last executing test programs: 24.12639778s ago: executing program 1 (id=2550): openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000000)={0x2, 0xfc}, 0x2) 22.763593734s ago: executing program 1 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000640)="000a18000600600009eb55000500000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 21.256750845s ago: executing program 1 (id=2571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) 20.534066422s ago: executing program 1 (id=2573): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000440), 0x4, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x5a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024800010106000009040000ff02020000052406800005240002000d240f010000000000000000000424020009058103"], 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 18.537344564s ago: executing program 1 (id=2582): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0xffff}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x19, &(0x7f0000000140)=@gcm_128={{0x304}, "5f5960d3cc249487", "ba6229417643539612265653d06b684b", "ef9c82a4", "b7a7d657541e2b09"}, 0x28) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 18.276442374s ago: executing program 1 (id=2583): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0x400000000000003, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfbffffff}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x378b5ec3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x200000000000}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 7.549110007s ago: executing program 3 (id=2618): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x400, 0x0, {0x0, 0xea60}, {0x0, 0x1, 0x0, 0x4, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}}) 7.433259395s ago: executing program 3 (id=2619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r0, &(0x7f0000007200)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="600b8e2e903910b8d6f3adc53a98f381d92be4313ac90a485319f23986", 0x1d}, {&(0x7f00000005c0)="7e5afa8cb7f898a5de4a55750ee9b2491fb3645850225e3c06dabf19ea0f382b69ab7995fa4f97db620aa8bdc213f75859a40d2acc366b3c95cf3771e595a82288", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000000940)='r', 0x1}], 0x1}}], 0x2, 0xc840) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) 7.43192449s ago: executing program 3 (id=2620): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000a00)='A', 0x1}, {&(0x7f0000000000)="5e38c8", 0x3}], 0x2) close(0x3) 6.644236512s ago: executing program 0 (id=2627): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r1, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000065c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x18, 0x44000}}], 0x1, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40100, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x3) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.320573419s ago: executing program 0 (id=2628): r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r0, 0xc0385720, &(0x7f0000000040)={0x1}) 6.253611976s ago: executing program 0 (id=2629): r0 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0x149600) ioctl$VIDIOC_S_CROP(r0, 0xc0285626, &(0x7f0000000100)={0x9, {0xf8000002, 0x9, 0x8, 0xbf1}}) 6.125610257s ago: executing program 0 (id=2630): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00') r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) socket$nl_netfilter(0x10, 0x3, 0xc) 4.706715955s ago: executing program 0 (id=2632): socket$netlink(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0xa001, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0xff00, 0x9, 0x0, 0xf, 0x7ffffffe}, 0x0, 0x0) 4.70285191s ago: executing program 3 (id=2633): socket(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x41, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) epoll_create1(0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0xfffffffffffffff6, 0xfffffffffffffffd, 0x4, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0xfffffffffffffffd, 0x1000000000c27, 0x9, 0x7fffffffffffffff, 0x663, 0x7fffffff}, 0x0, 0x0) listen(r0, 0x7f) 4.405335151s ago: executing program 2 (id=2634): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xfff, 0xcf6, 0x59455247, 0x2, 0xfffffffe, 0x0, 0xa, 0x1, 0x0, 0x2}}) 4.328910198s ago: executing program 2 (id=2635): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)="f7f09ca3", 0x4}, {&(0x7f0000000140)="ebe3a0e9", 0x4}], 0x2, &(0x7f0000000dc0)=ANY=[], 0x108, 0x400c051}], 0x1, 0x40800) 4.097667635s ago: executing program 2 (id=2636): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fddbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="040028000a0006"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) 3.876943715s ago: executing program 2 (id=2637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0xa5, 0x5, 0xfb, 0x9, 0xfe, 0xff, 0x8, 0x84, 0xc, 0x7}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) 3.758096869s ago: executing program 0 (id=2638): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000f40)={0x7, "b546baedf025e19bdeffeee2250000000000001f0704b8bddc906a0000f1ff00"}) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, 0x0, 0xc8) writev(r2, &(0x7f0000000180)=[{&(0x7f0000002680)="1e", 0xfdef}], 0x1) bind$can_j1939(r0, 0x0, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, 0x0, &(0x7f00000000c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade36e9fe672ce5fbebe5b175c12cf16c48c2d4b61ce76443664e69106113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b", 0x47}], 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 3.622530412s ago: executing program 3 (id=2639): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000240)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 2.597131533s ago: executing program 2 (id=2640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$vga_arbiter(r3, &(0x7f0000000480)=ANY=[@ANYBLOB], 0xb) 307.252316ms ago: executing program 2 (id=2641): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x1000) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x0, 0x0}, 0x10) 0s ago: executing program 3 (id=2642): r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r4 = fsopen(&(0x7f0000000280)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) read(r4, 0x0, 0x4000) kernel console output (not intermixed with test programs): 7365][ T5693] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 503.640375][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 503.654162][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.654284][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 64, changing to 10 [ 503.654331][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.654355][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.709311][ T9] usb 1-1: config 0 descriptor?? [ 503.739546][ T9] hub 1-1:0.0: USB hub found [ 504.445085][ T9] hub 1-1:0.0: 1 port detected [ 504.549682][ T5693] usb 2-1: unable to get BOS descriptor or descriptor too short [ 504.550751][ T5693] usb 2-1: not running at top speed; connect to a high speed hub [ 504.552230][ T5693] usb 2-1: config 64 has an invalid interface number: 92 but max is 0 [ 504.552256][ T5693] usb 2-1: config 64 has no interface number 0 [ 504.552287][ T5693] usb 2-1: config 64 interface 92 has no altsetting 0 [ 504.555237][ T5693] usb 2-1: New USB device found, idVendor=093a, idProduct=2461, bcdDevice= b.da [ 504.555265][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.555284][ T5693] usb 2-1: Product: ѕ [ 504.555298][ T5693] usb 2-1: Manufacturer: 生ꥯౕ䭘悔쯟 ﲇ좗熧❜ꅔ㈭ㅃ [ 504.555314][ T5693] usb 2-1: SerialNumber: 斫뻾邿㋥牧঄㳆뢥浬按䙠摪㡳ồ숑෈暰桂౏߿ [ 504.929695][ T9] usb 1-1: USB disconnect, device number 12 [ 504.992540][ T5693] gspca_main: pac207-2.14.0 probing 093a:2461 [ 504.993087][ T5693] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 505.033112][ T5693] usb 2-1: USB disconnect, device number 16 [ 505.129901][T11679] FAULT_INJECTION: forcing a failure. [ 505.129901][T11679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 505.129929][T11679] CPU: 0 UID: 0 PID: 11679 Comm: syz.2.2197 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 505.129945][T11679] Tainted: [L]=SOFTLOCKUP [ 505.129949][T11679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.129957][T11679] Call Trace: [ 505.129961][T11679] [ 505.129967][T11679] dump_stack_lvl+0xe8/0x150 [ 505.129986][T11679] should_fail_ex+0x46b/0x600 [ 505.130005][T11679] prepare_alloc_pages+0x22a/0x6b0 [ 505.130021][T11679] __alloc_frozen_pages_noprof+0x12f/0x380 [ 505.130036][T11679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 505.130048][T11679] ? try_to_migrate+0x32e/0x3f0 [ 505.130061][T11679] ? __pfx_try_to_migrate+0x10/0x10 [ 505.130081][T11679] __alloc_pages_noprof+0x10/0x100 [ 505.130093][T11679] __folio_alloc_noprof+0x14/0x90 [ 505.130106][T11679] migrate_pages_batch+0x799/0x3fc0 [ 505.130126][T11679] ? __pfx_alloc_migration_target+0x10/0x10 [ 505.130144][T11679] ? do_raw_spin_lock+0x12b/0x2f0 [ 505.130157][T11679] ? __pfx_migrate_pages_batch+0x10/0x10 [ 505.130175][T11679] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 505.130192][T11679] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.130211][T11679] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 505.130223][T11679] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 505.130233][T11679] ? reacquire_held_locks+0x104/0x190 [ 505.130248][T11679] ? rt_spin_lock+0x1e0/0x400 [ 505.130259][T11679] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 505.130270][T11679] ? rt_spin_unlock+0x14f/0x200 [ 505.130282][T11679] ? rt_spin_unlock+0x160/0x200 [ 505.130293][T11679] ? __folio_put+0xf7/0x3a0 [ 505.130307][T11679] ? __pfx___folio_put+0x10/0x10 [ 505.130317][T11679] ? rt_spin_unlock+0x160/0x200 [ 505.130330][T11679] migrate_pages+0x1c6b/0x29f0 [ 505.130351][T11679] ? __pfx_alloc_migration_target+0x10/0x10 [ 505.130375][T11679] ? __pfx_migrate_pages+0x10/0x10 [ 505.130399][T11679] ? queue_pages_test_walk+0x43c/0x470 [ 505.130427][T11679] ? __pfx_remove_migration_pte+0x10/0x10 [ 505.130471][T11679] do_migrate_pages+0x6ba/0x910 [ 505.130498][T11679] ? __pfx_do_migrate_pages+0x10/0x10 [ 505.130519][T11679] ? rt_spin_lock+0x1e0/0x400 [ 505.130548][T11679] ? security_capable+0xb9/0x2c0 [ 505.130812][T11679] __se_sys_migrate_pages+0xabc/0xca0 [ 505.130837][T11679] ? fput+0xa0/0xd0 [ 505.130858][T11679] ? __pfx___se_sys_migrate_pages+0x10/0x10 [ 505.130876][T11679] ? ksys_write+0x248/0x270 [ 505.130899][T11679] ? __pfx_ksys_write+0x10/0x10 [ 505.130926][T11679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.130948][T11679] do_syscall_64+0x174/0x580 [ 505.130971][T11679] ? trace_irq_disable+0x3b/0x140 [ 505.130998][T11679] ? clear_bhb_loop+0x40/0x90 [ 505.131022][T11679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.131041][T11679] RIP: 0033:0x7f7812bdce59 [ 505.131061][T11679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.131078][T11679] RSP: 002b:00007f7810e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000100 [ 505.131100][T11679] RAX: ffffffffffffffda RBX: 00007f7812e55fa0 RCX: 00007f7812bdce59 [ 505.131119][T11679] RDX: 0000200000000040 RSI: 0000000000000005 RDI: 000000000000018d [ 505.131130][T11679] RBP: 00007f7810e36090 R08: 0000000000000000 R09: 0000000000000000 [ 505.131142][T11679] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 505.131155][T11679] R13: 00007f7812e56038 R14: 00007f7812e55fa0 R15: 00007ffd30eef798 [ 505.131181][T11679] [ 505.749922][T11695] FAULT_INJECTION: forcing a failure. [ 505.749922][T11695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.749958][T11695] CPU: 0 UID: 0 PID: 11695 Comm: syz.1.2203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 505.749987][T11695] Tainted: [L]=SOFTLOCKUP [ 505.749994][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 505.750006][T11695] Call Trace: [ 505.750014][T11695] [ 505.750023][T11695] dump_stack_lvl+0xe8/0x150 [ 505.750052][T11695] should_fail_ex+0x46b/0x600 [ 505.750085][T11695] _copy_to_user+0x31/0xb0 [ 505.750110][T11695] sctp_getsockopt_probe_interval+0x2ae/0x490 [ 505.750140][T11695] ? __pfx_sctp_getsockopt_probe_interval+0x10/0x10 [ 505.750164][T11695] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 505.750205][T11695] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 505.750235][T11695] ? lockdep_hardirqs_on+0x7a/0x110 [ 505.750263][T11695] sctp_getsockopt+0x72e/0xb90 [ 505.750288][T11695] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 505.750319][T11695] do_sock_getsockopt+0x51d/0x7e0 [ 505.750348][T11695] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 505.750387][T11695] ? __fget_files+0x3a6/0x420 [ 505.750408][T11695] ? __fget_files+0x2a/0x420 [ 505.750434][T11695] __x64_sys_getsockopt+0x1aa/0x250 [ 505.750463][T11695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.750485][T11695] do_syscall_64+0x174/0x580 [ 505.750509][T11695] ? trace_irq_disable+0x3b/0x140 [ 505.750542][T11695] ? clear_bhb_loop+0x40/0x90 [ 505.750565][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.750585][T11695] RIP: 0033:0x7ff4d34ece59 [ 505.750603][T11695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.750620][T11695] RSP: 002b:00007ff4d1746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 505.750641][T11695] RAX: ffffffffffffffda RBX: 00007ff4d3765fa0 RCX: 00007ff4d34ece59 [ 505.750656][T11695] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000003 [ 505.750668][T11695] RBP: 00007ff4d1746090 R08: 0000200000000100 R09: 0000000000000000 [ 505.750681][T11695] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 505.750694][T11695] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 505.750725][T11695] [ 507.290199][T11721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2211'. [ 507.550567][T11726] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 507.577773][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 508.101064][T11734] FAULT_INJECTION: forcing a failure. [ 508.101064][T11734] name failslab, interval 1, probability 0, space 0, times 0 [ 508.101100][T11734] CPU: 1 UID: 0 PID: 11734 Comm: syz.2.2215 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 508.101123][T11734] Tainted: [L]=SOFTLOCKUP [ 508.101130][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 508.101141][T11734] Call Trace: [ 508.101216][T11734] [ 508.101227][T11734] dump_stack_lvl+0xe8/0x150 [ 508.101256][T11734] should_fail_ex+0x46b/0x600 [ 508.101288][T11734] should_failslab+0xa8/0x100 [ 508.101312][T11734] __kmalloc_noprof+0xfe/0x7e0 [ 508.101332][T11734] ? tomoyo_encode+0x28b/0x550 [ 508.101351][T11734] ? tomoyo_encode+0x28b/0x550 [ 508.101372][T11734] tomoyo_encode+0x28b/0x550 [ 508.101662][T11734] tomoyo_realpath_from_path+0x58d/0x5d0 [ 508.101692][T11734] ? tomoyo_domain+0xd7/0x130 [ 508.101718][T11734] ? tomoyo_path_number_perm+0x219/0x630 [ 508.101745][T11734] tomoyo_path_number_perm+0x246/0x630 [ 508.101775][T11734] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 508.102161][T11734] ? __lock_acquire+0x6b5/0x2d10 [ 508.102194][T11734] ? do_raw_spin_lock+0x12b/0x2f0 [ 508.102334][T11734] ? __fget_files+0x2a/0x420 [ 508.102357][T11734] ? __fget_files+0x2a/0x420 [ 508.102372][T11734] ? __fget_files+0x3a6/0x420 [ 508.102387][T11734] ? __fget_files+0x2a/0x420 [ 508.102408][T11734] security_file_ioctl+0xc3/0x2a0 [ 508.102437][T11734] __se_sys_ioctl+0x47/0x170 [ 508.102463][T11734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.102483][T11734] do_syscall_64+0x174/0x580 [ 508.102504][T11734] ? trace_irq_disable+0x3b/0x140 [ 508.102533][T11734] ? clear_bhb_loop+0x40/0x90 [ 508.102556][T11734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.102573][T11734] RIP: 0033:0x7f7812bdce59 [ 508.102591][T11734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 508.102617][T11734] RSP: 002b:00007f7810e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 508.102638][T11734] RAX: ffffffffffffffda RBX: 00007f7812e55fa0 RCX: 00007f7812bdce59 [ 508.102651][T11734] RDX: 0000200000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 508.102663][T11734] RBP: 00007f7810e36090 R08: 0000000000000000 R09: 