ 136.915178][ T6612] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 136.915255][ T6612] ? __alloc_skb+0x18d/0x7a0 [ 136.915319][ T6612] ? __alloc_skb+0x1db/0x7a0 [ 136.915414][ T6612] __alloc_skb+0x1db/0x7a0 [ 136.915496][ T6612] netlink_ack+0x136/0xb30 [ 136.915610][ T6612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.915727][ T6612] netlink_rcv_skb+0x2a4/0x4a0 [ 136.915816][ T6612] ? __pfx_genl_rcv_msg+0x10/0x10 [ 136.915887][ T6612] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 136.916006][ T6612] ? down_read+0x2be/0x330 [ 136.916081][ T6612] genl_rcv+0x28/0x40 [ 136.916142][ T6612] netlink_unicast+0x7bd/0x940 [ 136.916282][ T6612] netlink_sendmsg+0x813/0xb40 [ 136.916399][ T6612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.916514][ T6612] ? apparmor_socket_sendmsg+0x98/0x360 [ 136.916599][ T6612] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.916681][ T6612] sock_sendmsg_nosec+0x13a/0x180 [ 136.916777][ T6612] ____sys_sendmsg+0x54e/0x850 [ 136.916870][ T6612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.916971][ T6612] ? import_iovec+0x73/0xa0 [ 136.917044][ T6612] ___sys_sendmsg+0x2a5/0x360 [ 136.917117][ T6612] ? __lock_acquire+0x6df/0x2e50 [ 136.917214][ T6612] ? __pfx____sys_sendmsg+0x10/0x10 [ 136.917387][ T6612] ? __fget_files+0x2a/0x420 [ 136.917467][ T6612] ? __fget_files+0x3a2/0x420 [ 136.917563][ T6612] __x64_sys_sendmsg+0x1b1/0x290 [ 136.917668][ T6612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 136.917804][ T6612] do_syscall_64+0x166/0x520 [ 136.917858][ T6612] ? trace_irq_disable+0x3b/0x140 [ 136.917946][ T6612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.918003][ T6612] ? clear_bhb_loop+0x70/0xc0 [ 136.918075][ T6612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.918137][ T6612] RIP: 0033:0x7f9c1819e0d9 [ 136.918194][ T6612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.918246][ T6612] RSP: 002b:00007f9c1902d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.918320][ T6612] RAX: ffffffffffffffda RBX: 00007f9c18425fa0 RCX: 00007f9c1819e0d9 [ 136.918364][ T6612] RDX: 0000000000000044 RSI: 0000200000000080 RDI: 0000000000000004 [ 136.918415][ T6612] RBP: 00007f9c1902d090 R08: 0000000000000000 R09: 0000000000000000 [ 136.918456][ T6612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.918490][ T6612] R13: 00007f9c18426038 R14: 00007f9c18425fa0 R15: 00007fff83e848d8 [ 136.918584][ T6612] [ 137.035181][ T5762] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 137.239597][ T5762] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.262793][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.262919][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.297719][ T5762] usb 1-1: config 0 descriptor?? [ 137.321381][ T5762] pwc: Askey VC010 type 2 USB webcam detected. [ 137.396804][ T6615] binder: 6614:6615 ioctl c0306201 2000000001c0 returned -14 [ 137.450570][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.467802][ T5695] usb 3-1: USB disconnect, device number 17 [ 137.717402][ T5762] pwc: recv_control_msg error -32 req 02 val 2b00 [ 137.730379][ T6620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.741777][ T6620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.758327][ T5762] pwc: recv_control_msg error -32 req 02 val 2700 [ 137.774137][ T5762] pwc: recv_control_msg error -32 req 02 val 2c00 [ 137.777165][ T5762] pwc: recv_control_msg error -32 req 04 val 1000 [ 137.910965][ T5762] pwc: recv_control_msg error -71 req 04 val 1300 [ 137.913268][ T5762] pwc: recv_control_msg error -71 req 04 val 1400 [ 137.915335][ T5762] pwc: recv_control_msg error -71 req 02 val 2000 [ 137.929776][ T5762] pwc: recv_control_msg error -71 req 02 val 2100 [ 137.935395][ T5762] pwc: recv_control_msg error -71 req 04 val 1500 [ 137.938579][ T5762] pwc: recv_control_msg error -71 req 02 val 2500 [ 137.949887][ T5762] pwc: recv_control_msg error -71 req 02 val 2400 [ 137.952504][ T5762] pwc: recv_control_msg error -71 req 02 val 2600 [ 137.955118][ T5762] pwc: recv_control_msg error -71 req 02 val 2900 [ 137.983247][ T5762] pwc: recv_control_msg error -71 req 02 val 2800 [ 137.990009][ T5762] pwc: recv_control_msg error -71 req 04 val 1100 [ 137.990869][ T5762] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.023236][ T5616] Bluetooth: hci4: command 0xfc00 tx timeout [ 138.023635][ T4932] Bluetooth: hci4: Reading QCA version information failed (-110) [ 138.075807][ T5762] pwc: Registered as video103. [ 138.101102][ T5762] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 138.239145][ T5762] usb 1-1: USB disconnect, device number 24 [ 138.397345][ T6625] loop0: detected capacity change from 0 to 3904 [ 138.456500][ T6625] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 138.467400][ T6625] ldm_validate_privheads(): Disk read failed. [ 138.474241][ T6625] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be 'Y宕0E l'. [ 138.474289][ T6625] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 138.474321][ T6625] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 138.474342][ T6625] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 138.474361][ T6625] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 138.474419][ T6625] loop0: [ 138.474443][ T6625] loop0: partition table partially beyond EOD, truncated [ 138.618211][ T6630] loop7: detected capacity change from 0 to 16384 [ 138.716049][ T6631] jffs2: notice: (6631) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 139.141694][ C1] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 139.164076][ T6632] loop7: detected capacity change from 16384 to 0 [ 139.170822][ T6630] Buffer I/O error on dev loop7, logical block 1481, async page read [ 139.191738][ C1] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 139.191870][ C1] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.191960][ C1] Buffer I/O error on dev loop7, logical block 1472, async page read [ 139.191987][ C1] I/O error, dev loop7, sector 11784 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192060][ C1] Buffer I/O error on dev loop7, logical block 1473, async page read [ 139.192125][ C1] I/O error, dev loop7, sector 11792 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192203][ C1] Buffer I/O error on dev loop7, logical block 1474, async page read [ 139.192231][ C1] I/O error, dev loop7, sector 11800 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192308][ C1] Buffer I/O error on dev loop7, logical block 1475, async page read [ 139.192335][ C1] I/O error, dev loop7, sector 11808 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192415][ C1] Buffer I/O error on dev loop7, logical block 1476, async page read [ 139.192442][ C1] I/O error, dev loop7, sector 11816 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192519][ C1] Buffer I/O error on dev loop7, logical block 1477, async page read [ 139.192547][ C1] I/O error, dev loop7, sector 11824 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192627][ C1] Buffer I/O error on dev loop7, logical block 1478, async page read [ 139.192655][ C1] I/O error, dev loop7, sector 11832 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 139.192743][ C1] Buffer I/O error on dev loop7, logical block 1479, async page read [ 139.192821][ C1] Buffer I/O error on dev loop7, logical block 1480, async page read [ 139.252830][ T5762] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 139.433227][ T5762] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 139.459923][ T5762] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.459999][ T5762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.460043][ T5762] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.460073][ T5762] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.460123][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.625287][ T4932] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 139.625415][ T4932] Bluetooth: hci1: Injecting HCI hardware error event [ 139.633732][ T4932] Bluetooth: hci1: hardware error 0x00 [ 139.899012][ T6648] FAULT_INJECTION: forcing a failure. [ 139.899012][ T6648] name failslab, interval 1, probability 0, space 0, times 0 [ 139.914379][ T6648] CPU: 1 UID: 0 PID: 6648 Comm: syz.2.294 Not tainted syzkaller #0 PREEMPT(full) [ 139.914414][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.914429][ T6648] Call Trace: [ 139.914439][ T6648] [ 139.914449][ T6648] dump_stack_lvl+0xe8/0x150 [ 139.914484][ T6648] should_fail_ex+0x410/0x560 [ 139.914522][ T6648] should_failslab+0xa8/0x100 [ 139.914545][ T6648] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 139.914575][ T6648] kmem_cache_alloc_noprof+0xa1/0x600 [ 139.914604][ T6648] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 139.914632][ T6648] ? kmem_cache_alloc_noprof+0x156/0x600 [ 139.914669][ T6648] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 139.914706][ T6648] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 139.914748][ T6648] mmu_topup_memory_caches+0x21/0x170 [ 139.914784][ T6648] kvm_mmu_load+0x9d/0x21e0 [ 139.914821][ T6648] ? kvm_msr_allowed+0x9a/0x490 [ 139.914854][ T6648] ? kvm_msr_allowed+0x9a/0x490 [ 139.914888][ T6648] ? kvm_msr_allowed+0x9a/0x490 [ 139.914918][ T6648] ? kvm_msr_allowed+0x3f4/0x490 [ 139.914950][ T6648] ? kvm_msr_allowed+0x9a/0x490 [ 139.914982][ T6648] ? kvm_apic_has_interrupt+0x740/0x770 [ 139.915021][ T6648] vcpu_run+0x4f68/0x79b0 [ 139.915082][ T6648] ? update_se+0x90/0x1020 [ 139.915148][ T6648] ? __pfx_vcpu_run+0x10/0x10 [ 139.915181][ T6648] ? lock_acquire+0x115/0x350 [ 139.915232][ T6648] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 139.915268][ T6648] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 139.915302][ T6648] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 139.915341][ T6648] kvm_vcpu_ioctl+0xa61/0xfd0 [ 139.915383][ T6648] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.915415][ T6648] ? hook_file_ioctl+0x1f2/0x600 [ 139.915469][ T6648] ? __fget_files+0x2a/0x420 [ 139.915500][ T6648] ? __fget_files+0x2a/0x420 [ 139.915525][ T6648] ? __fget_files+0x3a2/0x420 [ 139.915549][ T6648] ? __fget_files+0x2a/0x420 [ 139.915579][ T6648] ? bpf_lsm_file_ioctl+0x9/0x20 [ 139.915607][ T6648] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.915642][ T6648] __se_sys_ioctl+0xfc/0x170 [ 139.915687][ T6648] do_syscall_64+0x166/0x520 [ 139.915710][ T6648] ? trace_irq_disable+0x3b/0x140 [ 139.915743][ T6648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.915768][ T6648] ? clear_bhb_loop+0x70/0xc0 [ 139.915796][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.915820][ T6648] RIP: 0033:0x7f9751d9e0d9 [ 139.915845][ T6648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.915865][ T6648] RSP: 002b:00007f9752b8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.915889][ T6648] RAX: ffffffffffffffda RBX: 00007f9752026090 RCX: 00007f9751d9e0d9 [ 139.915906][ T6648] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 139.915920][ T6648] RBP: 00007f9752b8e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.915934][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 139.915948][ T6648] R13: 00007f9752026128 R14: 00007f9752026090 R15: 00007ffd0f8621c8 [ 139.915984][ T6648] [ 139.935935][ T5719] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 140.126117][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 140.153456][ T5719] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 140.207459][ T5719] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 140.207524][ T5719] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 