last executing test programs: 10m4.513244142s ago: executing program 2 (id=267): bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x1}, {0x0, 0x3, 0x8}, {0x0, 0x4, 0x10004}]}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c000000000000000000000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb0186160000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 10m4.268423837s ago: executing program 2 (id=269): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$rfkill(0xffffffffffffffff, &(0x7f0000000440), 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9273f6a588e06d9965d342faebf43144af3ca", 0x13, 0x4044880, 0x0, 0x0) 10m1.545292934s ago: executing program 2 (id=275): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 10m1.325356059s ago: executing program 2 (id=278): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) migrate_pages(0x0, 0x4, 0x0, 0x0) 9m58.413203841s ago: executing program 2 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r0, r0, 0x2f}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9fe03076844268cb89e14f088a847e0ffff200000000021000aac141419e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 9m57.424909225s ago: executing program 2 (id=298): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000500)={0x0, 0x57b0, 0x80, 0x2, 0x8040057}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x1591, 0xf288, 0x49, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@any, 0x2}, 0x400000000000000, 0xfaee, 0xffffffff, 0x40}) unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0xc, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45", @broadcast, "3d711ad34e"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg$sock(r5, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) 9m39.191627081s ago: executing program 32 (id=298): r0 = syz_io_uring_setup(0xeff, &(0x7f0000000500)={0x0, 0x57b0, 0x80, 0x2, 0x8040057}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x1591, 0xf288, 0x49, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@any, 0x2}, 0x400000000000000, 0xfaee, 0xffffffff, 0x40}) unshare(0x60000000) socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x37, &(0x7f0000000080)={@multicast, @local, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@arp={0x806, @generic={0x10f, 0x18, 0x6, 0xc, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, "d9fc8df4fbdd96230df08d45", @broadcast, "3d711ad34e"}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r7, 0xc0d05604, 0x0) socket(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg$sock(r5, &(0x7f00000029c0)=[{{&(0x7f00000006c0)=@nl=@unspec, 0x80, 0x0}}], 0x1, 0x0) 9.972397636s ago: executing program 3 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004) 9.741133092s ago: executing program 3 (id=1903): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 8.58807356s ago: executing program 3 (id=1907): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x2}, 0x50) 6.739760105s ago: executing program 3 (id=1913): mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2\x81\x88\xfe6\x8a\xe5\xd3\xf6O\x1bD\x99Y|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\x06\x00\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\xe1\xc8Q\t\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c', 0x8d3e942cc4010991, 0x14b, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000"], 0x50) ioctl$KVM_NMI(r2, 0xae9a) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0xfffffffffffffffe, 0x4007, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.228849207s ago: executing program 3 (id=1915): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000340)="ab") 6.227292447s ago: executing program 1 (id=1916): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 5.953237034s ago: executing program 4 (id=1917): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 4.261468006s ago: executing program 4 (id=1918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 4.171400428s ago: executing program 1 (id=1919): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)='oom_score', 0x9) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x6}}, 0x30) 4.057526151s ago: executing program 1 (id=1920): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) pipe(0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000480)='dummy_udc.', 0xa) 3.939553383s ago: executing program 1 (id=1921): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_route(0x10, 0x3, 0x0) close(r0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x1, 0x4, 0x32, 0x1, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x2}, 0x50) 3.889294845s ago: executing program 0 (id=1922): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) read(r2, &(0x7f0000000300)=""/172, 0xdc) unlinkat(r0, &(0x7f0000000080)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800018, 0x31, r2, 0xd0fb4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) write(r4, &(0x7f0000000640)='usbip-vudc.0', 0xc) 3.758661198s ago: executing program 0 (id=1923): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_dev$mtd(&(0x7f0000000000), 0x492, 0x20800) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0x0, 0x0) writev(r6, 0x0, 0x0) r7 = dup(r5) syz_ublk_setup_queues(r7, r4, &(0x7f0000000180)={0x0, 0x1, 0x700, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x20000, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x351}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x66c7e65cbf3e4906, 0x2, 0x250, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 3.187757452s ago: executing program 4 (id=1924): r0 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x42e60) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0xfffffffffffffbf7, 0x1000000001, 0x2, 0x0, 0x4, 0x7ffe, "7fa0ff00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x3, 0xf9}) 3.057166175s ago: executing program 3 (id=1925): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r3 = fsopen(&(0x7f0000000400)='pvfs2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0x100, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xfff6}, {0x0, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000140)={0xe, 0x9, 0x101, 0x101}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 2.837072291s ago: executing program 4 (id=1926): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000012c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r4, 0x40045612, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) 2.564274597s ago: executing program 0 (id=1927): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x800) fanotify_init(0x4, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000140)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0xfffffffffffffffc, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000009, 0x400}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x2, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9b, 0x101, 0x401, 0x9, 0x8, 0x4, 0x8, 0xa, 0x9, 0xffd, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x4]}) 1.781710056s ago: executing program 4 (id=1928): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)='oom_score', 0x9) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x0, 0x9, 0x6}}, 0x30) 1.62333838s ago: executing program 1 (id=1929): setns(0xc9, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$comedi(0xffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x101002, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000207, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000200f97a640d35a7386700", "28094cf00000000000004ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7f, 0x9]}}) 673.383774ms ago: executing program 4 (id=1930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source\x00', &(0x7f00000000c0)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 621.408215ms ago: executing program 0 (id=1931): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='44100,48000,88200,96000,176400,192000,352800,3', 0x2e) syz_emit_ethernet(0x0, 0x0, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3}) read(r2, &(0x7f0000000300)=""/172, 0xdc) unlinkat(r0, &(0x7f0000000080)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00', 0x200) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {0x0, 0x5}, {}, {}, {0x0, 0x7fff}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1800018, 0x31, r2, 0xd0fb4000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r0) write(r4, &(0x7f0000000640)='usbip-vudc.0', 0xc) 417.607149ms ago: executing program 1 (id=1932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000440)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f00000049c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 268.648904ms ago: executing program 0 (id=1933): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x48004) 0s ago: executing program 0 (id=1934): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='/', 0x1) kernel console output (not intermixed with test programs): k_lvl+0x18c/0x250 [ 542.800706][ T9862] ? show_regs_print_info+0x20/0x20 [ 542.805906][ T9862] ? load_image+0x420/0x420 [ 542.810409][ T9862] ? __might_sleep+0xe0/0xe0 [ 542.815005][ T9862] ? __lock_acquire+0x7d80/0x7d80 [ 542.820033][ T9862] should_fail_ex+0x394/0x4c0 [ 542.824733][ T9862] should_failslab+0x9/0x20 [ 542.829246][ T9862] slab_pre_alloc_hook+0x59/0x300 [ 542.834302][ T9862] ? resv_map_alloc+0x51/0x2c0 [ 542.839068][ T9862] __kmem_cache_alloc_node+0x53/0x250 [ 542.844463][ T9862] ? resv_map_alloc+0x51/0x2c0 [ 542.849240][ T9862] kmalloc_trace+0x2a/0xe0 [ 542.853746][ T9862] resv_map_alloc+0x51/0x2c0 [ 542.858379][ T9862] hugetlbfs_get_inode+0x64/0x500 [ 542.863437][ T9862] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 542.869449][ T9862] hugetlb_file_setup+0x215/0x610 [ 542.874483][ T9862] ksys_mmap_pgoff+0x1e6/0x720 [ 542.879256][ T9862] do_syscall_64+0x55/0xb0 [ 542.883697][ T9862] ? clear_bhb_loop+0x40/0x90 [ 542.888402][ T9862] ? clear_bhb_loop+0x40/0x90 [ 542.893097][ T9862] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.898993][ T9862] RIP: 0033:0x7fa360b9e159 [ 542.903409][ T9862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.923038][ T9862] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 542.931493][ T9862] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 