0000000000000000 [ 508.102674][T11734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.102686][T11734] R13: 00007f7812e56038 R14: 00007f7812e55fa0 R15: 00007ffd30eef798 [ 508.102716][T11734] [ 508.130786][T11734] ERROR: Out of memory at tomoyo_realpath_from_path. [ 508.141099][T11732] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 508.643172][T11736] netlink: 'syz.2.2216': attribute type 1 has an invalid length. [ 508.643387][T11736] netlink: 'syz.2.2216': attribute type 2 has an invalid length. [ 508.703424][T11726] team0: Port device macvlan1 added [ 510.316918][ T5701] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 510.458735][T11754] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 510.458758][T11754] netlink: 'syz.1.2224': attribute type 1 has an invalid length. [ 510.458772][T11754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2224'. [ 510.484648][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 510.500791][ T5701] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 510.500832][ T5701] usb 4-1: config 0 has no interface number 0 [ 510.500887][ T5701] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 102, changing to 10 [ 510.500919][ T5701] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 24624, setting to 1024 [ 510.500968][ T5701] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 510.500995][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.512676][ T5701] usb 4-1: config 0 descriptor?? [ 510.770634][ T5701] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 510.810462][T11760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.812618][T11760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.101353][ T5701] usb 4-1: USB disconnect, device number 10 [ 511.176942][ T37] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 511.337912][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 511.337944][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 511.337967][ T37] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 511.341358][ T37] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 511.341389][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.341407][ T37] usb 2-1: Product: syz [ 511.341420][ T37] usb 2-1: Manufacturer: syz [ 511.341444][ T37] usb 2-1: SerialNumber: syz [ 511.405239][ T37] usb 2-1: config 0 descriptor?? [ 511.431782][T11763] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 511.432126][T11763] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 511.439092][ T37] usb 2-1: ucan: probing device on interface #0 [ 512.074435][ T37] usb 2-1: ucan: device reported invalid device info [ 512.074584][ T37] usb 2-1: ucan: probe failed; try to update the device firmware [ 512.673030][T11774] FAULT_INJECTION: forcing a failure. [ 512.673030][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.673082][T11774] CPU: 1 UID: 0 PID: 11774 Comm: syz.3.2230 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.673108][T11774] Tainted: [L]=SOFTLOCKUP [ 512.673115][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.673125][T11774] Call Trace: [ 512.673133][T11774] [ 512.673141][T11774] dump_stack_lvl+0xe8/0x150 [ 512.673167][T11774] should_fail_ex+0x46b/0x600 [ 512.673197][T11774] _copy_from_user+0x2d/0xb0 [ 512.673217][T11774] kstrtouint_from_user+0xd6/0x180 [ 512.673247][T11774] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 512.673288][T11774] proc_fail_nth_write+0x8e/0x210 [ 512.673307][T11774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 512.673330][T11774] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 512.673351][T11774] vfs_write+0x2a3/0xba0 [ 512.673379][T11774] ? __pfx_vfs_write+0x10/0x10 [ 512.673404][T11774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 512.673428][T11774] ? lockdep_hardirqs_on+0x7a/0x110 [ 512.673450][T11774] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 512.673474][T11774] ? mutex_lock_nested+0x152/0x1d0 [ 512.673501][T11774] ? fdget_pos+0x252/0x320 [ 512.673535][T11774] ksys_write+0x156/0x270 [ 512.673562][T11774] ? __pfx_ksys_write+0x10/0x10 [ 512.673593][T11774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.673615][T11774] do_syscall_64+0x174/0x580 [ 512.673635][T11774] ? trace_irq_disable+0x3b/0x140 [ 512.673658][T11774] ? clear_bhb_loop+0x40/0x90 [ 512.673680][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.673699][T11774] RIP: 0033:0x7f29adb4d68e [ 512.673717][T11774] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 512.673733][T11774] RSP: 002b:00007f29abde5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 512.673765][T11774] RAX: ffffffffffffffda RBX: 00007f29abde66c0 RCX: 00007f29adb4d68e [ 512.673780][T11774] RDX: 0000000000000001 RSI: 00007f29abde60a0 RDI: 0000000000000004 [ 512.673792][T11774] RBP: 00007f29abde6090 R08: 0000000000000000 R09: 0000000000000000 [ 512.673804][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.673816][T11774] R13: 00007f29ade06038 R14: 00007f29ade05fa0 R15: 00007fff6e9c3318 [ 512.673853][T11774] [ 513.277801][ T5701] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 513.449781][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 513.453789][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 513.469974][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 513.470010][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 513.470039][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 513.470080][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 513.470104][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.482821][ T5701] usb 4-1: config 0 descriptor?? [ 513.512472][ T5701] hub 4-1:0.0: USB hub found [ 513.629627][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 513.629661][ T9] usb 1-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 513.629739][ T9] usb 1-1: Product: syz [ 513.664769][ T9] usb 1-1: config 0 descriptor?? [ 513.703627][ T5701] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 513.736334][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 513.760891][T11782] netlink: 'syz.3.2233': attribute type 29 has an invalid length. [ 513.761905][T11782] netlink: 'syz.3.2233': attribute type 29 has an invalid length. [ 513.771329][ T9] usb 1-1: Detected FT232H [ 513.866980][ T5337] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 513.909989][ T5701] usbhid 4-1:0.0: can't add hid device: -71 [ 513.910109][ T5701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 513.997990][ T10] usb 2-1: USB disconnect, device number 17 [ 514.072876][ T5701] usb 4-1: USB disconnect, device number 11 [ 514.089038][ T5337] usb 3-1: Using ep0 maxpacket: 32 [ 514.101244][ T5337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.101315][ T5337] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.101358][ T5337] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 514.101381][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.193407][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 514.207483][ T5337] usb 3-1: config 0 descriptor?? [ 514.254986][ T5337] hub 3-1:0.0: bad descriptor, ignoring hub [ 514.255026][ T5337] hub 3-1:0.0: probe with driver hub failed with error -5 [ 514.263022][ T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 514.281127][ T5337] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 514.441540][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 514.497882][ T9] usb 1-1: USB disconnect, device number 14 [ 514.566420][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 514.580311][ T9] ftdi_sio 1-1:0.0: device disconnected [ 514.658148][T11802] FAULT_INJECTION: forcing a failure. [ 514.658148][T11802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.658182][T11802] CPU: 0 UID: 0 PID: 11802 Comm: syz.0.2241 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.658211][T11802] Tainted: [L]=SOFTLOCKUP [ 514.658219][T11802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 514.658230][T11802] Call Trace: [ 514.658238][T11802] [ 514.658246][T11802] dump_stack_lvl+0xe8/0x150 [ 514.658273][T11802] should_fail_ex+0x46b/0x600 [ 514.658304][T11802] _copy_to_user+0x31/0xb0 [ 514.658328][T11802] simple_read_from_buffer+0xe1/0x170 [ 514.658354][T11802] proc_fail_nth_read+0x1be/0x230 [ 514.658377][T11802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.658406][T11802] ? rw_verify_area+0x2ac/0x4e0 [ 514.658426][T11802] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 514.658446][T11802] vfs_read+0x212/0xa80 [ 514.658475][T11802] ? __pfx_vfs_read+0x10/0x10 [ 514.658498][T11802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.658522][T11802] ? lockdep_hardirqs_on+0x7a/0x110 [ 514.658545][T11802] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 514.658568][T11802] ? mutex_lock_nested+0x152/0x1d0 [ 514.658597][T11802] ? fdget_pos+0x252/0x320 [ 514.658623][T11802] ksys_read+0x156/0x270 [ 514.658649][T11802] ? __pfx_ksys_read+0x10/0x10 [ 514.658680][T11802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.658702][T11802] do_syscall_64+0x174/0x580 [ 514.658726][T11802] ? trace_irq_disable+0x3b/0x140 [ 514.658750][T11802] ? clear_bhb_loop+0x40/0x90 [ 514.658775][T11802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.658795][T11802] RIP: 0033:0x7fa21b21d68e [ 514.658813][T11802] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 514.658830][T11802] RSP: 002b:00007fa2194adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 514.658852][T11802] RAX: ffffffffffffffda RBX: 00007fa2194ae6c0 RCX: 00007fa21b21d68e [ 514.658866][T11802] RDX: 000000000000000f RSI: 00007fa2194ae0a0 RDI: 0000000000000004 [ 514.658880][T11802] RBP: 00007fa2194ae090 R08: 0000000000000000 R09: 0000000000000000 [ 514.658892][T11802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.658903][T11802] R13: 00007fa21b4d6038 R14: 00007fa21b4d5fa0 R15: 00007ffcc1815638 [ 514.658935][T11802] [ 516.056403][T11824] FAULT_INJECTION: forcing a failure. [ 516.056403][T11824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.056428][T11824] CPU: 0 UID: 0 PID: 11824 Comm: syz.1.2247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.056444][T11824] Tainted: [L]=SOFTLOCKUP [ 516.056448][T11824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.056455][T11824] Call Trace: [ 516.056460][T11824] [ 516.056465][T11824] dump_stack_lvl+0xe8/0x150 [ 516.056483][T11824] should_fail_ex+0x46b/0x600 [ 516.056502][T11824] _copy_to_user+0x31/0xb0 [ 516.056516][T11824] simple_read_from_buffer+0xe1/0x170 [ 516.056531][T11824] proc_fail_nth_read+0x1be/0x230 [ 516.056544][T11824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.056556][T11824] ? rw_verify_area+0x2ac/0x4e0 [ 516.056569][T11824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 516.056581][T11824] vfs_read+0x212/0xa80 [ 516.056597][T11824] ? __pfx_vfs_read+0x10/0x10 [ 516.056611][T11824] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.056625][T11824] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.056639][T11824] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 516.056652][T11824] ? mutex_lock_nested+0x152/0x1d0 [ 516.056668][T11824] ? fdget_pos+0x252/0x320 [ 516.056683][T11824] ksys_read+0x156/0x270 [ 516.056697][T11824] ? __pfx_ksys_read+0x10/0x10 [ 516.056709][T11824] ? __pfx_autofs_root_ioctl+0x10/0x10 [ 516.056730][T11824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.056742][T11824] do_syscall_64+0x174/0x580 [ 516.056764][T11824] ? clear_bhb_loop+0x40/0x90 [ 516.056785][T11824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.056802][T11824] RIP: 0033:0x7ff4d34ad68e [ 516.056818][T11824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 516.056834][T11824] RSP: 002b:00007ff4d1745fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 516.056853][T11824] RAX: ffffffffffffffda RBX: 00007ff4d17466c0 RCX: 00007ff4d34ad68e [ 516.056865][T11824] RDX: 000000000000000f RSI: 00007ff4d17460a0 RDI: 0000000000000008 [ 516.056877][T11824] RBP: 00007ff4d1746090 R08: 0000000000000000 R09: 0000000000000000 [ 516.056889][T11824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.056899][T11824] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 516.056927][T11824] [ 516.179566][T11831] FAULT_INJECTION: forcing a failure. [ 516.179566][T11831] name failslab, interval 1, probability 0, space 0, times 0 [ 516.179607][T11831] CPU: 1 UID: 0 PID: 11831 Comm: syz.1.2250 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 516.179634][T11831] Tainted: [L]=SOFTLOCKUP [ 516.179641][T11831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.179653][T11831] Call Trace: [ 516.179661][T11831] [ 516.179669][T11831] dump_stack_lvl+0xe8/0x150 [ 516.179699][T11831] should_fail_ex+0x46b/0x600 [ 516.179732][T11831] should_failslab+0xa8/0x100 [ 516.179755][T11831] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 516.179880][T11831] ? __kernfs_new_node+0xe7/0xa70 [ 516.179902][T11831] ? __kernfs_new_node+0xe7/0xa70 [ 516.179930][T11831] __kernfs_new_node+0xe7/0xa70 [ 516.179949][T11831] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 516.179975][T11831] ? lockdep_hardirqs_on+0x7a/0x110 [ 516.180004][T11831] ? __pfx___kernfs_new_node+0x10/0x10 [ 516.180026][T11831] ? kernfs_root+0x1c/0x230 [ 516.180049][T11831] ? kernfs_root+0x1c/0x230 [ 516.180065][T11831] ? kernfs_root+0x1c/0x230 [ 516.180079][T11831] ? kernfs_root+0x1c/0x230 [ 516.180101][T11831] kernfs_new_node+0xea/0x140 [ 516.180126][T11831] __kernfs_create_file+0x4b/0x2e0 [ 516.180155][T11831] sysfs_add_file_mode_ns+0x238/0x300 [ 516.180191][T11831] internal_create_group+0x673/0x1190 [ 516.180225][T11831] ? __pfx_internal_create_group+0x10/0x10 [ 516.180250][T11831] ? loop_update_dio+0x256/0x3a0 [ 516.180284][T11831] loop_configure+0x97a/0xdf0 [ 516.180334][T11831] ? __pfx_loop_configure+0x10/0x10 [ 516.180396][T11831] lo_ioctl+0xaaf/0x1fc0 [ 516.180429][T11831] ? __kernel_text_address+0xd/0x30 [ 516.180455][T11831] ? unwind_get_return_address+0x4d/0x90 [ 516.180483][T11831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.180508][T11831] ? __pfx_lo_ioctl+0x10/0x10 [ 516.180536][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180571][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180603][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180632][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180660][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180690][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180717][T11831] ? __lock_acquire+0x6b5/0x2d10 [ 516.180749][T11831] ? unwind_next_frame+0xa6/0x2550 [ 516.180843][T11831] ? unwind_next_frame+0xa6/0x2550 [ 516.180872][T11831] ? is_bpf_text_address+0x26/0x2b0 [ 516.180909][T11831] ? is_bpf_text_address+0x26/0x2b0 [ 516.180941][T11831] ? is_bpf_text_address+0x292/0x2b0 [ 516.180966][T11831] ? is_bpf_text_address+0x26/0x2b0 [ 516.180994][T11831] ? kernel_text_address+0xa5/0xe0 [ 516.181020][T11831] ? __kernel_text_address+0xd/0x30 [ 516.181042][T11831] ? unwind_get_return_address+0x4d/0x90 [ 516.181068][T11831] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 516.181091][T11831] ? arch_stack_walk+0xfb/0x150 [ 516.181128][T11831] ? stack_trace_save+0xa9/0x100 [ 516.181149][T11831] ? __pfx_stack_trace_save+0x10/0x10 [ 516.181169][T11831] ? kasan_save_free_info+0x46/0x50 [ 516.181196][T11831] ? stack_depot_save_flags+0x33/0x810 [ 516.181227][T11831] ? kasan_save_track+0x4f/0x80 [ 516.181245][T11831] ? kasan_save_track+0x3e/0x80 [ 516.181262][T11831] ? kasan_save_free_info+0x46/0x50 [ 516.181283][T11831] ? __kasan_slab_free+0x5c/0x80 [ 516.181301][T11831] ? kfree+0x1c5/0x6c0 [ 516.181325][T11831] ? tomoyo_path_number_perm+0x501/0x630 [ 516.181354][T11831] ? security_file_ioctl+0xc3/0x2a0 [ 516.181380][T11831] ? __se_sys_ioctl+0x47/0x170 [ 516.181403][T11831] ? do_syscall_64+0x174/0x580 [ 516.181426][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.181451][T11831] ? __asan_memset+0x22/0x50 [ 516.181476][T11831] ? blk_get_meta_cap+0x16d/0x7a0 [ 516.181508][T11831] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 516.181542][T11831] ? blkdev_common_ioctl+0x14b7/0x3240 [ 516.181575][T11831] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 