140.207553][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 140.207582][ T5719] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 140.207610][ T5719] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.207667][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.441313][ T6652] nvmet: adding nsid 1 to subsystem subsys1 [ 140.548764][ T5719] usb 4-1: usb_control_msg returned -32 [ 140.556276][ T5719] usbtmc 4-1:16.0: can't read capabilities [ 140.698879][ T6657] jffs2: notice: (6657) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.879660][ T6662] binder: 6661:6662 ioctl c0306201 2000000001c0 returned -14 [ 140.967728][ T6666] loop0: detected capacity change from 0 to 2049 [ 141.026681][ T6666] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 141.026743][ T6666] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 141.026776][ T6666] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 141.026935][ T6666] loop0: [ 141.312030][ T6671] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 141.329534][ T6671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.338639][ T6671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.702347][ T4932] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 142.014582][ T923] usb 1-1: USB disconnect, device number 25 [ 142.142911][ T5719] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 142.212727][ T6680] loop0: detected capacity change from 0 to 2049 [ 142.248561][ T6680] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 142.248619][ T6680] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 142.248635][ T6680] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 142.248827][ T6680] loop0: [ 142.292169][ T5719] usb 2-1: Using ep0 maxpacket: 32 [ 142.299235][ T5719] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 142.310411][ T5719] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.321519][ T5719] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 142.336669][ T5719] usb 2-1: config 0 interface 0 has no altsetting 0 [ 142.343535][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.375656][ T5719] usb 2-1: config 0 descriptor?? [ 142.599874][ T6682] 9p: Bad value for 'wfdno' [ 142.792399][ T5719] hid_parser_main: 234 callbacks suppressed [ 142.802150][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.809604][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.816957][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.824518][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.831896][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.839331][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.846727][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.854159][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.861423][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.868787][ T5719] logitech 0003:046D:C286.000A: unknown main item tag 0x0 [ 142.881192][ T5719] logitech 0003:046D:C286.000A: hidraw0: USB HID v80.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 142.892860][ T5719] logitech 0003:046D:C286.000A: no inputs found [ 142.968299][ T5762] usb 4-1: USB disconnect, device number 25 [ 143.018650][ T190] usb 2-1: USB disconnect, device number 20 [ 143.165765][ T6689] fido_id[6689]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 143.586052][ T5719] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 143.657807][ T6709] netlink: 44 bytes leftover after parsing attributes in process `syz.1.318'. [ 143.743255][ T5719] usb 3-1: Using ep0 maxpacket: 16 [ 143.749113][ T5719] usb 3-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 143.763001][ T5719] usb 3-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 143.773807][ T5719] usb 3-1: config 0 interface 0 altsetting 219 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.787323][ T5719] usb 3-1: config 0 interface 0 has no altsetting 0 [ 143.787380][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.812795][ T5719] usb 3-1: config 0 descriptor?? [ 143.831511][ T5719] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 143.964445][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.321'. [ 144.152932][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.325'. [ 144.381241][ T6733] netlink: 'syz.3.327': attribute type 11 has an invalid length. [ 144.401841][ T6731] socket: no more sockets [ 144.943436][ T6743] loop0: detected capacity change from 0 to 3904 [ 144.974486][ T6743] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 144.974543][ T6743] ldm_validate_privheads(): Disk read failed. [ 144.983169][ T6743] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be 'Y宕0E l'. [ 144.983248][ T6743] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 144.983292][ T6743] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 144.983348][ T6743] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 144.983390][ T6743] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 144.983534][ T6743] loop0: [ 144.983580][ T6743] loop0: partition table partially beyond EOD, truncated [ 145.154917][ T6746] jffs2: notice: (6746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.503037][ T5719] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 145.673500][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 145.679596][ T5719] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.690205][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.690260][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.690320][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.690373][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.741418][ T5719] usb 2-1: config 0 descriptor?? [ 146.162331][ T6749] netlink: zone id is out of range [ 146.167726][ T6749] netlink: zone id is out of range [ 146.167798][ T6749] netlink: zone id is out of range [ 146.167813][ T6749] netlink: zone id is out of range [ 146.167826][ T6749] netlink: zone id is out of range [ 146.167839][ T6749] netlink: zone id is out of range [ 146.168113][ T6749] netlink: zone id is out of range [ 146.168130][ T6749] netlink: zone id is out of range [ 146.168144][ T6749] netlink: zone id is out of range [ 146.222053][ T6763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.333'. [ 146.263973][ T5719] microsoft 0003:045E:07DA.000B: ignoring exceeding usage max [ 146.293003][ T5719] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000B/input/input9 [ 146.398987][ T5719] microsoft 0003:045E:07DA.000B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 146.499103][ T5719] usb 2-1: USB disconnect, device number 21 [ 146.518433][ T190] usb 3-1: USB disconnect, device number 18 [ 146.754977][ T6773] binder: 6771:6773 ioctl c0306201 2000000001c0 returned -14 [ 146.785233][ T6770] fido_id[6770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 147.606741][ T6786] fuse: Unknown parameter 'uid<00000000000000016832' [ 147.882234][ T5719] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 147.999101][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.348'. [ 148.063086][ T5719] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 148.070966][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.071126][ T5719] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.071191][ T5719] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 148.071261][ T5719] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.071375][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.617300][ T6814] loop0: detected capacity change from 0 to 2049 [ 148.675211][ T6814] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 148.686574][ T6814] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 148.695429][ T6814] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 148.702820][ T6814] loop0: [ 148.875945][ T6820] binder: 6819:6820 ioctl c0306201 2000000001c0 returned -14 [ 149.132238][ T923] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 149.282460][ T923] usb 1-1: Using ep0 maxpacket: 32 [ 149.294468][ T923] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.294552][ T923] usb 1-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 149.313526][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.313591][ T923] usb 1-1: Product: syz [ 149.313612][ T923] usb 1-1: Manufacturer: syz [ 149.313668][ T923] usb 1-1: SerialNumber: syz [ 149.590019][ T923] usb 1-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 149.610855][ T923] usb 1-1: unit 37 not found! [ 149.610930][ T923] usb 1-1: unit 0 not found! [ 149.848200][ T923] usb 1-1: USB disconnect, device number 26 [ 149.940538][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.663394][ T190] usb 2-1: USB disconnect, device number 22 [ 150.874876][ T6850] fuse: Unknown parameter '0000014007861970944000000000000000000000010' [ 151.353257][ T6859] binder: 6858:6859 ioctl c0306201 2000000001c0 returned -14 [ 151.512702][ T6865] loop0: detected capacity change from 0 to 3904 [ 151.579719][ T6865] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 151.579786][ T6865] ldm_validate_privheads(): Disk read failed. [ 151.594046][ T6865] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 151.603643][ T6865] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 151.603710][ T6865] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 151.609335][ T6865] ldm_parse_vmdb(): Cannot find the VMDB, database may be corrupt. [ 151.609496][ T6865] loop0: [ 151.609557][ T6865] loop0: partition table partially beyond EOD, truncated [ 152.152208][ T923] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 152.332628][ T923] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 152.348621][ T923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.348707][ T923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 152.348767][ T923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 152.348858][ T923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.348995][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.644851][ T6879] xt_l2tp: missing protocol rule (udp|l2tpip) [ 152.792221][ T6883] jffs2: notice: (6883) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 152.912159][ T5695] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 153.067355][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 153.074353][ T5695] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 153.085011][ T5695] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 153.085059][ T5695] usb 3-1: config 0 has no interface number 0 [ 153.085121][ T5695] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 153.085154][ T5695] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 29520, setting to 1024 [ 153.085188][ T5695] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 153.134666][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.134711][ T5695] usb 3-1: Product: syz [ 153.134752][ T5695] usb 3-1: Manufacturer: syz [ 153.134774][ T5695] usb 3-1: SerialNumber: syz [ 153.163593][ T5695] usb 3-1: config 0 descriptor?? [ 153.169552][ T6879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.169836][ T6879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.388471][ T6879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.388742][ T6879] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 153.633089][ T5695] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 153.981530][ T6910] ima: policy update failed [ 153.988655][ T31] audit: type=1802 audit(1787183941.487:3): pid=6910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.387" res=0 errno=0 [ 154.140257][ T6917] jffs2: notice: (6917) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 154.741468][ T6931] wlan0 speed