542.939500][ T9862] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 542.947488][ T9862] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 542.955516][ T9862] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 542.963516][ T9862] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 542.971541][ T9862] [ 543.194947][ T6119] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 543.229299][ T6119] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 543.259406][ T6119] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 543.273357][ T6119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.289490][ T6119] usb 2-1: Product: syz [ 543.293702][ T6119] usb 2-1: Manufacturer: syz [ 543.298730][ T6119] usb 2-1: SerialNumber: syz [ 543.485325][ T6134] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 543.530000][ T6119] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 543.708031][ T6134] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 543.739936][ T6134] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 543.765586][ T6134] usb 4-1: Product: syz [ 543.770025][ T6134] usb 4-1: Manufacturer: syz [ 543.777908][ T6134] usb 4-1: SerialNumber: syz [ 543.790429][ T6134] usb 4-1: config 0 descriptor?? [ 543.810814][ T6134] ch341 4-1:0.0: ch341-uart converter detected [ 543.985855][ T6131] usb 2-1: USB disconnect, device number 30 [ 543.996034][ T6131] usblp0: removed [ 544.085729][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 544.096323][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 544.106417][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 544.116289][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 544.126027][ T9868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 544.155870][ T9868] 9pnet_virtio: no channels available for device syz [ 544.185952][ T6134] usb 4-1: failed to receive control message: -71 [ 544.192430][ T6134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 544.220197][ T6134] usb 4-1: USB disconnect, device number 35 [ 544.268609][ T6134] ch341 4-1:0.0: device disconnected [ 545.825116][ T9889] FAULT_INJECTION: forcing a failure. [ 545.825116][ T9889] name failslab, interval 1, probability 0, space 0, times 0 [ 545.855539][ T9889] CPU: 0 PID: 9889 Comm: syz.1.1213 Not tainted syzkaller #0 [ 545.862999][ T9889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.873099][ T9889] Call Trace: [ 545.876421][ T9889] [ 545.879385][ T9889] dump_stack_lvl+0x18c/0x250 [ 545.884124][ T9889] ? show_regs_print_info+0x20/0x20 [ 545.888219][ T9890] overlayfs: missing 'lowerdir' [ 545.889350][ T9889] ? load_image+0x420/0x420 [ 545.889381][ T9889] ? __lock_acquire+0x7d80/0x7d80 [ 545.904012][ T9889] should_fail_ex+0x394/0x4c0 [ 545.908731][ T9889] should_failslab+0x9/0x20 [ 545.913242][ T9889] slab_pre_alloc_hook+0x59/0x300 [ 545.918292][ T9889] ? lockdep_softirqs_off+0x440/0x440 [ 545.923737][ T9889] kmem_cache_alloc_lru+0x4d/0x2b0 [ 545.928903][ T9889] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 545.934313][ T9889] hugetlbfs_alloc_inode+0xf3/0x140 [ 545.939551][ T9889] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 545.944952][ T9889] new_inode_pseudo+0x63/0x1d0 [ 545.949752][ T9889] new_inode+0x22/0x1d0 [ 545.953920][ T9889] ? resv_map_alloc+0x1c4/0x2c0 [ 545.958797][ T9889] hugetlbfs_get_inode+0x78/0x500 [ 545.963841][ T9889] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 545.969841][ T9889] hugetlb_file_setup+0x215/0x610 [ 545.974888][ T9889] ksys_mmap_pgoff+0x1e6/0x720 [ 545.979690][ T9889] do_syscall_64+0x55/0xb0 [ 545.984138][ T9889] ? clear_bhb_loop+0x40/0x90 [ 545.988834][ T9889] ? clear_bhb_loop+0x40/0x90 [ 545.993530][ T9889] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 545.999437][ T9889] RIP: 0033:0x7fe05ff9e159 [ 546.003868][ T9889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.023494][ T9889] RSP: 002b:00007fe060f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 546.031924][ T9889] RAX: ffffffffffffffda RBX: 00007fe060225fa0 RCX: 00007fe05ff9e159 [ 546.039907][ T9889] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 546.047893][ T9889] RBP: 00007fe060035024 R08: ffffffffffffffff R09: 0000000000000000 [ 546.055875][ T9889] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 546.063874][ T9889] R13: 00007fe060226038 R14: 00007fe060225fa0 R15: 00007ffd11d79308 [ 546.071876][ T9889] [ 546.235410][ T6119] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 546.349437][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1217'. [ 546.457886][ T9904] syz.0.1217: attempt to access beyond end of device [ 546.457886][ T9904] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 546.471474][ T9904] efs: cannot read volume header [ 546.478387][ T6119] usb 5-1: Using ep0 maxpacket: 32 [ 546.495772][ T6126] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 546.522613][ T6119] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 546.595898][ T6119] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 546.623848][ T6119] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 546.679591][ T6119] usb 5-1: Product: syz [ 546.696927][ T6119] usb 5-1: Manufacturer: syz [ 546.708087][ T6119] usb 5-1: SerialNumber: syz [ 546.714730][ T6123] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 546.766417][ T6126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 546.778812][ T6126] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 546.828404][ T6119] usb 5-1: config 0 descriptor?? [ 546.863284][ T9892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.893011][ T6126] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 546.949794][ T6123] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 546.989588][ T6126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.020296][ T6123] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 547.071957][ T6126] usb 2-1: Product: syz [ 547.082072][ T6123] usb 4-1: Product: syz [ 547.088297][ T6126] usb 2-1: Manufacturer: syz [ 547.092949][ T6126] usb 2-1: SerialNumber: syz [ 547.103354][ T6123] usb 4-1: Manufacturer: syz [ 547.114653][ T6123] usb 4-1: SerialNumber: syz [ 547.166238][ T6123] usb 4-1: config 0 descriptor?? [ 547.195633][ T6123] ch341 4-1:0.0: ch341-uart converter detected [ 547.402845][ T6126] usblp 2-1:1.0: usblp1: USB Bidirectional printer dev 31 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 548.267443][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.277435][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.286578][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.295901][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.305460][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1218'. [ 548.317611][ T6123] usb 4-1: failed to receive control message: -110 [ 548.335391][ T6123] ch341-uart: probe of ttyUSB0 failed with error -110 [ 548.342768][ T9903] 9pnet_virtio: no channels available for device syz [ 548.357184][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 548.373690][ T6123] usb 4-1: USB disconnect, device number 36 [ 548.389883][ T6123] ch341 4-1:0.0: device disconnected [ 548.473249][ T6119] usb 2-1: USB disconnect, device number 31 [ 548.486700][ T6119] usblp1: removed [ 548.525936][ T6126] usb 5-1: USB disconnect, device number 28 [ 549.198887][ T9927] overlayfs: missing 'workdir' [ 549.426478][ T9931] FAULT_INJECTION: forcing a failure. [ 549.426478][ T9931] name failslab, interval 1, probability 0, space 0, times 0 [ 549.489808][ T9931] CPU: 1 PID: 9931 Comm: syz.1.1225 Not tainted syzkaller #0 [ 549.497286][ T9931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 549.507355][ T9931] Call Trace: [ 549.510639][ T9931] [ 549.513583][ T9931] dump_stack_lvl+0x18c/0x250 [ 549.518365][ T9931] ? show_regs_print_info+0x20/0x20 [ 549.523573][ T9931] ? load_image+0x420/0x420 [ 549.528085][ T9931] ? __might_sleep+0xe0/0xe0 [ 549.532683][ T9931] ? __lock_acquire+0x7d80/0x7d80 [ 549.537717][ T9931] should_fail_ex+0x394/0x4c0 [ 549.542512][ T9931] should_failslab+0x9/0x20 [ 549.547025][ T9931] slab_pre_alloc_hook+0x59/0x300 [ 549.552060][ T9931] ? resv_map_alloc+0x51/0x2c0 [ 549.556834][ T9931] __kmem_cache_alloc_node+0x53/0x250 [ 549.562221][ T9931] ? resv_map_alloc+0x51/0x2c0 [ 549.567015][ T9931] kmalloc_trace+0x2a/0xe0 [ 549.571443][ T9931] resv_map_alloc+0x51/0x2c0 [ 549.576064][ T9931] hugetlbfs_get_inode+0x64/0x500 [ 549.581119][ T9931] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 549.587123][ T9931] hugetlb_file_setup+0x215/0x610 [ 549.592207][ T9931] ksys_mmap_pgoff+0x1e6/0x720 [ 549.597023][ T9931] do_syscall_64+0x55/0xb0 [ 549.601476][ T9931] ? clear_bhb_loop+0x40/0x90 [ 549.606179][ T9931] ? clear_bhb_loop+0x40/0x90 [ 549.610878][ T9931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 549.616793][ T9931] RIP: 0033:0x7fe05ff9e159 [ 549.621228][ T9931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.640953][ T9931] RSP: 002b:00007fe060f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 549.649396][ T9931] RAX: ffffffffffffffda RBX: 00007fe060225fa0 RCX: 00007fe05ff9e159 [ 549.657390][ T9931] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 549.665377][ T9931] RBP: 00007fe060035024 R08: ffffffffffffffff R09: 0000000000000000 [ 549.673361][ T9931] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 549.681352][ T9931] R13: 00007fe060226038 R14: 00007fe060225fa0 R15: 00007ffd11d79308 [ 549.689353][ T9931] [ 551.305941][ T6131] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 551.462194][ T9958] overlayfs: missing 'workdir' [ 551.501766][ T6131] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 551.512807][ T6131] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 551.526216][ T6131] usb 4-1: Product: syz [ 551.530552][ T6131] usb 4-1: Manufacturer: syz [ 551.536916][ T6131] usb 4-1: SerialNumber: syz [ 551.550131][ T6131] usb 4-1: config 0 descriptor?? [ 551.595327][ T5765] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 551.634511][ T6126] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 551.658516][ T6131] ch341 4-1:0.0: ch341-uart converter detected [ 551.845246][ T5765] usb 5-1: Using ep0 maxpacket: 32 [ 551.888281][ T5765] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 