last executing test programs: 3m9.921465625s ago: executing program 1 (id=3566): socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="20000000100001"], 0x20}}, 0x800) 3m9.088111361s ago: executing program 1 (id=3567): fsopen(&(0x7f0000000100)='nfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) write(r0, &(0x7f0000001d00)='0 4 0 2', 0x7) 3m8.603112745s ago: executing program 1 (id=3569): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x58, &(0x7f0000000080)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024600020e061003090439d8011adaa8080905081020000709800904e40503b956da020905080000040112fc09050b13200007039a0705d15b89"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x413}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\b\b'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002280)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="201404"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f00000034c0)=[{&(0x7f0000002340)=""/4096, 0x1000}], 0x1) 3m4.265245389s ago: executing program 1 (id=3578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 3m4.195857826s ago: executing program 3 (id=3579): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 3m3.233870941s ago: executing program 3 (id=3580): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="89e7ee0c7cd338e1897380c988caff2b6a152b4940dd05120625196f2b26b0c20eb070e283", 0x25}, {&(0x7f00000001c0)="ba1d1903a55e536d71ad", 0xa}], 0x2) 3m1.755792951s ago: executing program 1 (id=3581): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) r0 = fanotify_init(0xf00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x5, 0x4800003e, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x800, 0x8) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) close(0x3) 3m1.731696043s ago: executing program 3 (id=3583): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) 3m1.156081167s ago: executing program 3 (id=3586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc03, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0xb76e72d0a5909788, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000b}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m0.32483808s ago: executing program 0 (id=3587): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x8010661b, 0x0) 3m0.32466469s ago: executing program 1 (id=3588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="441d0984f7e6db7fa760b4055d28409e90c5b959a5daaccbea76f6ab6deed24410231eb5d66100000000000000000000000000008d486c9b98fc45ee75d61eff", 0x40}], 0x2) 3m0.017359692s ago: executing program 3 (id=3590): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x2c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe4, 0x5, 0x7, 0x7, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m59.369529279s ago: executing program 0 (id=3591): r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3, 0x0, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) 2m58.92709645s ago: executing program 0 (id=3593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x2710, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xffffffffffffffa4}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m58.506910562s ago: executing program 3 (id=3594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2m57.906887819s ago: executing program 0 (id=3595): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2m54.750276425s ago: executing program 0 (id=3605): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 2m53.025309056s ago: executing program 0 (id=3607): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x33, r0}, 0x10) 2m45.075519274s ago: executing program 32 (id=3588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000100)="441d0984f7e6db7fa760b4055d28409e90c5b959a5daaccbea76f6ab6deed24410231eb5d66100000000000000000000000000008d486c9b98fc45ee75d61eff", 0x40}], 0x2) 2m43.129256287s ago: executing program 33 (id=3594): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1a3081, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 2m37.601796185s ago: executing program 34 (id=3607): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8192, 0x2000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2, 0x33, r0}, 0x10) 7.60687548s ago: executing program 4 (id=4038): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000f80)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x3, 0x4, 0x100fff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) chdir(&(0x7f0000000000)='./bus\x00') chown(&(0x7f00000001c0)='./file1\x00', 0x0, 0x0) 7.310436344s ago: executing program 4 (id=4040): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000740)={0x40, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 5.198829696s ago: executing program 2 (id=4044): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x800448f1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 4.475316005s ago: executing program 5 (id=4049): pipe2(&(0x7f0000000040), 0x0) socket(0x10, 0x2, 0x0) setns(0xc9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xb}, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}]}, 0x2c}], 0x1}, 0x0) 4.246366764s ago: executing program 5 (id=4051): openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) dup(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) socket$inet_udp(0x2, 0x2, 0x0) recvmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/60, 0x3c}, {&(0x7f0000000300)=""/206, 0xce}], 0x2}, 0x12000) socket(0x10, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/sctp\x00') r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000002000010025bd700100000000020000002000098008001300090000000800ea00", @ANYRES32=r2, @ANYBLOB='\f\x00', @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x4) 3.879361979s ago: executing program 4 (id=4053): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000740)=""/183, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) syz_usb_connect(0x3, 0x24, 0x0, 0x0) 3.814558242s ago: executing program 5 (id=4054): ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.607360296s ago: executing program 5 (id=4056): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/77, 0x0, 0xb000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r3}) 3.386910922s ago: executing program 5 (id=4058): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x6000000d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0xfffffffffffffedb) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.990667849s ago: executing program 5 (id=4060): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 2.775077059s ago: executing program 6 (id=4061): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) remap_file_pages(&(0x7f000000a000/0x2000)=nil, 0x2000, 0x2, 0x3ff, 0x100000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) 2.704016006s ago: executing program 6 (id=4062): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x200000) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234-1234-123456789612', 0x24, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.515853058s ago: executing program 6 (id=4063): ioctl$OCFS2_IOC_RESVSP64(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)={0x2, 0x26ff152c84020a8d, 0x5, 0x4, 0x9, 0x103}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.099044401s ago: executing program 6 (id=4064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) 1.859774463s ago: executing program 2 (id=4065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pnp/devices/00:00/options\x00', 0x0, 0x0) read(r0, &(0x7f0000000200), 0x1000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pnp/devices/00:02/options\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x1000) read(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000e00)='aut', 0x3) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001200)='auto', 0x4) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.728240103s ago: executing program 2 (id=4066): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)="ce88ea") ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) 1.474956977s ago: executing program 6 (id=4067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r1, 0x0, &(0x7f0000000000)={0x1, 0x3, 0x4, 0x8000000000000001}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.403982959s ago: executing program 2 (id=4068): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) r0 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r0, &(0x7f0000000880)={&(0x7f0000000340)=@qipcrtr, 0x80, &(0x7f00000007c0)}, 0x100) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r1, &(0x7f0000000000)='3', 0x4e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000002000010002000000000000000200000008001600", @ANYRESOCT=r2], 0x48}, 0x1, 0x0, 0x0, 0x40940}, 0x0) 1.174938369s ago: executing program 2 (id=4069): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) fsetxattr$security_evm(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=@v2={0x3, 0x3, 0x1, 0xe747}, 0x9, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) 970.859435ms ago: executing program 4 (id=4070): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) write$P9_RFLUSH(r0, 0x0, 0x0) fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e21, 0x30400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c) bind$inet6(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) 793.07105ms ago: executing program 2 (id=4071): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000200)={0x40, 0x8, 0x3, "fe602a"}, 0x0, 0x0}) 685.025663ms ago: executing program 6 (id=4072): socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) fsopen(0x0, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000004c0)={0x7ff, &(0x7f0000000440)="28de875bd6"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) 551.523262ms ago: executing program 4 (id=4073): ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x40, 0x88, 0x0, 0x8, 0x8d], 0xfec00000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 4 (id=4074): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="b245030000000000000006"]) kernel console output (not intermixed with test programs): 18] usb 5-1: Using ep0 maxpacket: 32 [ 874.263355][ T5618] usb 5-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 874.264572][ T5618] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 874.264591][ T5618] usb 5-1: config 0 has no interface number 0 [ 874.264651][ T5618] usb 5-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 874.264671][ T5618] usb 5-1: config 0 interface 1 has no altsetting 0 [ 874.267183][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.267201][ T5618] usb 5-1: Product: syz [ 874.267214][ T5618] usb 5-1: Manufacturer: syz [ 874.267227][ T5618] usb 5-1: SerialNumber: syz [ 874.279800][ T5618] usb 5-1: config 0 descriptor?? [ 874.400577][ T2159] usb 3-1: Using ep0 maxpacket: 32 [ 874.401630][ T2159] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 874.404772][ T2159] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 874.404793][ T2159] usb 3-1: config 0 has no interface number 0 [ 874.404831][ T2159] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 874.404850][ T2159] usb 3-1: config 0 interface 1 has no altsetting 0 [ 874.408670][ T2159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.408688][ T2159] usb 3-1: Product: syz [ 874.408702][ T2159] usb 3-1: Manufacturer: syz [ 874.408743][ T2159] usb 3-1: SerialNumber: syz [ 874.419799][ T2159] usb 3-1: config 0 descriptor?? [ 874.502331][ T5618] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 874.505359][ T5618] cx231xx 5-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 874.559986][T13579] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 874.623150][ T5618] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 874.623914][ T5618] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 874.624427][ T5618] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 874.632950][ T5618] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 874.635691][ T5618] cx231xx 5-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 874.635711][ T5618] cx231xx 5-1:0.1: Failed to set devmode to analog: error: -32 [ 874.676292][ T2159] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 874.682287][ T2159] cx231xx 3-1:0.1: Failed to read PCB config [ 874.682342][ T2159] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 874.690042][ T2159] usb 3-1: USB disconnect, device number 102 [ 874.720606][T13579] usb 7-1: Using ep0 maxpacket: 8 [ 874.724511][T13579] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 874.757694][T13579] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.757741][T13579] usb 7-1: Product: syz [ 874.757756][T13579] usb 7-1: Manufacturer: syz [ 874.757770][T13579] usb 7-1: SerialNumber: syz [ 874.777365][T13579] usb 7-1: config 0 descriptor?? [ 874.825274][ T5618] i2c i2c-2: Added multiplexed i2c bus 4 [ 874.829705][ T5618] i2c i2c-2: Added multiplexed i2c bus 5 [ 874.835748][ T5618] cx231xx 5-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 874.835768][ T5618] cx231xx 5-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 874.945358][ T5618] cx231xx 5-1:0.1: probe with driver cx231xx failed with error -71 [ 874.965551][ T5618] usb 5-1: USB disconnect, device number 5 [ 875.013847][T13579] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 875.229927][ T2159] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 875.400406][ T2159] usb 3-1: Using ep0 maxpacket: 32 [ 875.402009][ T2159] usb 3-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 875.404123][ T2159] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 875.404143][ T2159] usb 3-1: config 0 has no interface number 0 [ 875.404178][ T2159] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 875.404221][ T2159] usb 3-1: config 0 interface 1 has no altsetting 0 [ 875.407365][ T2159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.407384][ T2159] usb 3-1: Product: syz [ 875.408063][ T2159] usb 3-1: Manufacturer: syz [ 875.408079][ T2159] usb 3-1: SerialNumber: syz [ 875.418139][ T2159] usb 3-1: config 0 descriptor?? [ 875.641593][ T2159] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 875.643939][ T2159] cx231xx 3-1:0.1: bad config in buspower!!!! [ 875.643939][ T2159] config_info=40 [ 875.643958][ T2159] cx231xx 3-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 875.754895][ T2159] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 875.755423][ T2159] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 875.756006][ T2159] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 875.756517][ T2159] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 875.757098][ T2159] cx231xx 3-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 875.757142][ T2159] cx231xx 3-1:0.1: Failed to set devmode to analog: error: -32 [ 875.837555][ T2159] i2c i2c-2: Added multiplexed i2c bus 4 [ 875.847612][ T2159] i2c i2c-2: Added multiplexed i2c bus 5 [ 875.863575][ T2159] cx231xx 3-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 875.863606][ T2159] cx231xx 3-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 875.916812][ T2159] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 875.922685][ T2159] usb 3-1: USB disconnect, device number 103 [ 876.797869][T16880] FAULT_INJECTION: forcing a failure. [ 876.797869][T16880] name failslab, interval 1, probability 0, space 0, times 0 [ 876.797901][T16880] CPU: 0 UID: 0 PID: 16880 Comm: syz.4.3762 Tainted: G L syzkaller #0 PREEMPT(full) [ 876.797930][T16880] Tainted: [L]=SOFTLOCKUP [ 876.797938][T16880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.797952][T16880] Call Trace: [ 876.797961][T16880] [ 876.797970][T16880] dump_stack_lvl+0xe8/0x150 [ 876.798011][T16880] should_fail_ex+0x3eb/0x540 [ 876.798039][T16880] should_failslab+0xa8/0x100 [ 876.798064][T16880] __kmalloc_cache_noprof+0x9e/0x600 [ 876.798096][T16880] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 876.798117][T16880] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 876.798143][T16880] bpf_prog_alloc_no_stats+0xd8/0x560 [ 876.798161][T16880] ? bpf_prog_alloc+0x2a/0x1a0 [ 876.798183][T16880] bpf_prog_alloc+0x3c/0x1a0 [ 876.798205][T16880] __get_filter+0xf2/0x420 [ 876.798318][T16880] sk_attach_filter+0x24/0x140 [ 876.798348][T16880] sk_setsockopt+0x2635/0x2f10 [ 876.798374][T16880] ? __pfx_sk_setsockopt+0x10/0x10 [ 876.798397][T16880] ? aa_sk_perm+0x6ff/0x8f0 [ 876.798434][T16880] ? aa_sock_opt_perm+0x142/0x1e0 [ 876.798465][T16880] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 876.798493][T16880] do_sock_setsockopt+0x11b/0x1b0 [ 876.798519][T16880] __x64_sys_setsockopt+0x13d/0x1b0 [ 876.798546][T16880] do_syscall_64+0x166/0x520 [ 876.798565][T16880] ? trace_irq_disable+0x3b/0x140 [ 876.798593][T16880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.798614][T16880] ? clear_bhb_loop+0x70/0xc0 [ 876.798638][T16880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.798659][T16880] RIP: 0033:0x7fb528f9e159 [ 