is unknown, defaulting to 1000 [ 154.952175][ T25] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 154.998303][ T190] usb 4-1: USB disconnect, device number 26 [ 155.105994][ T25] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 155.126971][ T25] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 155.127038][ T25] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 155.127060][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 155.127213][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 155.127302][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 155.154072][ T25] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 155.154157][ T25] usb 1-1: Product: syz [ 155.154200][ T25] usb 1-1: Manufacturer: syz [ 155.232481][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 155.232536][ T25] cdc_wdm 1-1:1.0: skipping garbage [ 155.232808][ T25] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 155.481786][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.494468][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.561466][ T6932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.599444][ T25] usb 1-1: USB disconnect, device number 27 [ 155.729127][ T5695] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 155.729399][ T5695] asix 3-1:0.34: probe with driver asix failed with error -71 [ 155.758286][ T5695] usb 3-1: USB disconnect, device number 19 [ 155.946498][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 156.104420][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 156.104491][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 156.124655][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.124725][ T10] usb 2-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.124774][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 156.159701][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.159750][ T10] usb 2-1: Product: syz [ 156.159785][ T10] usb 2-1: Manufacturer: syz [ 156.159806][ T10] usb 2-1: SerialNumber: syz [ 156.404988][ T10] cdc_ether 2-1:1.0: missing cdc ether descriptor [ 156.462541][ T10] usb 2-1: USB disconnect, device number 23 [ 156.993844][ T5719] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 157.012559][ T923] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 157.153534][ T5719] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 157.169240][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.169316][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.169399][ T5719] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.169484][ T5719] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.169610][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.182589][ T923] usb 1-1: Using ep0 maxpacket: 16 [ 157.184950][ T923] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 157.209659][ T923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 157.209774][ T923] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 157.209838][ T923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 36816, setting to 1024 [ 157.209911][ T923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 157.209982][ T923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12150, setting to 1024 [ 157.210055][ T923] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 157.259304][ T923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.259459][ T923] usb 1-1: Product: syz [ 157.259502][ T923] usb 1-1: Manufacturer: syz [ 157.259546][ T923] usb 1-1: SerialNumber: syz [ 157.340282][ T923] usb 1-1: config 0 descriptor?? [ 157.354678][ T6959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.355228][ T6959] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 157.470615][ T923] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 157.470802][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 157.471137][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 157.503030][ T6969] binder: 6968:6969 ioctl c0306201 2000000001c0 returned -14 [ 157.662572][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 157.822285][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 157.828262][ T10] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 157.839565][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 157.839627][ T10] usb 4-1: config 0 has no interface number 0 [ 157.839676][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.839720][ T10] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.839767][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.891983][ T10] usb 4-1: config 0 descriptor?? [ 158.331442][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.346756][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.561328][ T6993] xt_l2tp: missing protocol rule (udp|l2tpip) [ 158.577983][ T10] uclogic 0003:28BD:0094.000C: pen parameters not found [ 158.587081][ T10] uclogic 0003:28BD:0094.000C: interface is invalid, ignoring [ 158.639043][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.648321][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.681050][ T5277] mcba_usb 1-1:0.0 can0: bit-timing not yet defined [ 158.822298][ T5695] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 158.869579][ T190] usb 4-1: USB disconnect, device number 27 [ 158.972174][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 158.980338][ T5695] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 158.991786][ T5695] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 159.000376][ T5695] usb 2-1: config 0 has no interface number 0 [ 159.000438][ T5695] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 159.000469][ T5695] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 29520, setting to 1024 [ 159.000502][ T5695] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 159.042970][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.051342][ T5695] usb 2-1: Product: syz [ 159.055962][ T5695] usb 2-1: Manufacturer: syz [ 159.060675][ T5695] usb 2-1: SerialNumber: syz [ 159.071292][ T5695] usb 2-1: config 0 descriptor?? [ 159.078517][ T6993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 159.089578][ T6993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 159.319269][ T6993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 159.319476][ T6993] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 159.545642][ T5695] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.612207][ T190] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 159.715998][ T10] usb 1-1: USB disconnect, device number 28 [ 159.744614][ T10] mcba_usb 1-1:0.0 can0: device disconnected [ 159.797271][ T190] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 159.821229][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.821306][ T190] usb 4-1: Product: syz [ 159.821345][ T190] usb 4-1: Manufacturer: syz [ 159.821367][ T190] usb 4-1: SerialNumber: syz [ 159.878300][ T190] usb 4-1: config 0 descriptor?? [ 159.895126][ T190] hub 4-1:0.0: bad descriptor, ignoring hub [ 159.895176][ T190] hub 4-1:0.0: probe with driver hub failed with error -5 [ 159.919945][ T190] f81232 4-1:0.0: f81534a converter detected [ 159.921367][ T5719] usb 3-1: USB disconnect, device number 20 [ 160.097237][ T190] usb 4-1: f81534a converter now attached to ttyUSB0 [ 160.478142][ T10] usb 4-1: USB disconnect, device number 28 [ 160.503569][ T10] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 160.512589][ T10] f81232 4-1:0.0: device disconnected [ 160.596022][ T7019] binder: 7018:7019 ioctl c0306201 2000000001c0 returned -14 [ 161.114940][ T7031] FAULT_INJECTION: forcing a failure. [ 161.114940][ T7031] name failslab, interval 1, probability 0, space 0, times 0 [ 161.115008][ T7031] CPU: 1 UID: 0 PID: 7031 Comm: syz.0.421 Not tainted syzkaller #0 PREEMPT(full) [ 161.115034][ T7031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.115099][ T7031] Call Trace: [ 161.115124][ T7031] [ 161.115162][ T7031] dump_stack_lvl+0xe8/0x150 [ 161.115274][ T7031] should_fail_ex+0x410/0x560 [ 161.115382][ T7031] should_failslab+0xa8/0x100 [ 161.115446][ T7031] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 161.115529][ T7031] kmem_cache_alloc_noprof+0xa1/0x600 [ 161.115622][ T7031] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 161.115697][ T7031] ? kmem_cache_alloc_noprof+0x156/0x600 [ 161.115780][ T7031] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 161.115883][ T7031] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 161.115990][ T7031] mmu_topup_memory_caches+0x21/0x170 [ 161.116079][ T7031] kvm_mmu_load+0x9d/0x21e0 [ 161.116174][ T7031] ? kvm_msr_allowed+0x9a/0x490 [ 161.116258][ T7031] ? kvm_msr_allowed+0x9a/0x490 [ 161.116343][ T7031] ? kvm_msr_allowed+0x9a/0x490 [ 161.116426][ T7031] ? kvm_msr_allowed+0x3f4/0x490 [ 161.116510][ T7031] ? kvm_msr_allowed+0x9a/0x490 [ 161.116619][ T7031] ? kvm_apic_has_interrupt+0x740/0x770 [ 161.116729][ T7031] vcpu_run+0x4f68/0x79b0 [ 161.116897][ T7031] ? update_se+0x90/0x1020 [ 161.117066][ T7031] ? __pfx_vcpu_run+0x10/0x10 [ 161.117151][ T7031] ? lock_acquire+0x115/0x350 [ 161.117277][ T7031] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 161.117371][ T7031] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 161.117462][ T7031] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 161.117567][ T7031] kvm_vcpu_ioctl+0xa61/0xfd0 [ 161.117673][ T7031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 161.117758][ T7031] ? hook_file_ioctl+0x1f2/0x600 [ 161.117894][ T7031] ? __fget_files+0x2a/0x420 [ 161.117990][ T7031] ? __fget_files+0x2a/0x420 [ 161.118062][ T7031] ? __fget_files+0x3a2/0x420 [ 161.118132][ T7031] ? __fget_files+0x2a/0x420 [ 161.118207][ T7031] ? bpf_lsm_file_ioctl+0x9/0x20 [ 161.118280][ T7031] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 161.118373][ T7031] __se_sys_ioctl+0xfc/0x170 [ 161.118465][ T7031] do_syscall_64+0x166/0x520 [ 161.118519][ T7031] ? trace_irq_disable+0x3b/0x140 [ 161.118615][ T7031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.118677][ T7031] ? clear_bhb_loop+0x70/0xc0 [ 161.118743][ T7031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.118806][ T7031] RIP: 0033:0x7f07b7f9e0d9 [ 161.118867][ T7031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.118912][ T7031] RSP: 002b:00007f07b8e52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.118982][ T7031] RAX: ffffffffffffffda RBX: 00007f07b8226090 RCX: 00007f07b7f9e0d9 [ 161.119026][ T7031] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 161.119059][ T7031] RBP: 00007f07b8e52090 R08: 0000000000000000 R09: 0000000000000000 [ 161.119093][ T7031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 161.119133][ T7031] R13: 00007f07b8226128 R14: 00007f07b8226090 R15: 00007ffe393029d8 [ 161.119219][ T7031] [ 161.456214][ T6993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.473534][ T6993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.726497][ T5695] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 161.726751][ T5695] asix 2-1:0.34: probe with driver asix failed with error -71 [ 161.761938][ T5695] usb 2-1: USB disconnect, device number 24 [ 162.070052][ T7049] jffs2: notice: (7049) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 162.232221][ T5695] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 162.304447][ T7054] binder: 7053:7054 ioctl c0306201 2000000001c0 returned -14 [ 162.372213][ T5695] usb 1-1: device descriptor read/64, error -71 [ 162.594244][ T7064] net_ratelimit: 75 callbacks suppressed [ 162.596463][ T7064] socket: no more sockets [ 162.614925][ T5695] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 162.772525][ T5695] usb 