551.905850][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 551.916480][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 551.926624][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 551.936676][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 551.946606][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1232'. [ 551.958938][ T9950] 9pnet_virtio: no channels available for device syz [ 551.981544][ T6131] usb 4-1: failed to receive control message: -71 [ 551.993819][ T5765] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 552.008759][ T6131] ch341-uart: probe of ttyUSB0 failed with error -71 [ 552.017207][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 552.030664][ T5765] usb 5-1: Product: syz [ 552.031531][ T6131] usb 4-1: USB disconnect, device number 37 [ 552.047927][ T5765] usb 5-1: Manufacturer: syz [ 552.052541][ T5765] usb 5-1: SerialNumber: syz [ 552.082341][ T6131] ch341 4-1:0.0: device disconnected [ 552.096255][ T5765] usb 5-1: config 0 descriptor?? [ 552.105281][ T6126] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 552.110388][ T9954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 552.136625][ T6126] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 552.165541][ T6126] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 552.183175][ T6126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.212478][ T6126] usb 2-1: Product: syz [ 552.219518][ T6126] usb 2-1: Manufacturer: syz [ 552.227988][ T6126] usb 2-1: SerialNumber: syz [ 552.273206][ T9967] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 552.282038][ T9967] netlink: 'syz.0.1238': attribute type 11 has an invalid length. [ 552.291284][ T9967] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1238'. [ 552.467024][ T6126] usblp 2-1:1.0: usblp1: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 552.866737][ T6126] usb 2-1: USB disconnect, device number 32 [ 553.645908][ T6126] usblp1: removed [ 553.950591][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1241'. [ 554.068641][ T9982] syz.3.1241: attempt to access beyond end of device [ 554.068641][ T9982] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 554.082046][ T9982] efs: cannot read volume header [ 554.858395][ T9976] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.882194][ T6126] usb 5-1: USB disconnect, device number 29 [ 555.210569][ T9995] overlayfs: missing 'workdir' [ 555.885438][ T6134] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 555.930698][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 556.085680][ T6134] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 556.180384][ T6134] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 556.290429][ T6134] usb 1-1: Product: syz [ 556.327606][ T6134] usb 1-1: Manufacturer: syz [ 556.361635][ T6134] usb 1-1: SerialNumber: syz [ 556.423771][ T5765] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 556.522850][ T6134] usb 1-1: config 0 descriptor?? [ 556.660512][ T6134] ch341 1-1:0.0: ch341-uart converter detected [ 556.993897][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 557.116551][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 557.126616][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 557.136530][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 557.146265][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 557.175144][T10004] 9pnet_virtio: no channels available for device syz [ 557.187139][ T6134] usb 1-1: failed to receive control message: -71 [ 557.193757][ T6134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 557.213041][ T6134] usb 1-1: USB disconnect, device number 35 [ 557.222895][ T5765] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 557.235167][ T5765] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 557.248145][ T6134] ch341 1-1:0.0: device disconnected [ 557.295591][ T5765] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 557.313167][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.325605][ T5765] usb 2-1: Product: syz [ 557.329831][ T5765] usb 2-1: Manufacturer: syz [ 557.342030][ T5765] usb 2-1: SerialNumber: syz [ 557.587972][ T5765] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 33 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 557.983705][ T5765] usb 2-1: USB disconnect, device number 33 [ 558.018607][ T5765] usblp0: removed [ 558.084712][ T6126] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 558.284602][ T6126] usb 1-1: Using ep0 maxpacket: 32 [ 558.322411][ T6126] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 558.363649][ T6126] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 558.384927][ T6126] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 558.425468][T10021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 558.435220][T10021] bridge_slave_1: left allmulticast mode [ 558.440997][T10021] bridge_slave_1: left promiscuous mode [ 558.447889][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.652589][T10023] syz.4.1254: attempt to access beyond end of device [ 558.652589][T10023] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 558.665955][T10023] efs: cannot read volume header [ 559.300639][ T6126] usb 1-1: Product: syz [ 559.322107][ T6126] usb 1-1: Manufacturer: syz [ 559.335490][ T6126] usb 1-1: SerialNumber: syz [ 559.405929][ T6126] usb 1-1: config 0 descriptor?? [ 559.477753][T10017] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 559.507471][T10021] bridge_slave_0: left allmulticast mode [ 559.513625][T10021] bridge_slave_0: left promiscuous mode [ 559.528426][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.395048][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 560.831520][ T6128] usb 1-1: USB disconnect, device number 36 [ 561.154633][ T6119] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 561.370141][ T6119] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 561.382017][ T6119] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 561.391587][ T6119] usb 2-1: Product: syz [ 561.396724][ T6119] usb 2-1: Manufacturer: syz [ 561.401540][ T6119] usb 2-1: SerialNumber: syz [ 561.410293][ T6119] usb 2-1: config 0 descriptor?? [ 561.422365][ T6119] ch341 2-1:0.0: ch341-uart converter detected [ 561.444945][ T6128] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 561.640219][ T6128] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 561.664699][ T6128] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 561.686374][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 561.698557][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 561.709145][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 561.719069][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 561.730647][T10045] 9pnet_virtio: no channels available for device syz [ 561.747390][ T6119] usb 2-1: failed to receive control message: -71 [ 561.775002][ T6128] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 561.788878][ T6119] ch341-uart: probe of ttyUSB0 failed with error -71 [ 561.798606][ T6128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.822610][ T6119] usb 2-1: USB disconnect, device number 34 [ 561.899380][ T6128] usb 1-1: Product: syz [ 561.935489][ T6119] ch341 2-1:0.0: device disconnected [ 561.971635][ T6128] usb 1-1: Manufacturer: syz [ 561.999580][ T6128] usb 1-1: SerialNumber: syz [ 562.450896][ T6128] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 562.475815][ T5087] Bluetooth: hci4: command 0x0406 tx timeout [ 562.493566][ T6128] usb 1-1: USB disconnect, device number 37 [ 562.528214][ T6128] usblp0: removed [ 562.577557][T10065] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 563.057188][T10076] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1269'. [ 563.067043][T10076] bridge_slave_1: left allmulticast mode [ 563.072778][T10076] bridge_slave_1: left promiscuous mode [ 563.079115][T10076] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.118904][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.304816][T10078] syz.1.1269: attempt to access beyond end of device [ 563.304816][T10078] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 563.318337][T10078] efs: cannot read volume header [ 563.943309][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.015402][ T6119] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 564.330614][T10076] bridge_slave_0: left allmulticast mode [ 564.344744][ T6119] usb 5-1: Using ep0 maxpacket: 32 [ 564.353370][T10076] bridge_slave_0: left promiscuous mode [ 564.354002][ T6119] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 564.432082][T10076] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.442423][ T6119] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 564.455577][ T6119] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 564.509261][ T6119] usb 5-1: Product: syz [ 564.513505][ T6119] usb 5-1: Manufacturer: syz [ 564.531735][ T6119] usb 5-1: SerialNumber: syz [ 564.542732][ T6119] usb 5-1: config 0 descriptor?? [ 564.552574][T10072] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 565.024581][ T6134] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 565.035670][ T9983] Bluetooth: hci4: command 0x0406 tx timeout [ 565.235921][ T6134] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 565.310341][ T6134] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 565.325928][ T6134] usb 2-1: Product: syz [ 565.330463][ T6134] usb 2-1: Manufacturer: syz [ 565.478676][ T6134] usb 2-1: SerialNumber: syz [ 565.496734][ T6134] usb 2-1: config 0 descriptor?? [ 565.522688][ T6134] ch341 2-1:0.0: ch341-uart converter detected [ 565.778240][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 565.789942][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 565.799970][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 565.809795][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1274'. [ 565.821071][T10089] 9pnet_virtio: no channels available for device syz [ 565.845522][ T6134] usb 2-1: failed to receive control message: -71 [ 565.852025][ T6134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 565.936595][ T6134] usb 2-1: USB disconnect, device number 35 [ 565.955546][ T6128] usb 5-1: USB disconnect, device