876.798678][T16880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.798696][T16880] RSP: 002b:00007fb529d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 876.798719][T16880] RAX: ffffffffffffffda RBX: 00007fb529225fa0 RCX: 00007fb528f9e159 [ 876.798734][T16880] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 876.798747][T16880] RBP: 00007fb52903506b R08: 0000000000000010 R09: 0000000000000000 [ 876.798761][T16880] R10: 0000200000fbe000 R11: 0000000000000246 R12: 0000000000000000 [ 876.798775][T16880] R13: 00007fb529226038 R14: 00007fb529225fa0 R15: 00007ffe41af0698 [ 876.798807][T16880] [ 877.057207][T13579] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 877.058123][T13579] dvbdev: DVB: registering new adapter (Terratec H7) [ 877.058177][T13579] usb 7-1: media controller created [ 877.084240][T13579] usb 7-1: dvb_usb_v2: MAC address: 3a:2f:5c:92:61:16 [ 877.121267][T13579] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 877.193207][T13579] DVB: Unable to find symbol drxk_attach() [ 877.289066][T13579] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -22 [ 877.307499][T13579] usb 7-1: USB disconnect, device number 5 [ 877.580070][ T2159] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 877.599804][ T5618] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 877.732560][ T2159] usb 3-1: unable to get BOS descriptor or descriptor too short [ 877.732601][ T2159] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 877.734150][ T2159] usb 3-1: config 0 has no interfaces? [ 877.735762][ T2159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 877.735781][ T2159] usb 3-1: Product: syz [ 877.735794][ T2159] usb 3-1: Manufacturer: syz [ 877.758412][ T2159] usb 3-1: config 0 descriptor?? [ 877.791338][ T5618] usb 5-1: unable to get BOS descriptor or descriptor too short [ 877.791381][ T5618] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 877.792681][ T5618] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.792702][ T5618] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 877.796593][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.796612][ T5618] usb 5-1: Product: syz [ 877.796626][ T5618] usb 5-1: Manufacturer: syz [ 877.796639][ T5618] usb 5-1: SerialNumber: syz [ 877.870342][ T5618] usb 5-1: selecting invalid altsetting 1 [ 877.871127][ T5618] usb 5-1: unit 6 not found! [ 877.998328][T16896] FAULT_INJECTION: forcing a failure. [ 877.998328][T16896] name failslab, interval 1, probability 0, space 0, times 0 [ 877.998354][T16896] CPU: 0 UID: 0 PID: 16896 Comm: syz.6.3769 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.998382][T16896] Tainted: [L]=SOFTLOCKUP [ 877.998390][T16896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.998402][T16896] Call Trace: [ 877.998411][T16896] [ 877.998420][T16896] dump_stack_lvl+0xe8/0x150 [ 877.998458][T16896] should_fail_ex+0x3eb/0x540 [ 877.998487][T16896] should_failslab+0xa8/0x100 [ 877.998510][T16896] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 877.998542][T16896] ? x509_cert_parse+0x2ee/0x7a0 [ 877.998561][T16896] ? x509_cert_parse+0x2ee/0x7a0 [ 877.998586][T16896] kmemdup_noprof+0x2b/0x70 [ 877.998619][T16896] x509_cert_parse+0x2ee/0x7a0 [ 877.998644][T16896] x509_key_preparse+0x64/0x6d0 [ 877.998666][T16896] ? down_read+0x2b9/0x320 [ 877.998692][T16896] asymmetric_key_preparse+0xb9/0x1b0 [ 877.998723][T16896] __key_create_or_update+0x3a4/0xa70 [ 877.998757][T16896] ? __pfx___key_create_or_update+0x10/0x10 [ 877.998799][T16896] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 877.998830][T16896] key_create_or_update+0x42/0x60 [ 877.998857][T16896] __se_sys_add_key+0x349/0x420 [ 877.998888][T16896] ? __pfx___se_sys_add_key+0x10/0x10 [ 877.998920][T16896] ? __x64_sys_add_key+0x20/0xc0 [ 877.998948][T16896] do_syscall_64+0x166/0x520 [ 877.998964][T16896] ? trace_irq_disable+0x3b/0x140 [ 877.998987][T16896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.999007][T16896] ? clear_bhb_loop+0x70/0xc0 [ 877.999032][T16896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.999051][T16896] RIP: 0033:0x7f3e7fb9e159 [ 877.999070][T16896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.999087][T16896] RSP: 002b:00007f3e80ac5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 877.999109][T16896] RAX: ffffffffffffffda RBX: 00007f3e7fe25fa0 RCX: 00007f3e7fb9e159 [ 877.999124][T16896] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 877.999138][T16896] RBP: 00007f3e7fc3506b R08: ffffffffffffffff R09: 0000000000000000 [ 877.999152][T16896] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 877.999165][T16896] R13: 00007f3e7fe26038 R14: 00007f3e7fe25fa0 R15: 00007ffc2f388f88 [ 877.999196][T16896] [ 878.069721][ C0] net_ratelimit: 122 callbacks suppressed [ 878.113309][ T5618] usb 5-1: 2:0: failed to get current value for ch 0 (-32) [ 878.345493][ T5618] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 878.361982][ T5618] usb 5-1: USB disconnect, device number 6 [ 878.450184][T16196] udevd[16196]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 878.679783][T16374] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 878.829764][T16374] usb 6-1: Using ep0 maxpacket: 32 [ 878.834714][T16374] usb 6-1: unable to get BOS descriptor or descriptor too short [ 878.834753][T16374] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 878.835931][T16374] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 878.835951][T16374] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 878.835970][T16374] usb 6-1: config 14 has no interface number 0 [ 878.835986][T16374] usb 6-1: config 14 has no interface number 1 [ 878.836039][T16374] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 878.836061][T16374] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 878.836085][T16374] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 878.836108][T16374] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 878.836133][T16374] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 878.836158][T16374] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.836182][T16374] usb 6-1: config 14 interface 57 has no altsetting 0 [ 878.836198][T16374] usb 6-1: config 14 interface 228 has no altsetting 0 [ 878.838409][T16374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.838428][T16374] usb 6-1: Product: syz [ 878.838441][T16374] usb 6-1: Manufacturer: syz [ 878.838455][T16374] usb 6-1: SerialNumber: syz [ 879.361826][T16374] legousbtower 6-1:14.57: interrupt endpoints not found [ 879.763012][T16374] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 879.766684][T16374] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 879.910559][T16919] jffs2: notice: (16919) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 880.392894][T16374] usb 3-1: USB disconnect, device number 104 [ 880.781958][T16936] FAULT_INJECTION: forcing a failure. [ 880.781958][T16936] name failslab, interval 1, probability 0, space 0, times 0 [ 880.781986][T16936] CPU: 0 UID: 0 PID: 16936 Comm: syz.2.3779 Tainted: G L syzkaller #0 PREEMPT(full) [ 880.782012][T16936] Tainted: [L]=SOFTLOCKUP [ 880.782020][T16936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.782032][T16936] Call Trace: [ 880.782039][T16936] [ 880.782048][T16936] dump_stack_lvl+0xe8/0x150 [ 880.782079][T16936] should_fail_ex+0x3eb/0x540 [ 880.782106][T16936] should_failslab+0xa8/0x100 [ 880.782128][T16936] ? sctp_chunkify+0x5a/0x260 [ 880.782157][T16936] kmem_cache_alloc_noprof+0x9c/0x600 [ 880.782187][T16936] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 880.782214][T16936] ? __alloc_skb+0x27a/0x7a0 [ 880.782234][T16936] ? sctp_chunkify+0x5a/0x260 [ 880.782266][T16936] sctp_chunkify+0x5a/0x260 [ 880.782294][T16936] _sctp_make_chunk+0x122/0x290 [ 880.782322][T16936] sctp_make_heartbeat+0xc4/0x4b0 [ 880.782346][T16936] ? lock_acquire+0x115/0x350 [ 880.782377][T16936] ? __pfx_sctp_make_heartbeat+0x10/0x10 [ 880.782413][T16936] ? is_bpf_text_address+0x292/0x2b0 [ 880.782434][T16936] ? is_bpf_text_address+0x26/0x2b0 [ 880.782459][T16936] sctp_sf_do_prm_requestheartbeat+0x2e/0x280 [ 880.782487][T16936] sctp_do_sm+0x239/0x5dd0 ** 84 printk messages dropped ** ** 65 printk messages dropped ** ** 67 printk messages dropped ** ** 122 printk messages dropped ** ** 70 printk messages dropped ** ** 69 printk messages dropped ** ** 71 printk messages dropped ** ** 78 printk messages dropped ** ** 68 printk messages dropped ** ** 80 printk messages dropped ** ** 39 printk messages dropped ** ** 70 printk messages dropped ** ** 69 printk messages dropped ** ** 25 printk messages dropped ** ** 79 printk messages dropped ** ** 71 printk messages dropped ** ** 73 printk messages dropped ** ** 70 printk messages dropped ** ** 77 printk messages dropped ** ** 76 printk messages dropped ** ** 68 printk messages dropped ** ** 107 printk messages dropped ** ** 73 printk messages dropped ** ** 69 printk messages dropped ** ** 71 printk messages dropped ** ** 71 printk messages dropped ** ** 69 printk messages dropped ** ** 67 printk messages dropped ** ** 76 printk messages dropped ** ** 76 printk messages dropped ** ** 71 printk messages dropped ** ** 85 printk messages dropped ** ** 43 printk messages dropped ** ** 73 printk messages dropped ** ** 108 printk messages dropped ** ** 69 printk messages dropped ** ** 69 printk messages dropped ** ** 69 printk messages dropped ** ** 75 printk messages dropped ** ** 70 printk messages dropped ** ** 68 printk messages dropped ** ** 62 printk messages dropped ** ** 69 printk messages dropped ** ** 67 printk messages dropped ** ** 68 printk messages dropped ** ** 80 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 67 printk messages dropped ** ** 73 printk messages dropped ** ** 33 printk messages dropped ** ** 54 printk messages dropped ** ** 71 printk messages dropped ** ** 70 printk messages dropped ** ** 69 printk messages dropped ** ** 106 printk messages dropped ** ** 71 printk messages dropped ** ** 66 printk messages dropped ** ** 45 printk messages dropped ** ** 71 printk messages dropped ** ** 65 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 76 printk messages dropped ** ** 78 printk messages dropped ** ** 105 printk messages dropped ** ** 77 printk messages dropped ** ** 68 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 74 printk messages dropped ** ** 68 printk messages dropped ** ** 67 printk messages dropped ** ** 69 printk messages dropped ** ** 68 printk messages dropped ** ** 65 printk messages dropped ** ** 82 printk messages dropped ** ** 70 printk messages dropped ** ** 64 printk messages dropped ** ** 73 printk messages dropped ** ** 69 printk messages dropped ** ** 70 printk messages dropped ** ** 55 printk messages dropped ** ** 4 printk messages dropped ** ** 69 printk messages dropped ** ** 70 printk messages dropped ** ** 72 printk messages dropped ** ** 75 printk messages dropped ** ** 81 printk messages dropped ** ** 93 printk messages dropped ** ** 67 printk messages dropped ** ** 64 printk messages dropped ** ** 70 printk messages dropped ** ** 70 printk messages dropped ** ** 70 printk messages dropped ** ** 66 printk messages dropped ** ** 112 printk messages dropped ** ** 70 printk messages dropped ** ** 101 printk messages dropped ** ** 70 printk messages dropped ** ** 84 printk messages dropped ** ** 71 printk messages dropped ** ** 67 printk messages dropped ** ** 67 printk messages dropped ** ** 69 printk messages dropped ** ** 67 printk messages dropped ** ** 70 printk messages dropped ** ** 39 printk messages dropped ** ** 46 printk messages dropped ** ** 71 printk messages dropped ** ** 71 printk messages dropped ** ** 72 printk messages dropped ** ** 43 printk messages dropped ** ** 35 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 53 printk messages dropped ** ** 55 printk messages dropped ** ** 73 printk messages dropped ** ** 70 printk messages dropped ** ** 71 printk messages dropped ** ** 68 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 69 printk messages dropped ** ** 52 printk messages dropped ** [ 881.625246][T12089] usb 6-1: USB disconnect, device number 8 [ 881.665547][T12089] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 881.766297][ T31] audit: type=1800 audit(1789583456.189:21): pid=16944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3780" name="(" dev="sda1" ino=2059 res=0 errno=0 [ 881.803990][T16945] rust_binder: Write failure EINVAL in pid:104 [ 882.102315][T16953] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 882.153138][ T4931] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 882.154306][ T4931] Bluetooth: hci6: Injecting HCI hardware error event [ 882.158781][T15707] Bluetooth: hci6: hardware error 0x00 [ 882.578730][T16374] rust_binder: 16942: undelivered freeze notification, 0000000000000000 [ 882.578779][T16374] rust_binder: 16942: undelivered freeze notification, 0000000000000000 [ 882.699757][T13579] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 882.871484][T13579] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 882.872702][T13579] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 882.875247][T13579] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.875266][T13579] usb 3-1: Product: syz [ 882.875279][T13579] usb 3-1: Manufacturer: syz [ 882.875293][T13579] usb 3-1: SerialNumber: syz [ 882.923910][T13579] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 883.095305][T16976] FAULT_INJECTION: forcing a failure. [ 883.095305][T16976] name failslab, interval 1, probability 0, space 0, times 0 [ 883.095340][T16976] CPU: 1 UID: 0 PID: 16976 Comm: syz.4.3789 Tainted: G L syzkaller #0 PREEMPT(full) [ 883.095370][T16976] Tainted: [L]=SOFTLOCKUP [ 883.095378][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 883.095392][T16976] Call Trace: [ 883.095402][T16976] [ 883.095413][T16976] dump_stack_lvl+0xe8/0x150 [ 883.095459][T16976] should_fail_ex+0x3eb/0x540 [ 883.095490][T16976] should_failslab+0xa8/0x100 [ 883.095515][T16976] __kmalloc_cache_node_noprof+0xa5/0x620 [ 883.095548][T16976] ? elevator_alloc+0x7a/0x1b0 [ 883.095687][T16976] ? elevator_alloc+0x7a/0x1b0 [ 883.095725][T16976] elevator_alloc+0x7a/0x1b0 [ 883.095758][T16976] blk_mq_init_sched+0x9b/0x620 [ 883.095827][T16976] elevator_switch+0x26f/0x7b0 [ 883.095848][T16976] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 883.095901][T16976] elevator_change+0x2fa/0x480 [ 883.095923][T16976] ? do_raw_spin_unlock+0xf5/0x200 [ 883.095953][T16976] elv_iosched_store+0x504/0x630 [ 883.095981][T16976] ? __pfx_elv_iosched_store+0x10/0x10 [ 883.096023][T16976] queue_attr_store+0x207/0x2b0 [ 883.096080][T16976] ? __pfx_queue_attr_store+0x10/0x10 [ 883.096116][T16976] ? lock_acquire+0x115/0x350 [ 883.096145][T16976] ? sysfs_file_kobj+0x1a/0x230 [ 883.096178][T16976] ? sysfs_file_kobj+0x1a/0x230 [ 883.096202][T16976] ? sysfs_file_kobj+0x1a/0x230 [ 883.096223][T16976] ? sysfs_file_kobj+0x1a/0x230 [ 883.096248][T16976] ? sysfs_file_kobj+0x1e4/0x230 [ 883.096272][T16976] ? sysfs_kf_write+0x166/0x260 [ 883.096300][T16976] ? __pfx_sysfs_kf_write+0x10/0x10 [ 883.096323][T16976] kernfs_fop_write_iter+0x3a4/0x540 [ 883.096352][T16976] vfs_write+0x612/0xba0 [ 883.096389][T16976] ? __pfx_vfs_write+0x10/0x10 [ 883.096423][T16976] ? __fget_files+0x2a/0x420 [ 883.096462][T16976] ksys_write+0x150/0x270 [ 883.096491][T16976] ? __pfx_ksys_write+0x10/0x10 [ 883.096530][T16976] do_syscall_64+0x166/0x520 [ 883.096551][T16976] ? trace_irq_disable+0x3b/0x140 [ 883.096575][T16976] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.096595][T16976] ? clear_bhb_loop+0x70/0xc0 [ 883.096618][T16976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.096637][T16976] RIP: 0033:0x7fb528f9e159 [ 883.096656][T16976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.096673][T16976] RSP: 002b:00007fb529d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 883.096693][T16976] RAX: ffffffffffffffda RBX: 00007fb529225fa0 RCX: 00007fb528f9e159 [ 883.096709][T16976] RDX: 0000000000000005 RSI: 00002000000001c0 RDI: 0000000000000003 [ 883.096723][T16976] RBP: 00007fb52903506b R08: 0000000000000000 R09: 0000000000000000 [ 883.096737][T16976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 883.096749][T16976] R13: 00007fb529226038 R14: 00007fb529225fa0 R15: 00007ffe41af0698 [ 883.096783][T16976] [ 883.156715][T16976] elv: switch to "kyber" failed, falling back to "none" [ 883.431414][ C1] net_ratelimit: 117 callbacks suppressed [ 883.786812][T13579] gspca_mr97310a: reg write [21] error -71 [ 883.786889][T13579] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 883.826229][T13579] usb 3-1: USB disconnect, device number 105 [ 883.876678][T16990] input: syz0 as /devices/virtual/input/input84 [ 884.313467][T15707] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 884.619726][T13579] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 884.769358][T13579] usb 7-1: Using ep0 maxpacket: 32 [ 884.775233][T13579] usb 