516.181605][T11831] ? kasan_quarantine_put+0xbb/0x1f0 [ 516.181640][T11831] ? tomoyo_path_number_perm+0x219/0x630 [ 516.181669][T11831] ? tomoyo_path_number_perm+0x219/0x630 [ 516.181700][T11831] ? do_vfs_ioctl+0x117b/0x1540 [ 516.181752][T11831] ? __pfx_lo_ioctl+0x10/0x10 [ 516.181787][T11831] blkdev_ioctl+0x5e6/0x750 [ 516.181818][T11831] ? __pfx_blkdev_ioctl+0x10/0x10 [ 516.181844][T11831] ? __fget_files+0x2a/0x420 [ 516.181866][T11831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 516.181888][T11831] ? __pfx_blkdev_ioctl+0x10/0x10 [ 516.181916][T11831] __se_sys_ioctl+0xff/0x170 [ 516.181940][T11831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.181971][T11831] do_syscall_64+0x174/0x580 [ 516.181994][T11831] ? trace_irq_disable+0x3b/0x140 [ 516.182019][T11831] ? clear_bhb_loop+0x40/0x90 [ 516.182042][T11831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.182063][T11831] RIP: 0033:0x7ff4d34ece59 [ 516.182082][T11831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.182099][T11831] RSP: 002b:00007ff4d1746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.182120][T11831] RAX: ffffffffffffffda RBX: 00007ff4d3765fa0 RCX: 00007ff4d34ece59 [ 516.182134][T11831] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 516.182147][T11831] RBP: 00007ff4d1746090 R08: 0000000000000000 R09: 0000000000000000 [ 516.182160][T11831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 516.182172][T11831] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 516.182198][T11831] [ 516.183289][T11831] loop5: detected capacity change from 0 to 6 [ 516.265231][T11831] Dev loop5: unable to read RDB block 6 [ 516.265276][T11831] loop5: unable to read partition table [ 516.265515][T11831] loop5: partition table beyond EOD, truncated [ 516.267448][ T5337] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 516.270512][T11831] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 516.380461][ T5701] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 516.656908][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 516.675840][ T5337] usb 1-1: Using ep0 maxpacket: 32 [ 516.682978][ T5337] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 516.685554][ T5337] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 516.685584][ T5337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.685604][ T5337] usb 1-1: Product: syz [ 516.685907][ T5337] usb 1-1: Manufacturer: syz [ 516.685922][ T5337] usb 1-1: SerialNumber: syz [ 516.718139][ T5337] usb 1-1: config 0 descriptor?? [ 517.496308][ T5701] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 517.496339][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.496361][ T5701] usb 4-1: Product: syz [ 517.496373][ T5701] usb 4-1: Manufacturer: syz [ 517.496387][ T5701] usb 4-1: SerialNumber: syz [ 517.536295][ T5802] kworker/u8:13 (5802) used greatest stack depth: 17616 bytes left [ 517.598937][ T5337] airspy 1-1:0.0: usb_control_msg() failed -71 request 09 [ 517.598964][ T5337] airspy 1-1:0.0: Could not detect board [ 517.599055][ T5337] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 517.618214][ T5337] usb 1-1: USB disconnect, device number 15 [ 517.639586][ T5701] usb 4-1: config 0 descriptor?? [ 517.665159][ T5701] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 517.666078][ T5701] dvb-usb: bulk message failed: -22 (2/0) [ 517.735974][ T5701] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.748533][ T5701] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 517.748646][ T5701] usb 4-1: media controller created [ 517.778672][ T37] usb 3-1: USB disconnect, device number 15 [ 517.802324][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.877749][ T5701] usb 4-1: selecting invalid altsetting 7 [ 517.877773][ T5701] cxusb: set interface failed [ 517.877787][ T5701] dvb-usb: bulk message failed: -22 (1/0) [ 517.940470][ T5701] DVB: Unable to find symbol lgdt330x_attach() [ 517.940489][ T5701] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 518.067275][ T5701] rc_core: IR keymap rc-dvico-portable not found [ 518.067299][ T5701] Registered IR keymap rc-empty [ 518.083761][T11847] netlink: 'syz.2.2256': attribute type 12 has an invalid length. [ 518.113919][ T5701] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 518.133513][ T5701] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input13 [ 518.146924][T11849] 9p: Bad value for 'msize' [ 518.159426][ T5701] dvb-usb: schedule remote query interval to 100 msecs. [ 518.159456][ T5701] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 518.234448][ T5701] usb 4-1: USB disconnect, device number 12 [ 518.706972][ T5701] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 519.557673][ T37] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 519.706936][ T37] usb 1-1: Using ep0 maxpacket: 8 [ 519.709918][ T37] usb 1-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 519.709948][ T37] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 519.709999][ T37] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 519.710022][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.771070][ T37] usb 1-1: config 0 descriptor?? [ 519.792920][T11867] FAULT_INJECTION: forcing a failure. [ 519.792920][T11867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 519.792950][T11867] CPU: 0 UID: 0 PID: 11867 Comm: syz.1.2264 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 519.792969][T11867] Tainted: [L]=SOFTLOCKUP [ 519.792974][T11867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.792983][T11867] Call Trace: [ 519.792989][T11867] [ 519.792996][T11867] dump_stack_lvl+0xe8/0x150 [ 519.793021][T11867] should_fail_ex+0x46b/0x600 [ 519.793045][T11867] _copy_to_user+0x31/0xb0 [ 519.793064][T11867] simple_read_from_buffer+0xe1/0x170 [ 519.793083][T11867] proc_fail_nth_read+0x1be/0x230 [ 519.793101][T11867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.793118][T11867] ? rw_verify_area+0x2ac/0x4e0 [ 519.793134][T11867] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 519.793150][T11867] vfs_read+0x212/0xa80 [ 519.793173][T11867] ? __pfx_vfs_read+0x10/0x10 [ 519.793193][T11867] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 519.793214][T11867] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.793232][T11867] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 519.793249][T11867] ? mutex_lock_nested+0x152/0x1d0 [ 519.793270][T11867] ? fdget_pos+0x252/0x320 [ 519.793290][T11867] ksys_read+0x156/0x270 [ 519.793309][T11867] ? __pfx_ksys_read+0x10/0x10 [ 519.793332][T11867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.793348][T11867] do_syscall_64+0x174/0x580 [ 519.793365][T11867] ? trace_irq_disable+0x3b/0x140 [ 519.793384][T11867] ? clear_bhb_loop+0x40/0x90 [ 519.793401][T11867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.793416][T11867] RIP: 0033:0x7ff4d34ad68e [ 519.793431][T11867] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 519.793444][T11867] RSP: 002b:00007ff4d1745fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 519.793460][T11867] RAX: ffffffffffffffda RBX: 00007ff4d17466c0 RCX: 00007ff4d34ad68e [ 519.793472][T11867] RDX: 000000000000000f RSI: 00007ff4d17460a0 RDI: 0000000000000005 [ 519.793481][T11867] RBP: 00007ff4d1746090 R08: 0000000000000000 R09: 0000000000000000 [ 519.793490][T11867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.793512][T11867] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 519.793534][T11867] [ 520.113439][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2267'. [ 520.277465][ T37] usb 1-1: USB disconnect, device number 16 [ 520.547219][ T5337] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 520.696968][ T5337] usb 2-1: Using ep0 maxpacket: 32 [ 520.700458][ T5337] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 520.700491][ T5337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.707053][ T5337] usb 2-1: config 0 descriptor?? [ 520.742417][ T5337] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 520.867302][ T5693] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 520.937662][ T5337] gspca_vc032x: reg_r err -71 [ 520.937803][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937816][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937826][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937834][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937843][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937852][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937861][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937870][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937879][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937888][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937897][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937906][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937934][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937942][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937951][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937960][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937970][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.937978][ T5337] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.938074][ T5337] gspca_vc032x: Unknown sensor... [ 520.938173][ T5337] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 521.020231][ T5337] usb 2-1: USB disconnect, device number 18 [ 521.071864][ T5693] usb 3-1: Using ep0 maxpacket: 16 [ 521.078252][ T5693] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 521.120965][ T5693] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 521.121002][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.121023][ T5693] usb 3-1: Product: syz [ 521.121038][ T5693] usb 3-1: Manufacturer: syz [ 521.121054][ T5693] usb 3-1: SerialNumber: syz [ 521.155997][ T5693] usb 3-1: config 0 descriptor?? [ 521.344169][ T5693] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 521.377327][ T5693] usb 3-1: USB disconnect, device number 16 [ 521.432641][ T2127] usb 3-1: Failed to submit usb control message: -19 [ 521.432677][ T2127] usb 3-1: unable to send the bmi data to the device: -19 [ 521.432693][ T2127] usb 3-1: unable to get target info from device [ 521.432721][ T2127] usb 3-1: could not get target info (-19) [ 521.471795][ T2127] usb 3-1: could not probe fw (-19) [ 521.486984][ T5701] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 521.627035][ T32] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 521.677077][ T5701] usb 1-1: Using ep0 maxpacket: 8 [ 521.691015][ T5701] usb 1-1: config 1 has an invalid interface number: 126 but max is 0 [ 521.691034][ T5701] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.691044][ T5701] usb 1-1: config 1 has no interface number 0 [ 521.691070][ T5701] usb 1-1: config 1 interface 126 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.691093][ T5701] usb 1-1: config 1 interface 126 has no altsetting 0 [ 521.694992][ T5701] usb 1-1: New USB device found, idVendor=19d2, idProduct=0481, bcdDevice= 0.00 [ 521.695026][ T5701] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 521.695046][ T5701] usb 1-1: Product: syz [ 521.695061][ T5701] usb 1-1: SerialNumber: syz [ 521.887292][ T32] usb 2-1: Using ep0 maxpacket: 8 [ 521.894664][ T32] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 521.894694][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.894716][ T32] usb 2-1: Product: syz [ 521.894730][ T32] usb 2-1: Manufacturer: syz [ 521.894744][ T32] usb 2-1: SerialNumber: syz [ 521.915592][ T32] usb 2-1: config 0 descriptor?? [ 522.064411][ T5701] usb 1-1: No union descriptors [ 522.133092][ T5701] usb 1-1: USB disconnect, device number 17 [ 522.170473][ T32] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 522.389654][T11912] input: syz0 as /devices/virtual/input/input15 [ 523.014131][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2279'. [ 523.014182][T11925] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 523.176030][T11932] FAULT_INJECTION: forcing a failure. [ 523.176030][T11932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.176064][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.3.2282 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 523.176087][T11932] Tainted: [L]=SOFTLOCKUP [ 523.176094][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.176102][T11932] Call Trace: [ 523.176108][T11932] [ 523.176115][T11932] dump_stack_lvl+0xe8/0x150 [ 523.176147][T11932] should_fail_ex+0x46b/0x600 [ 523.176171][T11932] _copy_from_user+0x2d/0xb0 [ 523.176192][T11932] kstrtouint_from_user+0xd6/0x180 [ 523.176215][T11932] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 523.176247][T11932] proc_fail_nth_write+0x8e/0x210 [ 523.176267][T11932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 523.176286][T11932] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 523.176304][T11932] vfs_write+0x2a3/0xba0 [ 523.176330][T11932] ? __pfx_vfs_write+0x10/0x10 [ 523.176596][T11932] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 523.176621][T11932] ? lockdep_hardirqs_on+0x7a/0x110 [ 523.176666][T11932] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 523.176684][T11932] ? mutex_lock_nested+0x152/0x1d0 [ 523.176705][T11932] ? fdget_pos+0x252/0x320 [ 523.176726][T11932] ksys_write+0x156/0x270 [ 523.176745][T11932] ? __pfx_ksys_write+0x10/0x10 [ 523.176769][T11932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.176785][T11932] do_syscall_64+0x174/0x580 [ 523.176805][T11932] ? trace_irq_disable+0x3b/0x140 [ 523.176823][T11932] ? clear_bhb_loop+0x40/0x90 [ 523.176842][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.176857][T11932] RIP: 0033:0x7f29adb4d68e [ 523.176873][T11932] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 523.176886][T11932] RSP: 002b:00007f29abdc4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 523.176910][T11932] RAX: ffffffffffffffda RBX: 00007f29abdc56c0 RCX: 00007f29adb4d68e [ 523.176921][T11932] RDX: 0000000000000001 RSI: 00007f29abdc50a0 RDI: 0000000000000004 [ 523.176930][T11932] RBP: 00007f29abdc5090 R08: 0000000000000000 R09: 0000000000000000 [ 523.176939][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.176948][T11932] R13: 00007f29ade06128 R14: 00007f29ade06090 R15: 00007fff6e9c3318 [ 523.176972][T11932] [ 523.616985][ T5693] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 523.770515][ T5693] usb 3-1: config 1 interface 0 altsetting 219 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.771053][ T5693] usb 3-1: config 1 interface 0 has no altsetting 0 [ 523.791474][ T5693] usb 3-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 523.791579][ T5693] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.791600][ T5693] usb 3-1: Product: ꖢ쏷嘸燉嗌Ã⁔᪛慡묘垃雙뼘ῂ꽫귘咞؂♾ᾙㅔᑄ訿小頜睩奾䂆꣇瘁찧㈕뿿䉠呦細翵뾁꯺䝢ᅧ뎋ϑ焎㮺筒❚保晪⑪객ꦯⰔੇで쥏ۏᄘ瀤䢢꩟軌𢡄쉟電惡㒇ᄫ䊗춴Ἵ㬙储秓쟴㗞ⱔ㬸袱欉ᄥ餡㙴ᝄ㳓ᨢ䍣丵뜜ꛩ㡿᫡禀ǜ私 [ 523.791635][ T5693] usb 3-1: Manufacturer: ᐄ [ 523.905856][ T32] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 523.954774][T11931] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 524.148879][ T5701] usb 2-1: USB disconnect, device number 19 [ 524.468817][T11950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2288'. [ 524.509425][ T5693] usbhid 3-1:1.0: can't add hid device: -71 [ 524.509513][ T5693] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 524.577645][ T5693] usb 3-1: USB disconnect, device number 17 [ 524.738842][T11954] FAULT_INJECTION: forcing a failure. [ 524.738842][T11954] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 524.738879][T11954] CPU: 0 UID: 0 PID: 11954 Comm: syz.0.2290 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 524.738907][T11954] Tainted: [L]=SOFTLOCKUP [ 524.738915][T11954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.738926][T11954] Call Trace: [ 524.738935][T11954] [ 524.738943][T11954] dump_stack_lvl+0xe8/0x150 [ 524.738972][T11954] should_fail_ex+0x46b/0x600 [ 524.739006][T11954] prepare_alloc_pages+0x22a/0x6b0 [ 524.739036][T11954] __alloc_frozen_pages_noprof+0x12f/0x380 [ 524.739063][T11954] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 