number 30 [ 565.992617][ T6134] ch341 2-1:0.0: device disconnected [ 566.445176][T10102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 566.825045][ T6128] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 567.046245][ T6128] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 567.126184][ T6128] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 567.167120][ T6128] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 567.185696][ T6128] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.193890][ T6128] usb 2-1: Product: syz [ 567.202396][ T6128] usb 2-1: Manufacturer: syz [ 567.214005][ T6128] usb 2-1: SerialNumber: syz [ 567.661634][ T6128] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 567.717493][ T6128] usb 2-1: USB disconnect, device number 36 [ 567.771699][ T6128] usblp0: removed [ 568.093020][T10116] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 568.442519][T10126] FAULT_INJECTION: forcing a failure. [ 568.442519][T10126] name failslab, interval 1, probability 0, space 0, times 0 [ 568.454049][T10116] (null): rxe_set_mtu: Set mtu to 1024 [ 568.480058][T10126] CPU: 0 PID: 10126 Comm: syz.1.1285 Not tainted syzkaller #0 [ 568.487578][T10126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 568.497636][T10126] Call Trace: [ 568.500920][T10126] [ 568.503848][T10126] dump_stack_lvl+0x18c/0x250 [ 568.508533][T10126] ? show_regs_print_info+0x20/0x20 [ 568.513732][T10126] ? load_image+0x420/0x420 [ 568.518253][T10126] ? __lock_acquire+0x7d80/0x7d80 [ 568.523283][T10126] should_fail_ex+0x394/0x4c0 [ 568.527965][T10126] should_failslab+0x9/0x20 [ 568.532506][T10126] slab_pre_alloc_hook+0x59/0x300 [ 568.537654][T10126] ? lockdep_softirqs_off+0x440/0x440 [ 568.543095][T10126] kmem_cache_alloc_lru+0x4d/0x2b0 [ 568.548243][T10126] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 568.553630][T10126] hugetlbfs_alloc_inode+0xf3/0x140 [ 568.558850][T10126] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 568.564230][T10126] new_inode_pseudo+0x63/0x1d0 [ 568.569012][T10126] new_inode+0x22/0x1d0 [ 568.573178][T10126] ? resv_map_alloc+0x1c4/0x2c0 [ 568.578032][T10126] hugetlbfs_get_inode+0x78/0x500 [ 568.583059][T10126] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 568.589077][T10126] hugetlb_file_setup+0x215/0x610 [ 568.594167][T10126] ksys_mmap_pgoff+0x1e6/0x720 [ 568.598990][T10126] do_syscall_64+0x55/0xb0 [ 568.603464][T10126] ? clear_bhb_loop+0x40/0x90 [ 568.608187][T10126] ? clear_bhb_loop+0x40/0x90 [ 568.612908][T10126] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 568.618830][T10126] RIP: 0033:0x7fe05ff9e159 [ 568.623254][T10126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.642884][T10126] RSP: 002b:00007fe060f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 568.651341][T10126] RAX: ffffffffffffffda RBX: 00007fe060225fa0 RCX: 00007fe05ff9e159 [ 568.659318][T10126] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 568.667289][T10126] RBP: 00007fe060035024 R08: ffffffffffffffff R09: 0000000000000000 [ 568.675262][T10126] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 568.683232][T10126] R13: 00007fe060226038 R14: 00007fe060225fa0 R15: 00007ffd11d79308 [ 568.691229][T10126] [ 568.717164][T10116] wg2 speed is unknown, defaulting to 1000 [ 568.867351][T10116] wg2 speed is unknown, defaulting to 1000 [ 568.988736][T10116] wg2 speed is unknown, defaulting to 1000 [ 569.350498][ T6128] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 570.067454][ T6119] wg2 speed is unknown, defaulting to 1000 [ 570.075717][T10116] infiniband syz2: set down [ 570.126026][T10116] infiniband syz2: added wg2 [ 570.133285][T10116] syz2: rxe_create_cq: returned err = -12 [ 570.196539][ T6128] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 570.211275][ T6128] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 570.220800][T10116] infiniband syz2: Couldn't create ib_mad CQ [ 570.227792][ T6128] usb 5-1: Product: syz [ 570.232183][ T6128] usb 5-1: Manufacturer: syz [ 570.248397][T10116] infiniband syz2: Couldn't open port 1 [ 570.264019][ T6128] usb 5-1: SerialNumber: syz [ 570.290450][ T6128] usb 5-1: config 0 descriptor?? [ 570.319348][ T6128] ch341 5-1:0.0: ch341-uart converter detected [ 570.375581][ T5765] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 570.459185][T10116] RDS/IB: syz2: added [ 570.506282][T10116] smc: adding ib device syz2 with port count 1 [ 570.539898][T10116] smc: ib device syz2 port 1 has pnetid [ 570.568200][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 570.578330][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 570.587742][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 570.597129][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1287'. [ 570.607968][T10132] 9pnet_virtio: no channels available for device syz [ 570.624540][ T6128] usb 5-1: failed to receive control message: -71 [ 570.633839][ T5765] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 570.641067][ T6128] ch341-uart: probe of ttyUSB0 failed with error -71 [ 570.653742][ T6123] wg2 speed is unknown, defaulting to 1000 [ 570.660837][ T5765] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 570.677213][T10116] wg2 speed is unknown, defaulting to 1000 [ 570.697023][ T6128] usb 5-1: USB disconnect, device number 31 [ 570.715055][ T6128] ch341 5-1:0.0: device disconnected [ 570.729318][ T5765] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 570.749730][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.783495][ T5765] usb 2-1: Product: syz [ 570.803697][ T5765] usb 2-1: Manufacturer: syz [ 570.836078][ T5765] usb 2-1: SerialNumber: syz [ 571.142846][T10151] netlink: 768 bytes leftover after parsing attributes in process `syz.3.1293'. [ 571.238364][T10116] wg2 speed is unknown, defaulting to 1000 [ 571.256486][ T5765] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 571.320367][ T5765] usb 2-1: USB disconnect, device number 37 [ 571.343151][ T5765] usblp0: removed [ 571.549944][T10116] wg2 speed is unknown, defaulting to 1000 [ 571.842587][T10116] wg2 speed is unknown, defaulting to 1000 [ 572.073213][T10161] FAULT_INJECTION: forcing a failure. [ 572.073213][T10161] name failslab, interval 1, probability 0, space 0, times 0 [ 572.087569][T10161] CPU: 0 PID: 10161 Comm: syz.3.1297 Not tainted syzkaller #0 [ 572.095091][T10161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.105350][T10161] Call Trace: [ 572.108695][T10161] [ 572.111663][T10161] dump_stack_lvl+0x18c/0x250 [ 572.116399][T10161] ? show_regs_print_info+0x20/0x20 [ 572.121646][T10161] ? load_image+0x420/0x420 [ 572.126196][T10161] ? __lock_acquire+0x7d80/0x7d80 [ 572.131273][T10161] should_fail_ex+0x394/0x4c0 [ 572.136011][T10161] should_failslab+0x9/0x20 [ 572.140569][T10161] slab_pre_alloc_hook+0x59/0x300 [ 572.145668][T10161] ? lockdep_softirqs_off+0x440/0x440 [ 572.151089][T10161] kmem_cache_alloc_lru+0x4d/0x2b0 [ 572.156267][T10161] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 572.161692][T10161] hugetlbfs_alloc_inode+0xf3/0x140 [ 572.166928][T10161] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 572.172326][T10161] new_inode_pseudo+0x63/0x1d0 [ 572.177140][T10161] new_inode+0x22/0x1d0 [ 572.181336][T10161] ? resv_map_alloc+0x1c4/0x2c0 [ 572.186227][T10161] hugetlbfs_get_inode+0x78/0x500 [ 572.191269][T10161] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 572.197272][T10161] hugetlb_file_setup+0x215/0x610 [ 572.202310][T10161] ksys_mmap_pgoff+0x1e6/0x720 [ 572.207099][T10161] do_syscall_64+0x55/0xb0 [ 572.211518][T10161] ? clear_bhb_loop+0x40/0x90 [ 572.216223][T10161] ? clear_bhb_loop+0x40/0x90 [ 572.221093][T10161] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 572.227014][T10161] RIP: 0033:0x7fa360b9e159 [ 572.231440][T10161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.251071][T10161] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 572.259489][T10161] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 572.267458][T10161] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 572.275422][T10161] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 572.283385][T10161] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 572.291374][T10161] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 572.299377][T10161] [ 573.570442][T10181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1300'. [ 574.114649][ T6128] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 574.410900][ T6128] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 574.472172][ T6128] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 574.499855][ T6128] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.546828][ T6128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.694957][ T5765] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 574.927433][ T5765] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 576.829026][ T5765] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 576.840796][ T5765] usb 2-1: Product: syz [ 576.846574][ T5765] usb 2-1: Manufacturer: syz [ 576.851224][ T5765] usb 2-1: SerialNumber: syz [ 576.865782][ T5765] usb 2-1: config 0 descriptor?? [ 576.887026][ T5765] ch341 2-1:0.0: ch341-uart converter detected [ 576.948306][ T6134] usb 1-1: USB disconnect, device number 38 [ 577.098484][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 577.108330][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 577.117953][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 577.127473][T10185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1304'. [ 577.139867][T10185] 9pnet_virtio: no channels available for device syz [ 577.155089][T10192] FAULT_INJECTION: forcing a failure. [ 577.155089][T10192] name failslab, interval 1, probability 0, space 0, times 0 [ 577.155485][ T5765] usb 2-1: failed to receive control message: -71 [ 577.168566][T10192] CPU: 1 PID: 10192 Comm: syz.0.1307 Not tainted syzkaller #0 [ 577.168595][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 577.168618][T10192] Call Trace: [ 577.168626][T10192] [ 577.168636][T10192] dump_stack_lvl+0x18c/0x250 [ 577.168674][T10192] ? show_regs_print_info+0x20/0x20 [ 577.168699][T10192] ? load_image+0x420/0x420 [ 577.168723][T10192] ? __lock_acquire+0x7d80/0x7d80 [ 577.168756][T10192] should_fail_ex+0x394/0x4c0 [ 577.168789][T10192] should_failslab+0x9/0x20 [ 577.168820][T10192] slab_pre_alloc_hook+0x59/0x300 [ 577.168850][T10192] ? lockdep_softirqs_off+0x440/0x440 [ 577.168879][T10192] kmem_cache_alloc_lru+0x4d/0x2b0 [ 577.168907][T10192] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 577.168942][T10192] hugetlbfs_alloc_inode+0xf3/0x140 [ 577.168971][T10192] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 577.169002][T10192] new_inode_pseudo+0x63/0x1d0 [ 577.169028][T10192] new_inode+0x22/0x1d0 [ 577.169051][T10192] ? resv_map_alloc+0x1c4/0x2c0 [ 577.169078][T10192] hugetlbfs_get_inode+0x78/0x500 [ 577.169107][T10192] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 577.169135][T10192] hugetlb_file_setup+0x215/0x610 [ 577.169168][T10192] ksys_mmap_pgoff+0x1e6/0x720 [ 577.169202][T10192] do_syscall_64+0x55/0xb0 [ 577.169224][T10192] ? clear_bhb_loop+0x40/0x90 [ 577.169248][T10192] ? clear_bhb_loop+0x40/0x90 [ 577.169274][T10192] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.169299][T10192] RIP: 0033:0x7f1ecdb9e159 [ 577.169319][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.169339][T10192] RSP: 002b:00007f1eceae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 577.169364][T10192] RAX: ffffffffffffffda RBX: 00007f1ecde25fa0 RCX: 00007f1ecdb9e159 [ 577.169381][T10192] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 577.169395][T10192] RBP: 00007f1ecdc35024 R08: ffffffffffffffff R09: 0000000000000000 [ 577.169411][T10192] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 577.169426][T10192] R13: 00007f1ecde26038 R14: 00007f1ecde25fa0 R15: 00007fff457adac8 [ 577.169455][T10192] [ 577.505479][ T5765] ch341-uart: probe of ttyUSB0 failed with error -71 [ 577.544911][T10196] netlink: 768 bytes leftover after parsing attributes in process `syz.0.1308'. [ 577.552860][ T5765] usb 2-1: USB disconnect, device number 38 [ 577.595802][ T5765] ch341 2-1:0.0: device disconnected [ 578.825429][ T5765] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 579.060660][ T5765] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 579.124955][ T5765] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 579.196116][ T5765] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 579.265888][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.689397][T10218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1316'. [ 581.748005][ T6134] usb 1-1: USB disconnect, device number 39 [ 581.862447][T10220] FAULT_INJECTION: forcing a failure. [ 581.862447][T10220] name failslab, interval 1, probability 0, space 0, times 0 [ 581.915479][T10220] CPU: 0 PID: 10220 Comm: syz.3.1318 Not tainted syzkaller #0 [ 581.923016][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.933113][T10220] Call Trace: [ 581.936428][T10220] [ 581.939394][T10220] dump_stack_lvl+0x18c/0x250 [ 581.944131][T10220] ? show_regs_print_info+0x20/0x20 [ 581.949393][T10220] ? load_image+0x420/0x420 [ 581.953941][T10220] ? __might_sleep+0xe0/0xe0 [ 581.958574][T10220] ? __lock_acquire+0x7d80/0x7d80 [ 581.963649][T10220] should_fail_ex+0x394/0x4c0 [ 581.968385][T10220] should_failslab+0x9/0x20 [ 581.972942][T10220] slab_pre_alloc_hook+0x59/0x300 [ 581.973107][T10224] netlink: 768 bytes leftover after parsing attributes in process `syz.1.1319'. [ 581.978002][T10220] ? resv_map_alloc+0x51/0x2c0 [ 581.978035][T10220] __kmem_cache_alloc_node+0x53/0x250 [ 581.978069][T10220] ? resv_map_alloc+0x51/0x2c0 [ 581.978093][T10220] kmalloc_trace+0x2a/0xe0 [ 581.978127][T10220] resv_map_alloc+0x51/0x2c0 [ 581.978155][T10220] hugetlbfs_get_inode+0x64/0x500 [ 581.978184][T10220] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 581.978222][T10220] hugetlb_file_setup+0x215/0x610 [ 581.978254][T10220] ksys_mmap_pgoff+0x1e6/0x720 [ 581.978288][T10220] do_syscall_64+0x55/0xb0 [ 581.978314][T10220] ? clear_bhb_loop+0x40/0x90 [ 581.978338][T10220] ? clear_bhb_loop+0x40/0x90 [ 581.978365][T10220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 581.978388][T10220] RIP: 0033:0x7fa360b9e159 [ 581.978408][T10220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.978427][T10220] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 581.978451][T10220] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 581.978467][T10220] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 581.978481][T10220] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 581.978496][T10220] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 581.978510][T10220] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 581.978541][T10220] [ 582.494933][ T5765] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 582.693578][ T5765] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 582.736670][ T5765] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 582.752110][ T5765] usb 4-1: Product: syz [ 582.771264][ T5765] usb 4-1: Manufacturer: syz [ 582.797926][ T5765] usb 4-1: SerialNumber: syz [ 582.833828][ T5765] usb 4-1: config 0 descriptor?? [ 582.887160][ T5765] ch341 4-1:0.0: ch341-uart converter detected [ 583.103193][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 583.113680][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 583.124498][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 583.135624][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 583.145132][T10229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1321'. [ 583.159638][T10229] 9pnet_virtio: no channels available for device syz [ 583.172194][ T5765] usb 4-1: failed to receive control message: -71 [ 583.190420][ T5765] ch341-uart: probe of ttyUSB0 failed with error -71 [ 583.200525][ T5765] usb 4-1: USB disconnect, device number 38 [ 583.346892][ T5765] ch341 4-1:0.0: device disconnected [ 584.412081][T10257] FAULT_INJECTION: forcing a failure. [ 584.412081][T10257] name failslab, interval 1, probability 0, space 0, times 0 [ 584.462227][T10257] CPU: 1 PID: 10257 Comm: syz.0.1329 Not tainted syzkaller #0 [ 584.469796][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 584.469813][T10257] Call Trace: [ 584.469822][T10257] [ 584.469831][T10257] dump_stack_lvl+0x18c/0x250 [ 584.490929][T10257] ? show_regs_print_info+0x20/0x20 [ 584.496157][T10257] ? load_image+0x420/0x420 [ 584.500687][T10257] ? __might_sleep+0xe0/0xe0 [ 584.505299][T10257] ? __lock_acquire+0x7d80/0x7d80 [ 584.510342][T10257] should_fail_ex+0x394/0x4c0 [ 584.515050][T10257] should_failslab+0x9/0x20 [ 584.519577][T10257] slab_pre_alloc_hook+0x59/0x300 [ 584.524632][T10257] ? resv_map_alloc+0x51/0x2c0 [ 584.529602][T10257] __kmem_cache_alloc_node+0x53/0x250 [ 584.535029][T10257] ? resv_map_alloc+0x51/0x2c0 [ 584.539819][T10257] kmalloc_trace+0x2a/0xe0 [ 584.544261][T10257] resv_map_alloc+0x51/0x2c0 [ 584.548908][T10257] hugetlbfs_get_inode+0x64/0x500 [ 584.553963][T10257] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 584.560005][T10257] hugetlb_file_setup+0x215/0x610 [ 584.565061][T10257] ksys_mmap_pgoff+0x1e6/0x720 [ 584.569854][T10257] do_syscall_64+0x55/0xb0 [ 584.574324][T10257] ? clear_bhb_loop+0x40/0x90 [ 584.579029][T10257] ? clear_bhb_loop+0x40/0x90 [ 584.583721][T10257] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 584.589630][T10257] RIP: 0033:0x7f1ecdb9e159 [ 584.594072][T10257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.613713][T10257] RSP: 002b:00007f1eceae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 584.622150][T10257] RAX: ffffffffffffffda RBX: 00007f1ecde25fa0 RCX: 00007f1ecdb9e159 [ 584.630158][T10257] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 584.638153][T10257] RBP: 00007f1ecdc35024 R08: ffffffffffffffff R09: 0000000000000000 [ 584.646146][T10257] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 584.654138][T10257] R13: 00007f1ecde26038 R14: 00007f1ecde25fa0 R15: 00007fff457adac8 [ 584.662149][T10257] [ 584.665319][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.315500][ T6134] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 585.509026][ T6134] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 585.525652][ T6134] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 585.555828][ T6134] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.603904][ T6134] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.645876][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.699969][ T6134] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 585.757253][ T6134] snd-usb-audio: probe of 1-1:27.0 failed with error -2 [ 585.798808][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 586.034768][ T5765] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 587.922676][ T6134] usb 1-1: USB disconnect, device number 40 [ 588.022396][ T5765] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 588.032481][ T5765] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 588.046629][ T5765] usb 4-1: Product: syz [ 588.076712][ T5765] usb 4-1: Manufacturer: syz [ 588.081415][ T5765] usb 4-1: SerialNumber: syz [ 588.091146][ T5765] usb 4-1: config 0 descriptor?? [ 588.108125][ T5765] ch341 4-1:0.0: ch341-uart converter detected [ 588.456001][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 588.602929][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 588.613276][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 588.623352][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 588.633457][T10288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 588.735825][T10286] 9pnet_virtio: no channels available for device syz [ 589.079799][ T5765] usb 4-1: failed to receive control message: -71 [ 589.090490][T10290] FAULT_INJECTION: forcing a failure. [ 589.090490][T10290] name failslab, interval 1, probability 0, space 0, times 0 [ 589.105133][ T5765] ch341-uart: probe of ttyUSB0 failed with error -71 [ 589.116198][ T5765] usb 4-1: USB disconnect, device number 39 [ 589.127557][ T5765] ch341 4-1:0.0: device disconnected [ 589.135149][T10290] CPU: 0 PID: 10290 Comm: syz.0.1340 Not tainted syzkaller #0 [ 589.142640][T10290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 589.152737][T10290] Call Trace: [ 589.156056][T10290] [ 589.159023][T10290] dump_stack_lvl+0x18c/0x250 [ 