1-1: device descriptor read/64, error -71 [ 162.884345][ T5695] usb usb1-port1: attempt power cycle [ 163.232892][ T5695] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 163.252781][ T5695] usb 1-1: device descriptor read/8, error -71 [ 163.262845][ T7073] netlink: 324 bytes leftover after parsing attributes in process `syz.2.439'. [ 163.460272][ T7079] loop0: detected capacity change from 0 to 3904 [ 163.492165][ T5695] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 163.512927][ T5695] usb 1-1: device descriptor read/8, error -71 [ 163.525744][ T7079] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 163.525812][ T7079] ldm_validate_privheads(): Disk read failed. [ 163.532404][ T7079] ldm_parse_tocblock(): TOCBLOCK's first bitmap is 'config', should be 'Y宕0E l'. [ 163.532486][ T7079] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 163.560807][ T7079] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 163.560870][ T7079] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 163.560911][ T7079] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 163.561056][ T7079] loop0: [ 163.561101][ T7079] loop0: partition table partially beyond EOD, truncated [ 163.622998][ T5695] usb usb1-port1: unable to enumerate USB device [ 163.701677][ T7081] xt_l2tp: missing protocol rule (udp|l2tpip) [ 163.890093][ T7083] jffs2: notice: (7083) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.962195][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 164.112377][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 164.113955][ T25] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 164.123436][ T25] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 164.123520][ T25] usb 2-1: config 0 has no interface number 0 [ 164.123635][ T25] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 164.123719][ T25] usb 2-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid maxpacket 29520, setting to 1024 [ 164.123795][ T25] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 164.147537][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.147622][ T25] usb 2-1: Product: syz [ 164.147664][ T25] usb 2-1: Manufacturer: syz [ 164.147716][ T25] usb 2-1: SerialNumber: syz [ 164.202799][ T25] usb 2-1: config 0 descriptor?? [ 164.210595][ T7081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.211165][ T7081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.367167][ T7092] jffs2: notice: (7092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 164.424926][ T7081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.425907][ T7081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.617949][ T7097] binder: 7096:7097 ioctl c0306201 2000000001c0 returned -14 [ 164.641858][ T25] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 165.174312][ T7105] netlink: 132 bytes leftover after parsing attributes in process `syz.0.452'. [ 165.864341][ T7115] FAULT_INJECTION: forcing a failure. [ 165.864341][ T7115] name failslab, interval 1, probability 0, space 0, times 0 [ 165.881053][ T7115] CPU: 0 UID: 0 PID: 7115 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT(full) [ 165.881089][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 165.881105][ T7115] Call Trace: [ 165.881116][ T7115] [ 165.881127][ T7115] dump_stack_lvl+0xe8/0x150 [ 165.881166][ T7115] should_fail_ex+0x410/0x560 [ 165.881208][ T7115] should_failslab+0xa8/0x100 [ 165.881233][ T7115] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 165.881268][ T7115] kmem_cache_alloc_noprof+0xa1/0x600 [ 165.881300][ T7115] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 165.881331][ T7115] ? kmem_cache_alloc_noprof+0x156/0x600 [ 165.881363][ T7115] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 165.881404][ T7115] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 165.881450][ T7115] mmu_topup_memory_caches+0x21/0x170 [ 165.881489][ T7115] kvm_mmu_load+0x9d/0x21e0 [ 165.881527][ T7115] ? kvm_msr_allowed+0x9a/0x490 [ 165.881563][ T7115] ? kvm_msr_allowed+0x9a/0x490 [ 165.881599][ T7115] ? kvm_msr_allowed+0x9a/0x490 [ 165.881632][ T7115] ? kvm_msr_allowed+0x3f4/0x490 [ 165.881667][ T7115] ? kvm_msr_allowed+0x9a/0x490 [ 165.881701][ T7115] ? kvm_apic_has_interrupt+0x740/0x770 [ 165.881743][ T7115] vcpu_run+0x4f68/0x79b0 [ 165.881813][ T7115] ? update_se+0x90/0x1020 [ 165.881883][ T7115] ? __pfx_vcpu_run+0x10/0x10 [ 165.881916][ T7115] ? lock_acquire+0x115/0x350 [ 165.881970][ T7115] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 165.882010][ T7115] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 165.882057][ T7115] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 165.882107][ T7115] kvm_vcpu_ioctl+0xa61/0xfd0 [ 165.882148][ T7115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.882180][ T7115] ? hook_file_ioctl+0x1f2/0x600 [ 165.882237][ T7115] ? __fget_files+0x2a/0x420 [ 165.882270][ T7115] ? __fget_files+0x2a/0x420 [ 165.882296][ T7115] ? __fget_files+0x3a2/0x420 [ 165.882322][ T7115] ? __fget_files+0x2a/0x420 [ 165.882354][ T7115] ? bpf_lsm_file_ioctl+0x9/0x20 [ 165.882383][ T7115] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 165.882420][ T7115] __se_sys_ioctl+0xfc/0x170 [ 165.882458][ T7115] do_syscall_64+0x166/0x520 [ 165.882481][ T7115] ? trace_irq_disable+0x3b/0x140 [ 165.882515][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.882541][ T7115] ? clear_bhb_loop+0x70/0xc0 [ 165.882570][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.882596][ T7115] RIP: 0033:0x7f9751d9e0d9 [ 165.882619][ T7115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.882640][ T7115] RSP: 002b:00007f9752baf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.882667][ T7115] RAX: ffffffffffffffda RBX: 00007f9752025fa0 RCX: 00007f9751d9e0d9 [ 165.882685][ T7115] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 165.882700][ T7115] RBP: 00007f9752baf090 R08: 0000000000000000 R09: 0000000000000000 [ 165.882716][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 165.882731][ T7115] R13: 00007f9752026038 R14: 00007f9752025fa0 R15: 00007ffd0f8621c8 [ 165.882769][ T7115] [ 166.043302][ T923] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 166.264231][ T923] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 166.271605][ T923] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.271777][ T923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 166.271841][ T923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 166.271913][ T923] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 166.272029][ T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.495587][ T7127] loop0: detected capacity change from 0 to 2049 [ 166.516052][ T7081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.518861][ T7081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.546434][ T7127] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 166.546500][ T7127] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 166.546624][ T7127] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 166.546948][ T7127] loop0: [ 166.739518][ T25] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 166.741886][ T25] asix 2-1:0.34: probe with driver asix failed with error -71 [ 166.795039][ T923] gud 4-1:1.0: probe with driver gud failed with error -5 [ 166.811256][ T25] usb 2-1: USB disconnect, device number 25 [ 167.455310][ T5765] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 167.612209][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 167.614450][ T5765] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.621752][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 167.621847][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.639171][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.639257][ T5765] usb 3-1: Product: syz [ 167.639307][ T5765] usb 3-1: Manufacturer: syz [ 167.639343][ T5765] usb 3-1: SerialNumber: syz [ 167.669332][ T5765] usb 3-1: config 0 descriptor?? [ 167.698565][ T5765] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 167.698641][ T5765] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 167.807421][ T7144] netlink: 'syz.1.466': attribute type 5 has an invalid length. [ 168.149758][ T7146] binder: 7145:7146 ioctl c0306201 2000000001c0 returned -14 [ 168.303897][ T5765] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 168.305833][ T5765] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 168.807174][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 168.807399][ T7150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 168.842458][ T923] usb 4-1: USB disconnect, device number 29 [ 168.920770][ T5765] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 168.932659][ T5765] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 168.934310][ T5765] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 168.938398][ T5765] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 169.169992][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.470'. [ 169.577805][ T5765] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 169.599203][ T5765] usb 3-1: USB disconnect, device number 21 [ 169.606417][ T5695] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 169.763485][ T5695] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 169.776134][ T5695] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 169.785844][ T5695] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 169.785875][ T5695] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 169.785925][ T5695] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 169.785955][ T5695] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 169.835515][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 169.835564][ T5695] usb 4-1: Product: syz [ 169.835600][ T5695] usb 4-1: Manufacturer: syz [ 169.854619][ T7170] netlink: 14 bytes leftover after parsing attributes in process `syz.0.475'. [ 169.877594][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 169.877635][ T5695] cdc_wdm 4-1:1.0: skipping garbage [ 169.877736][ T5695] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 170.021809][ T7172] binder: 7171:7172 ioctl c0306201 2000000001c0 returned -14 [ 170.305469][ T7158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.332457][ T10] usb 4-1: USB disconnect, device number 30 [ 170.705530][ T5695] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 170.865180][ T5695] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 170.880717][ T5695] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.880792][ T5695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.880836][ T5695] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.880868][ T5695] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.880921][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.016284][ T7182] jffs2: notice: (7182) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.231977][ T7187] FAULT_INJECTION: forcing a failure. [ 171.231977][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 171.246184][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.0.482 Not tainted syzkaller #0 PREEMPT(full) [ 171.246219][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.246235][ T7187] Call Trace: [ 171.246245][ T7187] [ 171.246260][ T7187] dump_stack_lvl+0xe8/0x150 [ 171.246299][ T7187] should_fail_ex+0x410/0x560 [ 171.246340][ T7187] should_failslab+0xa8/0x100 [ 171.246364][ T7187] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 171.246399][ T7187] kmem_cache_alloc_noprof+0xa1/0x600 [ 171.246431][ T7187] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 171.246462][ T7187] ? kmem_cache_alloc_noprof+0x156/0x600 [ 