524.739090][T11954] ? __pfx_policy_nodemask+0x10/0x10 [ 524.739122][T11954] alloc_pages_mpol+0xd1/0x380 [ 524.739160][T11954] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 524.739190][T11954] vma_alloc_folio_noprof+0xe1/0x1e0 [ 524.739216][T11954] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 524.739250][T11954] do_wp_page+0x1109/0x3d90 [ 524.739280][T11954] ? rt_spin_lock+0x1e0/0x400 [ 524.739318][T11954] ? preempt_count_add+0x91/0x190 [ 524.739346][T11954] ? __pfx_do_wp_page+0x10/0x10 [ 524.739373][T11954] ? rt_spin_lock+0x2ce/0x400 [ 524.739395][T11954] ? __pfx_rt_spin_lock+0x10/0x10 [ 524.739418][T11954] ? pte_offset_map_rw_nolock+0xea/0x160 [ 524.739449][T11954] handle_mm_fault+0xafb/0x14d0 [ 524.739474][T11954] ? handle_mm_fault+0xed/0x14d0 [ 524.739496][T11954] ? __pfx_handle_mm_fault+0x10/0x10 [ 524.739527][T11954] ? __lock_acquire+0x6b5/0x2d10 [ 524.739561][T11954] ? lock_mm_and_find_vma+0xa7/0x340 [ 524.739586][T11954] do_user_addr_fault+0x75b/0x1340 [ 524.739625][T11954] exc_page_fault+0x6a/0xc0 [ 524.739650][T11954] asm_exc_page_fault+0x26/0x30 [ 524.739670][T11954] RIP: 0010:__put_user_4+0xd/0x30 [ 524.739695][T11954] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 524.739712][T11954] RSP: 0018:ffffc90003f97c98 EFLAGS: 00050206 [ 524.739731][T11954] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000003e78 [ 524.739744][T11954] RDX: 0000000000000000 RSI: ffffffff8dbdec30 RDI: ffffffff8bcc4d80 [ 524.739758][T11954] RBP: ffffc90003f97eb0 R08: ffffffff8219d89f R09: ffff888040f60430 [ 524.739773][T11954] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: 1ffff920007f2f9c [ 524.739787][T11954] R13: 00000000000400f5 R14: 0000200000003e40 R15: 00000000000003ff [ 524.739808][T11954] ? __might_fault+0xaf/0x130 [ 524.739835][T11954] __sys_sendmmsg+0x2ad/0x4d0 [ 524.739867][T11954] ? __pfx___sys_sendmmsg+0x10/0x10 [ 524.739901][T11954] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 524.739934][T11954] ? ksys_write+0x248/0x270 [ 524.739961][T11954] ? __pfx_ksys_write+0x10/0x10 [ 524.739990][T11954] __x64_sys_sendmmsg+0xa0/0xc0 [ 524.740015][T11954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.740036][T11954] do_syscall_64+0x174/0x580 [ 524.740060][T11954] ? trace_irq_disable+0x3b/0x140 [ 524.740085][T11954] ? clear_bhb_loop+0x40/0x90 [ 524.740110][T11954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.740129][T11954] RIP: 0033:0x7fa21b25ce59 [ 524.740153][T11954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.740169][T11954] RSP: 002b:00007fa2194ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 524.740188][T11954] RAX: ffffffffffffffda RBX: 00007fa21b4d5fa0 RCX: 00007fa21b25ce59 [ 524.740202][T11954] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000005 [ 524.740216][T11954] RBP: 00007fa2194ae090 R08: 0000000000000000 R09: 0000000000000000 [ 524.740229][T11954] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000001 [ 524.740241][T11954] R13: 00007fa21b4d6038 R14: 00007fa21b4d5fa0 R15: 00007ffcc1815638 [ 524.740272][T11954] [ 524.936961][ T32] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 525.093013][ T32] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 525.093045][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.093066][ T32] usb 4-1: Product: syz [ 525.093080][ T32] usb 4-1: Manufacturer: syz [ 525.093094][ T32] usb 4-1: SerialNumber: syz [ 525.105952][ T32] usb 4-1: config 0 descriptor?? [ 525.279445][T11961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2293'. [ 525.570741][ T32] usb 4-1: Firmware version (0.0) predates our first public release. [ 525.570758][ T32] usb 4-1: Please update to version 0.2 or newer [ 525.618105][T11970] FAULT_INJECTION: forcing a failure. [ 525.618105][T11970] name failslab, interval 1, probability 0, space 0, times 0 [ 525.618143][T11970] CPU: 1 UID: 0 PID: 11970 Comm: syz.1.2296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 525.618170][T11970] Tainted: [L]=SOFTLOCKUP [ 525.618178][T11970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 525.618190][T11970] Call Trace: [ 525.618197][T11970] [ 525.618205][T11970] dump_stack_lvl+0xe8/0x150 [ 525.618233][T11970] should_fail_ex+0x46b/0x600 [ 525.618267][T11970] should_failslab+0xa8/0x100 [ 525.618290][T11970] __kmalloc_cache_noprof+0xa0/0x6d0 [ 525.618311][T11970] ? vhost_task_create+0x123/0x380 [ 525.618331][T11970] ? vhost_task_create+0x123/0x380 [ 525.618358][T11970] vhost_task_create+0x123/0x380 [ 525.618380][T11970] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 525.618410][T11970] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 525.618438][T11970] ? __pfx_vhost_task_create+0x10/0x10 [ 525.618467][T11970] ? __pfx_vhost_task_fn+0x10/0x10 [ 525.618492][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.618516][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 525.618539][T11970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 525.618562][T11970] ? mutex_lock_nested+0x152/0x1d0 [ 525.618589][T11970] ? kvm_mmu_post_init_vm+0x8f/0x2b0 [ 525.618621][T11970] kvm_mmu_post_init_vm+0x147/0x2b0 [ 525.618652][T11970] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 525.618686][T11970] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 525.618710][T11970] ? do_raw_spin_lock+0x12b/0x2f0 [ 525.618743][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.618766][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 525.618788][T11970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 525.618811][T11970] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 525.618836][T11970] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 525.618856][T11970] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 525.618879][T11970] ? lockdep_hardirqs_on+0x7a/0x110 [ 525.618901][T11970] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 525.618924][T11970] ? rt_write_unlock+0x190/0x230 [ 525.618946][T11970] kvm_vcpu_ioctl+0xa65/0xfe0 [ 525.618978][T11970] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 525.619024][T11970] ? __fget_files+0x2a/0x420 [ 525.619046][T11970] ? __fget_files+0x2a/0x420 [ 525.619064][T11970] ? __fget_files+0x3a6/0x420 [ 525.619088][T11970] ? __fget_files+0x2a/0x420 [ 525.619110][T11970] ? bpf_lsm_file_ioctl+0x9/0x20 [ 525.619133][T11970] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 525.619160][T11970] __se_sys_ioctl+0xff/0x170 [ 525.619183][T11970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.619203][T11970] do_syscall_64+0x174/0x580 [ 525.619226][T11970] ? trace_irq_disable+0x3b/0x140 [ 525.619249][T11970] ? clear_bhb_loop+0x40/0x90 [ 525.619274][T11970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.619293][T11970] RIP: 0033:0x7ff4d34ece59 [ 525.619311][T11970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.619328][T11970] RSP: 002b:00007ff4d1725028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 525.619350][T11970] RAX: ffffffffffffffda RBX: 00007ff4d3766090 RCX: 00007ff4d34ece59 [ 525.619364][T11970] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 525.619377][T11970] RBP: 00007ff4d1725090 R08: 0000000000000000 R09: 0000000000000000 [ 525.619389][T11970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.619400][T11970] R13: 00007ff4d3766128 R14: 00007ff4d3766090 R15: 00007fff6e5d3c68 [ 525.619430][T11970] [ 526.174202][ T32] usb 4-1: USB disconnect, device number 13 [ 526.771157][T11987] input: syz1 as /devices/virtual/input/input16 [ 526.830038][T11990] program syz.3.2302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 526.948977][T11985] kvm: Disabled LAPIC found during irq injection [ 527.048434][T11993] tmpfs: Cannot enable quota on remount [ 527.538930][ T5701] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 527.700123][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 527.700159][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.700190][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 527.700289][ T5701] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 527.700303][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.704823][ T5701] usb 3-1: config 0 descriptor?? [ 527.768524][ T9] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 527.800082][T12012] ext4: Unknown parameter 'barrier.usage_sys' [ 527.921629][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 4 [ 527.921681][ T9] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 527.926036][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 527.926075][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.926152][ T9] usb 4-1: Product: syz [ 527.926168][ T9] usb 4-1: Manufacturer: syz [ 527.926312][ T9] usb 4-1: SerialNumber: syz [ 528.148532][T12016] netlink: 'syz.0.2311': attribute type 8 has an invalid length. [ 528.197505][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197594][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197622][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197649][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197676][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197754][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197782][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197808][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197833][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.197909][ T5701] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 528.310657][ T5701] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 528.346206][T12020] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 528.346206][T12020] The task syz.3.2307 (12020) triggered the difference, watch for misbehavior. [ 528.420178][T12020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.420732][T12021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.455059][T12020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.455331][T12021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.610355][ T5701] usb 3-1: USB disconnect, device number 18 [ 529.380687][T12030] comedi comedi0: pcl812: I/O base address not correctly aligned [ 529.892503][T12045] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 530.597356][ T9] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 530.597535][ T9] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 530.713075][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 530.740845][ T9] usb 4-1: USB disconnect, device number 14 [ 530.916720][T10314] udevd[10314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.870107][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2327'. [ 531.906946][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 531.974697][T12080] FAULT_INJECTION: forcing a failure. [ 531.974697][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 531.974724][T12080] CPU: 1 UID: 0 PID: 12080 Comm: syz.1.2326 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 531.974741][T12080] Tainted: [L]=SOFTLOCKUP [ 531.974748][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 531.974760][T12080] Call Trace: [ 531.974768][T12080] [ 531.974777][T12080] dump_stack_lvl+0xe8/0x150 [ 531.974809][T12080] should_fail_ex+0x46b/0x600 [ 531.974838][T12080] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 531.974866][T12080] should_failslab+0xa8/0x100 [ 531.974890][T12080] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 531.974924][T12080] kmem_cache_alloc_lru_noprof+0xa7/0x6b0 [ 531.974943][T12080] ? mqueue_alloc_inode+0x28/0x40 [ 531.974957][T12080] ? mqueue_alloc_inode+0x28/0x40 [ 531.974974][T12080] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 531.974989][T12080] mqueue_alloc_inode+0x28/0x40 [ 531.975004][T12080] alloc_inode+0x6a/0x1b0 [ 531.975022][T12080] new_inode+0x22/0x170 [ 531.975034][T12080] mqueue_get_inode+0x27/0xb30 [ 531.975052][T12080] ? rt_spin_unlock+0x160/0x200 [ 531.975064][T12080] mqueue_create_attr+0x2f1/0x4d0 [ 531.975082][T12080] ? __pfx_mqueue_create+0x10/0x10 [ 531.975096][T12080] path_openat+0x1339/0x37e0 [ 531.975132][T12080] do_file_open+0x23e/0x4a0 [ 531.975145][T12080] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 531.975160][T12080] ? __pfx_do_file_open+0x10/0x10 [ 531.975172][T12080] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 531.975199][T12080] ? alloc_fd+0x679/0x6f0 [ 531.975238][T12080] do_sys_openat2+0x115/0x200 [ 531.975262][T12080] ? __pfx_do_sys_openat2+0x10/0x10 [ 531.975282][T12080] ? ksys_write+0x248/0x270 [ 531.975308][T12080] ? __pfx_ksys_write+0x10/0x10 [ 531.975328][T12080] __x64_sys_openat+0x138/0x170 [ 531.975341][T12080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.975352][T12080] do_syscall_64+0x174/0x580 [ 531.975366][T12080] ? clear_bhb_loop+0x40/0x90 [ 531.975380][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.975391][T12080] RIP: 0033:0x7ff4d34ece59 [ 531.975402][T12080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.975411][T12080] RSP: 002b:00007ff4d1746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 531.975424][T12080] RAX: ffffffffffffffda RBX: 00007ff4d3765fa0 RCX: 00007ff4d34ece59 [ 531.975432][T12080] RDX: 0000000000189042 RSI: 0000200000000100 RDI: 0000000000000004 [ 531.975439][T12080] RBP: 00007ff4d1746090 R08: 0000000000000000 R09: 0000000000000000 [ 531.975446][T12080] R10: 00000000000001a0 R11: 0000000000000246 R12: 0000000000000001 [ 531.975452][T12080] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 531.975468][T12080] [ 532.066913][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 532.076960][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 532.076993][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 102, changing to 10 [ 532.077018][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 24624, setting to 1024 [ 532.077044][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 532.199345][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 532.199376][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.199398][ T9] usb 1-1: Product: syz [ 532.199413][ T9] usb 1-1: Manufacturer: syz [ 532.199428][ T9] usb 1-1: SerialNumber: syz [ 532.372902][ T9] usb 1-1: config 0 descriptor?? [ 532.424270][T12087] Invalid ELF header magic: != ELF [ 532.631468][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input17 [ 533.388690][T12106] netlink: 'syz.1.2331': attribute type 21 has an invalid length. [ 533.388803][T12106] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2331'. [ 534.007891][ T32] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 534.158473][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 534.160989][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.161046][ T32] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 534.161097][ T32] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 534.161121][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.173493][ T32] usb 2-1: config 0 descriptor?? [ 534.195235][ T32] hub 2-1:0.0: bad descriptor, ignoring hub [ 534.195274][ T32] hub 2-1:0.0: probe with driver hub failed with error -5 [ 534.208101][ T32] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 534.684440][ T32] usb 1-1: USB disconnect, device number 18 [ 535.176919][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 535.329325][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.330709][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 535.330732][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 535.333516][ T9] usb 4-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 535.333545][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.333565][ T9] usb 4-1: Product: syz [ 535.333580][ T9] usb 4-1: Manufacturer: syz [ 535.333593][ T9] usb 4-1: SerialNumber: syz [ 535.511059][T12156] FAULT_INJECTION: forcing a failure. [ 535.511059][T12156] name fail_iommufd, interval 1, probability 0, space 0, times 0 [ 535.511095][T12156] CPU: 1 UID: 0 PID: 12156 Comm: syz.2.2344 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 535.511131][T12156] Tainted: [L]=SOFTLOCKUP [ 535.511137][T12156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 535.511149][T12156] Call Trace: [ 535.511158][T12156] [ 535.511166][T12156] dump_stack_lvl+0xe8/0x150 [ 535.511194][T12156] should_fail_ex+0x46b/0x600 [ 535.511225][T12156] iommufd_get_object+0x78/0x4b0 [ 535.511248][T12156] ? tomoyo_path_number_perm+0x219/0x630 [ 535.511278][T12156] ? __pfx_iommufd_get_object+0x10/0x10 [ 535.511299][T12156] ? tomoyo_path_number_perm+0x219/0x630 [ 535.511343][T12156] iommufd_ioas_map+0x28f/0x4d0 [ 535.511372][T12156] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 535.511401][T12156] iommufd_fops_ioctl+0x4b8/0x5d0 [ 535.511426][T12156] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 535.511452][T12156] ? __fget_files+0x2a/0x420 [ 535.511479][T12156] ? __fget_files+0x2a/0x420 [ 535.511501][T12156] ? bpf_lsm_file_ioctl+0x9/0x20 [ 535.511535][T12156] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 535.511558][T12156] __se_sys_ioctl+0xff/0x170 [ 535.511590][T12156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.511610][T12156] do_syscall_64+0x174/0x580 [ 535.511632][T12156] ? trace_irq_disable+0x3b/0x140 [ 535.511653][T12156] ? clear_bhb_loop+0x40/0x90 [ 535.511677][T12156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.511699][T12156] RIP: 0033:0x7f7812bdce59 [ 535.511718][T12156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.511735][T12156] RSP: 002b:00007f7810e36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.511757][T12156] RAX: ffffffffffffffda RBX: 00007f7812e55fa0 RCX: 00007f7812bdce59 [ 535.511772][T12156] RDX: 0000200000000140 RSI: 0000000000003b85 RDI: 0000000000000003 [ 535.511785][T12156] RBP: 00007f7810e36090 R08: 0000000000000000 R09: 0000000000000000 [ 535.511797][T12156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.511809][T12156] R13: 00007f7812e56038 R14: 00007f7812e55fa0 R15: 00007ffd30eef798 [ 535.511845][T12156] [ 535.649279][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.649849][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.796969][ T9] usb 4-1: unit 3 not found! [ 535.960001][ T9] usb 4-1: USB disconnect, device number 15 [ 536.045563][T10314] udevd[10314]: setting mode of /dev/bus/usb/004/015 to 020664 failed: No such file or directory [ 536.045702][T10314] udevd[10314]: setting owner of /dev/bus/usb/004/015 to uid=0, gid=0 failed: No such file or directory [ 536.083306][T12161] FAULT_INJECTION: forcing a failure. [ 536.083306][T12161] name failslab, interval 1, probability 0, space 0, times 0 [ 536.083331][T12161] CPU: 1 UID: 0 PID: 12161 Comm: syz.0.2346 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 536.083348][T12161] Tainted: [L]=SOFTLOCKUP [ 536.083352][T12161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 536.083359][T12161] Call Trace: [ 536.083364][T12161] [ 536.083369][T12161] dump_stack_lvl+0xe8/0x150 [ 536.083385][T12161] should_fail_ex+0x46b/0x600 [ 536.083404][T12161] should_failslab+0xa8/0x100 [ 536.083418][T12161] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 536.083435][T12161] ? skb_clone+0x212/0x3a0 [ 536.083448][T12161] ? skb_clone+0x212/0x3a0 [ 536.083464][T12161] skb_clone+0x212/0x3a0 [ 536.083479][T12161] __netlink_deliver_tap+0x424/0x8b0 [ 536.083499][T12161] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.083513][T12161] netlink_deliver_tap+0x19c/0x1b0 [ 536.083527][T12161] __netlink_sendskb+0x47/0x90 [ 536.083540][T12161] netlink_dump+0xa0f/0xe10 [ 536.083551][T12161] ? __nla_parse+0x40/0x60 [ 536.083567][T12161] ? __pfx_netlink_dump+0x10/0x10 [ 536.083585][T12161] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.083604][T12161] __netlink_dump_start+0x5cb/0x7e0 [ 536.083621][T12161] ip_set_dump+0x15b/0x1f0 [ 536.083632][T12161] ? __pfx_ip_set_dump+0x10/0x10 [ 536.083643][T12161] ? __pfx_ip_set_dump_start+0x10/0x10 [ 536.083654][T12161] ? __pfx_ip_set_dump_do+0x10/0x10 [ 536.083665][T12161] ? __pfx_ip_set_dump_done+0x10/0x10 [ 536.083678][T12161] ? lockdep_hardirqs_on+0x7a/0x110 [ 536.083691][T12161] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 536.083708][T12161] nfnetlink_rcv_msg+0xbc9/0x1260 [ 536.083721][T12161] ? nfnetlink_rcv_msg+0x230/0x1260 [ 536.083743][T12161] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 536.083791][T12161] ? __lock_acquire+0x6b5/0x2d10 [ 536.083820][T12161] ? __lock_acquire+0x6b5/0x2d10 [ 536.083841][T12161] ? sock_sendmsg_nosec+0x13a/0x180 [ 536.083875][T12161] netlink_rcv_skb+0x232/0x4b0 [ 536.083896][T12161] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 536.083910][T12161] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 536.083929][T12161] ? bpf_lsm_capable+0x9/0x20 [ 536.083942][T12161] ? security_capable+0x7e/0x2c0 [ 536.083962][T12161] nfnetlink_rcv+0x2c0/0x27b0 [ 536.083975][T12161] ? sock_sendmsg_nosec+0x13a/0x180 [ 536.083998][T12161] ? __pfx_snprintf+0x10/0x10 [ 536.084010][T12161] ? unwind_get_return_address+0x4d/0x90 [ 536.084025][T12161] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 536.084042][T12161] ? trim_netdev_trace+0x7ac/0x840 [ 536.084060][T12161] ? __pfx_trim_netdev_trace+0x10/0x10 [ 536.084074][T12161] ? stack_trace_save+0xa9/0x100 [ 536.084090][T12161] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 536.084103][T12161] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 536.084120][T12161] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 536.084138][T12161] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 536.084153][T12161] ? ref_tracker_free+0x673/0x820 [ 536.084167][T12161] ? __netlink_deliver_tap+0x636/0x8b0 [ 536.084180][T12161] ? netlink_deliver_tap+0x19c/0x1b0 [ 536.084197][T12161] ? netlink_unicast+0x754/0x920 [ 536.084215][T12161] ? netlink_sendmsg+0x813/0xb40 [ 536.084237][T12161] ? sock_sendmsg_nosec+0x13a/0x180 [ 536.084264][T12161] ? ____sys_sendmsg+0x55c/0x870 [ 536.084285][T12161] ? ___sys_sendmsg+0x2a5/0x360 [ 536.084307][T12161] ? __x64_sys_sendmsg+0x1b7/0x290 [ 536.084320][T12161] ? do_syscall_64+0x174/0x580 [ 536.084332][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.084352][T12161] ? skb_clone+0x246/0x3a0 [ 536.084367][T12161] ? __netlink_deliver_tap+0x866/0x8b0 [ 536.084381][T12161] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.084397][T12161] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.084411][T12161] ? netlink_deliver_tap+0x2e/0x1b0 [ 536.084427][T12161] netlink_unicast+0x780/0x920 [ 536.084444][T12161] netlink_sendmsg+0x813/0xb40 [ 536.084462][T12161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.084477][T12161] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 536.084492][T12161] ? aa_sock_msg_perm+0x122/0x200 [ 536.084504][T12161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 536.084517][T12161] sock_sendmsg_nosec+0x13a/0x180 [ 536.084534][T12161] ____sys_sendmsg+0x55c/0x870 [ 536.084550][T12161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 536.084568][T12161] ? import_iovec+0x73/0xa0 [ 536.084581][T12161] ___sys_sendmsg+0x2a5/0x360 [ 536.084594][T12161] ? __lock_acquire+0x6b5/0x2d10 [ 536.084609][T12161] ? __pfx____sys_sendmsg+0x10/0x10 [ 536.084641][T12161] ? __fget_files+0x2a/0x420 [ 536.084652][T12161] ? __fget_files+0x3a6/0x420 [ 536.084668][T12161] __x64_sys_sendmsg+0x1b7/0x290 [ 536.084683][T12161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 536.084706][T12161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.084717][T12161] do_syscall_64+0x174/0x580 [ 536.084730][T12161] ? trace_irq_disable+0x3b/0x140 [ 536.084743][T12161] ? clear_bhb_loop+0x40/0x90 [ 536.084756][T12161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.084767][T12161] RIP: 0033:0x7fa21b25ce59 [ 536.084778][T12161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.084788][T12161] RSP: 002b:00007fa2194ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 536.084803][T12161] RAX: ffffffffffffffda RBX: 00007fa21b4d5fa0 RCX: 00007fa21b25ce59 [ 536.084811][T12161] RDX: 0000000020000040 RSI: 0000200000000280 RDI: 0000000000000003 [ 536.084818][T12161] RBP: 00007fa2194ae090 R08: 0000000000000000 R09: 0000000000000000 [ 536.084825][T12161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.084832][T12161] R13: 00007fa21b4d6038 R14: 00007fa21b4d5fa0 R15: 00007ffcc1815638 [ 536.084849][T12161] [ 536.177582][T10314] udevd[10314]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 536.645040][T12174] ======================================================= [ 536.645040][T12174] WARNING: The mand mount option has been deprecated and [ 536.645040][T12174] and is ignored by this kernel. Remove the mand [ 536.645040][T12174] option from the mount to silence this warning. [ 536.645040][T12174] ======================================================= [ 537.007341][ T32] usb 2-1: USB disconnect, device number 20 [ 537.502470][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 537.502496][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 538.017038][ T32] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 538.166916][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 538.166916][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 538.172529][ T32] usb 3-1: config 91 has an invalid interface number: 96 but max is 0 [ 538.172556][ T32] usb 3-1: config 91 has no interface number 0 [ 538.172601][ T32] usb 3-1: config 91 interface 96 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 538.172628][ T32] usb 3-1: config 91 interface 96 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 538.172650][ T32] usb 3-1: config 91 interface 96 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 538.172672][ T32] usb 3-1: config 91 interface 96 has no altsetting 0 [ 538.216901][ T5693] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 538.246736][ T32] usb 3-1: New USB device found, idVendor=0403, idProduct=e0ed, bcdDevice=77.cb [ 538.246946][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.246968][ T32] usb 3-1: Product: syz [ 538.246982][ T32] usb 3-1: Manufacturer: syz [ 538.246996][ T32] usb 3-1: SerialNumber: syz [ 538.253631][T12202] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 538.326851][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 538.334330][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 538.334363][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.357613][ T9] usb 2-1: config 0 descriptor?? [ 538.364405][ T9] gspca_main: sunplus-2.14.0 probing 041e:400b [ 538.366978][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 538.378874][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 538.389737][ T5693] usb 4-1: config 8 has an invalid interface number: 83 but max is 0 [ 538.389818][ T5693] usb 4-1: config 8 has no interface number 0 [ 538.389915][ T5693] usb 4-1: config 8 interface 83 altsetting 5 endpoint 0x86 has an invalid bInterval 199, changing to 11 [ 538.389945][ T5693] usb 4-1: config 8 interface 83 altsetting 5 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 538.389972][ T5693] usb 4-1: config 8 interface 83 has no altsetting 0 [ 538.395828][ T5693] usb 4-1: New USB device found, idVendor=1b80, idProduct=e304, bcdDevice=68.01 [ 538.395858][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.396091][ T5693] usb 4-1: Product: syz [ 538.396106][ T5693] usb 4-1: Manufacturer: syz [ 538.396121][ T5693] usb 4-1: SerialNumber: syz [ 538.523434][ T32] ftdi_sio 3-1:91.96: FTDI USB Serial Device converter detected [ 538.526186][ T32] ftdi_sio ttyUSB0: unknown device type: 0x77cb [ 538.559452][ T32] usb 3-1: USB disconnect, device number 19 [ 538.695470][ T32] ftdi_sio 3-1:91.96: device disconnected [ 538.737989][ T5693] usb 4-1: USB disconnect, device number 16 [ 538.855086][ T9] gspca_sunplus: reg_w_riv err -71 [ 538.855317][ T9] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 538.876651][ T9] usb 2-1: USB disconnect, device number 21 [ 539.107321][ T5337] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 539.260845][ T5337] usb 1-1: Using ep0 maxpacket: 32 [ 539.272737][ T5337] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.272800][ T5337] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 539.272823][ T5337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.375422][ T5337] usb 1-1: config 0 descriptor?? [ 539.382944][ T5337] hub 1-1:0.0: bad descriptor, ignoring hub [ 539.382982][ T5337] hub 1-1:0.0: probe with driver hub failed with error -5 [ 539.390788][ T5337] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 539.484382][T12229] FAULT_INJECTION: forcing a failure. [ 539.484382][T12229] name failslab, interval 1, probability 0, space 0, times 0 [ 539.484418][T12229] CPU: 0 UID: 0 PID: 12229 Comm: syz.2.2366 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 539.484446][T12229] Tainted: [L]=SOFTLOCKUP [ 539.484454][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 539.484466][T12229] Call Trace: [ 539.484473][T12229] [ 539.484482][T12229] dump_stack_lvl+0xe8/0x150 [ 539.484507][T12229] should_fail_ex+0x46b/0x600 [ 539.484539][T12229] should_failslab+0xa8/0x100 [ 539.484563][T12229] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 539.484591][T12229] ? skb_clone+0x212/0x3a0 [ 539.484613][T12229] ? skb_clone+0x212/0x3a0 [ 539.484643][T12229] skb_clone+0x212/0x3a0 [ 539.484682][T12229] __netlink_deliver_tap+0x424/0x8b0 [ 539.484719][T12229] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.484745][T12229] netlink_deliver_tap+0x19c/0x1b0 [ 539.484771][T12229] netlink_unicast+0x754/0x920 [ 539.484803][T12229] netlink_sendmsg+0x813/0xb40 [ 539.484837][T12229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.484863][T12229] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 539.484889][T12229] ? aa_sock_msg_perm+0x122/0x200 [ 539.484910][T12229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.484933][T12229] sock_sendmsg_nosec+0x13a/0x180 [ 539.484962][T12229] ____sys_sendmsg+0x55c/0x870 [ 539.484991][T12229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.485024][T12229] ? import_iovec+0x73/0xa0 [ 539.485050][T12229] ___sys_sendmsg+0x2a5/0x360 [ 539.485073][T12229] ? __lock_acquire+0x6b5/0x2d10 [ 539.485102][T12229] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.485160][T12229] ? __fget_files+0x2a/0x420 [ 539.485180][T12229] ? __fget_files+0x3a6/0x420 [ 539.485210][T12229] __x64_sys_sendmsg+0x1b7/0x290 [ 539.485237][T12229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.485279][T12229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.485300][T12229] do_syscall_64+0x174/0x580 [ 539.485325][T12229] ? trace_irq_disable+0x3b/0x140 [ 539.485349][T12229] ? clear_bhb_loop+0x40/0x90 [ 539.485373][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.485393][T12229] RIP: 0033:0x7f7812bdce59 [ 539.485412][T12229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.485430][T12229] RSP: 002b:00007f7810e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.485452][T12229] RAX: ffffffffffffffda RBX: 00007f7812e55fa0 RCX: 00007f7812bdce59 [ 539.485466][T12229] RDX: 0000000020000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 539.485479][T12229] RBP: 00007f7810e36090 R08: 0000000000000000 R09: 0000000000000000 [ 539.485491][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.485507][T12229] R13: 00007f7812e56038 R14: 00007f7812e55fa0 R15: 00007ffd30eef798 [ 539.485537][T12229] [ 539.485873][T12229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 539.485888][T12229] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 539.485888][T12229] Please contact the netfilter-devel mailing list or update your nftables rules. [ 539.808857][T12233] comedi comedi2: 8255: I/O base address not correctly aligned [ 540.227002][ T5701] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 540.329505][T12248] raw_sendmsg: syz.1.2373 forgot to set AF_INET. Fix it! [ 540.389327][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 540.406431][ T5701] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 540.406513][ T5701] usb 3-1: too many endpoints for config 1 interface 2 altsetting 242: 255, using maximum allowed: 30 [ 540.406553][ T5701] usb 3-1: config 1 interface 2 altsetting 242 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 540.406594][ T5701] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 540.406620][ T5701] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 