589.163751][T10290] ? show_regs_print_info+0x20/0x20 [ 589.168956][T10290] ? load_image+0x420/0x420 [ 589.173478][T10290] ? __lock_acquire+0x7d80/0x7d80 [ 589.178511][T10290] should_fail_ex+0x394/0x4c0 [ 589.183220][T10290] should_failslab+0x9/0x20 [ 589.187773][T10290] slab_pre_alloc_hook+0x59/0x300 [ 589.192842][T10290] ? lockdep_softirqs_off+0x440/0x440 [ 589.198260][T10290] kmem_cache_alloc_lru+0x4d/0x2b0 [ 589.203419][T10290] ? hugetlbfs_alloc_inode+0xf3/0x140 [ 589.208848][T10290] hugetlbfs_alloc_inode+0xf3/0x140 [ 589.214093][T10290] ? hugetlbfs_fill_super+0x8f0/0x8f0 [ 589.219504][T10290] new_inode_pseudo+0x63/0x1d0 [ 589.224296][T10290] new_inode+0x22/0x1d0 [ 589.228485][T10290] ? resv_map_alloc+0x1c4/0x2c0 [ 589.233342][T10290] hugetlbfs_get_inode+0x78/0x500 [ 589.238370][T10290] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 589.244368][T10290] hugetlb_file_setup+0x215/0x610 [ 589.249430][T10290] ksys_mmap_pgoff+0x1e6/0x720 [ 589.254219][T10290] do_syscall_64+0x55/0xb0 [ 589.258653][T10290] ? clear_bhb_loop+0x40/0x90 [ 589.263340][T10290] ? clear_bhb_loop+0x40/0x90 [ 589.268037][T10290] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 589.273946][T10290] RIP: 0033:0x7f1ecdb9e159 [ 589.278375][T10290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.297994][T10290] RSP: 002b:00007f1eceae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 589.306430][T10290] RAX: ffffffffffffffda RBX: 00007f1ecde25fa0 RCX: 00007f1ecdb9e159 [ 589.314411][T10290] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 589.322389][T10290] RBP: 00007f1ecdc35024 R08: ffffffffffffffff R09: 0000000000000000 [ 589.330371][T10290] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 589.338350][T10290] R13: 00007f1ecde26038 R14: 00007f1ecde25fa0 R15: 00007fff457adac8 [ 589.346351][T10290] [ 590.881562][T10292] sched: RT throttling activated [ 591.924835][ T5765] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 592.025800][ T6131] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 592.126671][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.145416][ T5765] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 592.171457][ T5765] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 592.187602][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.207592][ T5765] usb 1-1: Product: syz [ 592.219072][ T5765] usb 1-1: Manufacturer: syz [ 592.223678][ T5765] usb 1-1: SerialNumber: syz [ 592.230227][ T6131] usb 4-1: Using ep0 maxpacket: 32 [ 592.253629][ T6131] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 592.263051][ T6131] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 592.285667][ T6131] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 592.298467][ T6131] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 592.313456][ T6131] usb 4-1: config 0 interface 0 has no altsetting 0 [ 592.325424][ T6134] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 592.335477][ T6131] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 592.349224][ T6131] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 592.365443][ T6131] usb 4-1: Product: syz [ 592.375443][ T6131] usb 4-1: Manufacturer: syz [ 592.380188][ T6131] usb 4-1: SerialNumber: syz [ 592.397189][ T6131] usb 4-1: config 0 descriptor?? [ 592.418663][ T6131] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 592.438253][ T6131] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 592.497550][ T5765] usblp 1-1:1.0: usblp1: USB Bidirectional printer dev 41 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 592.522664][ T6134] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 592.537458][ T6134] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 592.553196][ T6134] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.573720][ T6134] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 592.588052][ T6134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.628552][ T6134] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 592.716763][ T6134] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 592.736177][ T5765] usb 4-1: USB disconnect, device number 40 [ 592.773595][ T5765] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 592.787087][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 592.931788][ T6134] usb 1-1: USB disconnect, device number 41 [ 594.692199][ T6134] usblp1: removed [ 594.989851][ T6119] usb 2-1: USB disconnect, device number 39 [ 598.215102][ T6134] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 598.417223][ T6134] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 598.445426][ T6134] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 598.491942][ T6134] usb 4-1: Product: syz [ 598.512519][ T6134] usb 4-1: Manufacturer: syz [ 598.548588][ T6134] usb 4-1: SerialNumber: syz [ 598.566819][ T6134] usb 4-1: config 0 descriptor?? [ 598.599759][ T6134] ch341 4-1:0.0: ch341-uart converter detected [ 598.907167][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 599.025555][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 599.096158][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 599.135446][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 599.200895][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1353'. [ 599.312618][T10347] 9pnet_virtio: no channels available for device syz [ 599.530922][ T6134] usb 4-1: failed to receive control message: -71 [ 599.545962][ T6134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 599.567198][ T6134] usb 4-1: USB disconnect, device number 41 [ 599.598881][ T6134] ch341 4-1:0.0: device disconnected [ 599.746538][T10351] syzkaller0: entered promiscuous mode [ 599.758016][T10351] syzkaller0: entered allmulticast mode [ 600.054818][ T6119] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 600.127375][ T27] audit: type=1400 audit(1788069947.657:12): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=10360 comm="syz.0.1361" name="unknown" offset=16 [ 600.259652][ T6119] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 600.283950][ T6119] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 600.317390][ T6119] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 600.327832][ T6119] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.348324][ T6119] usb 5-1: Product: syz [ 600.352563][ T6119] usb 5-1: Manufacturer: syz [ 600.372359][ T6119] usb 5-1: SerialNumber: syz [ 600.516274][ T6134] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 600.608153][ T6119] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 32 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 600.717486][ T6134] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 600.733018][ T6134] usb 2-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 600.755618][ T6134] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 600.785596][ T6134] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 600.815574][ T6134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.850797][ T6134] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 600.908064][ T6134] snd-usb-audio: probe of 2-1:27.0 failed with error -2 [ 600.932596][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 601.155965][ T6134] usb 5-1: USB disconnect, device number 32 [ 601.316435][ T6134] usblp0: removed [ 603.280528][ T6119] usb 2-1: USB disconnect, device number 40 [ 605.734611][ T6128] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 605.787008][T10394] syzkaller0: entered promiscuous mode [ 605.793226][T10394] syzkaller0: entered allmulticast mode [ 605.954144][ T6128] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 605.963793][ T6128] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 605.978460][ T6128] usb 4-1: Product: syz [ 605.998790][ T6128] usb 4-1: Manufacturer: syz [ 606.032861][ T6128] usb 4-1: SerialNumber: syz [ 606.086095][ T6128] usb 4-1: config 0 descriptor?? [ 606.110112][ T6128] ch341 4-1:0.0: ch341-uart converter detected [ 606.520977][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 606.536650][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 606.806772][T10404] 9pnet_virtio: no channels available for device syz [ 606.813661][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 606.889332][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 606.992366][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1370'. [ 607.055544][ T6128] usb 4-1: failed to receive control message: -71 [ 607.068154][ T6128] ch341-uart: probe of ttyUSB0 failed with error -71 [ 607.126175][ T6128] usb 4-1: USB disconnect, device number 42 [ 607.163888][ T6128] ch341 4-1:0.0: device disconnected [ 607.171705][ T9983] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 607.344854][ T6119] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 607.546614][ T6119] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 607.562273][ T6119] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 607.586959][ T6119] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 607.605791][ T6119] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 607.616524][ T6119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.633162][ T6119] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 607.654966][ T6119] usb 5-1: invalid MIDI out EP 0 [ 607.759554][T10296] udevd[10296]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 607.780770][ T6119] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 607.873585][T10427] binder_alloc: 10426: binder_alloc_buf, no vma [ 610.012557][ T6134] usb 5-1: USB disconnect, device number 33 [ 610.764741][ T6119] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 611.016036][ T6119] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 611.045224][ T6119] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 611.072429][ T6119] usb 5-1: Product: syz [ 611.086323][ T6119] usb 5-1: Manufacturer: syz [ 611.091720][ T6119] usb 5-1: SerialNumber: syz [ 611.112500][ T6119] usb 5-1: config 0 descriptor?? [ 611.138405][ T6119] ch341 5-1:0.0: ch341-uart converter detected [ 611.479345][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 611.544925][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 611.562394][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 611.580579][T10452] syzkaller0: entered