171.246493][ T7187] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 171.246534][ T7187] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 171.246580][ T7187] mmu_topup_memory_caches+0x21/0x170 [ 171.246628][ T7187] kvm_mmu_load+0x9d/0x21e0 [ 171.246667][ T7187] ? kvm_msr_allowed+0x9a/0x490 [ 171.246702][ T7187] ? kvm_msr_allowed+0x9a/0x490 [ 171.246737][ T7187] ? kvm_msr_allowed+0x9a/0x490 [ 171.246770][ T7187] ? kvm_msr_allowed+0x3f4/0x490 [ 171.246805][ T7187] ? kvm_msr_allowed+0x9a/0x490 [ 171.246840][ T7187] ? kvm_apic_has_interrupt+0x740/0x770 [ 171.246881][ T7187] vcpu_run+0x4f68/0x79b0 [ 171.246951][ T7187] ? update_se+0x90/0x1020 [ 171.247022][ T7187] ? __pfx_vcpu_run+0x10/0x10 [ 171.247054][ T7187] ? lock_acquire+0x115/0x350 [ 171.247108][ T7187] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 171.247147][ T7187] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 171.247183][ T7187] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 171.247227][ T7187] kvm_vcpu_ioctl+0xa61/0xfd0 [ 171.247270][ T7187] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.247305][ T7187] ? hook_file_ioctl+0x1f2/0x600 [ 171.247361][ T7187] ? __fget_files+0x2a/0x420 [ 171.247393][ T7187] ? __fget_files+0x2a/0x420 [ 171.247420][ T7187] ? __fget_files+0x3a2/0x420 [ 171.247446][ T7187] ? __fget_files+0x2a/0x420 [ 171.247478][ T7187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.247507][ T7187] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 171.247544][ T7187] __se_sys_ioctl+0xfc/0x170 [ 171.247582][ T7187] do_syscall_64+0x166/0x520 [ 171.247612][ T7187] ? trace_irq_disable+0x3b/0x140 [ 171.247647][ T7187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.247671][ T7187] ? clear_bhb_loop+0x70/0xc0 [ 171.247702][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.247727][ T7187] RIP: 0033:0x7f07b7f9e0d9 [ 171.247749][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.247771][ T7187] RSP: 002b:00007f07b8e73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.247795][ T7187] RAX: ffffffffffffffda RBX: 00007f07b8225fa0 RCX: 00007f07b7f9e0d9 [ 171.247812][ T7187] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 171.247827][ T7187] RBP: 00007f07b8e73090 R08: 0000000000000000 R09: 0000000000000000 [ 171.247841][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 171.247855][ T7187] R13: 00007f07b8226038 R14: 00007f07b8225fa0 R15: 00007ffe393029d8 [ 171.247893][ T7187] [ 171.282782][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 171.369715][ T5695] gud 3-1:1.0: probe with driver gud failed with error -5 [ 171.601381][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 171.612426][ T10] usb 4-1: too many endpoints for config 1 interface 0 altsetting 13: 65, using maximum allowed: 30 [ 171.612500][ T10] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 171.612564][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 171.653799][ T10] usb 4-1: string descriptor 0 read error: -22 [ 171.660404][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.109565][ T10] hid_parser_main: 15 callbacks suppressed [ 172.116687][ T10] logitech 0003:046D:C50C.000D: unknown main item tag 0x2 [ 172.116734][ T10] logitech 0003:046D:C50C.000D: unexpected long global item [ 172.117502][ T10] logitech 0003:046D:C50C.000D: parse failed [ 172.117606][ T10] logitech 0003:046D:C50C.000D: probe with driver logitech failed with error -22 [ 172.963953][ T7203] capability: warning: `syz.0.486' uses 32-bit capabilities (legacy support in use) [ 173.054486][ T7205] binder: 7204:7205 ioctl c0306201 2000000001c0 returned -14 [ 173.539264][ T5695] usb 3-1: USB disconnect, device number 22 [ 174.062231][ T7197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.078617][ T923] usb 4-1: USB disconnect, device number 31 [ 174.165904][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.318503][ T7225] binder: 7224:7225 ioctl c0306201 2000000001c0 returned -14 [ 174.334568][ T7227] netlink: 132 bytes leftover after parsing attributes in process `syz.0.496'. [ 174.574442][ T923] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 174.652194][ T10] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 174.712196][ T923] usb 4-1: device descriptor read/64, error -71 [ 174.806931][ T10] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 174.818609][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.818680][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 174.818721][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 174.818752][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.818801][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.929139][ T7233] binder: 7232:7233 ioctl c0306201 2000000001c0 returned -14 [ 174.952151][ T923] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 175.082158][ T923] usb 4-1: device descriptor read/64, error -71 [ 175.192869][ T923] usb usb4-port1: attempt power cycle [ 175.309853][ T10] gud 1-1:1.0: probe with driver gud failed with error -5 [ 175.392205][ T5719] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 175.532200][ T923] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 175.543692][ T5719] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 175.554495][ T923] usb 4-1: device descriptor read/8, error -71 [ 175.561583][ T5719] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 175.561646][ T5719] usb 3-1: config 0 has no interface number 0 [ 175.561731][ T5719] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 175.561807][ T5719] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 175.561902][ T5719] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 175.574579][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 175.574610][ T5719] usb 3-1: Product: syz [ 175.574628][ T5719] usb 3-1: SerialNumber: syz [ 175.590626][ T5719] usb 3-1: config 0 descriptor?? [ 175.635372][ T5719] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 175.652811][ T5719] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10 [ 175.792241][ T923] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 175.816061][ T923] usb 4-1: device descriptor read/8, error -71 [ 175.823772][ T7237] comedi comedi3: pcmmio: a I/O base address must be specified [ 175.922710][ T923] usb usb4-port1: unable to enumerate USB device [ 176.254368][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.256092][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.256435][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.256773][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.257100][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.257434][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.257763][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.258077][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.258410][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.258769][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 176.293134][ T5719] usb 3-1: USB disconnect, device number 23 [ 176.293360][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 176.370898][ T5719] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 177.480716][ T7252] FAULT_INJECTION: forcing a failure. [ 177.480716][ T7252] name failslab, interval 1, probability 0, space 0, times 0 [ 177.480792][ T7252] CPU: 1 UID: 0 PID: 7252 Comm: syz.3.504 Not tainted syzkaller #0 PREEMPT(full) [ 177.480819][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.480872][ T7252] Call Trace: [ 177.480905][ T7252] [ 177.480946][ T7252] dump_stack_lvl+0xe8/0x150 [ 177.481033][ T7252] should_fail_ex+0x410/0x560 [ 177.481150][ T7252] should_failslab+0xa8/0x100 [ 177.481212][ T7252] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 177.481296][ T7252] kmem_cache_alloc_noprof+0xa1/0x600 [ 177.481373][ T7252] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 177.481454][ T7252] ? kmem_cache_alloc_noprof+0x156/0x600 [ 177.481527][ T7252] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 177.481638][ T7252] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 177.481753][ T7252] mmu_topup_memory_caches+0x21/0x170 [ 177.481846][ T7252] kvm_mmu_load+0x9d/0x21e0 [ 177.481934][ T7252] ? kvm_msr_allowed+0x9a/0x490 [ 177.482025][ T7252] ? kvm_msr_allowed+0x9a/0x490 [ 177.482110][ T7252] ? kvm_msr_allowed+0x9a/0x490 [ 177.482196][ T7252] ? kvm_msr_allowed+0x3f4/0x490 [ 177.482280][ T7252] ? kvm_msr_allowed+0x9a/0x490 [ 177.482364][ T7252] ? kvm_apic_has_interrupt+0x740/0x770 [ 177.482489][ T7252] vcpu_run+0x4f68/0x79b0 [ 177.482666][ T7252] ? update_se+0x90/0x1020 [ 177.482836][ T7252] ? __pfx_vcpu_run+0x10/0x10 [ 177.482919][ T7252] ? lock_acquire+0x115/0x350 [ 177.483044][ T7252] kvm_arch_vcpu_ioctl_run+0xe87/0x19c0 [ 177.483190][ T7252] ? kvm_arch_vcpu_ioctl_run+0x1f8/0x19c0 [ 177.483282][ T7252] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 177.483386][ T7252] kvm_vcpu_ioctl+0xa61/0xfd0 [ 177.483490][ T7252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.483573][ T7252] ? hook_file_ioctl+0x1f2/0x600 [ 177.483704][ T7252] ? __fget_files+0x2a/0x420 [ 177.483779][ T7252] ? __fget_files+0x2a/0x420 [ 177.483863][ T7252] ? __fget_files+0x3a2/0x420 [ 177.483940][ T7252] ? __fget_files+0x2a/0x420 [ 177.484016][ T7252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 177.484090][ T7252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 177.484194][ T7252] __se_sys_ioctl+0xfc/0x170 [ 177.484288][ T7252] do_syscall_64+0x166/0x520 [ 177.484341][ T7252] ? trace_irq_disable+0x3b/0x140 [ 177.484425][ T7252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.484495][ T7252] ? clear_bhb_loop+0x70/0xc0 [ 177.484561][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.484622][ T7252] RIP: 0033:0x7f9c1819e0d9 [ 177.484694][ T7252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.484747][ T7252] RSP: 002b:00007f9c1900c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.484810][ T7252] RAX: ffffffffffffffda RBX: 00007f9c18426090 RCX: 00007f9c1819e0d9 [ 177.484860][ T7252] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c [ 177.484893][ T7252] RBP: 00007f9c1900c090 R08: 0000000000000000 R09: 0000000000000000 [ 177.484933][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.484966][ T7252] R13: 00007f9c18426128 R14: 00007f9c18426090 R15: 00007fff83e848d8 [ 177.485058][ T7252] [ 177.618819][ T5765] usb 1-1: USB disconnect, device number 33 [ 177.827325][ T7255] loop0: detected capacity change from 0 to 2049 [ 177.895579][ T7255] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 177.895627][ T7255] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 177.895657][ T7255] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 177.895743][ T7255] loop0: [ 178.076688][ T7261] loop0: detected capacity change from 0 to 2049 [ 178.117281][ T7259] binder: 7258:7259 ioctl c0306201 2000000001c0 returned -14 [ 178.126373][ T7261] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 178.126425][ T7261] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 178.126456][ T7261] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 178.126526][ T7261] loop0: [ 178.292223][ T190] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 178.442981][ T190] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 178.456409][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.456460][ T190] usb 4-1: Product: syz [ 178.456508][ T190] usb 4-1: Manufacturer: syz [ 178.456530][ T190] usb 4-1: SerialNumber: syz [ 178.499753][ T190] usb 4-1: config 0 descriptor?? [ 178.520098][ T190] usb 4-1: Waiting for MOTU Microbook II to boot up... [ 178.528320][ T190] usb 4-1: failed setting the