7-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 884.785826][T13579] usb 7-1: config 0 has an invalid interface number: 196 but max is 0 [ 884.785850][T13579] usb 7-1: config 0 has no interface number 0 [ 884.785889][T13579] usb 7-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 884.785914][T13579] usb 7-1: config 0 interface 196 has no altsetting 0 [ 884.826437][T13579] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.826454][T13579] usb 7-1: Product: syz [ 884.826469][T13579] usb 7-1: Manufacturer: syz [ 884.826482][T13579] usb 7-1: SerialNumber: syz [ 884.852729][T13579] usb 7-1: config 0 descriptor?? [ 884.853471][T17000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 884.906280][T17016] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 885.043153][T17020] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 885.043171][T17020] rust_binder: Read failure Err(EFAULT) in pid:2728 [ 885.048062][T17020] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 885.048081][T17020] rust_binder: Read failure Err(EFAULT) in pid:2728 [ 885.048764][T17020] rust_binder: 17017:17020 error while translating object: EINVAL [ 885.048819][T17020] rust_binder: Failure in copy_transaction_data: EINVAL [ 885.048846][T17020] rust_binder: 17017:17020 transaction call to 17017:0 failed EINVAL, code 0 size 96-24 [ 885.053378][ T987] rust_binder: 17017: undelivered TRANSACTION_ERROR: 29201 [ 885.249460][ T5618] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 885.409319][ T5618] usb 5-1: Using ep0 maxpacket: 32 [ 885.410087][ T5618] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 885.426511][ T5618] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 885.426534][ T5618] usb 5-1: config 0 has no interface number 0 [ 885.445737][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.445757][ T5618] usb 5-1: Product: syz [ 885.445771][ T5618] usb 5-1: Manufacturer: syz [ 885.445786][ T5618] usb 5-1: SerialNumber: syz [ 885.474227][ T5618] usb 5-1: config 0 descriptor?? [ 885.629365][T16374] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 885.780173][T16374] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 885.781230][T16374] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 885.781273][T16374] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 885.781298][T16374] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.781356][T16374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.834498][T16374] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 885.835289][T16374] usb 6-1: invalid MIDI out EP 0 [ 885.901814][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 885.901837][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 886.029623][T13579] ipheth 7-1:0.196: ipheth_enable_ncm: usb_control_msg: -110 [ 886.069951][T13579] ipheth 7-1:0.196: Apple iPhone USB Ethernet device attached [ 886.300565][ T31] audit: type=1800 audit(1789583460.729:22): pid=17023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3806" name="cpuset.effective_cpus" dev="sda1" ino=2043 res=0 errno=0 [ 886.611531][T16374] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 886.627984][T16374] usb 6-1: USB disconnect, device number 9 [ 887.179512][T17049] rust_binder: 17048:17049 failed to claim space for a BINDER_TYPE_PTR (offset: 112, limit: 112, size: 13) [ 887.179535][T17049] rust_binder: 17048:17049 error while translating object: EINVAL [ 887.179558][T17049] rust_binder: Failure in copy_transaction_data: EINVAL [ 887.179574][T17049] rust_binder: 17048:17049 transaction async to 17048:0 failed EINVAL, code 0 size 88-24 [ 887.180409][T13579] rust_binder: 17048: undelivered TRANSACTION_ERROR: 29201 [ 887.364959][ T5618] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 887.365193][ T5618] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 887.393758][ T5618] usb 5-1: USB disconnect, device number 7 [ 887.405686][T17047] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1226918919 (78522810816 ns) > initial count (60690011328 ns). Using initial count to start timer. [ 887.643898][ C0] ipheth 7-1:0.196: ipheth_rcvbulk_callback: urb status: -75 [ 887.766683][T17060] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 887.853810][T13579] usb 7-1: USB disconnect, device number 6 [ 888.060055][T13579] ipheth 7-1:0.196: Apple iPhone USB Ethernet now disconnected [ 888.382544][T17080] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 888.422568][T17080] md: could not open device unknown-block(1,0). [ 888.709116][ C1] net_ratelimit: 184 callbacks suppressed [ 888.819408][T16374] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 888.979266][T16374] usb 3-1: Using ep0 maxpacket: 16 [ 888.980010][T16374] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 888.981094][T16374] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 888.981120][T16374] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 888.983263][T16374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.983283][T16374] usb 3-1: Product: syz [ 888.983297][T16374] usb 3-1: Manufacturer: syz [ 888.983310][T16374] usb 3-1: SerialNumber: syz [ 889.060158][T16374] usb 3-1: config 0 descriptor?? [ 889.064364][T16374] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 889.064413][T16374] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 889.370571][T17100] syz.6.3822 (17100) used greatest stack depth: 10248 bytes left [ 889.753680][T16374] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 889.754615][T16374] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 890.290829][ T5618] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 890.360171][T16374] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 890.440138][ T5618] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 890.444866][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.444885][ T5618] usb 5-1: Product: syz [ 890.444899][ T5618] usb 5-1: Manufacturer: syz [ 890.444912][ T5618] usb 5-1: SerialNumber: syz [ 890.565257][T16374] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 890.565724][T16374] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 890.566163][T16374] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 890.566687][T16374] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 890.567123][T16374] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 890.608485][T16374] usb 3-1: USB disconnect, device number 106 [ 890.769124][T16270] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 890.899251][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 890.923461][T16270] usb 7-1: unable to get BOS descriptor or descriptor too short [ 890.923997][T16270] usb 7-1: not running at top speed; connect to a high speed hub [ 890.924024][T16270] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 890.925209][T16270] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 890.925230][T16270] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 890.925249][T16270] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 890.925267][T16270] usb 7-1: config 14 has no interface number 0 [ 890.925282][T16270] usb 7-1: config 14 has no interface number 1 [ 890.925338][T16270] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 890.925361][T16270] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 890.925384][T16270] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 890.925409][T16270] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 890.925435][T16270] usb 7-1: config 14 interface 57 has no altsetting 0 [ 890.925452][T16270] usb 7-1: config 14 interface 228 has no altsetting 0 [ 890.952497][T16270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.952516][T16270] usb 7-1: Product: syz [ 890.952530][T16270] usb 7-1: Manufacturer: syz [ 890.952543][T16270] usb 7-1: SerialNumber: syz [ 891.359763][ T31] audit: type=1800 audit(1789583465.780:23): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3829" name="syzkaller0" dev="sda1" ino=2053 res=0 errno=0 [ 891.411148][T16270] legousbtower 7-1:14.57: interrupt endpoints not found [ 891.418498][T17120] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1986356271 (only 8 groups) [ 891.789986][T17117] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input85 [ 891.817164][T16270] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 891.823303][T16270] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 892.089877][T17130] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true [ 892.089894][T17130] rust_binder: Failure in copy_transaction_data: ENOSPC [ 892.089911][T17130] rust_binder: 17129:17130 transaction async to 17129:0 failed ENOSPC, code 0 size 0-0 [ 892.090529][ T5085] rust_binder: 17129: undelivered TRANSACTION_ERROR: 29201 [ 892.326010][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 892.352684][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 892.372082][ T5618] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 892.393830][ T5618] usb 5-1: USB disconnect, device number 8 [ 892.429476][ T5085] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 892.552541][T17137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 892.593029][ T5085] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 892.618473][ T5085] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.618492][ T5085] usb 3-1: Product: syz [ 892.618505][ T5085] usb 3-1: Manufacturer: syz [ 892.618691][ T5085] usb 3-1: SerialNumber: syz [ 892.627912][T17137] md: loop1 has zero or unknown size, marking faulty! [ 892.648259][ T5085] usb 3-1: config 0 descriptor?? [ 892.704559][ T5085] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 893.200691][T17137] md: pers->run() failed ... [ 893.334548][ C1] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 893.337917][ T5618] usb 7-1: USB disconnect, device number 7 [ 893.372084][ T5618] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 893.661969][ T2159] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 893.808983][ T2159] usb 5-1: Using ep0 maxpacket: 8 [ 893.812166][ T2159] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 893.816373][ T2159] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 893.816435][ T2159] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 893.816478][ T2159] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 893.816501][ T2159] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 893.816521][ T2159] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 893.816582][ T2159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.846295][ T2159] usbtmc 5-1:16.0: bulk endpoints not found [ 893.919027][ C1] net_ratelimit: 809 callbacks suppressed [ 894.578847][T16374] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 894.731064][T16374] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 894.735914][T16374] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 894.735938][T16374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 894.735956][T16374] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 894.736017][T16374] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 894.740533][T16374] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 894.740552][T16374] usb 6-1: Product: syz [ 894.740565][T16374] usb 6-1: Manufacturer: syz [ 894.754294][T16374] cdc_wdm 6-1:1.0: skipping garbage [ 894.754306][T16374] cdc_wdm 6-1:1.0: skipping garbage [ 894.764024][T16374] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 894.764039][T16374] cdc_wdm 6-1:1.0: Unknown control protocol [ 894.798132][ T5085] gspca_stk1135: reg_w 0x203 err -71 [ 894.838849][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.838863][ T5085] gspca_stk1135: Sensor write failed [ 894.838891][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.838901][ T5085] gspca_stk1135: Sensor write failed [ 894.838928][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.838938][ T5085] gspca_stk1135: Sensor read failed [ 894.838964][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.838973][ T5085] gspca_stk1135: Sensor read failed [ 894.838980][ T5085] gspca_stk1135: Detected sensor type unknown (0x0) [ 894.839011][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.839020][ T5085] gspca_stk1135: Sensor read failed [ 894.839046][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.839055][ T5085] gspca_stk1135: Sensor read failed [ 894.839086][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.839096][ T5085] gspca_stk1135: Sensor write failed [ 894.839122][ T5085] gspca_stk1135: serial bus timeout: status=0x00 [ 894.839131][ T5085] gspca_stk1135: Sensor write failed [ 894.839203][ T5085] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 894.848219][ T5085] usb 3-1: USB disconnect, device number 107 [ 895.016526][ T2159] usb 6-1: USB disconnect, device number 10 [ 895.464741][T17167] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 895.467779][ T31] audit: type=1326 audit(1789583469.890:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.468368][ T31] audit: type=1326 audit(1789583469.890:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.471080][ T31] audit: type=1326 audit(1789583469.900:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.471299][ T31] audit: type=1326 audit(1789583469.900:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.471472][ T31] audit: type=1326 audit(1789583469.900:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.471980][ T31] audit: type=1326 audit(1789583469.900:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f85ebf5e98e code=0x7ffc0000 [ 895.472222][ T31] audit: type=1326 audit(1789583469.900:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.472561][ T31] audit: type=1326 audit(1789583469.900:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.472731][ T31] audit: type=1326 audit(1789583469.900:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17168 comm="syz.2.3847" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ebf9e159 code=0x7ffc0000 [ 895.531443][ T2159] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 895.572015][T17167] md: could not open device unknown-block(7,0). [ 895.671132][T17172] md: loop1 has zero or unknown size, marking faulty! [ 895.732558][ T2159] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 895.733683][ T2159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 895.736564][ T2159] usb 6-1: config 0 descriptor?? [ 895.764113][ T2159] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 896.081742][T17167] md: pers->run() failed ... [ 896.363383][ T987] usb 5-1: USB disconnect, device number 9 [ 896.687289][T17169] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 897.011037][T17193] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 897.430130][ T2159] usb 6-1: USB disconnect, device number 11 [ 897.869231][T13579] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 897.919836][T17220] kvm [17218]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 898.029336][T13579] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 898.029898][T13579] usb 3-1: config 0 has no interfaces? [ 898.029949][T13579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.034544][T13579] usb 3-1: config 0 descriptor?? [ 898.251865][T17231] FAULT_INJECTION: forcing a failure. [ 898.251865][T17231] name failslab, interval 1, probability 0, space 0, times 0 [ 898.251896][T17231] CPU: 0 UID: 0 PID: 17231 Comm: syz.6.