promiscuous mode [ 611.609354][T10452] syzkaller0: entered allmulticast mode [ 611.617757][T10456] 9pnet_virtio: no channels available for device syz [ 611.769933][T10451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1385'. [ 612.012677][ T6119] usb 5-1: failed to receive control message: -71 [ 612.029395][ T6119] ch341-uart: probe of ttyUSB0 failed with error -71 [ 612.065822][ T6119] usb 5-1: USB disconnect, device number 34 [ 612.073091][ T6119] ch341 5-1:0.0: device disconnected [ 613.049696][T10476] bridge0: entered promiscuous mode [ 613.059123][T10476] bridge0: entered allmulticast mode [ 613.206526][ T6119] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 613.239953][T10480] binder_alloc: 10479: binder_alloc_buf, no vma [ 613.456450][ T6119] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 613.491915][ T6119] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.553446][ T6119] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.619043][ T6119] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 613.650374][ T6119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.729224][ T6119] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 613.748984][ T6119] usb 4-1: invalid MIDI out EP 0 [ 613.886373][ T6134] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 613.933557][ T9716] udevd[9716]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 614.078820][ T6134] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 614.744258][ T6119] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 616.036327][ T6134] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 616.045547][ T6134] usb 1-1: Product: syz [ 616.049757][ T6134] usb 1-1: Manufacturer: syz [ 616.063699][ T6134] usb 1-1: SerialNumber: syz [ 616.092856][ T6134] usb 1-1: config 0 descriptor?? [ 616.106989][ T6134] ch341 1-1:0.0: ch341-uart converter detected [ 616.172572][ T6119] usb 4-1: USB disconnect, device number 43 [ 616.415598][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 616.446526][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 616.476491][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 616.487577][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 616.498466][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 616.511325][T10493] 9pnet_virtio: no channels available for device syz [ 616.910699][ T6134] usb 1-1: failed to receive control message: -71 [ 616.925874][ T6134] ch341-uart: probe of ttyUSB0 failed with error -71 [ 616.941436][ T6134] usb 1-1: USB disconnect, device number 42 [ 616.952386][ T6134] ch341 1-1:0.0: device disconnected [ 618.494715][ T6119] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 618.656384][ T6134] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 618.707882][ T6119] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 618.727989][ T6119] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 618.745606][ T6119] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 618.778012][ T6119] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 618.797531][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.839712][ T6119] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 618.856911][ T6134] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 618.862819][ T6119] usb 2-1: invalid MIDI out EP 0 [ 618.902429][ T6134] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 618.941937][ T6134] usb 5-1: Product: syz [ 618.963537][ T6134] usb 5-1: Manufacturer: syz [ 618.999364][ T6134] usb 5-1: SerialNumber: syz [ 619.013066][ T6134] usb 5-1: config 0 descriptor?? [ 619.023100][ T6134] ch341 5-1:0.0: ch341-uart converter detected [ 620.123456][ T6119] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 621.766473][ T6134] usb 5-1: failed to receive control message: -110 [ 621.773040][ T6134] ch341-uart: probe of ttyUSB0 failed with error -110 [ 621.903014][ T6119] usb 2-1: USB disconnect, device number 41 [ 621.942235][ T6128] usb 5-1: USB disconnect, device number 35 [ 621.955167][ T6128] ch341 5-1:0.0: device disconnected [ 622.352964][ T9983] Bluetooth: hci2: unexpected event for opcode 0x0c1a [ 622.925428][ T6134] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 623.084978][ T6134] usb 4-1: device descriptor read/64, error -71 [ 623.304561][ T6128] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 623.375134][ T6134] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 623.503173][ T6128] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 623.529410][ T6128] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 623.535347][ T6134] usb 4-1: device descriptor read/64, error -71 [ 623.560847][ T6128] usb 2-1: Product: syz [ 623.565311][ T6128] usb 2-1: Manufacturer: syz [ 623.570181][ T6128] usb 2-1: SerialNumber: syz [ 623.605345][ T6128] usb 2-1: config 0 descriptor?? [ 623.631279][ T6128] ch341 2-1:0.0: ch341-uart converter detected [ 623.676312][ T6134] usb usb4-port1: attempt power cycle [ 625.118198][ T6128] usb 2-1: failed to receive control message: -110 [ 625.467770][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.475742][ T6134] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 625.486960][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.894456][ T6128] ch341-uart: probe of ttyUSB0 failed with error -110 [ 626.054504][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 626.072661][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 626.082622][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 626.092391][T10573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1426'. [ 626.108734][T10573] 9pnet_virtio: no channels available for device syz [ 626.123249][ T6128] usb 2-1: USB disconnect, device number 42 [ 626.150675][ T6128] ch341 2-1:0.0: device disconnected [ 626.163568][ T6134] usb 4-1: device descriptor read/8, error -71 [ 627.405202][ T6134] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 627.446944][ T6134] usb 4-1: device descriptor read/8, error -71 [ 627.468464][ T9983] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 627.574847][ T6134] usb usb4-port1: unable to enumerate USB device [ 628.255388][ T6134] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 628.458157][ T6134] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 628.483352][ T6134] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 628.513010][ T6134] usb 2-1: Product: syz [ 628.520315][ T6134] usb 2-1: Manufacturer: syz [ 628.526299][ T6134] usb 2-1: SerialNumber: syz [ 628.533714][ T6134] usb 2-1: config 0 descriptor?? [ 628.551099][ T6134] ch341 2-1:0.0: ch341-uart converter detected [ 628.878421][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 628.947662][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 629.041868][T10653] 9pnet_virtio: no channels available for device syz [ 629.255188][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 629.303290][T10650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1448'. [ 630.004129][T10667] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1455'. [ 630.052365][ T6134] usb 2-1: failed to receive control message: -110 [ 630.358654][T10673] binder_alloc: 10672: binder_alloc_buf, no vma [ 630.987850][ T6134] ch341-uart: probe of ttyUSB0 failed with error -110 [ 631.083527][ T6134] usb 2-1: USB disconnect, device number 43 [ 631.096691][ T6134] ch341 2-1:0.0: device disconnected [ 631.642788][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1463'. [ 632.001930][T10707] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1465'. [ 632.224677][ T6128] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 632.403497][ T6128] usb 2-1: device descriptor read/64, error -71 [ 632.684526][ T6128] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 632.805049][ T6134] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 632.854657][ T6128] usb 2-1: device descriptor read/64, error -71 [ 632.990220][ T6128] usb usb2-port1: attempt power cycle [ 633.001875][ T6134] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 633.025647][ T6134] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 633.045618][ T6134] usb 4-1: Product: syz [ 633.051190][ T6134] usb 4-1: Manufacturer: syz [ 633.066106][ T6134] usb 4-1: SerialNumber: syz [ 633.076579][ T6134] usb 4-1: config 0 descriptor?? [ 633.086852][ T6134] ch341 4-1:0.0: ch341-uart converter detected [ 633.444701][ T6128] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 634.807736][ T6134] usb 4-1: failed to receive control message: -110 [ 634.846469][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1469'. [ 634.895534][ T6134] ch341-uart: probe of ttyUSB0 failed with error -110 [ 634.978044][T10742] 9pnet_virtio: no channels available for device syz [ 635.274600][ T6128] usb 2-1: device descriptor read/8, error -71 [ 635.435649][T10748] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1474'. [ 635.697720][T10750] Set syz0 is full, maxelem 0 reached [ 636.256562][ T5765] usb 4-1: USB disconnect, device number 48 [ 636.280841][ T5765] ch341 4-1:0.0: device disconnected [ 637.046484][T10772] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1484'. [ 637.094610][ T6126] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 637.351907][ T6126] usb 1-1: device descriptor read/64, error -71 [ 638.414578][ T6126] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 638.584847][ T6126] usb 1-1: device descriptor read/64, error -71 [ 638.704816][ T6126] usb usb1-port1: attempt power cycle [ 639.124836][ T6128] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 639.132787][ T6126] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 639.205614][ T6126] usb 1-1: device descriptor read/8, error -71 [ 639.249679][T10800] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1494'. [ 639.274597][ T9983] Bluetooth: hci4: command 0x0406 tx timeout [ 639.341895][ T6128] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 639.360459][ T6128] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 639.375838][ T6128] usb 4-1: Product: syz [ 639.381136][ T6128] usb 4-1: Manufacturer: syz [ 639.388305][ T6128] usb 4-1: SerialNumber: syz [ 639.399868][ T6128] usb 4-1: config 0 descriptor?? [ 639.417069][ T6128] ch341 4-1:0.0: ch341-uart converter