sample rate for Motu MicroBook II: -22 [ 178.538535][ T190] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 178.752681][ T5765] usb 4-1: USB disconnect, device number 36 [ 179.559330][ T7292] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 182.235100][ T7318] configfs-gadget.g1 gadget.0: HOST MAC 36:f1:cf:a1:9d:b8 [ 182.269504][ T7318] configfs-gadget.g1 gadget.0: MAC b2:b9:59:3f:a0:fe [ 182.555490][ T5719] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 182.724089][ T5719] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 182.739317][ T5719] usb 1-1: Dual-Role OTG device on HNP port [ 182.747362][ T5719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.838417][ T5719] cdc_ncm 1-1:1.0: MAC-Address: 36:f1:cf:a1:9d:b8 [ 182.987692][ T5719] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 36:f1:cf:a1:9d:b8 [ 183.555744][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 183.566474][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 183.576168][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 183.590320][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 183.598288][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 184.773333][ T7339] wlan0 speed is unknown, defaulting to 1000 [ 185.040805][ T7374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 185.632475][ T4932] Bluetooth: hci5: command tx timeout [ 185.761999][ T7386] syz.0.543 (7386): /proc/7384/oom_adj is deprecated, please use /proc/7384/oom_score_adj instead. [ 187.565066][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.565198][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.565675][ T7339] bridge_slave_0: entered allmulticast mode [ 187.630476][ T7339] bridge_slave_0: entered promiscuous mode [ 187.649265][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.649417][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.649594][ T7339] bridge_slave_1: entered allmulticast mode [ 187.678356][ T7339] bridge_slave_1: entered promiscuous mode [ 187.702421][ T4932] Bluetooth: hci5: command tx timeout [ 187.959658][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.011071][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.236017][ T7339] team0: Port device team_slave_0 added [ 188.262905][ T7339] team0: Port device team_slave_1 added [ 188.500928][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.511001][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.537809][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.557074][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.575109][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.575171][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.847276][ T7339] hsr_slave_0: entered promiscuous mode [ 188.865321][ T7339] hsr_slave_1: entered promiscuous mode [ 188.874986][ T7339] debugfs: 'hsr0' already exists in 'hsr' [ 188.890506][ T7339] Cannot create hsr debugfs directory [ 189.794081][ T4932] Bluetooth: hci5: command tx timeout [ 190.930485][ T7339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 190.988541][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 191.004109][ T7339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.022399][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 191.031732][ T7339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.058007][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 191.087654][ T7339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.159875][ T7339] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 191.477617][ T7484] CacheFiles: No cache directory specified [ 191.486007][ T190] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.646435][ T190] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 191.669665][ T190] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.669717][ T190] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 191.703384][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.703443][ T190] usb 3-1: Product: syz [ 191.703479][ T190] usb 3-1: Manufacturer: syz [ 191.703500][ T190] usb 3-1: SerialNumber: syz [ 191.758150][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.862981][ T5616] Bluetooth: hci5: command tx timeout [ 191.871043][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.941119][ T3164] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.941263][ T3164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.985489][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.989726][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.018142][ T190] usb 3-1: Limiting number of CPorts to U8_MAX [ 192.235340][ C0] usb 3-1: short aprc response received [ 192.505761][ T190] usb 3-1: failed to set cport flags for port 0 [ 192.519045][ T190] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 192.580765][ T190] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 192.600255][ T190] usb 3-1: USB disconnect, device number 24 [ 192.640112][ T5719] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 192.816433][ T5719] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 192.837197][ T5719] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 192.837277][ T5719] usb 4-1: Product: syz [ 192.837337][ T5719] usb 4-1: Manufacturer: syz [ 192.837511][ T5719] usb 4-1: SerialNumber: syz [ 192.869554][ T5719] usb 4-1: config 0 descriptor?? [ 192.909221][ T5719] ch341 4-1:0.0: ch341-uart converter detected [ 193.503145][ T5695] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 193.666426][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 193.672275][ T5695] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 193.686247][ T5695] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.686295][ T5695] usb 3-1: config 0 has no interface number 0 [ 193.717172][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.717222][ T5695] usb 3-1: Product: syz [ 193.717259][ T5695] usb 3-1: Manufacturer: syz [ 193.717281][ T5695] usb 3-1: SerialNumber: syz [ 193.744415][ T5695] usb 3-1: config 0 descriptor?? [ 193.765277][ T5695] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 193.952310][ T5719] usb 4-1: ch341-uart converter now attached to ttyUSB0 [ 194.138167][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.150253][ T10] usb 4-1: USB disconnect, device number 37 [ 194.177731][ T10] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 194.191776][ T10] ch341 4-1:0.0: device disconnected [ 194.221645][ T5695] gspca_spca1528: reg_w err -71 [ 194.243081][ T5695] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71 [ 194.263310][ T5695] usb 3-1: USB disconnect, device number 25 [ 194.348479][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348643][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.707730][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.708346][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.037743][ T7339] veth0_vlan: entered promiscuous mode [ 195.078187][ T7339] veth1_vlan: entered promiscuous mode [ 195.219668][ T7339] veth0_macvtap: entered promiscuous mode [ 195.235251][ T7339] veth1_macvtap: entered promiscuous mode [ 195.320856][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.352271][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 195.423512][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.502182][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 195.509548][ T10] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 195.519925][ T10] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 195.519970][ T10] usb 3-1: config 1 has no interface number 0 [ 195.520029][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 195.520061][ T10] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 195.520092][ T10] usb 3-1: config 1 interface 105 has no altsetting 0 [ 195.573082][ T10] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 195.573130][ T10] usb 3-1: Product: syz [ 195.573164][ T10] usb 3-1: Manufacturer: syz [ 195.573184][ T10] usb 3-1: SerialNumber: syz [ 195.606250][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 195.606755][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.109994][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.125568][ T7545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 196.715260][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.715328][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.791358][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 196.805149][ T10] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 196.844242][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.844349][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.844383][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.862242][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.862335][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.862384][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.058059][ T25] libceph: connect (1)[c::]:6789 error -101 [ 197.094574][ T10] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, de:a7:fb:42:70:03 [ 197.104866][ T10] usb 3-1: USB disconnect, device number 26 [ 197.112433][ T10] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 197.148440][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 197.180665][ T7559] ceph: No mds server is up or the cluster is laggy [ 197.193204][ T25] libceph: connect (1)[c::]:6789 error -101 [ 197.204037][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 197.471673][ T4932] Bluetooth: hci3: command 0x0405 tx timeout [ 197.507726][ T25] libceph: connect (1)[c::]:6789 error -101 [ 197.536853][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 197.795494][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 197.795659][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 197.795803][ T10] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 198.802438][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 198.949299][ T7598] usbip-vudc usbip-vudc.0: gadget not bound [ 198.965217][ T9] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 198.978527][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 198.978578][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 199.008554][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.008604][ T9] usb 5-1: Product: syz [ 199.008641][ T9] usb 5-1: Manufacturer: syz [ 199.008663][ T9] usb 5-1: SerialNumber: syz [ 199.652715][ T9] usb 5-1: Cannot retrieve CPort count: -110 [ 199.659084][ T9] usb 5-1: Cannot retrieve CPort count: -110 [ 199.659206][ T9] es2_ap_driver 5-1:1.0: probe with driver es2_ap_driver failed with error -110 [ 202.154306][ T9] usb 5-1: USB disconnect, device number 2 [ 202.489188][ T31] audit: type=1800 audit(1787183991.000:4): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.608" name="zoned" dev="configfs" ino=19387 res=0 errno=0 [ 202.560630][ T31] audit: type=1800 audit(1787183991.070:5): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.608" name="zone_nr_conv" dev="configfs" ino=19388 res=0 errno=0 [ 202.617879][ T31] audit: type=1800 audit(1787183991.130:6): pid=7650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.608" name="power" dev="configfs" ino=19392 res=0 errno=0 [ 203.733299][ T7650] null_blk: disk nullb1 created [ 204.552125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #180!!! [ 204.661542][ T7681] 9p: Bad value for 'wfdno' [ 205.052089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 205.376389][ T5719] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 205.544040][ T5719] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 205.555427][ T5719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 