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 898.251925][T17231] Tainted: [L]=SOFTLOCKUP [ 898.251933][T17231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 898.251946][T17231] Call Trace: [ 898.251955][T17231] [ 898.251969][T17231] dump_stack_lvl+0xe8/0x150 [ 898.252002][T17231] should_fail_ex+0x3eb/0x540 [ 898.252031][T17231] should_failslab+0xa8/0x100 [ 898.252056][T17231] __kmalloc_cache_noprof+0x9e/0x600 [ 898.252086][T17231] ? loop_add+0x105/0xb40 [ 898.252245][T17231] ? loop_add+0x105/0xb40 [ 898.252279][T17231] loop_add+0x105/0xb40 [ 898.252314][T17231] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 898.252337][T17231] ? __pfx_loop_add+0x10/0x10 [ 898.252393][T17231] loop_control_ioctl+0x12b/0x5a0 [ 898.252423][T17231] ? __fget_files+0x2a/0x420 [ 898.252449][T17231] ? __pfx_loop_control_ioctl+0x10/0x10 [ 898.252476][T17231] ? __fget_files+0x2a/0x420 [ 898.252503][T17231] ? bpf_lsm_file_ioctl+0x9/0x20 [ 898.252528][T17231] ? __pfx_loop_control_ioctl+0x10/0x10 [ 898.252556][T17231] __se_sys_ioctl+0xfc/0x170 [ 898.252588][T17231] do_syscall_64+0x166/0x520 [ 898.252608][T17231] ? trace_irq_disable+0x3b/0x140 [ 898.252635][T17231] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.252654][T17231] ? clear_bhb_loop+0x70/0xc0 [ 898.252677][T17231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 898.252697][T17231] RIP: 0033:0x7f3e7fb9e159 [ 898.252715][T17231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 898.252733][T17231] RSP: 002b:00007f3e80ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 898.252757][T17231] RAX: ffffffffffffffda RBX: 00007f3e7fe25fa0 RCX: 00007f3e7fb9e159 [ 898.252773][T17231] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 898.252786][T17231] RBP: 00007f3e7fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 898.252799][T17231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 898.252811][T17231] R13: 00007f3e7fe26038 R14: 00007f3e7fe25fa0 R15: 00007ffc2f388f88 [ 898.252841][T17231] [ 898.497461][T17235] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 898.565202][T17235] md: could not open device unknown-block(7,0). [ 898.580123][T17235] md: loop1 has zero or unknown size, marking faulty! [ 898.907074][T17235] md: pers->run() failed ... [ 899.108817][ C0] net_ratelimit: 109 callbacks suppressed [ 899.709798][ T987] rust_binder: 17274: undelivered transaction 58, process died [ 900.079106][T13579] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 900.239322][T13579] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 900.242944][T13579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.242991][T13579] usb 5-1: Product: syz [ 900.243004][T13579] usb 5-1: Manufacturer: syz [ 900.243018][T13579] usb 5-1: SerialNumber: syz [ 900.252549][T13579] usb 5-1: config 0 descriptor?? [ 900.308152][ T31] kauditd_printk_skb: 8 callbacks suppressed [ 900.308277][ T31] audit: type=1800 audit(1789583474.730:41): pid=17297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3867" name=09 dev="sda1" ino=2060 res=0 errno=0 [ 900.337637][T16270] usb 3-1: USB disconnect, device number 108 [ 900.503653][T13579] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 900.868672][T16270] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 900.922070][ T5085] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 901.022618][T16270] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 901.027934][T16270] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 901.027961][T16270] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 901.027984][T16270] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 901.072122][T16270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 901.072143][T16270] usb 6-1: Product: syz [ 901.072157][T16270] usb 6-1: Manufacturer: syz [ 901.100010][ T5085] usb 7-1: Using ep0 maxpacket: 16 [ 901.103537][ T5085] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 901.115389][ T5085] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.115409][ T5085] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.137650][ T5085] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.137669][ T5085] usb 7-1: Product: syz [ 901.137703][ T5085] usb 7-1: Manufacturer: syz [ 901.137716][ T5085] usb 7-1: SerialNumber: syz [ 901.171599][T17303] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 901.171725][T17303] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 901.171844][T17303] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 901.248048][ T5085] usb 7-1: 0:2 : does not exist [ 901.449584][ T5085] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 901.539436][T17315] syzkaller0: entered promiscuous mode [ 901.539456][T17315] syzkaller0: entered allmulticast mode [ 901.670993][ T5085] usb 7-1: USB disconnect, device number 8 [ 901.830969][T16560] udevd[16560]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 901.994607][T13579] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 902.005276][T13579] usb 5-1: USB disconnect, device number 10 [ 902.297362][T17331] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 902.297387][T17331] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 902.472087][T16270] redrat3 6-1:1.0: Firmware rev:  [ 902.928813][T16270] redrat3 6-1:1.0: Failed to read timeout from hardware [ 903.058814][T16270] rc_core: IR keymap rc-hauppauge not found [ 903.058827][T16270] Registered IR keymap rc-empty [ 903.118614][T13579] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 903.145640][T16270] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0 [ 903.147982][T16270] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/rc/rc0/input86 [ 903.171847][T16270] redrat3 6-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 903.172587][T16270] redrat3 6-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 903.172633][T16270] redrat3 6-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 903.290153][T13579] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 903.291344][T13579] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 64703, setting to 1024 [ 903.291372][T13579] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 903.291424][T13579] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.295288][T17336] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 903.297796][T13579] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 903.566643][T16270] redrat3 6-1:1.0: probe with driver redrat3 failed with error -5 [ 903.586025][T16270] usb 6-1: USB disconnect, device number 12 [ 903.614806][T13579] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 903.719374][T17336] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 903.768873][T17336] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 903.769322][T17336] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 903.867113][T17336] SPCP8x5 ttyUSB0: Set UART format 0x1411 failed (error = -32) [ 903.874096][T17336] SPCP8x5 ttyUSB0: failed to set work mode: -32 [ 903.970700][T16270] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 904.047381][T17334] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 904.061639][T13579] usb 7-1: USB disconnect, device number 9 [ 904.086764][T13579] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 904.096873][T13579] spcp8x5 7-1:1.0: device disconnected [ 904.139218][T16270] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 904.139261][T16270] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 904.139824][T16270] usb 6-1: config 0 has no interfaces? [ 904.140345][T16270] usb 6-1: config 0 has no interfaces? [ 904.140862][T16270] usb 6-1: config 0 has no interfaces? [ 904.141389][T16270] usb 6-1: config 0 has no interfaces? [ 904.141921][T16270] usb 6-1: config 0 has no interfaces? [ 904.142445][T16270] usb 6-1: config 0 has no interfaces? [ 904.142964][T16270] usb 6-1: config 0 has no interfaces? [ 904.143485][T16270] usb 6-1: config 0 has no interfaces? [ 904.145673][T16270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.145692][T16270] usb 6-1: Product: syz [ 904.145706][T16270] usb 6-1: Manufacturer: syz [ 904.145720][T16270] usb 6-1: SerialNumber: syz [ 904.172339][T16270] usb 6-1: config 0 descriptor?? [ 904.328250][ C1] net_ratelimit: 815 callbacks suppressed [ 904.436085][ T987] usb 6-1: USB disconnect, device number 13 [ 905.148248][T16374] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 905.303205][T16374] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 905.306776][T16374] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.306833][T16374] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.745977][T16374] wacom 0003:056A:033B.002D: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 905.782695][T16374] wacom 0003:056A:033B.002D: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 905.815290][T16374] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.002D/input/input87 [ 906.716670][ T2159] usb 6-1: USB disconnect, device number 14 [ 907.856904][T17366] evm: overlay not supported [ 908.436964][T17373] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 909.383052][T17380] svc: failed to register lockdv1 RPC service (errno 111). [ 909.383338][T17380] lockd_up: makesock failed, error=-111 [ 909.508004][ C1] net_ratelimit: 604 callbacks suppressed [ 909.832581][T17380] svc: failed to register nfsdv3 RPC service (errno 111). [ 909.833670][T17380] svc: failed to register nfsaclv3 RPC service (errno 512). [ 909.833690][T17380] failed to unregister tcp with rpcbind [ 909.918402][T17380] svc: failed to register nfsdv3 RPC service (errno 97). [ 909.918422][T17380] svc: failed to register nfsaclv3 RPC service (errno 97). [ 909.918437][T17380] failed to unregister tcp with rpcbind [ 910.372035][T17403] random: crng reseeded on system resumption [ 910.771166][ T5762] rust_binder: 17408: undelivered TRANSACTION_COMPLETE [ 910.805732][T16374] rust_binder: 17408: undelivered transaction 63, process died [ 910.908346][T17414] FAULT_INJECTION: forcing a failure. [ 910.908346][T17414] name failslab, interval 1, probability 0, space 0, times 0 [ 910.908378][T17414] CPU: 0 UID: 0 PID: 17414 Comm: syz.4.3896 Tainted: G L syzkaller #0 PREEMPT(full) [ 910.908407][T17414] Tainted: [L]=SOFTLOCKUP [ 910.908415][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.908429][T17414] Call Trace: [ 910.908437][T17414] [ 910.908447][T17414] dump_stack_lvl+0xe8/0x150 [ 910.908480][T17414] should_fail_ex+0x3eb/0x540 [ 910.908508][T17414] should_failslab+0xa8/0x100 [ 910.908532][T17414] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 910.908564][T17414] ? __d_alloc+0x37/0x6f0 [ 910.908589][T17414] ? __d_alloc+0x37/0x6f0 [ 910.908621][T17414] __d_alloc+0x37/0x6f0 [ 910.908645][T17414] ? __list_lru_init+0x542/0x680 [ 910.908675][T17414] ? shmem_fill_super+0xa5a/0x1150 [ 910.908703][T17414] d_make_root+0x41/0x80 [ 910.908731][T17414] shmem_fill_super+0xcbc/0x1150 [ 910.908775][T17414] ? __pfx_shmem_fill_super+0x10/0x10 [ 910.908809][T17414] ? __pfx_shmem_fill_super+0x10/0x10 [ 910.908836][T17414] get_tree_nodev+0xbb/0x150 [ 910.908866][T17414] vfs_get_tree+0x92/0x2a0 [ 910.908897][T17414] do_new_mount+0x319/0xdc0 [ 910.908927][T17414] ? __pfx_do_new_mount+0x10/0x10 [ 910.908954][T17414] ? ns_capable+0x84/0xe0 [ 910.908978][T17414] ? path_mount+0x647/0x1050 [ 910.909005][T17414] ? user_path_at+0xd4/0x160 [ 910.909034][T17414] __se_sys_mount+0x31d/0x420 [ 910.909063][T17414] ? __pfx___se_sys_mount+0x10/0x10 [ 910.909094][T17414] ? __x64_sys_mount+0x20/0xc0 [ 910.909120][T17414] do_syscall_64+0x166/0x520 [ 910.909140][T17414] ? trace_irq_disable+0x3b/0x140 [ 910.909167][T17414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.909187][T17414] ? clear_bhb_loop+0x70/0xc0 [ 910.909211][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.909232][T17414] RIP: 0033:0x7fb528f9e159 [ 910.909253][T17414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.909271][T17414] RSP: 002b:00007fb529d81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 910.909294][T17414] RAX: ffffffffffffffda RBX: 00007fb529225fa0 RCX: 00007fb528f9e159 [ 910.909309][T17414] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 910.909324][T17414] RBP: 00007fb52903506b R08: 0000000000000000 R09: 0000000000000000 [ 910.909337][T17414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.909350][T17414] R13: 00007fb529226038 R14: 00007fb529225fa0 R15: 00007ffe41af0698 [ 910.909378][T17414] [ 911.517880][ T30] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 911.688648][ T30] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 911.689733][ T30] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 911.689797][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.692773][ T30] usb 7-1: config 0 descriptor?? [ 911.740160][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 912.103191][ T4931] Bluetooth: hci5: unexpected event for opcode 0x1408 [ 912.171026][ T2159] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 912.188830][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 912.189584][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 912.190257][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 912.191032][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 912.192841][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 912.193659][ T30] pwc: recv_control_msg error -32 req 04 val 1400 [ 912.317884][ T2159] usb 6-1: Using ep0 maxpacket: 16 [ 912.318794][ T2159] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 912.320380][ T2159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.320407][ T2159] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 912.320428][ T2159] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 912.320508][ T2159] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.326290][ T2159] usb 6-1: config 0 descriptor?? [ 912.552660][T17434] tipc: Started in network mode [ 912.552684][T17434] tipc: Node identity 424687724cf7, cluster identity 4711 [ 912.552831][T17434] tipc: Enabled bearer , priority 0 [ 912.607386][ T30] pwc: recv_control_msg error -71 req 04 val 1500 [ 912.607943][ T30] pwc: recv_control_msg error -71 req 02 val 2500 [ 912.608477][ T30] pwc: recv_control_msg error -71 req 02 val 2400 [ 912.615444][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 912.622562][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 912.630025][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 912.630738][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 912.637738][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 912.668162][T17434] syzkaller0: entered promiscuous mode [ 912.668177][T17434] syzkaller0: entered allmulticast mode [ 912.668827][T17434] tipc: Resetting bearer [ 912.678488][ T30] pwc: Registered as video103. [ 912.705332][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input90 [ 912.726583][ T30] usb 7-1: USB disconnect, device number 10 [ 912.854697][ T2159] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 912.854727][ T2159] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 912.854761][ T2159] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 912.854788][ T2159] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 912.854814][ T2159] shield 0003:0955:7214.002E: unknown main item tag 0x0 [ 912.901543][ T2159] input: HID 0955:7214 Haptics as /devices/virtual/input/input91 [ 912.965926][ T2159] shield 0003:0955:7214.002E: Registered Thunderstrike controller [ 912.966201][ T2159] shield 0003:0955:7214.002E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 913.414600][ T12] tipc: Resetting bearer [ 913.415160][T17432] tipc: Resetting bearer [ 913.661238][T17439] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 913.680860][T16270] usb 6-1: USB disconnect, device number 15 [ 913.703028][T17439] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 913.703097][T17439] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 913.703151][T17439] shield 0003:0955:7214.002E: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 914.480654][T17455] FAULT_INJECTION: forcing a failure. [ 914.480654][T17455] name failslab, interval 1, probability 0, space 0, times 0 [ 914.480683][T17455] CPU: 1 UID: 0 PID: 17455 Comm: syz.4.3909 Tainted: G L syzkaller #0 PREEMPT(full) [ 914.480709][T17455] Tainted: [L]=SOFTLOCKUP [ 914.480717][T17455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.480731][T17455] Call Trace: [ 914.480739][T17455] [ 914.480749][T17455] dump_stack_lvl+0xe8/0x150 [ 914.480781][T17455] should_fail_ex+0x3eb/0x540 [ 914.480810][T17455] should_failslab+0xa8/0x100 [ 914.480832][T17455] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 914.480860][T17455] kmem_cache_alloc_noprof+0x9c/0x600 [ 914.480887][T17455] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 914.480912][T17455] ? kmem_cache_alloc_noprof+0x151/0x600 [ 914.480939][T17455] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 914.480971][T17455] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 914.481008][T17455] mmu_topup_memory_caches+0x21/0x170 [ 914.481039][T17455] kvm_mmu_load+0x9d/0x21e0 [ 914.481074][T17455] ? vmx_vcpu_load+0x1af/0x260 [ 914.481113][T17455] ? lock_acquire+0x115/0x350 [ 914.481148][T17455] kvm_arch_vcpu_pre_fault_memory+0x713/0x7b0 [ 914.481194][T17455] kvm_vcpu_pre_fault_memory+0x241/0x4d0 [ 914.481226][T17455] ? kvm_vcpu_pre_fault_memory+0x15f/0x4d0 [ 914.481264][T17455] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 914.481300][T17455] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 914.481329][T17455] ? hook_file_ioctl+0x1f2/0x600 [ 914.481372][T17455] ? __fget_files+0x2a/0x420 [ 914.481410][T17455] ? bpf_lsm_file_ioctl+0x9/0x20 [ 914.481435][T17455] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 914.481464][T17455] __se_sys_ioctl+0xfc/0x170 [ 914.481497][T17455] do_syscall_64+0x166/0x520 [ 914.481516][T17455] ? trace_irq_disable+0x3b/0x140 [ 914.481543][T17455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.481564][T17455] ? clear_bhb_loop+0x70/0xc0 [ 914.481589][T17455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.481610][T17455] RIP: 0033:0x7fb528f9e159 [ 914.481628][T17455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.481647][T17455] RSP: 002b:00007fb529d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 914.481668][T17455] RAX: ffffffffffffffda RBX: 00007fb529225fa0 RCX: 00007fb528f9e159 [ 914.481683][T17455] RDX: 0000200000000200 RSI: 00000000c040aed5 RDI: 0000000000000005 [ 914.481698][T17455] RBP: 00007fb52903506b R08: 0000000000000000 R09: 0000000000000000 [ 