540.406643][ T5701] usb 3-1: config 1 interface 2 has no altsetting 0 [ 540.481062][ T5701] usb 3-1: New USB device found, idVendor=0582, idProduct=00b2, bcdDevice= 0.40 [ 540.481096][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.481116][ T5701] usb 3-1: Product: syz [ 540.481131][ T5701] usb 3-1: Manufacturer: syz [ 540.481146][ T5701] usb 3-1: SerialNumber: syz [ 540.897827][T12257] kvm: Disabled LAPIC found during irq injection [ 540.937328][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 541.086992][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 541.091576][ T9] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 541.091599][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.091610][ T9] usb 4-1: Product: syz [ 541.091617][ T9] usb 4-1: Manufacturer: syz [ 541.091625][ T9] usb 4-1: SerialNumber: syz [ 541.139451][ T9] usb 4-1: config 0 descriptor?? [ 541.153114][ T9] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 541.153397][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 541.153412][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.153523][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 541.153532][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.222833][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 541.224006][ T9] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 541.224061][ T9] usb 4-1: media controller created [ 541.276104][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 541.433038][ T9] usb 4-1: selecting invalid altsetting 3 [ 541.433059][ T9] ttusb2: set interface to alts=3 failed [ 541.529608][ T9] DVB: Unable to find symbol tda10086_attach() [ 541.529620][ T9] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 541.532370][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 541.532386][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.532455][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 541.532462][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 541.532697][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 541.605433][ T9] usb 4-1: USB disconnect, device number 17 [ 541.655384][T12264] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 541.655408][T12264] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 541.788632][ T9] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 541.988223][ T5337] usb 1-1: USB disconnect, device number 19 [ 542.156266][T12270] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2381'. [ 543.389814][ T5701] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 543.394633][ T5701] usb 3-1: unit 4 not found! [ 543.394657][ T5701] usb 3-1: unit 144 not found! [ 543.623332][T12288] bond0: (slave bond_slave_1): Releasing backup interface [ 543.646677][ T5701] usb 3-1: USB disconnect, device number 20 [ 543.845327][T12300] FAULT_INJECTION: forcing a failure. [ 543.845327][T12300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 543.845363][T12300] CPU: 0 UID: 0 PID: 12300 Comm: syz.1.2390 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 543.845390][T12300] Tainted: [L]=SOFTLOCKUP [ 543.845397][T12300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 543.845409][T12300] Call Trace: [ 543.845416][T12300] [ 543.845425][T12300] dump_stack_lvl+0xe8/0x150 [ 543.845454][T12300] should_fail_ex+0x46b/0x600 [ 543.845486][T12300] strncpy_from_user+0x36/0x2b0 [ 543.845514][T12300] do_getname+0x77/0x250 [ 543.845545][T12300] user_path_at+0x2a/0x160 [ 543.845568][T12300] __se_sys_mount+0x2dc/0x420 [ 543.845591][T12300] ? __pfx___se_sys_mount+0x10/0x10 [ 543.845615][T12300] ? __x64_sys_mount+0x20/0xc0 [ 543.845633][T12300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.845652][T12300] do_syscall_64+0x174/0x580 [ 543.845674][T12300] ? trace_irq_disable+0x3b/0x140 [ 543.845696][T12300] ? clear_bhb_loop+0x40/0x90 [ 543.845719][T12300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.845738][T12300] RIP: 0033:0x7ff4d34ece59 [ 543.845756][T12300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.845773][T12300] RSP: 002b:00007ff4d1746028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 543.845794][T12300] RAX: ffffffffffffffda RBX: 00007ff4d3765fa0 RCX: 00007ff4d34ece59 [ 543.845809][T12300] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000080 [ 543.845823][T12300] RBP: 00007ff4d1746090 R08: 0000200000000000 R09: 0000000000000000 [ 543.845844][T12300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.845856][T12300] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 543.845886][T12300] [ 544.053981][T12304] FAULT_INJECTION: forcing a failure. [ 544.053981][T12304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.054015][T12304] CPU: 0 UID: 0 PID: 12304 Comm: syz.2.2391 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 544.054040][T12304] Tainted: [L]=SOFTLOCKUP [ 544.054047][T12304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.054058][T12304] Call Trace: [ 544.054066][T12304] [ 544.054075][T12304] dump_stack_lvl+0xe8/0x150 [ 544.054101][T12304] should_fail_ex+0x46b/0x600 [ 544.054131][T12304] _copy_to_iter+0x589/0x17d0 [ 544.054170][T12304] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 544.054193][T12304] ? __pfx__copy_to_iter+0x10/0x10 [ 544.054218][T12304] ? rt_spin_lock+0x1e0/0x400 [ 544.054239][T12304] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 544.054265][T12304] __skb_datagram_iter+0xf8/0x980 [ 544.054289][T12304] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 544.054320][T12304] skb_copy_datagram_iter+0xb5/0x240 [ 544.054349][T12304] netlink_recvmsg+0x2c3/0xa50 [ 544.054379][T12304] ? __pfx_netlink_recvmsg+0x10/0x10 [ 544.054407][T12304] ? __pfx_aa_sk_perm+0x10/0x10 [ 544.054437][T12304] ? rcu_is_watching+0x15/0xb0 [ 544.054461][T12304] ? aa_sock_msg_perm+0x122/0x200 [ 544.054479][T12304] ? __pfx_netlink_recvmsg+0x10/0x10 [ 544.054496][T12304] sock_recvmsg_nosec+0x130/0x170 [ 544.054520][T12304] ____sys_recvmsg+0x23d/0x4f0 [ 544.054538][T12304] ? __pfx_____sys_recvmsg+0x10/0x10 [ 544.054563][T12304] ? import_iovec+0x73/0xa0 [ 544.054576][T12304] ___sys_recvmsg+0x215/0x5a0 [ 544.054596][T12304] ? __pfx____sys_recvmsg+0x10/0x10 [ 544.054612][T12304] ? __fget_files+0x2a/0x420 [ 544.054630][T12304] ? __fget_files+0x3a6/0x420 [ 544.054646][T12304] do_recvmmsg+0x32b/0x7e0 [ 544.054663][T12304] ? __pfx_do_recvmmsg+0x10/0x10 [ 544.054682][T12304] ? get_timespec64+0x119/0x1b0 [ 544.054697][T12304] ? __pfx_get_timespec64+0x10/0x10 [ 544.054716][T12304] __x64_sys_recvmmsg+0x1b7/0x250 [ 544.054731][T12304] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 544.054755][T12304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.054767][T12304] do_syscall_64+0x174/0x580 [ 544.054780][T12304] ? trace_irq_disable+0x3b/0x140 [ 544.054794][T12304] ? clear_bhb_loop+0x40/0x90 [ 544.054807][T12304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.054817][T12304] RIP: 0033:0x7f7812bdce59 [ 544.054829][T12304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.054839][T12304] RSP: 002b:00007f7810e36028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 544.054851][T12304] RAX: ffffffffffffffda RBX: 00007f7812e55fa0 RCX: 00007f7812bdce59 [ 544.054859][T12304] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 544.054867][T12304] RBP: 00007f7810e36090 R08: 0000200000003700 R09: 0000000000000000 [ 544.054874][T12304] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 544.054881][T12304] R13: 00007f7812e56038 R14: 00007f7812e55fa0 R15: 00007ffd30eef798 [ 544.054897][T12304] [ 544.899184][ T5337] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 545.376935][ T5337] usb 4-1: Using ep0 maxpacket: 32 [ 545.379371][ T5337] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 545.379397][ T5337] usb 4-1: config 0 has no interface number 0 [ 545.379447][ T5337] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.379474][ T5337] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 545.379499][ T5337] usb 4-1: config 0 interface 85 has no altsetting 0 [ 545.437376][ T5337] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 545.437407][ T5337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.437428][ T5337] usb 4-1: Product: syz [ 545.437443][ T5337] usb 4-1: Manufacturer: syz [ 545.437458][ T5337] usb 4-1: SerialNumber: syz [ 545.486996][ T5337] usb 4-1: config 0 descriptor?? [ 545.516083][T12320] FAULT_INJECTION: forcing a failure. [ 545.516083][T12320] name failslab, interval 1, probability 0, space 0, times 0 [ 545.516122][T12320] CPU: 1 UID: 0 PID: 12320 Comm: syz.1.2398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 545.516152][T12320] Tainted: [L]=SOFTLOCKUP [ 545.516159][T12320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.516171][T12320] Call Trace: [ 545.516188][T12320] [ 545.516197][T12320] dump_stack_lvl+0xe8/0x150 [ 545.516227][T12320] should_fail_ex+0x46b/0x600 [ 545.516259][T12320] should_failslab+0xa8/0x100 [ 545.516284][T12320] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 545.516314][T12320] ? mas_alloc_nodes+0x291/0x350 [ 545.516337][T12320] ? mas_alloc_nodes+0x291/0x350 [ 545.516366][T12320] mas_alloc_nodes+0x291/0x350 [ 545.516394][T12320] mas_preallocate+0x2d6/0x640 [ 545.516423][T12320] ? __pfx_mas_preallocate+0x10/0x10 [ 545.516468][T12320] ? __mas_set_range+0x12f/0x3c0 [ 545.516499][T12320] __split_vma+0x33d/0xa40 [ 545.516536][T12320] ? __pfx___split_vma+0x10/0x10 [ 545.516573][T12320] ? check_path+0x21/0x40 [ 545.516605][T12320] vms_gather_munmap_vmas+0x32d/0x1380 [ 545.516639][T12320] ? rcu_is_watching+0x15/0xb0 [ 545.516680][T12320] ? mtree_range_walk+0x6fc/0x8b0 [ 545.516709][T12320] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 545.516743][T12320] ? mas_find+0xa7d/0xd30 [ 545.516769][T12320] mmap_region+0x932/0x2220 [ 545.516790][T12320] ? is_bpf_text_address+0x292/0x2b0 [ 545.516818][T12320] ? __perf_event_task_sched_in+0xf2/0x1800 [ 545.516846][T12320] ? __lock_acquire+0x6b5/0x2d10 [ 545.516869][T12320] ? __pfx_mmap_region+0x10/0x10 [ 545.516897][T12320] ? __perf_event_task_sched_in+0x1606/0x1800 [ 545.516926][T12320] ? __perf_event_task_sched_in+0xf2/0x1800 [ 545.516951][T12320] ? finish_task_switch+0x15c/0xbd0 [ 545.517030][T12320] ? __pfx___schedule+0x10/0x10 [ 545.517067][T12320] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.517091][T12320] ? irqentry_exit+0x218/0x8c0 [ 545.517113][T12320] ? trace_irq_disable+0x3b/0x140 [ 545.517154][T12320] ? shmem_mapping+0x29/0x50 [ 545.517190][T12320] ? shmem_mapping+0xd/0x50 [ 545.517214][T12320] ? memfd_check_seals_mmap+0xcb/0x210 [ 545.517237][T12320] do_mmap+0xc2f/0x10c0 [ 545.517270][T12320] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.517294][T12320] ? __pfx_do_mmap+0x10/0x10 [ 545.517320][T12320] ? rwbase_write_lock+0x568/0x730 [ 545.517358][T12320] vm_mmap_pgoff+0x2cc/0x4f0 [ 545.517391][T12320] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 545.517424][T12320] ? __fget_files+0x2a/0x420 [ 545.517443][T12320] ? __fget_files+0x3a6/0x420 [ 545.517460][T12320] ? __fget_files+0x2a/0x420 [ 545.517482][T12320] ksys_mmap_pgoff+0x4e8/0x720 [ 545.517511][T12320] ? __x64_sys_mmap+0x7f/0x140 [ 545.517531][T12320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.517551][T12320] do_syscall_64+0x174/0x580 [ 545.517572][T12320] ? trace_irq_disable+0x3b/0x140 [ 545.517594][T12320] ? clear_bhb_loop+0x40/0x90 [ 545.517617][T12320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.517636][T12320] RIP: 0033:0x7ff4d34ece59 [ 545.517654][T12320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.517669][T12320] RSP: 002b:00007ff4d1746028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 545.517689][T12320] RAX: ffffffffffffffda RBX: 00007ff4d3765fa0 RCX: 00007ff4d34ece59 [ 545.517703][T12320] RDX: 0000000001000004 RSI: 0000000000003020 RDI: 0000200000002000 [ 545.517716][T12320] RBP: 00007ff4d1746090 R08: 0000000000000004 R09: 0000000100000000 [ 545.517729][T12320] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 545.517740][T12320] R13: 00007ff4d3766038 R14: 00007ff4d3765fa0 R15: 00007fff6e5d3c68 [ 545.517768][T12320] [ 545.993867][T12311] netlink: 'syz.3.2395': attribute type 3 has an invalid length. [ 546.528919][T10907] Bluetooth: hci4: command 0x0406 tx timeout [ 546.628417][T12339] netlink: 'syz.1.2404': attribute type 13 has an invalid length. [ 546.628440][T12339] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2404'. [ 547.201537][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2407'. [ 548.190140][ T5701] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 548.345717][ T5337] appletouch 4-1:0.85: Failed to request geyser raw mode [ 548.345963][ T5337] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 548.390275][ T5337] usb 4-1: USB disconnect, device number 18 [ 548.410540][ T5701] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.410570][ T5701] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 548.410589][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.410713][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 548.410740][ T5701] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 548.422105][ T5701] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.422136][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.422287][ T5701] usb 3-1: Product: syz [ 548.422301][ T5701] usb 3-1: Manufacturer: syz [ 548.502141][ T5701] cdc_wdm 3-1:1.0: skipping garbage [ 548.502163][ T5701] cdc_wdm 3-1:1.0: skipping garbage [ 548.631541][T12371] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2413'. [ 548.655815][ T5701] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 548.655982][ T5701] cdc_wdm 3-1:1.0: Unknown control protocol [ 548.723210][ T5693] usb 3-1: USB disconnect, device number 21 [ 548.949330][ T5701] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 548.960106][ T5337] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 549.100050][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.100068][ T5701] usb 2-1: config 0 has no interfaces? [ 549.102879][ T5701] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 549.102903][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.102914][ T5701] usb 2-1: Product: syz [ 549.102922][ T5701] usb 2-1: Manufacturer: syz [ 549.102929][ T5701] usb 2-1: SerialNumber: syz [ 549.120619][ T5701] usb 2-1: config 0 descriptor?? [ 549.128715][ T5337] usb 4-1: Using ep0 maxpacket: 32 [ 549.165486][ T5337] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 549.165519][ T5337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 549.165543][ T5337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 549.165582][ T5337] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 549.165606][ T5337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.228846][ T5337] usb 4-1: config 0 descriptor?? [ 549.232988][ T5337] hub 4-1:0.0: USB hub found [ 549.437861][ T5337] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 549.666533][T12399] FAULT_INJECTION: forcing a failure. [ 549.666533][T12399] name failslab, interval 1, probability 0, space 0, times 0 [ 549.666557][T12399] CPU: 0 UID: 0 PID: 12399 Comm: syz.0.2425 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 549.666581][T12399] Tainted: [L]=SOFTLOCKUP [ 549.666588][T12399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 549.666600][T12399] Call Trace: [ 549.666608][T12399] [ 549.666617][T12399] dump_stack_lvl+0xe8/0x150 [ 549.666647][T12399] should_fail_ex+0x46b/0x600 [ 549.666681][T12399] should_failslab+0xa8/0x100 [ 549.666700][T12399] __kmalloc_noprof+0xfe/0x7e0 [ 549.666710][T12399] ? rcu_is_watching+0x15/0xb0 [ 549.666726][T12399] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.666738][T12399] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.666766][T12399] tomoyo_realpath_from_path+0xe3/0x5d0 [ 549.666789][T12399] ? tomoyo_domain+0xd7/0x130 [ 549.666813][T12399] ? tomoyo_path_number_perm+0x219/0x630 [ 549.666842][T12399] tomoyo_path_number_perm+0x246/0x630 [ 549.666873][T12399] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 549.666900][T12399] ? __lock_acquire+0x6b5/0x2d10 [ 549.666928][T12399] ? do_raw_spin_lock+0x12b/0x2f0 [ 549.666978][T12399] ? __fget_files+0x2a/0x420 [ 549.667000][T12399] ? __fget_files+0x2a/0x420 [ 549.667017][T12399] ? __fget_files+0x3a6/0x420 [ 549.667036][T12399] ? __fget_files+0x2a/0x420 [ 549.667059][T12399] security_file_ioctl+0xc3/0x2a0 [ 549.667089][T12399] __se_sys_ioctl+0x47/0x170 [ 549.667114][T12399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.667136][T12399] do_syscall_64+0x174/0x580 [ 549.667160][T12399] ? trace_irq_disable+0x3b/0x140 [ 549.667185][T12399] ? clear_bhb_loop+0x40/0x90 [ 549.667208][T12399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.667227][T12399] RIP: 0033:0x7fa21b25ce59 [ 549.667245][T12399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.667262][T12399] RSP: 002b:00007fa2194ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 549.667283][T12399] RAX: ffffffffffffffda RBX: 00007fa21b4d5fa0 RCX: 00007fa21b25ce59 [ 549.667298][T12399] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 549.667311][T12399] RBP: 00007fa2194ae090 R08: 0000000000000000 R09: 0000000000000000 [ 549.667320][T12399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.667326][T12399] R13: 00007fa21b4d6038 R14: 00007fa21b4d5fa0 R15: 00007ffcc1815638 [ 549.667343][T12399] [ 549.673090][T12399] ERROR: Out of memory at tomoyo_realpath_from_path. [ 549.682312][T12399] comedi comedi2: 8255: I/O port conflict (0x20,4) [ 549.853781][ T32] usb 2-1: USB disconnect, device number 22 [ 549.914954][T12404] netlink: 'syz.3.2415': attribute type 29 has an invalid length. [ 549.916025][T12404] netlink: 'syz.3.2415': attribute type 29 has an invalid length. [ 550.118709][ T5693] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 550.199938][ T5337] usbhid 4-1:0.0: can't add hid device: -71 [ 550.200088][ T5337] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 550.247784][ T5693] usb 3-1: device descriptor read/64, error -71 [ 550.247960][ T5337] usb 4-1: USB disconnect, device number 19 [ 550.496973][ T5693] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 550.637065][ T5693] usb 3-1: device descriptor read/64, error -71 [ 550.679405][ T32] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 550.749243][ T5693] usb usb3-port1: attempt power cycle [ 550.830379][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 550.830415][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 550.830442][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 550.830468][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 550.830495][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 550.835534][ T32] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 550.835561][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.835577][ T32] usb 1-1: Product: syz [ 550.835590][ T32] usb 1-1: Manufacturer: syz [ 550.835601][ T32] usb 1-1: SerialNumber: syz [ 550.933246][ T32] usb 1-1: config 0 descriptor?? [ 550.954564][ T32] iguanair 1-1:0.0: probe with driver iguanair failed with error -12 [ 551.056906][ T5337] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 551.088247][ T5693] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 551.107927][ T5693] usb 3-1: device descriptor read/8, error -71 [ 551.146955][ T5701] usb 1-1: USB disconnect, device number 20 [ 551.223450][ T5337] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 551.223488][ T5337] usb 2-1: can't read configurations, error -22 [ 551.253761][T12429] netlink: 'syz.3.2435': attribute type 2 has an invalid length. [ 551.253782][T12429] netlink: 'syz.3.2435': attribute type 8 has an invalid length. [ 551.253796][T12429] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2435'. [ 551.347003][ T5337] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 551.347343][ T5693] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 551.381951][ T5693] usb 3-1: device descriptor read/8, error -71 [ 551.491947][ T5693] usb usb3-port1: unable to enumerate USB device [ 551.524737][ T5337] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 551.524784][ T5337] usb 2-1: can't read configurations, error -22 [ 551.525176][ T5337] usb usb2-port1: attempt power cycle [ 551.862876][T12435] FAULT_INJECTION: forcing a failure. [ 551.862876][T12435] name failslab, interval 1, probability 0, space 0, times 0 [ 551.862912][T12435] CPU: 1 UID: 0 PID: 12435 Comm: syz.0.2438 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.862937][T12435] Tainted: [L]=SOFTLOCKUP [ 551.862944][T12435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.862956][T12435] Call Trace: [ 551.862964][T12435] [ 551.862972][T12435] dump_stack_lvl+0xe8/0x150 [ 551.863002][T12435] should_fail_ex+0x46b/0x600 [ 551.863034][T12435] should_failslab+0xa8/0x100 [ 551.863059][T12435] __kmalloc_noprof+0xfe/0x7e0 [ 551.863076][T12435] ? rcu_is_watching+0x15/0xb0 [ 551.863104][T12435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 551.863126][T12435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 551.863163][T12435] tomoyo_realpath_from_path+0xe3/0x5d0 [ 551.863188][T12435] ? tomoyo_domain+0xd7/0x130 [ 551.863213][T12435] ? tomoyo_path_number_perm+0x219/0x630 [ 551.863241][T12435] tomoyo_path_number_perm+0x246/0x630 [ 551.863272][T12435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.863300][T12435] ? __lock_acquire+0x6b5/0x2d10 [ 551.863327][T12435] ? do_raw_spin_lock+0x12b/0x2f0 [ 551.863377][T12435] ? __fget_files+0x2a/0x420 [ 551.863401][T12435] ? __fget_files+0x2a/0x420 [ 551.863419][T12435] ? __fget_files+0x3a6/0x420 [ 551.863438][T12435] ? __fget_files+0x2a/0x420 [ 551.863461][T12435] security_file_ioctl+0xc3/0x2a0 [ 551.863490][T12435] __se_sys_ioctl+0x47/0x170 [ 551.863515][T12435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.863537][T12435] do_syscall_64+0x174/0x580 [ 551.863560][T12435] ? trace_irq_disable+0x3b/0x140 [ 551.863583][T12435] ? clear_bhb_loop+0x40/0x90 [ 551.863606][T12435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.863626][T12435] RIP: 0033:0x7fa21b25ce59 [ 551.863644][T12435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.863661][T12435] RSP: 002b:00007fa2194ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.863681][T12435] RAX: ffffffffffffffda RBX: 00007fa21b4d5fa0 RCX: 00007fa21b25ce59 [ 551.863695][T12435] RDX: 0000200000000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 551.863708][T12435] RBP: 00007fa2194ae090 R08: 0000000000000000 R09: 0000000000000000 [ 551.863721][T12435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.863733][T12435] R13: 00007fa21b4d6038 R14: 00007fa21b4d5fa0 R15: 00007ffcc1815638 [ 551.863766][T12435] [ 551.863786][T12435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.889402][ T5337] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 552.005631][ T5337] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 552.005669][ T5337] usb 2-1: can't read configurations, error -22 [ 552.276951][ T5337] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 552.310526][ T5337] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 552.310565][ T5337] usb 2-1: can't read configurations, error -22 [ 552.310910][ T5337] usb usb2-port1: unable to enumerate USB device [ 552.568134][T12437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2437'. [ 552.568423][T12437] FAULT_INJECTION: forcing a failure. [ 552.568423][T12437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.568452][T12437] CPU: 0 UID: 0 PID: 12437 Comm: syz.3.2437 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 552.568477][T12437] Tainted: [L]=SOFTLOCKUP [ 552.568483][T12437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.568492][T12437] Call Trace: [ 552.568499][T12437] [ 552.568506][T12437] dump_stack_lvl+0xe8/0x150 [ 552.568528][T12437] should_fail_ex+0x46b/0x600 [ 552.568554][T12437] _copy_to_user+0x31/0xb0 [ 552.568572][T12437] simple_read_from_buffer+0xe1/0x170 [ 552.568593][T12437] proc_fail_nth_read+0x1be/0x230 [ 552.568612][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.568631][T12437] ? rw_verify_area+0x2ac/0x4e0 [ 552.568649][T12437] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 552.568666][T12437] vfs_read+0x212/0xa80 [ 552.568697][T12437] ? __pfx_vfs_read+0x10/0x10 [ 552.568716][T12437] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 552.568736][T12437] ? lockdep_hardirqs_on+0x7a/0x110 [ 552.568756][T12437] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 552.568774][T12437] ? mutex_lock_nested+0x152/0x1d0 [ 552.568796][T12437] ? fdget_pos+0x252/0x320 [ 552.568819][T12437] ksys_read+0x156/0x270 [ 552.568839][T12437] ? __pfx_ksys_read+0x10/0x10 [ 552.568863][T12437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.568880][T12437] do_syscall_64+0x174/0x580 [ 552.568899][T12437] ? trace_irq_disable+0x3b/0x140 [ 552.568920][T12437] ? clear_bhb_loop+0x40/0x90 [ 552.568941][T12437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.568956][T12437] RIP: 0033:0x7f29adb4d68e [ 552.568971][T12437] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 552.568984][T12437] RSP: 002b:00007f29abde5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 552.569000][T12437] RAX: ffffffffffffffda RBX: 00007f29abde66c0 RCX: 00007f29adb4d68e [ 552.569012][T12437] RDX: 000000000000000f RSI: 00007f29abde60a0 RDI: 0000000000000003 [ 552.569022][T12437] RBP: 00007f29abde6090 R08: 0000000000000000 R09: 0000000000000000 [ 552.569032][T12437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.569042][T12437] R13: 00007f29ade06038 R14: 00007f29ade05fa0 R15: 00007fff6e9c3318 [ 552.569066][T12437] [ 552.934969][T12447] netlink: 'syz.0.2441': attribute type 29 has an invalid length. [ 553.017433][T12447] netlink: 'syz.0.2441': attribute type 29 has an invalid length. [ 553.228764][T12454] dlm: Unknown command passed to DLM device : 12 [ 553.228764][T12454] [ 553.626119][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2447'. [ 554.069830][T10907] block nbd0: Receive control failed (result -1) [ 558.022779][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 558.411566][T12532] Bluetooth: MGMT ver 1.23 [ 558.411619][T12532] Bluetooth: hci1: expected 121 bytes, got 2 bytes [ 563.004234][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.004336][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.668836][T10907] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 564.668868][T10907] CPU: 0 UID: 0 PID: 10907 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 564.668901][T10907] Tainted: [L]=SOFTLOCKUP [ 564.668910][T10907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 564.668925][T10907] Workqueue: hci4 hci_rx_work [ 564.668955][T10907] Call Trace: [ 564.668964][T10907] [ 564.668973][T10907] dump_stack_lvl+0xe8/0x150 [ 564.669004][T10907] sysfs_create_dir_ns+0x271/0x2a0 [ 564.669038][T10907] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.669063][T10907] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 564.669100][T10907] ? rt_spin_unlock+0x160/0x200 [ 564.669122][T10907] kobject_add_internal+0x631/0xd10 [ 564.669165][T10907] kobject_add+0x163/0x240 [ 564.669205][T10907] ? __pfx_kobject_add+0x10/0x10 [ 564.669242][T10907] ? get_device_parent+0x370/0x3a0 [ 564.669280][T10907] device_add+0x408/0xb90 [ 564.669310][T10907] hci_conn_add_sysfs+0xd5/0x210 [ 564.669336][T10907] le_conn_complete_evt+0x10e6/0x16b0 [ 564.669377][T10907] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 564.669408][T10907] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.669435][T10907] ? lockdep_hardirqs_on+0x7a/0x110 [ 564.669464][T10907] ? skb_pull_data+0xfb/0x200 [ 564.669499][T10907] hci_le_conn_complete_evt+0x187/0x470 [ 564.669536][T10907] hci_event_packet+0x659/0xef0 [ 564.669567][T10907] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 564.669587][T10907] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 564.669609][T10907] ? __pfx_hci_event_packet+0x10/0x10 [ 564.669628][T10907] ? rt_spin_unlock+0x14f/0x200 [ 564.669658][T10907] ? hci_send_to_monitor+0xe2/0x590 [ 564.669692][T10907] hci_rx_work+0x3ee/0x1040 [ 564.669727][T10907] ? process_one_work+0x8be/0x1630 [ 564.669757][T10907] process_one_work+0x98b/0x1630 [ 564.669810][T10907] ? __pfx_process_one_work+0x10/0x10 [ 564.669839][T10907] ? do_raw_spin_lock+0x12b/0x2f0 [ 564.669880][T10907] worker_thread+0xb49/0x1140 [ 564.669921][T10907] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 564.669963][T10907] kthread+0x388/0x470 [ 564.669989][T10907] ? __pfx_worker_thread+0x10/0x10 [ 564.670019][T10907] ? __pfx_kthread+0x10/0x10 [ 564.670044][T10907] ret_from_fork+0x514/0xb70 [ 564.670072][T10907] ? __pfx_ret_from_fork+0x10/0x10 [ 564.670098][T10907] ? __switch_to+0xc79/0x1410 [ 564.670123][T10907] ? __pfx_kthread+0x10/0x10 [ 564.670149][T10907] ret_from_fork_asm+0x1a/0x30 [ 564.670194][T10907] [ 564.670371][T10907] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 564.670414][T10907] Bluetooth: hci4: failed to register connection device [ 565.104196][ T38] audit: type=1326 audit(1782174612.648:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.104258][ T38] audit: type=1326 audit(1782174612.648:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.116622][ T38] audit: type=1326 audit(1782174612.658:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.119097][ T38] audit: type=1326 audit(1782174612.668:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.119824][ T38] audit: type=1326 audit(1782174612.668:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.120371][ T38] audit: type=1326 audit(1782174612.668:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.121424][ T38] audit: type=1326 audit(1782174612.668:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.121874][ T38] audit: type=1326 audit(1782174612.668:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.186623][ T38] audit: type=1326 audit(1782174612.678:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 565.234657][ T38] audit: type=1326 audit(1782174612.778:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12623 comm="syz.2.2505" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7812bdce59 code=0x7ffc0000 [ 567.465258][ T5337] kernel read not supported for file /dsp (pid: 5337 comm: kworker/1:3) [ 569.585135][T12703] netlink: 'syz.2.2521': attribute type 4 has an invalid length. [ 570.196964][ T32] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 570.366865][ T32] usb 4-1: config 0 has no interfaces? [ 570.366898][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 570.366912][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.406826][ T32] usb 4-1: config 0 descriptor?? [ 570.415166][T12719] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 570.907062][ T32] usb 4-1: USB disconnect, device number 20 [ 573.291714][T12787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2557'. [ 573.804422][T12798] program syz.2.2560 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 574.170844][T12804] netlink: 'syz.3.2562': attribute type 10 has an invalid length. [ 575.279876][T12814] netlink: 'syz.3.2565': attribute type 12 has an invalid length. [ 575.798209][ T5337] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 575.990389][ T5337] usb 1-1: config 0 has no interfaces? [ 575.990427][ T5337] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.990460][ T5337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.070524][ T5337] usb 1-1: config 0 descriptor?? [ 576.293538][ T5337] usb 1-1: USB disconnect, device number 21 [ 576.735490][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 576.886908][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 576.902849][ T10] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 576.902899][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.902927][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.902949][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 576.902992][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 576.903015][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.990717][ T10] usb 2-1: config 0 descriptor?? [ 577.217439][T12857] netlink: 'syz.0.2576': attribute type 1 has an invalid length. [ 