205.566802][ T5719] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 205.582877][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.582970][ T5719] usb 4-1: Product: syz [ 205.583007][ T5719] usb 4-1: Manufacturer: syz [ 205.583030][ T5719] usb 4-1: SerialNumber: syz [ 205.887311][ T5719] usb 4-1: Limiting number of CPorts to U8_MAX [ 206.103033][ C1] usb 4-1: short aprc response received [ 206.125151][ T7703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.133941][ T7703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.158497][ T7703] workqueue: name exceeds WQ_NAME_LEN. Truncating to: h"!G+Wͷ+Kn1T [ 206.334748][ T5719] usb 4-1: failed to set cport flags for port 0 [ 206.335604][ T5719] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 206.436619][ T5719] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 206.461687][ T5719] usb 4-1: USB disconnect, device number 38 [ 206.662253][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 206.662386][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 207.387708][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 207.723421][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.747171][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.747249][ T25] usb 5-1: Product: syz [ 207.747291][ T25] usb 5-1: Manufacturer: syz [ 207.747313][ T25] usb 5-1: SerialNumber: syz [ 208.006284][ T5775] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 208.531518][ T923] usb 5-1: USB disconnect, device number 3 [ 208.743127][ T4932] Bluetooth: hci2: command 0x0406 tx timeout [ 209.144002][ T5775] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 209.144956][ T5775] ath9k_htc: Failed to initialize the device [ 209.160817][ T923] usb 5-1: ath9k_htc: USB layer deinitialized [ 209.663923][ T5719] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 209.833249][ T5719] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 209.853592][ T5719] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.853643][ T5719] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 209.881934][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.882010][ T5719] usb 4-1: Product: syz [ 209.883731][ T5719] usb 4-1: Manufacturer: syz [ 209.884586][ T5719] usb 4-1: SerialNumber: syz [ 210.054905][ T5775] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 210.153504][ T5719] usb 4-1: Limiting number of CPorts to U8_MAX [ 210.212261][ T5775] usb 3-1: Using ep0 maxpacket: 32 [ 210.218761][ T5775] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 210.230044][ T5775] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 210.230133][ T5775] usb 3-1: config 0 has no interface number 0 [ 210.255591][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.264360][ T5775] usb 3-1: Product: syz [ 210.268804][ T5775] usb 3-1: Manufacturer: syz [ 210.273575][ T5775] usb 3-1: SerialNumber: syz [ 210.283219][ T5775] usb 3-1: config 0 descriptor?? [ 210.297752][ T5775] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 210.312175][ T5775] usb 3-1: selecting invalid altsetting 1 [ 210.318182][ T5775] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 210.338578][ T5775] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 210.349732][ T5775] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 210.359465][ T5775] usb 3-1: media controller created [ 210.385051][ T5775] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 210.395021][ T5719] usb 4-1: failed to set cport flags for port 0 [ 210.405571][ T5719] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 210.422854][ T5719] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 210.471002][ T5719] usb 4-1: USB disconnect, device number 39 [ 211.146356][ T7787] fuse: Bad value for 'user_id' [ 211.146402][ T7787] fuse: Bad value for 'user_id' [ 211.152536][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 211.302156][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 211.309721][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 211.336294][ T9] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 211.336354][ T9] usb 5-1: config 0 has no interface number 0 [ 211.336424][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 211.336463][ T9] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 211.336497][ T9] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 211.336533][ T9] usb 5-1: config 0 interface 196 has no altsetting 0 [ 211.418241][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.426550][ T9] usb 5-1: Product: syz [ 211.430887][ T9] usb 5-1: Manufacturer: syz [ 211.436567][ T9] usb 5-1: SerialNumber: syz [ 211.445953][ T9] usb 5-1: config 0 descriptor?? [ 211.466781][ T7783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 211.544627][ T5775] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 211.551804][ T5775] zl10353_read_register: readreg error (reg=127, ret==-110) [ 211.601032][ T7761] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 211.858991][ T9] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 211.871661][ T9] ipheth 5-1:0.196: probe with driver ipheth failed with error -71 [ 211.959780][ T9] usb 5-1: USB disconnect, device number 4 [ 212.081412][ T5775] usb 3-1: USB disconnect, device number 27 [ 214.794538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 215.805459][ T5775] usb 4-1: new low-speed USB device number 40 using dummy_hcd [ 216.074522][ T5775] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.085114][ T5775] usb 4-1: config 0 has no interfaces? [ 216.102633][ T5775] usb 4-1: string descriptor 0 read error: -22 [ 216.109968][ T5775] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.126374][ T5775] usb 4-1: config 0 descriptor?? [ 216.870332][ T5719] usb 4-1: USB disconnect, device number 40 [ 217.384187][ T5775] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 217.568784][ T5775] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 217.584356][ T5775] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 217.584431][ T5775] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 217.614199][ T5775] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.614326][ T5775] usb 3-1: Product: syz [ 217.614385][ T5775] usb 3-1: Manufacturer: syz [ 217.614436][ T5775] usb 3-1: SerialNumber: syz [ 217.648504][ T7891] hub 8-0:1.0: USB hub found [ 217.649140][ T7891] hub 8-0:1.0: 1 port detected [ 217.892243][ T5775] usb 3-1: Limiting number of CPorts to U8_MAX [ 218.097220][ T5775] usb 3-1: failed to set cport flags for port 0 [ 218.107291][ T5775] greybus greybus1: 0/0:0: failed to enable host cport: -71 [ 218.148702][ T5775] es2_ap_driver 3-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 218.169868][ T5775] usb 3-1: USB disconnect, device number 28 [ 223.781213][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.117100][ T7952] loop0: detected capacity change from 0 to 3904 [ 224.164675][ T7952] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 224.164739][ T7952] ldm_validate_privheads(): Disk read failed. [ 224.170991][ T7952] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 224.171075][ T7952] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 224.171118][ T7952] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 224.171159][ T7952] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 224.171201][ T7952] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 224.171342][ T7952] loop0: [ 224.171396][ T7952] loop0: partition table partially beyond EOD, truncated [ 224.512224][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 224.673989][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 224.680019][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 224.680097][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 224.701430][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.701505][ T9] usb 4-1: Product: syz [ 224.701555][ T9] usb 4-1: Manufacturer: syz [ 224.701598][ T9] usb 4-1: SerialNumber: syz [ 225.153093][ T9] usb 4-1: Cannot retrieve CPort count: -71 [ 225.153250][ T9] usb 4-1: Cannot retrieve CPort count: -71 [ 225.153298][ T9] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 225.194682][ T9] usb 4-1: USB disconnect, device number 41 [ 227.081389][ T8002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 227.499151][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 227.703340][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 227.714314][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.729048][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.746430][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 227.746479][ T10] usb 5-1: Manufacturer: syz [ 227.778738][ T10] usb 5-1: config 0 descriptor?? [ 228.067267][ T8010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 228.322212][ T923] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 228.700806][ T10] uclogic 0003:256C:006D.000E: failed retrieving string descriptor #200: -71 [ 228.700897][ T10] uclogic 0003:256C:006D.000E: failed retrieving pen parameters: -71 [ 228.700943][ T10] uclogic 0003:256C:006D.000E: failed probing pen v2 parameters: -71 [ 228.701003][ T10] uclogic 0003:256C:006D.000E: failed probing parameters: -71 [ 228.701116][ T10] uclogic 0003:256C:006D.000E: probe with driver uclogic failed with error -71 [ 228.707597][ T923] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 228.714475][ T923] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 228.714508][ T923] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 228.721072][ T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.721104][ T923] usb 4-1: Product: syz [ 228.721153][ T923] usb 4-1: Manufacturer: syz [ 228.721171][ T923] usb 4-1: SerialNumber: syz [ 229.050000][ T10] usb 5-1: USB disconnect, device number 5 [ 229.965635][ T923] usb 4-1: Cannot retrieve CPort count: -71 [ 229.965735][ T923] usb 4-1: Cannot retrieve CPort count: -71 [ 229.965782][ T923] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 230.019575][ T923] usb 4-1: USB disconnect, device number 42 [ 230.764248][ T8041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.323805][ T8057] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 233.834155][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.836589][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.065370][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.070844][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.127926][ T8102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 235.643922][ T8121] sctp: [Deprecated]: syz.2.756 (pid 8121) Use of int in max_burst socket option. [ 235.643922][ T8121] Use struct sctp_assoc_value instead [ 236.399106][ T8130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 237.921593][ T8152] LUN: removable file: (no medium) [ 237.982014][ T31] audit: type=1800 audit(1787184026.460:7): pid=8152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.767" name="cdrom" dev="configfs" ino=21263 res=0 errno=0 [ 239.063010][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.077426][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.813214][ T8179] netlink: 'syz.0.779': attribute type 4 has an invalid length. [ 239.872395][ T8180] netlink: 'syz.0.779': attribute type 4 has an invalid length. [ 240.213678][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.224569][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.552220][ T190] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 240.702180][ T190] usb 3-1: Using ep0 maxpacket: 16 [ 240.706856][ T190] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.711720][ T190] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 240.711829][ T190] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 240.728516][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.728547][ T190] usb 3-1: Product: syz [ 240.728564][ T190] usb 3-1: Manufacturer: syz [ 240.728581][ T190] usb 3-1: SerialNumber: syz [ 240.751759][ T5702] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 240.771935][ T190] usb 3-1: config 0 descriptor?? [ 240.789740][ T190] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.789815][ T190] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 240.904138][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 240.907836][ T5702] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 240.919932][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.919997][ T5702] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.920172][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.960669][ T5702] usb 5-1: config 0 descriptor?? [ 241.395349][ T5702] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0 [ 241.395449][ T5702] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0 [ 241.399682][ T5702] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0 [ 241.399853][ T5702] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0 [ 241.399928][ T5702] corsair 0003:1B1C:1B02.000F: unknown main item tag 0x0 [ 241.428928][ T190] em28xx 3-1:0.0: unknown em28xx chip ID (115) [ 241.467633][ T5702] corsair 0003:1B1C:1B02.000F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 241.631434][ T190] em28xx 3-1:0.0: Config register raw data: 0x73 [ 241.631472][ T190] em28xx 3-1:0.0: I2S Audio (5 sample rate(s)) [ 241.631510][ T190] em28xx 3-1:0.0: No AC97 audio processor [ 241.834919][ T5702] usb 5-1: USB disconnect, device number 6 [ 241.906370][ T190] usb 3-1: USB disconnect, device number 29 [ 242.070774][ T5702] ------------[ cut here ]------------ [ 242.070817][ T5702] ODEBUG: free active (active state 0) object: ffff888055cbf2c8 object type: work_struct hint: k90_record_led_work+0x0/0x1e0 [ 242.070916][ T5702] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#0: kworker/0:5/5702 [ 242.102073][ T5702] Modules linked in: [ 242.106154][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.118069][ T5702] Tainted: [L]=SOFTLOCKUP [ 242.122871][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.134792][ T5702] Workqueue: usb_hub_wq hub_event [ 242.139895][ T5702] RIP: 0010:debug_print_object+0x18a/0x230 [ 242.146949][ T5702] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 68 44 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 96 a8 0b 48 83 c4 10 5b 41 5c [ 242.167650][ T5702] RSP: 0018:ffffc9000454efd0 EFLAGS: 00010246 [ 242.173879][ T5702] RAX: 1ffffffff1816f34 RBX: dffffc0000000000 RCX: 0000000000000000 [ 242.181899][ T5702] RDX: ffffffff8c6ee840 RSI: ffffffff8c6ee2c0 RDI: ffffffff90a6c810 [ 242.190098][ T5702] RBP: ffffffff8c6ee840 R08: ffff888055cbf2c8 R09: ffffffff8c0b8bc0 [ 242.198567][ T5702] R10: dffffc0000000000 R11: ffffffff818f7710 R12: 0000000000000000 [ 242.206690][ T5702] R13: ffffffff90a6c810 R14: ffff888055cbf2c8 R15: ffffffff8c0b79a0 [ 242.216260][ T5702] FS: 0000000000000000(0000) GS:ffff88812488b000(0000) knlGS:0000000000000000 [ 242.225813][ T5702] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.234120][ T5702] CR2: 00007f07b7fb9600 CR3: 000000005cb16000 CR4: 00000000003526f0 [ 242.243383][ T5702] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 242.251516][ T5702] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 242.259726][ T5702] Call Trace: [ 242.263130][ T5702] [ 242.266186][ T5702] ? __pfx_k90_record_led_work+0x10/0x10 [ 242.272295][ T5702] ? __pfx_k90_record_led_work+0x10/0x10 [ 242.277993][ T5702] debug_check_no_obj_freed+0x2e3/0x450 [ 242.283757][ T5702] kfree+0x13e/0x650 [ 242.287729][ T5702] ? corsair_remove+0xfd/0x260 [ 242.292601][ T5702] corsair_remove+0xfd/0x260 [ 242.297247][ T5702] ? __pfx_corsair_remove+0x10/0x10 [ 242.302574][ T5702] hid_device_remove+0xc5/0x1c0 [ 242.307485][ T5702] ? __pfx_hid_device_remove+0x10/0x10 [ 242.313116][ T5702] device_release_driver_internal+0x48b/0x880 [ 242.319292][ T5702] bus_remove_device+0x444/0x560 [ 242.324384][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 242.329938][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.337404][ T5702] device_del+0x524/0x8f0 [ 242.341811][ T5702] ? __pfx_device_del+0x10/0x10 [ 242.347964][ T5702] hid_destroy_device+0x6b/0x1b0 [ 242.353037][ T5702] usbhid_disconnect+0x9f/0xc0 [ 242.357903][ T5702] usb_unbind_interface+0x295/0x9f0 [ 242.363256][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.369059][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.374985][ T5702] ? __pfx_usb_unbind_interface+0x10/0x10 [ 242.380763][ T5702] device_release_driver_internal+0x4f5/0x880 [ 242.386981][ T5702] bus_remove_device+0x444/0x560 [ 242.391982][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 242.397566][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.403417][ T5702] device_del+0x524/0x8f0 [ 242.407814][ T5702] ? __pfx_device_del+0x10/0x10 [ 242.412790][ T5702] ? kobject_put+0x516/0x550 [ 242.417654][ T5702] usb_disable_device+0x3d4/0x8d0 [ 242.423531][ T5702] usb_disconnect+0x346/0x9a0 [ 242.428290][ T5702] hub_event+0x1bbb/0x4d30 [ 242.433058][ T5702] ? __lock_acquire+0x6df/0x2e50 [ 242.439672][ T5702] ? register_lock_class+0x31/0x2e0 [ 242.446095][ T5702] ? rcu_is_watching+0x16/0xb0 [ 242.450955][ T5702] ? __pfx_hub_event+0x10/0x10 [ 242.455918][ T5702] ? rcu_is_watching+0x16/0xb0 [ 242.460770][ T5702] ? process_scheduled_works+0x97a/0x1630 [ 242.466638][ T5702] process_scheduled_works+0xc3d/0x1630 [ 242.472332][ T5702] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.478384][ T5702] ? assign_work+0x3cf/0x5d0 [ 242.483226][ T5702] worker_thread+0xa47/0xfb0 [ 242.487892][ T5702] ? __kthread_parkme+0x71/0x1f0 [ 242.492966][ T5702] kthread+0x38b/0x480 [ 242.497092][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 242.502311][ T5702] ? __pfx_kthread+0x10/0x10 [ 242.506963][ T5702] ret_from_fork+0x514/0xb70 [ 242.510521][ T5616] Bluetooth: hci3: command 0x0405 tx timeout [ 242.517701][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 242.523016][ T5702] ? __switch_to+0xc89/0x1420 [ 242.527783][ T5702] ? __pfx_kthread+0x10/0x10 [ 242.532500][ T5702] ret_from_fork_asm+0x1a/0x30 [ 242.539091][ T5702] [ 242.543294][ T5702] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 242.550629][ T5702] CPU: 0 UID: 0 PID: 5702 Comm: kworker/0:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.562133][ T5702] Tainted: [L]=SOFTLOCKUP [ 242.566495][ T5702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.576597][ T5702] Workqueue: usb_hub_wq hub_event [ 242.581678][ T5702] Call Trace: [ 242.584997][ T5702] [ 242.587968][ T5702] vpanic+0x56d/0xa60 [ 242.592001][ T5702] ? __pfx__printk+0x10/0x10 [ 242.596636][ T5702] ? __pfx_vpanic+0x10/0x10 [ 242.601195][ T5702] ? is_bpf_text_address+0x292/0x2b0 [ 242.606526][ T5702] ? is_bpf_text_address+0x26/0x2b0 [ 242.611779][ T5702] panic+0xc5/0xd0 [ 242.615564][ T5702] ? __pfx_panic+0x10/0x10 [ 242.620048][ T5702] ? ret_from_fork_asm+0x1a/0x30 [ 242.625043][ T5702] __warn+0x315/0x4c0 [ 242.629074][ T5702] ? debug_print_object+0xec/0x230 [ 242.634236][ T5702] ? debug_print_object+0xec/0x230 [ 242.639376][ T5702] __report_bug+0x276/0x570 [ 242.643944][ T5702] ? debug_print_object+0xec/0x230 [ 242.649192][ T5702] ? __pfx___report_bug+0x10/0x10 [ 242.654281][ T5702] ? kasan_save_track+0x4f/0x80 [ 242.659190][ T5702] ? kasan_save_free_info+0x40/0x50 [ 242.664470][ T5702] ? __kasan_slab_free+0x5c/0x80 [ 242.669464][ T5702] ? kfree+0x1c5/0x650 [ 242.673599][ T5702] report_bug_entry+0x19b/0x290 [ 242.678506][ T5702] ? debug_print_object+0x18a/0x230 [ 242.683749][ T5702] ? debug_print_object+0x18f/0x230 [ 242.688990][ T5702] handle_bug+0xce/0x200 [ 242.693287][ T5702] exc_invalid_op+0x1a/0x50 [ 242.697831][ T5702] asm_exc_invalid_op+0x1a/0x20 [ 242.702722][ T5702] RIP: 0010:debug_print_object+0x18a/0x230 [ 242.708575][ T5702] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 bd 68 44 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 13 96 a8 0b 48 83 c4 10 5b 41 5c [ 242.728310][ T5702] RSP: 0018:ffffc9000454efd0 EFLAGS: 00010246 [ 242.734465][ T5702] RAX: 1ffffffff1816f34 RBX: dffffc0000000000 RCX: 0000000000000000 [ 242.742478][ T5702] RDX: ffffffff8c6ee840 RSI: ffffffff8c6ee2c0 RDI: ffffffff90a6c810 [ 242.750587][ T5702] RBP: ffffffff8c6ee840 R08: ffff888055cbf2c8 R09: ffffffff8c0b8bc0 [ 242.758598][ T5702] R10: dffffc0000000000 R11: ffffffff818f7710 R12: 0000000000000000 [ 242.766618][ T5702] R13: ffffffff90a6c810 R14: ffff888055cbf2c8 R15: ffffffff8c0b79a0 [ 242.774644][ T5702] ? __pfx_work_debug_hint+0x10/0x10 [ 242.780006][ T5702] ? __pfx_k90_record_led_work+0x10/0x10 [ 242.785717][ T5702] ? __pfx_k90_record_led_work+0x10/0x10 [ 242.791403][ T5702] debug_check_no_obj_freed+0x2e3/0x450 [ 242.797038][ T5702] kfree+0x13e/0x650 [ 242.800971][ T5702] ? corsair_remove+0xfd/0x260 [ 242.806045][ T5702] corsair_remove+0xfd/0x260 [ 242.810688][ T5702] ? __pfx_corsair_remove+0x10/0x10 [ 242.815940][ T5702] hid_device_remove+0xc5/0x1c0 [ 242.820855][ T5702] ? __pfx_hid_device_remove+0x10/0x10 [ 242.826364][ T5702] device_release_driver_internal+0x48b/0x880 [ 242.832501][ T5702] bus_remove_device+0x444/0x560 [ 242.837579][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 242.843093][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.848870][ T5702] device_del+0x524/0x8f0 [ 242.853266][ T5702] ? __pfx_device_del+0x10/0x10 [ 242.858188][ T5702] hid_destroy_device+0x6b/0x1b0 [ 242.863180][ T5702] usbhid_disconnect+0x9f/0xc0 [ 242.868010][ T5702] usb_unbind_interface+0x295/0x9f0 [ 242.873256][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.879035][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.884815][ T5702] ? __pfx_usb_unbind_interface+0x10/0x10 [ 242.890580][ T5702] device_release_driver_internal+0x4f5/0x880 [ 242.896705][ T5702] bus_remove_device+0x444/0x560 [ 242.901688][ T5702] ? __pfx_bus_remove_device+0x10/0x10 [ 242.907199][ T5702] ? kernfs_remove_by_name_ns+0x101/0x140 [ 242.912977][ T5702] device_del+0x524/0x8f0 [ 242.917373][ T5702] ? __pfx_device_del+0x10/0x10 [ 242.922273][ T5702] ? kobject_put+0x516/0x550 [ 242.926911][ T5702] usb_disable_device+0x3d4/0x8d0 [ 242.931983][ T5702] usb_disconnect+0x346/0x9a0 [ 242.936708][ T5702] hub_event+0x1bbb/0x4d30 [ 242.941244][ T5702] ? __lock_acquire+0x6df/0x2e50 [ 242.946415][ T5702] ? register_lock_class+0x31/0x2e0 [ 242.951675][ T5702] ? rcu_is_watching+0x16/0xb0 [ 242.956494][ T5702] ? __pfx_hub_event+0x10/0x10 [ 242.961345][ T5702] ? rcu_is_watching+0x16/0xb0 [ 242.966153][ T5702] ? process_scheduled_works+0x97a/0x1630 [ 242.971917][ T5702] process_scheduled_works+0xc3d/0x1630 [ 242.977533][ T5702] ? __pfx_process_scheduled_works+0x10/0x10 [ 242.983574][ T5702] ? assign_work+0x3cf/0x5d0 [ 242.988218][ T5702] worker_thread+0xa47/0xfb0 [ 242.992873][ T5702] ? __kthread_parkme+0x71/0x1f0 [ 242.997875][ T5702] kthread+0x38b/0x480 [ 243.001986][ T5702] ? __pfx_worker_thread+0x10/0x10 [ 243.007138][ T5702] ? __pfx_kthread+0x10/0x10 [ 243.011787][ T5702] ret_from_fork+0x514/0xb70 [ 243.016431][ T5702] ? __pfx_ret_from_fork+0x10/0x10 [ 243.021594][ T5702] ? __switch_to+0xc89/0x1420 [ 243.026321][ T5702] ? __pfx_kthread+0x10/0x10 [ 243.030972][ T5702] ret_from_fork_asm+0x1a/0x30 [ 243.035812][ T5702] [ 243.039057][ T5702] Kernel Offset: disabled [ 243.043415][ T5702] Rebooting in 86400 seconds..