914.481711][T17455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 914.481724][T17455] R13: 00007fb529226038 R14: 00007fb529225fa0 R15: 00007ffe41af0698 [ 914.481756][T17455] [ 914.627858][ C0] net_ratelimit: 81 callbacks suppressed [ 914.695537][T17458] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 914.749420][T17458] md: could not open device unknown-block(7,0). [ 914.795936][T17458] md: loop1 has zero or unknown size, marking faulty! [ 914.993272][T17458] md: pers->run() failed ... [ 915.299245][T16270] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 915.447707][T16270] usb 5-1: Using ep0 maxpacket: 32 [ 915.448482][T16270] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 915.449860][T16270] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 915.449882][T16270] usb 5-1: config 0 has no interface number 0 [ 915.449939][T16270] usb 5-1: config 0 interface 184 has no altsetting 0 [ 915.451086][ T2159] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 915.453211][T16270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.453230][T16270] usb 5-1: Product: syz [ 915.453244][T16270] usb 5-1: Manufacturer: syz [ 915.453258][T16270] usb 5-1: SerialNumber: syz [ 915.460421][T16270] usb 5-1: config 0 descriptor?? [ 915.622302][ T2159] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 915.623415][ T2159] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 915.623436][ T2159] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 915.623455][ T2159] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 915.623514][ T2159] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.640591][ T2159] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 915.640610][ T2159] usb 6-1: Product: syz [ 915.640624][ T2159] usb 6-1: Manufacturer: syz [ 915.685111][ T2159] cdc_wdm 6-1:1.0: skipping garbage [ 915.718681][ T2159] cdc_wdm 6-1:1.0: skipping garbage [ 915.743046][ T2159] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 915.743063][ T2159] cdc_wdm 6-1:1.0: Unknown control protocol [ 915.899605][T16374] usb 6-1: USB disconnect, device number 16 [ 916.131337][T16270] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 916.131364][T16270] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 916.459376][T16374] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 916.614568][T16374] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 916.615873][T16374] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 916.615897][T16374] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 916.615917][T16374] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 916.616005][T16374] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.638384][T16374] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 916.638403][T16374] usb 6-1: Product: syz [ 916.638438][T16374] usb 6-1: Manufacturer: syz [ 916.645619][T16374] cdc_wdm 6-1:1.0: skipping garbage [ 916.645631][T16374] cdc_wdm 6-1:1.0: skipping garbage [ 916.654713][T16374] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 916.654728][T16374] cdc_wdm 6-1:1.0: Unknown control protocol [ 917.613652][T16270] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 917.613681][T16270] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 917.613702][T16270] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 917.613945][T16270] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 917.624249][T16270] usb 5-1: USB disconnect, device number 11 [ 917.879760][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.879916][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.880190][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.880209][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.880469][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.880489][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.880750][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.880769][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.881042][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.881060][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.881315][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.881332][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.881586][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.881602][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.881867][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.881885][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.882136][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.882154][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.882423][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 917.882439][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 917.885395][T16270] usb 6-1: USB disconnect, device number 17 [ 917.885504][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 919.347560][T16270] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 919.379126][T17496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 919.379145][T17496] rust_binder: Read failure Err(EFAULT) in pid:218 [ 919.382994][T17496] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 919.383011][T17496] rust_binder: Read failure Err(EFAULT) in pid:218 [ 919.384178][T17496] rust_binder: Failure in copy_transaction_data: EFAULT [ 919.384212][T17496] rust_binder: 17495:17496 transaction call to 17495:0 failed EFAULT, code 0 size 120-24 [ 919.384847][T16374] rust_binder: 17495: undelivered TRANSACTION_ERROR: 29201 [ 919.504972][T16270] usb 6-1: Using ep0 maxpacket: 8 [ 919.516057][T16270] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 919.540839][T16270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.540857][T16270] usb 6-1: Product: syz [ 919.540872][T16270] usb 6-1: Manufacturer: syz [ 919.540886][T16270] usb 6-1: SerialNumber: syz [ 919.544402][T16270] usb 6-1: config 0 descriptor?? [ 919.566231][T16270] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 919.922223][ T6445] net_ratelimit: 82 callbacks suppressed [ 921.566538][T17432] tipc: Disabling bearer [ 921.579751][ T30] tipc: Node number set to 246515570 [ 921.916550][T16270] gspca_sonixj: reg_w1 err -71 [ 921.945391][ T6445] Bluetooth: hci0: Frame reassembly failed (-90) [ 921.947509][T16270] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 921.950126][T16270] usb 6-1: USB disconnect, device number 18 [ 921.955197][T17511] Bluetooth: hci0: Frame reassembly failed (-84) [ 921.959174][T17511] Bluetooth: hci0: Frame reassembly failed (-84) [ 921.961353][T17511] Bluetooth: hci0: Frame reassembly failed (-84) [ 921.962538][T17511] Bluetooth: hci0: Frame reassembly failed (-84) [ 922.927334][T16270] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 922.950416][T17526] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 922.960252][T17526] kvm: pic: single mode not supported [ 922.961036][T17526] kvm: pic: non byte read [ 922.961492][T17526] kvm: pic: level sensitive irq not supported [ 922.961577][T17526] kvm: pic: non byte read [ 922.961767][T17526] kvm: pic: level sensitive irq not supported [ 922.961817][T17526] kvm: pic: non byte read [ 922.962012][T17526] kvm: pic: level sensitive irq not supported [ 922.962106][T17526] kvm: pic: non byte read [ 922.962289][T17526] kvm: pic: level sensitive irq not supported [ 922.962341][T17526] kvm: pic: non byte read [ 922.962544][T17526] kvm: pic: level sensitive irq not supported [ 922.962594][T17526] kvm: pic: non byte read [ 922.962774][T17526] kvm: pic: level sensitive irq not supported [ 922.962824][T17526] kvm: pic: non byte read [ 922.963014][T17526] kvm: pic: level sensitive irq not supported [ 922.963130][T17526] kvm: pic: non byte read [ 922.977310][T16374] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 923.083300][T16270] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 923.086884][T16270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.086916][T16270] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 923.086978][T16270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.090367][T16270] usb 3-1: config 0 descriptor?? [ 923.128728][T16374] usb 5-1: Using ep0 maxpacket: 16 [ 923.138277][T16374] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 923.144698][T16374] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 923.144726][T16374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 923.151117][T16374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.151136][T16374] usb 5-1: Product: syz [ 923.151150][T16374] usb 5-1: Manufacturer: syz [ 923.151164][T16374] usb 5-1: SerialNumber: syz [ 923.162943][T16374] usb 5-1: config 0 descriptor?? [ 923.196161][T16374] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 923.196208][T16374] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 923.267780][T15451] Bluetooth: hci7: command 0x0406 tx timeout [ 923.385878][T17532] FAULT_INJECTION: forcing a failure. [ 923.385878][T17532] name failslab, interval 1, probability 0, space 0, times 0 [ 923.385911][T17532] CPU: 1 UID: 0 PID: 17532 Comm: syz.5.3934 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.385939][T17532] Tainted: [L]=SOFTLOCKUP [ 923.385947][T17532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.385960][T17532] Call Trace: [ 923.385968][T17532] [ 923.385978][T17532] dump_stack_lvl+0xe8/0x150 [ 923.386009][T17532] should_fail_ex+0x3eb/0x540 [ 923.386037][T17532] should_failslab+0xa8/0x100 [ 923.386062][T17532] __kmalloc_noprof+0xf9/0x710 [ 923.386091][T17532] ? kernfs_fop_write_iter+0x157/0x540 [ 923.386113][T17532] ? kernfs_fop_write_iter+0x157/0x540 [ 923.386142][T17532] kernfs_fop_write_iter+0x157/0x540 [ 923.386169][T17532] vfs_write+0x612/0xba0 [ 923.386205][T17532] ? __pfx_vfs_write+0x10/0x10 [ 923.386241][T17532] ? __fget_files+0x2a/0x420 [ 923.386273][T17532] ksys_write+0x150/0x270 [ 923.386301][T17532] ? __pfx_ksys_write+0x10/0x10 [ 923.386339][T17532] do_syscall_64+0x166/0x520 [ 923.386358][T17532] ? trace_irq_disable+0x3b/0x140 [ 923.386394][T17532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.386414][T17532] ? clear_bhb_loop+0x70/0xc0 [ 923.386438][T17532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.386459][T17532] RIP: 0033:0x7f37bab9e159 [ 923.386479][T17532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.386497][T17532] RSP: 002b:00007f37bbb03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 923.386520][T17532] RAX: ffffffffffffffda RBX: 00007f37bae25fa0 RCX: 00007f37bab9e159 [ 923.386536][T17532] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 923.386549][T17532] RBP: 00007f37bac3506b R08: 0000000000000000 R09: 0000000000000000 [ 923.386563][T17532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 923.386577][T17532] R13: 00007f37bae26038 R14: 00007f37bae25fa0 R15: 00007ffd2a447148 [ 923.386609][T17532] [ 923.578308][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578342][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578368][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578419][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578446][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578471][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.578495][T16270] pyra 0003:1E7D:2CF6.002F: unknown main item tag 0x0 [ 923.630136][T16270] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0 [ 923.908031][T16374] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 923.911553][T16374] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 923.990754][T15707] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 924.939484][T16374] em28xx 5-1:0.0: AC97 vendor ID = 0x00fc00fe [ 925.027269][ C0] net_ratelimit: 86 callbacks suppressed [ 925.141944][T16374] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 925.142453][T16374] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 925.143437][T16374] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 925.143931][T16374] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 925.144423][T16374] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 925.144947][T16374] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 925.183532][T16270] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 925.183583][T16270] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 925.207294][T16270] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -71 [ 925.222928][T16374] usb 5-1: USB disconnect, device number 12 [ 925.224644][T16270] usb 3-1: USB disconnect, device number 109 [ 925.879446][T17584] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 925.929910][T17584] md: could not open device unknown-block(7,0). [ 925.959044][T17584] md: loop1 has zero or unknown size, marking faulty! [ 926.202345][T17584] md: pers->run() failed ... [ 926.319006][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079010c00: rx timeout, send abort [ 926.338414][T16270] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 926.488797][T16270] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 926.496451][T16270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.496471][T16270] usb 6-1: Product: syz [ 926.496484][T16270] usb 6-1: Manufacturer: syz [ 926.496499][T16270] usb 6-1: SerialNumber: syz [ 926.503062][T16270] usb 6-1: config 0 descriptor?? [ 926.513314][T16270] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 926.524049][T16270] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 926.528219][T16270] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 926.528287][T16270] usb 6-1: media controller created [ 926.739540][T16270] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 926.819024][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888079010c00: abort rx timeout. Force session deactivation [ 926.841703][T17590] dvb-usb: bulk message failed: -22 (7/0) [ 927.185815][T16270] DVB: Unable to find symbol mt352_attach() [ 927.230947][T16270] DVB: Unable to find symbol nxt6000_attach() [ 927.230952][T16270] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 927.255134][T16270] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input92 [ 927.276043][T16270] dvb-usb: schedule remote query interval to 1000 msecs. [ 927.276062][T16270] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 927.276076][T16270] dvb-usb: bulk message failed: -22 (7/0) [ 927.276090][T16270] dvb-usb: bulk message failed: -22 (7/0) [ 927.324365][T16270] usb 6-1: USB disconnect, device number 19 [ 927.517438][T16270] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 927.905431][ T31] audit: type=1800 audit(1789583502.322:42): pid=17623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3950" name="syzkaller0" dev="sda1" ino=2053 res=0 errno=0 [ 927.996960][T16270] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 928.147446][T16270] usb 6-1: Using ep0 maxpacket: 16 [ 928.149459][T16270] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 928.166127][T16270] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 928.180905][T16270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.180924][T16270] usb 6-1: Product: syz [ 928.180938][T16270] usb 6-1: Manufacturer: syz [ 928.180951][T16270] usb 6-1: SerialNumber: syz [ 928.183850][T16270] usb 6-1: config 0 descriptor?? [ 928.215358][T16270] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 928.215385][T16270] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 928.497016][ T31] audit: type=1800 audit(1789583502.912:43): pid=17635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3954" name="syzkaller0" dev="sda1" ino=2053 res=0 errno=0 [ 928.500591][ T31] audit: type=1800 audit(1789583502.932:44): pid=17641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3954" name="syzkaller0" dev="sda1" ino=2053 res=0 errno=0 [ 929.287145][T16270] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 929.396871][ T30] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 929.558823][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 929.559663][ T30] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 929.561021][ T30] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 929.561042][ T30] usb 7-1: config 0 has no interface number 0 [ 929.561081][ T30] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 929.566012][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.566032][ T30] usb 7-1: Product: syz [ 929.566046][ T30] usb 7-1: Manufacturer: syz [ 929.566060][ T30] usb 7-1: SerialNumber: syz [ 929.638424][ T30] usb 7-1: config 0 descriptor?? [ 929.646219][T17662] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 929.703957][T16270] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 929.703984][T16270] em28xx 6-1:0.0: board has no eeprom [ 929.883414][T17662] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 930.146811][ C0] net_ratelimit: 730 callbacks suppressed [ 930.857476][T16270] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 930.857575][T16270] em28xx 6-1:0.0: dvb set to bulk mode. [ 930.859439][T12089] em28xx 6-1:0.0: Binding DVB extension [ 931.115754][T17699] syzkaller0: entered promiscuous mode [ 931.115773][T17699] syzkaller0: entered allmulticast mode [ 931.234068][ T25] usb 6-1: USB disconnect, device number 20 [ 931.245316][T12089] em28xx 6-1:0.0: Registering input extension [ 931.257745][ T25] em28xx 6-1:0.0: Disconnecting em28xx [ 931.270286][ T25] em28xx 6-1:0.0: Closing input extension [ 931.375109][ T25] em28xx: Freeing device [ 931.428915][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.679817][T17704] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 931.961428][T17717] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 931.961463][T17717] rust_binder: Failure in copy_transaction_data: ENOSPC [ 931.961483][T17717] rust_binder: 17716:17717 transaction async to 17716:0 failed ENOSPC, code 0 size 0-0 [ 931.964244][ T25] rust_binder: 17716: undelivered TRANSACTION_COMPLETE [ 931.964279][ T25] rust_binder: 17716: undelivered TRANSACTION_ERROR: 29201 [ 932.012890][ T30] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 932.012918][ T30] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 932.013143][ T30] asix 7-1:0.188: probe with driver asix failed with error -71 [ 932.054463][ T30] usb 7-1: USB disconnect, device number 11 [ 932.537796][T17727] r8a66597_hcd pcspkr: platform_get_resource error. [ 932.742624][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.742654][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.742680][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.742705][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.742731][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.742756][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.752471][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.752507][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.752532][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.752556][T16270] hid-generic 0006:0008:0008.0030: unknown main item tag 0x0 [ 932.759949][T16270] hid-generic 0006:0008:0008.0030: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 933.058665][T17743] fido_id[17743]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 933.626632][ T25] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 933.788012][ T25] usb 6-1: not running at top speed; connect to a high speed hub [ 933.788042][ T25] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 933.790576][ T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 933.792882][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.792901][ T25] usb 6-1: Product: syz [ 933.792915][ T25] usb 6-1: Manufacturer: syz [ 933.792928][ T25] usb 6-1: SerialNumber: syz [ 933.850659][ T25] oti6858 6-1:1.0: oti6858 converter detected [ 933.865782][ T25] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 934.554532][T17771] zram0: detected capacity change from 0 to 8 [ 934.736709][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 934.886800][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 934.892978][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 934.903787][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.903838][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.903894][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.943201][ T25] usb 7-1: config 0 descriptor?? [ 934.958907][ T25] hub 7-1:0.0: USB hub found [ 935.152895][ T25] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 935.266631][ C0] net_ratelimit: 88 callbacks suppressed [ 935.570190][ T25] hid-generic 0003:046D:C31C.0031: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 936.289948][T17776] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 936.330588][ T30] usb 6-1: USB disconnect, device number 21 [ 936.381716][ T30] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 936.400175][ T30] oti6858 6-1:1.0: device disconnected [ 936.519968][T17794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 936.519982][T17794] rust_binder: Read failure Err(EFAULT) in pid:232 [ 936.548082][T17794] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 936.548096][T17794] rust_binder: Read failure Err(EFAULT) in pid:232 [ 936.549368][T17794] rust_binder: Error in use_page_slow: EFAULT [ 936.549390][T17794] rust_binder: use_range failure EFAULT [ 936.549408][T17794] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 936.549421][T17794] rust_binder: Failure in copy_transaction_data: EFAULT [ 936.549443][T17794] rust_binder: 17793:17794 transaction call to 17793:0 failed EFAULT, code 0 size 0-24 [ 936.550065][ T5618] rust_binder: 17793: undelivered TRANSACTION_ERROR: 29201 [ 936.938420][T16374] usb 7-1: USB disconnect, device number 12 [ 937.064303][T17800] FAULT_INJECTION: forcing a failure. [ 937.064303][T17800] name failslab, interval 1, probability 0, space 0, times 0 [ 937.064339][T17800] CPU: 1 UID: 0 PID: 17800 Comm: syz.5.3988 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.064369][T17800] Tainted: [L]=SOFTLOCKUP [ 937.064377][T17800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.064392][T17800] Call Trace: [ 937.064401][T17800] [ 937.064409][T17800] dump_stack_lvl+0xe8/0x150 [ 937.064444][T17800] should_fail_ex+0x3eb/0x540 [ 937.064473][T17800] should_failslab+0xa8/0x100 [ 937.064496][T17800] ? alloc_empty_file+0x5b/0x1d0 [ 937.064519][T17800] kmem_cache_alloc_noprof+0x9c/0x600 [ 937.064551][T17800] ? alloc_empty_file+0x5b/0x1d0 [ 937.064579][T17800] alloc_empty_file+0x5b/0x1d0 [ 937.064602][T17800] alloc_file_pseudo+0x110/0x1e0 [ 937.064628][T17800] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 937.064654][T17800] ? alloc_anon_inode+0x194/0x330 [ 937.064684][T17800] dma_buf_export+0x648/0xab0 [ 937.064815][T17800] udmabuf_create+0xe49/0xf50 [ 937.064896][T17800] ? __pfx_udmabuf_create+0x10/0x10 [ 937.064942][T17800] ? __might_fault+0xaf/0x130 [ 937.064974][T17800] udmabuf_ioctl+0x1f3/0x300 [ 937.065009][T17800] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 937.065045][T17800] ? __fget_files+0x2a/0x420 [ 937.065071][T17800] ? __fget_files+0x2a/0x420 [ 937.065098][T17800] ? bpf_lsm_file_ioctl+0x9/0x20 [ 937.065123][T17800] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 937.065152][T17800] __se_sys_ioctl+0xfc/0x170 [ 937.065184][T17800] do_syscall_64+0x166/0x520 [ 937.065203][T17800] ? trace_irq_disable+0x3b/0x140 [ 937.065231][T17800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.065253][T17800] ? clear_bhb_loop+0x70/0xc0 [ 937.065278][T17800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.065299][T17800] RIP: 0033:0x7f37bab9e159 [ 937.065319][T17800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.065338][T17800] RSP: 002b:00007f37bbb03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 937.065361][T17800] RAX: ffffffffffffffda RBX: 00007f37bae25fa0 RCX: 00007f37bab9e159 [ 937.065377][T17800] RDX: 00002000000002c0 RSI: 0000000040187542 RDI: 0000000000000003 [ 937.065392][T17800] RBP: 00007f37bac3506b R08: 0000000000000000 R09: 0000000000000000 [ 937.065405][T17800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 937.065417][T17800] R13: 00007f37bae26038 R14: 00007f37bae25fa0 R15: 00007ffd2a447148 [ 937.065448][T17800] [ 937.155542][T17802] FAULT_INJECTION: forcing a failure. [ 937.155542][T17802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.155571][T17802] CPU: 1 UID: 0 PID: 17802 Comm: syz.5.3989 Tainted: G L syzkaller #0 PREEMPT(full) [ 937.155598][T17802] Tainted: [L]=SOFTLOCKUP [ 937.155606][T17802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 937.155618][T17802] Call Trace: [ 937.155627][T17802] [ 937.155636][T17802] dump_stack_lvl+0xe8/0x150 [ 937.155665][T17802] should_fail_ex+0x3eb/0x540 [ 937.155693][T17802] _copy_from_user+0x2d/0xb0 [ 937.155722][T17802] do_ipv6_setsockopt+0x249/0x3180 [ 937.155753][T17802] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 937.155773][T17802] ? aa_inet_opt_perm+0x94d/0xcd0 [ 937.155805][T17802] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 937.155838][T17802] ? vfs_write+0x9ce/0xba0 [ 937.155870][T17802] ? do_futex+0x3e7/0x4e0 [ 937.155895][T17802] ? lock_acquire+0x115/0x350 [ 937.155943][T17802] ? aa_sock_opt_perm+0xe1/0x1e0 [ 937.155970][T17802] ipv6_setsockopt+0x59/0x170 [ 937.155991][T17802] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 937.156022][T17802] do_sock_setsockopt+0x17c/0x1b0 [ 937.156048][T17802] __x64_sys_setsockopt+0x13d/0x1b0 [ 937.156073][T17802] do_syscall_64+0x166/0x520 [ 937.156091][T17802] ? trace_irq_disable+0x3b/0x140 [ 937.156117][T17802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.156138][T17802] ? clear_bhb_loop+0x70/0xc0 [ 937.156162][T17802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.156181][T17802] RIP: 0033:0x7f37bab9e159 [ 937.156199][T17802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 937.156217][T17802] RSP: 002b:00007f37bbb03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 937.156239][T17802] RAX: ffffffffffffffda RBX: 00007f37bae25fa0 RCX: 00007f37bab9e159 [ 937.156253][T17802] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004 [ 937.156266][T17802] RBP: 00007f37bac3506b R08: 0000000000000108 R09: 0000000000000000 [ 937.156279][T17802] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 937.156291][T17802] R13: 00007f37bae26038 R14: 00007f37bae25fa0 R15: 00007ffd2a447148 [ 937.156321][T17802] [ 938.040564][T17818] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 938.049993][T16374] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 938.196796][T16374] usb 6-1: Using ep0 maxpacket: 8 [ 938.197875][T16374] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 938.204055][T16374] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.204074][T16374] usb 6-1: Product: syz [ 938.204088][T16374] usb 6-1: Manufacturer: syz [ 938.204102][T16374] usb 6-1: SerialNumber: syz [ 938.210810][T16374] usb 6-1: config 0 descriptor?? [ 938.396970][ T5618] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 938.417894][T16374] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 938.547068][ T5618] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 938.550475][ T5618] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.550495][ T5618] usb 5-1: Product: syz [ 938.550509][ T5618] usb 5-1: Manufacturer: syz [ 938.550523][ T5618] usb 5-1: SerialNumber: syz [ 938.890439][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bbaf400: rx timeout, send abort [ 938.906306][ T25] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 938.925148][T17833] syzkaller0: entered promiscuous mode [ 938.925167][T17833] syzkaller0: entered allmulticast mode [ 939.010895][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 939.056463][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 939.071272][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 939.071314][ T25] usb 3-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 939.074068][T16374] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 939.074654][T16374] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 939.074708][T16374] usb 6-1: media controller created [ 939.122960][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.122979][ T25] usb 3-1: Product: syz [ 939.122993][ T25] usb 3-1: Manufacturer: syz [ 939.123031][ T25] usb 3-1: SerialNumber: syz [ 939.232588][T16374] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 939.390445][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bbaf400: abort rx timeout. Force session deactivation [ 939.390679][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801bbad800: rx timeout, send abort [ 939.569880][T16374] i2c i2c-1: Added multiplexed i2c bus 2 [ 939.569897][T16374] rtl2830 1-0010: Realtek RTL2830 successfully attached [ 939.602877][T16374] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2830 (DVB-T))... [ 939.638993][T16374] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2830 (DVB-T)' registered. [ 939.810341][T16270] rust_binder: 17839: undelivered TRANSACTION_COMPLETE [ 939.823813][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff88801bbad800: connection exists (fe ff). last cmd: 20 [ 939.885735][T16374] DVB: Unable to find symbol qt1010_attach() [ 939.893024][T16270] rust_binder: 17839: undelivered transaction 84, process died [ 940.073705][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d2c400: rx timeout, send abort [ 940.148643][ T25] usb 3-1: USB disconnect, device number 110 [ 940.215448][T16192] udevd[16192]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 940.288563][T16270] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 940.437619][T16270] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 940.439367][T16270] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.439408][T16270] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 940.439426][T16270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 940.439439][T16270] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 940.439450][T16270] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 940.447199][T16270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 940.447219][T16270] usb 7-1: Product: syz [ 940.447233][T16270] usb 7-1: Manufacturer: syz [ 940.447247][T16270] usb 7-1: SerialNumber: syz [ 940.454254][T16270] usb 7-1: config 0 descriptor?? [ 940.462843][T16374] usb 6-1: USB disconnect, device number 22 [ 940.573720][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d2c400: abort rx timeout. Force session deactivation [ 940.703112][ T5618] net_ratelimit: 104 callbacks suppressed [ 940.703131][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 940.704962][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 940.705445][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 940.705493][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 940.755918][T16270] radio-si470x 7-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 940.755939][T16270] radio-si470x 7-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 940.787263][ T5618] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 940.789130][ T5618] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 940.813901][ T5618] usb 5-1: USB disconnect, device number 13 [ 940.956355][T16270] radio-si470x 7-1:0.0: software version 0, hardware version 0 [ 940.956375][T16270] radio-si470x 7-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 940.956395][T16270] radio-si470x 7-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 941.066264][T17846] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 941.163483][T16270] radio-si470x 7-1:0.0: submitting int urb failed (-90) [ 941.728008][T15707] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 942.376616][T17874] dlm: Using TCP for communications [ 942.378164][T17874] dlm: dlm user daemon not available [ 942.804274][T16270] radio-si470x 7-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 942.835855][T16270] usb 7-1: USB disconnect, device number 13 [ 943.611015][T17897] FAULT_INJECTION: forcing a failure. [ 943.611015][T17897] name failslab, interval 1, probability 0, space 0, times 0 [ 943.611046][T17897] CPU: 1 UID: 0 PID: 17897 Comm: syz.2.4024 Tainted: G L syzkaller #0 PREEMPT(full) [ 943.611076][T17897] Tainted: [L]=SOFTLOCKUP [ 943.611084][T17897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 943.611097][T17897] Call Trace: [ 943.611106][T17897] [ 943.611115][T17897] dump_stack_lvl+0xe8/0x150 [ 943.611148][T17897] should_fail_ex+0x3eb/0x540 [ 943.611173][T17897] should_failslab+0xa8/0x100 [ 943.611197][T17897] __kmalloc_cache_noprof+0x9e/0x600 [ 943.611227][T17897] ? do_raw_spin_lock+0x12b/0x2f0 [ 943.611251][T17897] ? wakeup_source_register+0x57/0x380 [ 943.611359][T17897] ? wakeup_source_register+0x57/0x380 [ 943.611386][T17897] wakeup_source_register+0x57/0x380 [ 943.611414][T17897] ep_insert+0xfaf/0x1af0 [ 943.611460][T17897] ? __pfx_ep_insert+0x10/0x10 [ 943.611498][T17897] ? bpf_lsm_capable+0x9/0x20 [ 943.611534][T17897] ? security_capable+0x7e/0x2c0 [ 943.611583][T17897] do_epoll_ctl_file+0x8c2/0xee0 [ 943.611654][T17897] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 943.611687][T17897] ? __fget_files+0x3a2/0x420 [ 943.611712][T17897] ? __fget_files+0x2a/0x420 [ 943.611745][T17897] __se_sys_epoll_ctl+0x162/0x230 [ 943.611776][T17897] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 943.611816][T17897] do_syscall_64+0x166/0x520 [ 943.611835][T17897] ? trace_irq_disable+0x3b/0x140 [ 943.611863][T17897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.611884][T17897] ? clear_bhb_loop+0x70/0xc0 [ 943.611909][T17897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.611929][T17897] RIP: 0033:0x7f85ebf9e159 [ 943.611949][T17897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.611968][T17897] RSP: 002b:00007f85ecd81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 943.611990][T17897] RAX: ffffffffffffffda RBX: 00007f85ec225fa0 RCX: 00007f85ebf9e159 [ 943.612009][T17897] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000006 [ 943.612021][T17897] RBP: 