577.690558][T12850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.691597][T12850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.693553][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.000B/input/input22 [ 577.906954][ T9] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 578.069087][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4F, changing to 0xF [ 578.069120][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 140, setting to 64 [ 578.071886][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 578.071915][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.071934][ T9] usb 1-1: Product: syz [ 578.071948][ T9] usb 1-1: Manufacturer: syz [ 578.071962][ T9] usb 1-1: SerialNumber: syz [ 578.144622][ T9] usb 1-1: config 0 descriptor?? [ 578.145683][T12864] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 578.390472][T12864] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 578.657557][ T10] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.000B/input/input23 [ 579.789608][ T10] kye 0003:0458:5013.000B: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0 [ 580.003605][ T10] usb 2-1: USB disconnect, device number 27 [ 580.270440][T12884] fido_id[12884]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 580.307326][T12889] program syz.3.2589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.869873][ T9] usb 1-1: USB disconnect, device number 22 [ 580.958593][ T5605] Bluetooth: hci4: connection err: -111 [ 581.494578][T12904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 581.686785][T10907] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 581.800900][T10907] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 581.804001][T10907] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 581.877331][T10907] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 581.878443][T10907] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.632430][T12906] syz_tun: entered allmulticast mode [ 582.732601][T12915] netlink: 'syz.3.2597': attribute type 12 has an invalid length. [ 583.686997][ T32] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 583.883278][ T32] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 583.883315][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 583.883350][ T32] usb 1-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 583.883372][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.889799][ T32] usb 1-1: config 0 descriptor?? [ 583.890571][T12925] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 584.203275][ T7307] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.218101][ T5605] Bluetooth: hci0: command tx timeout [ 584.320792][ T32] hid_parser_main: 17 callbacks suppressed [ 584.320811][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x3 [ 584.320832][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320852][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320868][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320883][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320899][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320914][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.320933][ T32] hid-steam 0003:28DE:1205.000C: unknown main item tag 0x0 [ 584.321731][ T32] hid-steam 0003:28DE:1205.000C: : USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0 [ 584.459964][T12932] tipc: Started in network mode [ 584.459985][T12932] tipc: Node identity 080211000001, cluster identity 4711 [ 584.490613][T12932] tipc: Enabled bearer , priority 10 [ 584.612274][ T32] hid-steam 0003:28DE:1205.000C: Steam Controller 'XXXXXXXXXX' connected [ 584.684975][ T32] input: Steam Deck as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.000C/input/input24 [ 585.092153][ T32] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28DE:1205.000C/input/input25 [ 585.887276][ T32] hid-steam 0003:28DE:1205.000D: unknown main item tag 0x3 [ 585.887316][ T32] hid-steam 0003:28DE:1205.000D: unknown main item tag 0x0 [ 586.172168][ T7307] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.301154][ T5605] Bluetooth: hci0: command tx timeout [ 586.491613][ T32] hid-steam 0003:28DE:1205.000D: hidraw0: USB HID v0.04 Device [HID 28de:1205] on usb-dummy_hcd.0-1/input0 [ 586.601895][ T5693] tipc: Node number set to 134418688 [ 586.675103][ C0] Unknown status report in ack skb [ 587.153305][ T32] usb 1-1: USB disconnect, device number 23 [ 588.567675][ T7307] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.004659][ T32] hid-steam 0003:28DE:1205.000C: Steam Controller 'XXXXXXXXXX' disconnected [ 589.735358][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 589.948681][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 589.949851][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.949906][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.949933][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.951029][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.951082][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.951111][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.952207][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.952256][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.952282][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.953316][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.953367][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.953398][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.954689][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.954738][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.954763][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.955981][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.956031][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.956063][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.958233][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.958286][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.958315][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.960143][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 589.960197][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 589.960224][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 589.964194][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 589.964225][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 589.964247][ T9] usb 4-1: Product: syz [ 589.964260][ T9] usb 4-1: Manufacturer: syz [ 589.964274][ T9] usb 4-1: SerialNumber: syz [ 590.082897][ T9] usb 4-1: config 0 descriptor?? [ 590.274157][ T7307] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.474335][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 590.498636][ T9] usb 4-1: USB disconnect, device number 21 [ 590.646238][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 592.875548][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2636'. [ 596.876185][ T5613] ------------[ cut here ]------------ [ 596.876199][ T5613] task_rq(p) != rq [ 596.876208][ T5613] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#1: syz-executor/5613 [ 596.876247][ T5613] Modules linked in: [ 596.876264][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.876285][ T5613] Tainted: [L]=SOFTLOCKUP [ 596.876291][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.876300][ T5613] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 596.876321][ T5613] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 596.876335][ T5613] RSP: 0018:ffffc90004386f80 EFLAGS: 00010006 [ 596.876347][ T5613] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 596.876359][ T5613] RDX: 0000000000000000 RSI: ffff888031688000 RDI: ffff8880b873ba40 [ 596.876369][ T5613] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 596.876381][ T5613] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 596.876392][ T5613] R13: 1ffff110170e78d6 R14: ffff888031688000 R15: ffffffff8dc257d0 [ 596.876403][ T5613] FS: 000055555aa5a500(0000) GS:ffff888125b6b000(0000) knlGS:0000000000000000 [ 596.876416][ T5613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 596.876426][ T5613] CR2: 00007f781398da08 CR3: 0000000029fc4000 CR4: 00000000003526f0 [ 596.876447][ T5613] Call Trace: [ 596.876453][ T5613] [ 596.876463][ T5613] set_next_task_fair+0xa68/0xce0 [ 596.876489][ T5613] __schedule+0x3e03/0x5550 [ 596.876532][ T5613] ? __pfx___schedule+0x10/0x10 [ 596.876546][ T5613] ? irqentry_exit+0x218/0x8c0 [ 596.876567][ T5613] ? irqentry_exit+0x218/0x8c0 [ 596.876583][ T5613] ? trace_irq_disable+0x3b/0x140 [ 596.876607][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 596.876633][ T5613] preempt_schedule_common+0x82/0xd0 [ 596.876652][ T5613] preempt_schedule_thunk+0x16/0x40 [ 596.876677][ T5613] ? pfn_valid+0x3fd/0x480 [ 596.876695][ T5613] pfn_valid+0x402/0x480 [ 596.876713][ T5613] page_table_check_set+0x25/0x510 [ 596.876735][ T5613] copy_pmd_range+0x350b/0x5550 [ 596.876763][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.876802][ T5613] ? __pfx_copy_pmd_range+0x10/0x10 [ 596.876820][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.876846][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.876873][ T5613] copy_page_range+0xb3f/0x1150 [ 596.876909][ T5613] ? __pfx_copy_page_range+0x10/0x10 [ 596.876932][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.876947][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.876960][ T5613] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.876975][ T5613] dup_mmap+0xf5a/0x1d70 [ 596.877000][ T5613] ? __pfx_dup_mmap+0x10/0x10 [ 596.877011][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 596.877028][ T5613] ? copy_mm+0x10f/0x480 [ 596.877046][ T5613] ? copy_mm+0x10f/0x480 [ 596.877070][ T5613] copy_mm+0x11a/0x480 [ 596.877088][ T5613] copy_process+0x1e65/0x42e0 [ 596.877109][ T5613] ? copy_process+0xd4e/0x42e0 [ 596.877136][ T5613] ? __pfx_copy_process+0x10/0x10 [ 596.877160][ T5613] kernel_clone+0x2d7/0x940 [ 596.877174][ T5613] ? __pfx_kernel_clone+0x10/0x10 [ 596.877197][ T5613] __x64_sys_clone+0x1b6/0x230 [ 596.877209][ T5613] ? __pfx___x64_sys_clone+0x10/0x10 [ 596.877231][ T5613] ? do_user_addr_fault+0xc6f/0x1340 [ 596.877250][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.877262][ T5613] do_syscall_64+0x174/0x580 [ 596.877275][ T5613] ? trace_irq_disable+0x3b/0x140 [ 596.877288][ T5613] ? clear_bhb_loop+0x40/0x90 [ 596.877302][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.877312][ T5613] RIP: 0033:0x7f29adbb58d2 [ 596.877323][ T5613] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 596.877332][ T5613] RSP: 002b:00007fff6e9c3530 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 596.877343][ T5613] RAX: ffffffffffffffda RBX: 00007fff6e9c3530 RCX: 00007f29adbb58d2 [ 596.877351][ T5613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 596.877357][ T5613] RBP: 00007fff6e9c36bc R08: 0000000000000000 R09: 0000000000000001 [ 596.877364][ T5613] R10: 000055555aa5a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 596.877370][ T5613] R13: 00000000000927c0 R14: 00000000000919cc R15: 00007fff6e9c3710 [ 596.877400][ T5613] [ 596.877410][ T5613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 596.877419][ T5613] CPU: 1 UID: 0 PID: 5613 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 596.877439][ T5613] Tainted: [L]=SOFTLOCKUP [ 596.877443][ T5613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.877449][ T5613] Call Trace: [ 596.877454][ T5613] [ 596.877459][ T5613] vpanic+0x56c/0xa60 [ 596.877475][ T5613] ? __pfx__printk+0x10/0x10 [ 596.877487][ T5613] ? __pfx_vpanic+0x10/0x10 [ 596.877501][ T5613] ? is_bpf_text_address+0x292/0x2b0 [ 596.877517][ T5613] ? is_bpf_text_address+0x26/0x2b0 [ 596.877537][ T5613] panic+0xc5/0xd0 [ 596.877552][ T5613] ? __pfx_panic+0x10/0x10 [ 596.877582][ T5613] __warn+0x315/0x4c0 [ 596.877596][ T5613] ? hrtick_start_fair+0x196/0x1f0 [ 596.877611][ T5613] ? hrtick_start_fair+0x196/0x1f0 [ 596.877626][ T5613] __report_bug+0x339/0x540 [ 596.877645][ T5613] ? hrtick_start_fair+0x196/0x1f0 [ 596.877659][ T5613] ? __pfx___report_bug+0x10/0x10 [ 596.877674][ T5613] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 596.877695][ T5613] ? hrtick_start_fair+0x196/0x1f0 [ 596.877710][ T5613] report_bug+0x16a/0x220 [ 596.877723][ T5613] ? hrtick_start_fair+0x196/0x1f0 [ 596.877736][ T5613] ? hrtick_start_fair+0x198/0x1f0 [ 596.877750][ T5613] handle_bug+0x9c/0x200 [ 596.877766][ T5613] exc_invalid_op+0x1a/0x50 [ 596.877781][ T5613] asm_exc_invalid_op+0x1a/0x20 [ 596.877792][ T5613] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 596.877806][ T5613] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 596.877815][ T5613] RSP: 0018:ffffc90004386f80 EFLAGS: 00010006 [ 596.877824][ T5613] RAX: ffff8880b863ba40 RBX: ffff8880b873ba40 RCX: ffffffff8197d8ae [ 596.877832][ T5613] RDX: 0000000000000000 RSI: ffff888031688000 RDI: ffff8880b873ba40 [ 596.877839][ T5613] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 596.877847][ T5613] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 596.877855][ T5613] R13: 1ffff110170e78d6 R14: ffff888031688000 R15: ffffffff8dc257d0 [ 596.877882][ T5613] ? set_next_task_fair+0xa4e/0xce0 [ 596.877900][ T5613] set_next_task_fair+0xa68/0xce0 [ 596.877917][ T5613] __schedule+0x3e03/0x5550 [ 596.877948][ T5613] ? __pfx___schedule+0x10/0x10 [ 596.877959][ T5613] ? irqentry_exit+0x218/0x8c0 [ 596.877974][ T5613] ? irqentry_exit+0x218/0x8c0 [ 596.877986][ T5613] ? trace_irq_disable+0x3b/0x140 [ 596.878002][ T5613] ? preempt_schedule_thunk+0x16/0x40 [ 596.878020][ T5613] preempt_schedule_common+0x82/0xd0 [ 596.878033][ T5613] preempt_schedule_thunk+0x16/0x40 [ 596.878051][ T5613] ? pfn_valid+0x3fd/0x480 [ 596.878063][ T5613] pfn_valid+0x402/0x480 [ 596.878076][ T5613] page_table_check_set+0x25/0x510 [ 596.878091][ T5613] copy_pmd_range+0x350b/0x5550 [ 596.878109][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.878136][ T5613] ? __pfx_copy_pmd_range+0x10/0x10 [ 596.878149][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.878168][ T5613] ? __lock_acquire+0x6b5/0x2d10 [ 596.878188][ T5613] copy_page_range+0xb3f/0x1150 [ 596.878213][ T5613] ? __pfx_copy_page_range+0x10/0x10 [ 596.878231][ T5613] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 596.878244][ T5613] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.878257][ T5613] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 596.878272][ T5613] dup_mmap+0xf5a/0x1d70 [ 596.878297][ T5613] ? __pfx_dup_mmap+0x10/0x10 [ 596.878308][ T5613] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 596.878325][ T5613] ? copy_mm+0x10f/0x480 [ 596.878342][ T5613] ? copy_mm+0x10f/0x480 [ 596.878366][ T5613] copy_mm+0x11a/0x480 [ 596.878384][ T5613] copy_process+0x1e65/0x42e0 [ 596.878405][ T5613] ? copy_process+0xd4e/0x42e0 [ 596.878436][ T5613] ? __pfx_copy_process+0x10/0x10 [ 596.878460][ T5613] kernel_clone+0x2d7/0x940 [ 596.878474][ T5613] ? __pfx_kernel_clone+0x10/0x10 [ 596.878497][ T5613] __x64_sys_clone+0x1b6/0x230 [ 596.878510][ T5613] ? __pfx___x64_sys_clone+0x10/0x10 [ 596.878532][ T5613] ? do_user_addr_fault+0xc6f/0x1340 [ 596.878549][ T5613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.878561][ T5613] do_syscall_64+0x174/0x580 [ 596.878574][ T5613] ? trace_irq_disable+0x3b/0x140 [ 596.878587][ T5613] ? clear_bhb_loop+0x40/0x90 [ 596.878601][ T5613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.878612][ T5613] RIP: 0033:0x7f29adbb58d2 [ 596.878621][ T5613] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 596.878630][ T5613] RSP: 002b:00007fff6e9c3530 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 596.878641][ T5613] RAX: ffffffffffffffda RBX: 00007fff6e9c3530 RCX: 00007f29adbb58d2 [ 596.878648][ T5613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 596.878655][ T5613] RBP: 00007fff6e9c36bc R08: 0000000000000000 R09: 0000000000000001 [ 596.878662][ T5613] R10: 000055555aa5a7d0 R11: 0000000000000246 R12: 0000000000000001 [ 596.878668][ T5613] R13: 00000000000927c0 R14: 00000000000919cc R15: 00007fff6e9c3710 [ 596.878687][ T5613] [ 597.958111][ T5613] Shutting down cpus with NMI [ 597.958317][ T5613] Kernel Offset: disabled