00007f85ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 943.612034][T17897] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000000 [ 943.612048][T17897] R13: 00007f85ec226038 R14: 00007f85ec225fa0 R15: 00007ffcff7ac0c8 [ 943.612080][T17897] [ 943.719195][ T5618] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 943.887376][ T5618] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 943.888450][ T5618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 943.888511][ T5618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.893582][ T5618] usb 5-1: config 0 descriptor?? [ 943.931321][ T5618] pwc: Askey VC010 type 2 USB webcam detected. [ 944.045597][T17904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 944.045907][T17904] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 944.048662][T17904] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 944.096843][T17906] FAULT_INJECTION: forcing a failure. [ 944.096843][T17906] name failslab, interval 1, probability 0, space 0, times 0 [ 944.096875][T17906] CPU: 1 UID: 0 PID: 17906 Comm: syz.2.4027 Tainted: G L syzkaller #0 PREEMPT(full) [ 944.096903][T17906] Tainted: [L]=SOFTLOCKUP [ 944.096911][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 944.096927][T17906] Call Trace: [ 944.096935][T17906] [ 944.096943][T17906] dump_stack_lvl+0xe8/0x150 [ 944.096977][T17906] should_fail_ex+0x3eb/0x540 [ 944.097005][T17906] should_failslab+0xa8/0x100 [ 944.097030][T17906] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 944.097062][T17906] ? request_key_auth_new+0x17f/0xa00 [ 944.097086][T17906] ? request_key_auth_new+0x17f/0xa00 [ 944.097111][T17906] ? request_key_auth_new+0xff/0xa00 [ 944.097138][T17906] kmemdup_noprof+0x2b/0x70 [ 944.097167][T17906] request_key_auth_new+0x17f/0xa00 [ 944.097195][T17906] ? __pfx_request_key_auth_new+0x10/0x10 [ 944.097237][T17906] request_key_and_link+0xe6b/0x1580 [ 944.097264][T17906] ? __pfx_request_key_and_link+0x10/0x10 [ 944.097293][T17906] ? __pfx_key_default_cmp+0x10/0x10 [ 944.097316][T17906] ? __pfx_keyring_search_iterator+0x10/0x10 [ 944.097343][T17906] ? down_read+0x2b9/0x320 [ 944.097365][T17906] ? _copy_from_user+0x94/0xb0 [ 944.097393][T17906] __se_sys_request_key+0x29a/0x350 [ 944.097419][T17906] ? __pfx___se_sys_request_key+0x10/0x10 [ 944.097459][T17906] do_syscall_64+0x166/0x520 [ 944.097477][T17906] ? trace_irq_disable+0x3b/0x140 [ 944.097504][T17906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.097525][T17906] ? clear_bhb_loop+0x70/0xc0 [ 944.097551][T17906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.097573][T17906] RIP: 0033:0x7f85ebf9e159 [ 944.097591][T17906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 944.097609][T17906] RSP: 002b:00007f85ecd81028 EFLAGS: 00000246 [ 944.097621][T17906] ORIG_RAX: 00000000000000f9 [ 944.097634][T17906] RAX: ffffffffffffffda RBX: 00007f85ec225fa0 RCX: 00007f85ebf9e159 [ 944.097649][T17906] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000200000000040 [ 944.097663][T17906] RBP: 00007f85ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 944.097674][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 944.097684][T17906] R13: 00007f85ec226038 R14: 00007f85ec225fa0 R15: 00007ffcff7ac0c8 [ 944.097711][T17906] [ 944.352148][ T5618] pwc: recv_control_msg error -32 req 02 val 2b00 [ 944.362906][ T5618] pwc: recv_control_msg error -32 req 02 val 2700 [ 944.373385][ T5618] pwc: recv_control_msg error -32 req 02 val 2c00 [ 944.383845][ T5618] pwc: recv_control_msg error -32 req 04 val 1000 [ 944.392753][ T5618] pwc: recv_control_msg error -32 req 04 val 1300 [ 944.402655][ T5618] pwc: recv_control_msg error -32 req 04 val 1400 [ 944.412038][ T5618] pwc: recv_control_msg error -32 req 02 val 2000 [ 944.422738][ T5618] pwc: recv_control_msg error -32 req 02 val 2100 [ 944.634367][ T5618] pwc: recv_control_msg error -71 req 02 val 2500 [ 944.642716][ T5618] pwc: recv_control_msg error -71 req 02 val 2400 [ 944.643598][ T5618] pwc: recv_control_msg error -71 req 02 val 2600 [ 944.644076][ T5618] pwc: recv_control_msg error -71 req 02 val 2900 [ 944.644571][ T5618] pwc: recv_control_msg error -71 req 02 val 2800 [ 944.645204][ T5618] pwc: recv_control_msg error -71 req 04 val 1100 [ 944.645716][ T5618] pwc: recv_control_msg error -71 req 04 val 1200 [ 944.689027][ T5618] pwc: Registered as video103. [ 944.695499][ T5618] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input94 [ 944.747325][T17919] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 944.774168][ T5618] usb 5-1: USB disconnect, device number 14 [ 945.458231][T16374] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 945.606470][T16374] usb 7-1: Using ep0 maxpacket: 32 [ 945.607811][T16374] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 945.616545][T16374] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 945.616568][T16374] usb 7-1: config 0 has no interface number 0 [ 945.640485][T16374] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.640505][T16374] usb 7-1: Product: syz [ 945.640520][T16374] usb 7-1: Manufacturer: syz [ 945.640534][T16374] usb 7-1: SerialNumber: syz [ 945.652793][T16374] usb 7-1: config 0 descriptor?? [ 945.826095][ C0] net_ratelimit: 115 callbacks suppressed [ 945.849678][T12089] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 946.005112][T12089] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 946.009293][T12089] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.034052][T12089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 946.034079][T12089] usb 6-1: Product: syz [ 946.034094][T12089] usb 6-1: Manufacturer: syz [ 946.034130][T12089] usb 6-1: SerialNumber: syz [ 946.094253][T16374] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 946.094268][T16374] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 946.216992][ T987] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 946.274973][T12089] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 946.376091][ T987] usb 5-1: Using ep0 maxpacket: 8 [ 946.381855][ T987] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 946.398294][ T987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.398314][ T987] usb 5-1: Product: syz [ 946.398328][ T987] usb 5-1: Manufacturer: syz [ 946.398343][ T987] usb 5-1: SerialNumber: syz [ 946.432236][ T987] usb 5-1: config 0 descriptor?? [ 946.448263][ T987] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 946.574557][T12089] usb 6-1: USB disconnect, device number 23 [ 946.603986][T12089] usblp0: removed [ 947.046728][T17948] futex_wake_op: syz.2.4042 tries to shift op by 144; fix this program [ 947.047044][T17948] futex_wake_op: syz.2.4042 tries to shift op by 144; fix this program [ 947.921299][T16374] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 947.921611][T16374] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 947.968036][T16374] usb 7-1: USB disconnect, device number 14 [ 948.600382][T17963] netlink: 'syz.5.4048': attribute type 4 has an invalid length. [ 948.620499][T17963] netlink: 'syz.5.4048': attribute type 4 has an invalid length. [ 948.666391][T12089] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 948.703057][ T987] gspca_sonixj: reg_w1 err -71 [ 948.703131][ T987] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 948.713553][ T987] usb 5-1: USB disconnect, device number 15 [ 948.817503][T12089] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 948.827925][T12089] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.827947][T12089] usb 3-1: config 0 has no interfaces? [ 948.827995][T12089] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.844779][T12089] usb 3-1: config 0 descriptor?? [ 949.055226][T17969] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4051'. [ 949.059642][T17969] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4051'. [ 949.064642][T17969] netlink: 'syz.5.4051': attribute type 11 has an invalid length. [ 949.298034][T17972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 949.533532][T17981] ci_hdrc pcspkr: platform data missing [ 950.393391][T18003] mmap: syz.6.4061 (18003) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 950.486930][ T5618] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 950.645699][ T5618] usb 6-1: Using ep0 maxpacket: 16 [ 950.649531][ T5618] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 950.652202][ T5618] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 950.652236][ T5618] usb 6-1: config 0 interface 0 has no altsetting 0 [ 950.681788][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.681809][ T5618] usb 6-1: Product: syz [ 950.681824][ T5618] usb 6-1: Manufacturer: syz [ 950.681838][ T5618] usb 6-1: SerialNumber: syz [ 950.712947][ T5618] usb 6-1: config 0 descriptor?? [ 950.870869][T18007] kvm_do_msr_access: 2494 callbacks suppressed [ 950.928807][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 950.958950][ T5618] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input95 [ 950.980157][ T5618] imon:send_packet: packet tx failed (-71) [ 950.995613][ T5618] imon 6-1:0.0: panel buttons/knobs setup failed [ 951.105790][ C0] net_ratelimit: 74 callbacks suppressed [ 951.132880][ T30] usb 3-1: USB disconnect, device number 111 [ 951.175798][ T5618] rc_core: IR keymap rc-imon-pad not found [ 951.175811][ T5618] Registered IR keymap rc-empty [ 951.175920][ T5618] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 951.175935][ T5618] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 951.176283][ T5618] imon:send_packet: packet tx failed (-71) [ 951.216260][ T5618] imon 6-1:0.0: remote input dev register failed [ 951.216501][ T5618] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 951.315616][ T5618] imon 6-1:0.0: unable to initialize intf0, err 0 [ 951.315636][ T5618] imon:imon_probe: failed to initialize context! [ 951.315655][ T5618] imon 6-1:0.0: unable to register, err -19 [ 951.341818][ T5618] usb 6-1: USB disconnect, device number 24 [ 951.343654][T18012] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 951.665636][ T5618] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 951.765429][T18025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4068'. [ 951.775109][T18025] FAULT_INJECTION: forcing a failure. [ 951.775109][T18025] name failslab, interval 1, probability 0, space 0, times 0 [ 951.775134][T18025] CPU: 1 UID: 0 PID: 18025 Comm: syz.2.4068 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.775163][T18025] Tainted: [L]=SOFTLOCKUP [ 951.775170][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.775184][T18025] Call Trace: [ 951.775192][T18025] [ 951.775201][T18025] dump_stack_lvl+0xe8/0x150 [ 951.775233][T18025] should_fail_ex+0x3eb/0x540 [ 951.775260][T18025] should_failslab+0xa8/0x100 [ 951.775285][T18025] __kmalloc_noprof+0xf9/0x710 [ 951.775312][T18025] ? trace_kmem_cache_alloc+0x29/0xe0 [ 951.775338][T18025] ? fib_insert_alias+0x300/0x10f0 [ 951.775435][T18025] ? tnode_new+0xc7/0x3b0 [ 951.775456][T18025] ? tnode_new+0xc7/0x3b0 [ 951.775483][T18025] tnode_new+0xc7/0x3b0 [ 951.775505][T18025] fib_insert_alias+0x9e0/0x10f0 [ 951.775531][T18025] fib_trie_unmerge+0x312/0xce0 [ 951.775560][T18025] fib_unmerge+0xc5/0x350 [ 951.775589][T18025] fib4_rule_configure+0x2c9/0x9d0 [ 951.775616][T18025] ? fib_nl2rule_locked+0x169/0x5f0 [ 951.775720][T18025] ? fib_nl2rule_locked+0x4b4/0x5f0 [ 951.775749][T18025] fib_newrule+0x61e/0xf20 [ 951.775778][T18025] ? __lock_acquire+0x747/0x2de0 [ 951.775809][T18025] ? __pfx_fib_newrule+0x10/0x10 [ 951.775868][T18025] ? __pfx_fib_nl_newrule+0x10/0x10 [ 951.775892][T18025] rtnetlink_rcv_msg+0x802/0xc00 [ 951.775925][T18025] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 951.775944][T18025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 951.775963][T18025] ? ref_tracker_free+0x689/0x830 [ 951.775991][T18025] ? __pfx_ref_tracker_free+0x10/0x10 [ 951.776015][T18025] ? __asan_memcpy+0x40/0x70 [ 951.776043][T18025] ? __skb_clone+0x5c/0x6c0 [ 951.776071][T18025] netlink_rcv_skb+0x226/0x4a0 [ 951.776097][T18025] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 951.776117][T18025] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 951.776153][T18025] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.776177][T18025] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.776207][T18025] netlink_unicast+0x7bd/0x940 [ 951.776240][T18025] netlink_sendmsg+0x7c3/0xae0 [ 951.776272][T18025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.776305][T18025] ? apparmor_socket_sendmsg+0x98/0x360 [ 951.776329][T18025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.776353][T18025] sock_sendmsg_nosec+0x13a/0x180 [ 951.776383][T18025] ____sys_sendmsg+0x54e/0x850 [ 951.776411][T18025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.776442][T18025] ? import_iovec+0x73/0xa0 [ 951.776471][T18025] ___sys_sendmsg+0x2a5/0x360 [ 951.776493][T18025] ? __lock_acquire+0x747/0x2de0 [ 951.776525][T18025] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.776551][T18025] ? futex_wake+0x51b/0x5f0 [ 951.776604][T18025] ? __fget_files+0x2a/0x420 [ 951.776628][T18025] ? __fget_files+0x3a2/0x420 [ 951.776670][T18025] __x64_sys_sendmsg+0x1b1/0x290 [ 951.776695][T18025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 951.776739][T18025] do_syscall_64+0x166/0x520 [ 951.776757][T18025] ? trace_irq_disable+0x3b/0x140 [ 951.776785][T18025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.776806][T18025] ? clear_bhb_loop+0x70/0xc0 [ 951.776831][T18025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.776852][T18025] RIP: 0033:0x7f85ebf9e159 [ 951.776869][T18025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.776886][T18025] RSP: 002b:00007f85ecd81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 951.776908][T18025] RAX: ffffffffffffffda RBX: 00007f85ec225fa0 RCX: 00007f85ebf9e159 [ 951.776923][T18025] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 951.776936][T18025] RBP: 00007f85ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 951.776949][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.776961][T18025] R13: 00007f85ec226038 R14: 00007f85ec225fa0 R15: 00007ffcff7ac0c8 [ 951.776994][T18025] [ 951.871689][ T5618] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 951.892161][ T5618] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 951.892190][ T5618] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 951.892217][ T5618] usb 6-1: config 0 interface 0 has no altsetting 0 [ 951.946504][ T5618] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.946523][ T5618] usb 6-1: Product: syz [ 951.946537][ T5618] usb 6-1: Manufacturer: syz [ 951.946551][ T5618] usb 6-1: SerialNumber: syz [ 952.238358][ T5618] usb 6-1: config 0 descriptor?? [ 952.239090][T18001] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 952.256342][T18029] FAULT_INJECTION: forcing a failure. [ 952.256342][T18029] name failslab, interval 1, probability 0, space 0, times 0 [ 952.256368][T18029] CPU: 1 UID: 0 PID: 18029 Comm: syz.2.4069 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.256394][T18029] Tainted: [L]=SOFTLOCKUP [ 952.256402][T18029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.256414][T18029] Call Trace: [ 952.256423][T18029] [ 952.256431][T18029] dump_stack_lvl+0xe8/0x150 [ 952.256466][T18029] should_fail_ex+0x3eb/0x540 [ 952.256493][T18029] should_failslab+0xa8/0x100 [ 952.256516][T18029] __kmalloc_cache_noprof+0x9e/0x600 [ 952.256545][T18029] ? __kmalloc_cache_noprof+0x148/0x600 [ 952.256571][T18029] ? sctp_auth_init+0x1f3/0x400 [ 952.256597][T18029] ? sctp_auth_init+0x1f3/0x400 [ 952.256627][T18029] sctp_auth_init+0x1f3/0x400 [ 952.256655][T18029] sctp_setsockopt_auth_supported+0x302/0x530 [ 952.256684][T18029] sctp_setsockopt+0x599/0x12c0 [ 952.256714][T18029] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 952.256744][T18029] do_sock_setsockopt+0x17c/0x1b0 [ 952.256769][T18029] __x64_sys_setsockopt+0x13d/0x1b0 [ 952.256794][T18029] do_syscall_64+0x166/0x520 [ 952.256812][T18029] ? trace_irq_disable+0x3b/0x140 [ 952.256839][T18029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.256859][T18029] ? clear_bhb_loop+0x70/0xc0 [ 952.256883][T18029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.256903][T18029] RIP: 0033:0x7f85ebf9e159 [ 952.256921][T18029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.256939][T18029] RSP: 002b:00007f85ecd81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 952.256960][T18029] RAX: ffffffffffffffda RBX: 00007f85ec225fa0 RCX: 00007f85ebf9e159 [ 952.256974][T18029] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 952.256986][T18029] RBP: 00007f85ec03506b R08: 0000000000000008 R09: 0000000000000000 [ 952.256999][T18029] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 952.257011][T18029] R13: 00007f85ec226038 R14: 00007f85ec225fa0 R15: 00007ffcff7ac0c8 [ 952.257041][T18029] [ 952.362381][T18031] FAULT_INJECTION: forcing a failure. [ 952.362381][T18031] name failslab, interval 1, probability 0, space 0, times 0 [ 952.362411][T18031] CPU: 1 UID: 0 PID: 18031 Comm: syz.4.4070 Tainted: G L syzkaller #0 PREEMPT(full) [ 952.362438][T18031] Tainted: [L]=SOFTLOCKUP [ 952.362446][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 952.362459][T18031] Call Trace: [ 952.362469][T18031] [ 952.362478][T18031] dump_stack_lvl+0xe8/0x150 [ 952.362510][T18031] should_fail_ex+0x3eb/0x540 [ 952.362539][T18031] should_failslab+0xa8/0x100 [ 952.362564][T18031] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 952.362593][T18031] ? __d_alloc+0x37/0x6f0 [ 952.362618][T18031] ? __d_alloc+0x37/0x6f0 [ 952.362650][T18031] __d_alloc+0x37/0x6f0 [ 952.362676][T18031] ? hashlen_string+0x54/0x110 [ 952.362702][T18031] d_alloc_name+0xba/0x270 [ 952.362732][T18031] ? __pfx_d_alloc_name+0x10/0x10 [ 952.362768][T18031] proc_setup_self+0x48/0x1c0 [ 952.362799][T18031] proc_fill_super+0x578/0x760 [ 952.362820][T18031] ? __pfx_proc_fill_super+0x10/0x10 [ 952.362842][T18031] get_tree_nodev+0xbb/0x150 [ 952.362872][T18031] vfs_get_tree+0x92/0x2a0 [ 952.362901][T18031] do_new_mount+0x319/0xdc0 [ 952.362930][T18031] ? __pfx_do_new_mount+0x10/0x10 [ 952.362956][T18031] ? ns_capable+0x84/0xe0 [ 952.362981][T18031] ? path_mount+0x647/0x1050 [ 952.363007][T18031] ? user_path_at+0xd4/0x160 [ 952.363036][T18031] __se_sys_mount+0x31d/0x420 [ 952.363065][T18031] ? __pfx___se_sys_mount+0x10/0x10 [ 952.363101][T18031] ? __x64_sys_mount+0x20/0xc0 [ 952.363128][T18031] do_syscall_64+0x166/0x520 [ 952.363148][T18031] ? trace_irq_disable+0x3b/0x140 [ 952.363175][T18031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.363194][T18031] ? clear_bhb_loop+0x70/0xc0 [ 952.363218][T18031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.363238][T18031] RIP: 0033:0x7fb528f9e159 [ 952.363256][T18031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.363273][T18031] RSP: 002b:00007fb529d81028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 952.363295][T18031] RAX: ffffffffffffffda RBX: 00007fb529225fa0 RCX: 00007fb528f9e159 [ 952.363309][T18031] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000000000000000 [ 952.363323][T18031] RBP: 00007fb52903506b R08: 0000000000000000 R09: 0000000000000000 [ 952.363336][T18031] R10: 0000000002000008 R11: 0000000000000246 R12: 0000000000000000 [ 952.363349][T18031] R13: 00007fb529226038 R14: 00007fb529225fa0 R15: 00007ffe41af0698 [ 952.363378][T18031] [ 952.363405][T18031] proc_fill_super: can't allocate /proc/self [ 952.543870][ C1] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 952.586085][ T5618] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input97 [ 952.875526][T17439] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 952.908189][ T5618] rc_core: IR keymap rc-imon-pad not found [ 952.908202][ T5618] Registered IR keymap rc-empty [ 952.908315][ T5618] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 952.908330][ T5618] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 952.951235][ T5618] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 952.963162][ T5618] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input98 [ 953.024342][ T5618] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:25> initialized [ 953.045961][T17439] usb 3-1: Using ep0 maxpacket: 32 [ 953.048640][T17439] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 953.052267][T17439] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 953.052290][T17439] usb 3-1: config 0 has no interface number 0 [ 953.052332][T17439] usb 3-1: config 0 interface 12 has no altsetting 0 [ 953.062748][T17439] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.062767][T17439] usb 3-1: Product: syz [ 953.062781][T17439] usb 3-1: Manufacturer: syz [ 953.062794][T17439] usb 3-1: SerialNumber: syz [ 953.070928][T17439] usb 3-1: config 0 descriptor?? [ 953.263734][T18001] imon:display_open: display port is already open [ 953.288044][ T5618] usb 6-1: USB disconnect, device number 25 [ 953.515823][T17999] ================================================================== [ 953.515835][T17999] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 953.515862][T17999] Read of size 8 at addr ffff8880252a80e0 by task syz.5.4060/17999 [ 953.515956][T17999] [ 953.515970][T ** replaying previous printk message ** [ 953.515970][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.5.4060 Tainted: G L syzkaller #0 PREEMPT(full) [ 953.515994][T17999] Tainted: [L]=SOFTLOCKUP [ 953.516001][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 953.516013][T17999] Call Trace: [ 953.516020][T17999] [ 953.516028][T17999] dump_stack_lvl+0xe8/0x150 [ 953.516054][T17999] print_address_description+0x55/0x1e0 [ 953.516079][T17999] ? dev_driver_string+0x35/0xd0 [ 953.516096][T17999] print_report+0x58/0x70 [ 953.516126][T17999] kasan_report+0x117/0x150 [ 953.516148][T17999] ? dev_driver_string+0x35/0xd0 [ 953.516169][T17999] dev_driver_string+0x35/0xd0 [ 953.516187][T17999] __dynamic_dev_dbg+0x1ae/0x2e0 [ 953.516209][T17999] ? __mutex_lock+0x305/0x15a0 [ 953.516228][T17999] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 953.516250][T17999] ? __pfx_ima_file_free+0x10/0x10 [ 953.516340][T17999] ? __asan_memset+0x22/0x50 [ 953.516365][T17999] ? __fsnotify_parent+0x267/0x620 [ 953.516395][T17999] ? display_close+0x4b/0x240 [ 953.516482][T17999] display_close+0x1f9/0x240 [ 953.516502][T17999] ? __pfx_display_close+0x10/0x10 [ 953.516521][T17999] __fput+0x413/0xa50 [ 953.516545][T17999] task_work_run+0x1d9/0x260 [ 953.516576][T17999] ? __pfx_task_work_run+0x10/0x10 [ 953.516607][T17999] exit_to_user_mode_loop+0x204/0x770 [ 953.516634][T17999] ? rcu_is_watching+0x16/0xb0 [ 953.516655][T17999] do_syscall_64+0x328/0x520 [ 953.516673][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.516694][T17999] ? clear_bhb_loop+0x70/0xc0 [ 953.516716][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.516733][T17999] RIP: 0033:0x7f37bab9e159 [ 953.516751][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 953.516770][T17999] RSP: 002b:00007ffd2a4472a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 953.516792][T17999] RAX: 0000000000000000 RBX: 00007ffd2a447390 RCX: 00007f37bab9e159 [ 953.516807][T17999] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 953.516820][T17999] RBP: 00000000000e7fe7 R08: 0000000000000001 R09: 0000000000000000 [ 953.516833][T17999] R10: 0000001b2ce20000 R11: 0000000000000246 R12: 00007ffd2a4473d0 [ 953.516847][T17999] R13: 00007f37bae25fac R14: 00000000000e8d2e R15: 00007f37bae25fa0 [ 953.516869][T17999] [ 953.516878][T17999] [ 953.516890][T17999] Allocated by task 5618: [ 953.516900][T17999] kasan_save_track+0x3e/0x80 [ 953.516927][T17999] __kasan_kmalloc+0x93/0xb0 [ 953.516944][T17999] __kmalloc_cache_noprof+0x31c/0x600 [ 953.516974][T17999] usb_set_configuration+0x3cc/0x2180 [ 953.517047][T17999] usb_generic_driver_probe+0x8d/0x150 [ 953.517134][T17999] usb_probe_device+0x1c3/0x3b0 [ 953.517151][T17999] really_probe+0x254/0xae0 [ 953.517203][T17999] __driver_probe_device+0x1e8/0x360 [ 953.517230][T17999] driver_probe_device+0x4f/0x240 [ 953.517253][T17999] __device_attach_driver+0x270/0x410 [ 953.517276][T17999] bus_for_each_drv+0x258/0x2f0 [ 953.517293][T17999] __device_attach+0x2c4/0x450 [ 953.517312][T17999] device_initial_probe+0xa1/0xd0 [ 953.517331][T17999] bus_probe_device+0x12a/0x220 [ 953.517346][T17999] device_add+0x7d7/0xb80 [ 953.517361][T17999] usb_new_device+0x9aa/0x1690 [ 953.517417][T17999] hub_event+0x28e8/0x4d30 [ 953.517433][T17999] process_scheduled_works+0xc3d/0x1630 [ 953.517453][T17999] worker_thread+0xa47/0xfb0 [ 953.517473][T17999] kthread+0x38b/0x480 [ 953.517501][T17999] ret_from_fork+0x514/0xb70 [ 953.517524][T17999] ret_from_fork_asm+0x1a/0x30 [ 953.517548][T17999] [ 953.517553][T17999] Freed by task 5618: [ 953.517562][T17999] kasan_save_track+0x3e/0x80 [ 953.517591][T17999] kasan_save_free_info+0x40/0x50 [ 953.517614][T17999] __kasan_slab_free+0x5c/0x80 [ 953.517630][T17999] kfree+0x1c5/0x650 [ 953.517651][T17999] device_release+0xc4/0x1f0 [ 953.517673][T17999] kobject_put+0x222/0x550 [ 953.517692][T17999] usb_disable_device+0x611/0x8d0 [ 953.517718][T17999] usb_disconnect+0x346/0x9a0 [ 953.517741][T17999] hub_event+0x1bbb/0x4d30 [ 953.517756][T17999] process_scheduled_works+0xc3d/0x1630 [ 953.517776][T17999] worker_thread+0xa47/0xfb0 [ 953.517794][T17999] kthread+0x38b/0x480 [ 953.517816][T17999] ret_from_fork+0x514/0xb70 [ 953.517842][T17999] ret_from_fork_asm+0x1a/0x30 [ 953.517865][T17999] [ 953.517871][T17999] The buggy address belongs to the object at ffff8880252a8000 [ 953.517871][T17999] which belongs to the cache kmalloc-2k of size 2048 [ 953.517888][T17999] The buggy address is located 224 bytes inside of [ 953.517888][T17999] freed 2048-byte region [ffff8880252a8000, ffff8880252a8800) [ 953.517909][T17999] [ 953.517914][T17999] The buggy address belongs to the physical page: [ 953.517931][T17999] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x252a8 [ 953.517950][T17999] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 953.517967][T17999] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 953.517986][T17999] page_type: f5(slab) [ 953.518005][T17999] raw: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 953.518023][T17999] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 953.518041][T17999] head: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 953.518057][T17999] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 953.518075][T17999] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 953.518096][T17999] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 953.518106][T17999] page dumped because: kasan: bad access detected [ 953.518130][T17999] page_owner tracks the page as allocated [ 953.518137][T17999] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10530, tgid 10530 (syz-executor), ts 324668508941 [ 953.518171][T17999] post_alloc_hook+0x1f9/0x250 [ 953.518193][T17999] get_page_from_freelist+0x2209/0x2280 [ 953.518220][T17999] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 953.518247][T17999] allocate_slab+0x7d/0x620 [ 953.518267][T17999] refill_objects+0x2d5/0x350 [ 953.518286][T17999] __pcs_replace_empty_main+0x2c8/0x6c0 [ 953.518304][T17999] __kmalloc_cache_noprof+0x396/0x600 [ 953.518349][T17999] rtnl_newlink+0x143/0x1c30 [ 953.518367][T17999] rtnetlink_rcv_msg+0x802/0xc00 [ 953.518384][T17999] netlink_rcv_skb+0x226/0x4a0 [ 953.518405][T17999] netlink_unicast+0x7bd/0x940 [ 953.518422][T17999] netlink_sendmsg+0x7c3/0xae0 [ 953.518441][T17999] sock_sendmsg_nosec+0x13a/0x180 [ 953.518462][T17999] __sys_sendto+0x408/0x5a0 [ 953.518476][T17999] __x64_sys_sendto+0xde/0x100 [ 953.518491][T17999] do_syscall_64+0x166/0x520 [ 953.518508][T17999] page last free pid 5608 tgid 5608 ts 317151921375 stack trace: [ 953.518522][T17999] __free_frozen_pages+0xc93/0xd90 [ 953.518546][T17999] __slab_free+0x274/0x2c0 [ 953.518570][T17999] qlist_free_all+0x99/0x100 [ 953.518594][T17999] kasan_quarantine_reduce+0x148/0x160 [ 953.518619][T17999] __kasan_slab_alloc+0x22/0x80 [ 953.518635][T17999] __kmalloc_node_noprof+0x44b/0x720 [ 953.518660][T17999] __vmalloc_node_range_noprof+0x5a0/0x1690 [ 953.518683][T17999] vzalloc_noprof+0xb2/0xe0 [ 953.518704][T17999] alloc_counters+0x63/0x5d0 [ 953.518802][T17999] do_ip6t_get_ctl+0xb17/0x12f0 [ 953.518826][T17999] nf_getsockopt+0x26e/0x290 [ 953.518843][T17999] ipv6_getsockopt+0x213/0x2c0 [ 953.518863][T17999] do_sock_getsockopt+0x51d/0x7e0 [ 953.518880][T17999] __x64_sys_getsockopt+0x1a4/0x240 [ 953.518898][T17999] do_syscall_64+0x166/0x520 [ 953.518914][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 953.518933][T17999] [ 953.518938][T17999] Memory state around the buggy address: [ 953.518949][T17999] ffff8880252a7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 953.518963][T17999] ffff8880252a8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 953.519012][T17999] >ffff8880252a8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 953.519023][T17999] ^ [ 953.519034][T17999] ffff8880252a8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 953.519048][T17999] ffff8880252a8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 953.519058][T17999] ================================================================== [ 953.532082][ T5618] kernfs devpath: removing [ 953.534629][ T5618] kernfs version: removing [ 953.534717][ T5618] kernfs maxchild: removing [ 953.534766][ T5618] kernfs quirks: removing [ 953.534815][ T5618] kernfs avoid_reset_quirk: removing [ 953.534884][ T5618] kernfs authorized: removing [ 953.534932][ T5618] kernfs remove: removing [ 953.534997][ T5618] kernfs ltm_capable: removing [ 953.535045][ T5618] kernfs devspec: removing [ 953.535145][ T5618] kernfs manufacturer: removing [ 953.535179][ T5618] kernfs product: removing [ 953.535213][ T5618] kernfs serial: removing [ 953.535245][ T5618] kernfs descriptors: removing [ 953.535314][ T5618] kernfs subsystem: removing [ 953.535348][ T5618] kernfs 6-1: removing [ 953.535439][ T5618] bus: 'usb': remove device 6-1 [ 953.535467][ T5618] kernfs 6-1: removing [ 953.535518][ T5618] kernfs driver: removing [ 953.535588][ T5618] kobject: '6-1' (ffff8880794620b0): kobject_uevent_env [ 953.535631][ T5618] kobject: '6-1' (ffff8880794620b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.5/usb6/6-1' [ 953.538162][ T5618] PM: Removing info for usb:6-1 [ 953.538222][ T5618] kobject: '6-1' (ffff8880794620b0): kobject_uevent_env [ 953.538263][ T5618] kobject: '6-1' (ffff8880794620b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.5/usb6/6-1' [ 953.546956][ T5618] kernfs 6-1: removing [ 953.546997][ T5618] kobject: '6-1' (ffff8880794620b0): kobject_cleanup, parent 0000000000000000 [ 953.547018][ T5618] kobject: '6-1' (ffff8880794620b0): calling ktype release [ 953.547169][ T5618] kobject: '6-1': free name [ 953.547340][ C1] kcov: kcov_remote_start: handle = 100000000000006, context: softirq [ 953.547360][ C1] kcov: kcov_start: t = ffff88801e2bddc0, size = 262144, area = ffffc900020c1000 [ 953.547402][ C1] kcov: kcov_move_area: ffffc9001ecea000 1048576 <= ffffc900020c1000 48 [ 953.553962][T17999] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 954.531009][T17999] CPU: 1 UID: 0 PID: 17999 Comm: syz.5.4060 Tainted: G L syzkaller #0 PREEMPT(full) [ 954.541962][T17999] Tainted: [L]=SOFTLOCKUP [ 954.546290][T17999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.556346][T17999] Call Trace: [ 954.559638][T17999] [ 954.562578][T17999] vpanic+0x56d/0xa70 [ 954.566586][T17999] ? __pfx_vpanic+0x10/0x10 [ 954.571122][T17999] panic+0xc5/0xd0 [ 954.574854][T17999] ? __pfx_panic+0x10/0x10 [ 954.579287][T17999] ? preempt_schedule_thunk+0x16/0x40 [ 954.584681][T17999] ? dev_driver_string+0x35/0xd0 [ 954.589637][T17999] ? preempt_schedule_thunk+0x16/0x40 [ 954.595039][T17999] ? dev_driver_string+0x35/0xd0 [ 954.599990][T17999] check_panic_on_warn+0x89/0xb0 [ 954.604939][T17999] ? dev_driver_string+0x35/0xd0 [ 954.609887][T17999] end_report+0x73/0x170 [ 954.614145][T17999] ? dev_driver_string+0x35/0xd0 [ 954.619090][T17999] kasan_report+0x128/0x150 [ 954.623608][T17999] ? dev_driver_string+0x35/0xd0 [ 954.628557][T17999] dev_driver_string+0x35/0xd0 [ 954.633327][T17999] __dynamic_dev_dbg+0x1ae/0x2e0 [ 954.638268][T17999] ? __mutex_lock+0x305/0x15a0 [ 954.643035][T17999] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 954.648517][T17999] ? __pfx_ima_file_free+0x10/0x10 [ 954.653643][T17999] ? __asan_memset+0x22/0x50 [ 954.658243][T17999] ? __fsnotify_parent+0x267/0x620 [ 954.663377][T17999] ? display_close+0x4b/0x240 [ 954.668088][T17999] display_close+0x1f9/0x240 [ 954.672701][T17999] ? __pfx_display_close+0x10/0x10 [ 954.677824][T17999] __fput+0x413/0xa50 [ 954.681815][T17999] task_work_run+0x1d9/0x260 [ 954.686425][T17999] ? __pfx_task_work_run+0x10/0x10 [ 954.691570][T17999] exit_to_user_mode_loop+0x204/0x770 [ 954.696963][T17999] ? rcu_is_watching+0x16/0xb0 [ 954.701744][T17999] do_syscall_64+0x328/0x520 [ 954.706348][T17999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.712474][T17999] ? clear_bhb_loop+0x70/0xc0 [ 954.717186][T17999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.723079][T17999] RIP: 0033:0x7f37bab9e159 [ 954.727494][T17999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.747118][T17999] RSP: 002b:00007ffd2a4472a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 954.755546][T17999] RAX: 0000000000000000 RBX: 00007ffd2a447390 RCX: 00007f37bab9e159 [ 954.763521][T17999] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 954.771528][T17999] RBP: 00000000000e7fe7 R08: 0000000000000001 R09: 0000000000000000 [ 954.779508][T17999] R10: 0000001b2ce20000 R11: 0000000000000246 R12: 00007ffd2a4473d0 [ 954.787497][T17999] R13: 00007f37bae25fac R14: 00000000000e8d2e R15: 00007f37bae25fa0 [ 954.795495][T17999] [ 954.798775][T17999] Kernel Offset: disabled [ 954.803094][T17999] Rebooting in 86400 seconds..