detected [ 639.474731][ T6126] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 639.485667][T10803] futex_wake_op: syz.1.1495 tries to shift op by 144; fix this program [ 639.521107][ T6126] usb 1-1: device descriptor read/8, error -71 [ 639.667968][ T6126] usb usb1-port1: unable to enumerate USB device [ 640.490042][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 640.506088][ T6128] usb 4-1: failed to receive control message: -110 [ 640.519075][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 640.531839][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 640.543673][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 640.561380][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1492'. [ 640.586041][T10806] 9pnet_virtio: no channels available for device syz [ 641.920401][ T6128] ch341-uart: probe of ttyUSB0 failed with error -110 [ 642.583311][ T6128] usb 4-1: USB disconnect, device number 49 [ 642.590468][ T6128] ch341 4-1:0.0: device disconnected [ 642.885736][T10811] binder_alloc: 10809: binder_alloc_buf, no vma [ 645.593004][T10829] FAULT_INJECTION: forcing a failure. [ 645.593004][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 645.642092][T10829] CPU: 0 PID: 10829 Comm: syz.3.1503 Not tainted syzkaller #0 [ 645.649650][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 645.660105][T10829] Call Trace: [ 645.663426][T10829] [ 645.666398][T10829] dump_stack_lvl+0x18c/0x250 [ 645.671137][T10829] ? show_regs_print_info+0x20/0x20 [ 645.676595][T10829] ? load_image+0x420/0x420 [ 645.681231][T10829] ? __might_sleep+0xe0/0xe0 [ 645.685890][T10829] ? __lock_acquire+0x7d80/0x7d80 [ 645.690990][T10829] should_fail_ex+0x394/0x4c0 [ 645.695726][T10829] should_failslab+0x9/0x20 [ 645.700396][T10829] slab_pre_alloc_hook+0x59/0x300 [ 645.705503][T10829] ? resv_map_alloc+0x88/0x2c0 [ 645.710283][T10829] __kmem_cache_alloc_node+0x53/0x250 [ 645.715685][T10829] ? resv_map_alloc+0x88/0x2c0 [ 645.720459][T10829] kmalloc_trace+0x2a/0xe0 [ 645.724906][T10829] resv_map_alloc+0x88/0x2c0 [ 645.729557][T10829] hugetlbfs_get_inode+0x64/0x500 [ 645.734636][T10829] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 645.740656][T10829] hugetlb_file_setup+0x215/0x610 [ 645.745725][T10829] ksys_mmap_pgoff+0x1e6/0x720 [ 645.750536][T10829] do_syscall_64+0x55/0xb0 [ 645.754982][T10829] ? clear_bhb_loop+0x40/0x90 [ 645.759683][T10829] ? clear_bhb_loop+0x40/0x90 [ 645.764555][T10829] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 645.770464][T10829] RIP: 0033:0x7fa360b9e159 [ 645.774897][T10829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.794606][T10829] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 645.803210][T10829] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 645.811370][T10829] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 645.819366][T10829] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 645.827370][T10829] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 645.835386][T10829] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 645.843395][T10829] [ 646.014555][ T6126] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 646.175408][ T6126] usb 5-1: device descriptor read/64, error -71 [ 646.259780][T10842] Set syz0 is full, maxelem 0 reached [ 646.464551][ T6126] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 646.476269][T10846] binder_alloc: 10845: binder_alloc_buf, no vma [ 646.624922][ T6126] usb 5-1: device descriptor read/64, error -71 [ 646.755607][ T6126] usb usb5-port1: attempt power cycle [ 646.874605][ T6128] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 647.194709][ T6126] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 647.685606][ T6126] usb 5-1: device descriptor read/8, error -71 [ 647.758340][T10861] FAULT_INJECTION: forcing a failure. [ 647.758340][T10861] name failslab, interval 1, probability 0, space 0, times 0 [ 647.776210][T10861] CPU: 0 PID: 10861 Comm: syz.3.1514 Not tainted syzkaller #0 [ 647.783730][T10861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.786784][ T6128] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 647.793788][T10861] Call Trace: [ 647.793803][T10861] [ 647.793813][T10861] dump_stack_lvl+0x18c/0x250 [ 647.803174][ T6128] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 647.806185][T10861] ? show_regs_print_info+0x20/0x20 [ 647.806219][T10861] ? load_image+0x420/0x420 [ 647.806243][T10861] ? __might_sleep+0xe0/0xe0 [ 647.809612][ T6128] usb 2-1: Product: syz [ 647.813887][T10861] ? __lock_acquire+0x7d80/0x7d80 [ 647.813933][T10861] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 647.813962][T10861] should_fail_ex+0x394/0x4c0 [ 647.824237][ T6128] usb 2-1: Manufacturer: syz [ 647.827492][T10861] should_failslab+0x9/0x20 [ 647.832000][ T6128] usb 2-1: SerialNumber: syz [ 647.836602][T10861] slab_pre_alloc_hook+0x59/0x300 [ 647.836639][T10861] ? resv_map_alloc+0x51/0x2c0 [ 647.836665][T10861] __kmem_cache_alloc_node+0x53/0x250 [ 647.836698][T10861] ? resv_map_alloc+0x51/0x2c0 [ 647.836722][T10861] kmalloc_trace+0x2a/0xe0 [ 647.836755][T10861] resv_map_alloc+0x51/0x2c0 [ 647.836782][T10861] hugetlbfs_get_inode+0x64/0x500 [ 647.836818][T10861] hugetlb_file_setup+0x215/0x610 [ 647.836850][T10861] ksys_mmap_pgoff+0x1e6/0x720 [ 647.836884][T10861] do_syscall_64+0x55/0xb0 [ 647.836916][T10861] ? clear_bhb_loop+0x40/0x90 [ 647.836940][T10861] ? clear_bhb_loop+0x40/0x90 [ 647.836966][T10861] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 647.836990][T10861] RIP: 0033:0x7fa360b9e159 [ 647.837010][T10861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.837029][T10861] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 647.837053][T10861] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 647.837068][T10861] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 647.837083][T10861] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 647.837097][T10861] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 647.837111][T10861] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 647.837150][T10861] [ 648.043402][ T6128] usb 2-1: config 0 descriptor?? [ 648.061359][ T6128] ch341 2-1:0.0: ch341-uart converter detected [ 648.174598][ T6126] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 648.223154][ T6126] usb 5-1: device descriptor read/8, error -71 [ 650.177729][ T6128] usb 2-1: failed to receive control message: -110 [ 650.194055][ T6126] usb usb5-port1: unable to enumerate USB device [ 650.211645][ T6128] ch341-uart: probe of ttyUSB0 failed with error -110 [ 650.291289][ T6128] usb 2-1: USB disconnect, device number 48 [ 650.319020][ T6128] ch341 2-1:0.0: device disconnected [ 650.465566][T10875] binder_alloc: 10874: binder_alloc_buf, no vma [ 651.033753][T10887] FAULT_INJECTION: forcing a failure. [ 651.033753][T10887] name failslab, interval 1, probability 0, space 0, times 0 [ 651.165564][T10887] CPU: 1 PID: 10887 Comm: syz.1.1524 Not tainted syzkaller #0 [ 651.173197][T10887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 651.183319][T10887] Call Trace: [ 651.186643][T10887] [ 651.189614][T10887] dump_stack_lvl+0x18c/0x250 [ 651.194342][T10887] ? show_regs_print_info+0x20/0x20 [ 651.199590][T10887] ? load_image+0x420/0x420 [ 651.204144][T10887] ? __might_sleep+0xe0/0xe0 [ 651.208781][T10887] ? __lock_acquire+0x7d80/0x7d80 [ 651.213849][T10887] should_fail_ex+0x394/0x4c0 [ 651.218577][T10887] should_failslab+0x9/0x20 [ 651.223131][T10887] slab_pre_alloc_hook+0x59/0x300 [ 651.228310][T10887] ? resv_map_alloc+0x88/0x2c0 [ 651.233122][T10887] __kmem_cache_alloc_node+0x53/0x250 [ 651.238648][T10887] ? resv_map_alloc+0x88/0x2c0 [ 651.243459][T10887] kmalloc_trace+0x2a/0xe0 [ 651.247932][T10887] resv_map_alloc+0x88/0x2c0 [ 651.252586][T10887] hugetlbfs_get_inode+0x64/0x500 [ 651.257665][T10887] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 651.263781][T10887] hugetlb_file_setup+0x215/0x610 [ 651.268865][T10887] ksys_mmap_pgoff+0x1e6/0x720 [ 651.273780][T10887] do_syscall_64+0x55/0xb0 [ 651.278243][T10887] ? clear_bhb_loop+0x40/0x90 [ 651.283068][T10887] ? clear_bhb_loop+0x40/0x90 [ 651.287795][T10887] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 651.293732][T10887] RIP: 0033:0x7fe05ff9e159 [ 651.298194][T10887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.317937][T10887] RSP: 002b:00007fe060f02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 651.326409][T10887] RAX: ffffffffffffffda RBX: 00007fe060225fa0 RCX: 00007fe05ff9e159 [ 651.334422][T10887] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 651.342519][T10887] RBP: 00007fe060035024 R08: ffffffffffffffff R09: 0000000000000000 [ 651.350547][T10887] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 651.358572][T10887] R13: 00007fe060226038 R14: 00007fe060225fa0 R15: 00007ffd11d79308 [ 651.366608][T10887] [ 651.855215][ T6131] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 651.904529][ T6128] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 652.051852][ T6131] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 652.062108][ T6131] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 652.073034][ T6131] usb 4-1: Product: syz [ 652.078508][ T6131] usb 4-1: Manufacturer: syz [ 652.083527][ T6131] usb 4-1: SerialNumber: syz [ 652.097050][ T6128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.099236][ T6131] usb 4-1: config 0 descriptor?? [ 652.118049][ T6128] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 652.140662][ T6131] ch341 4-1:0.0: ch341-uart converter detected [ 652.141503][ T6128] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 652.159695][ T6128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 652.168631][ T6128] usb 5-1: Product: syz [ 652.173323][ T6128] usb 5-1: Manufacturer: syz [ 652.182640][ T6128] usb 5-1: SerialNumber: syz [ 652.414267][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 652.425338][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 652.436323][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 652.446705][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 652.456564][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1529'. [ 652.472480][T10908] 9pnet_virtio: no channels available for device syz [ 653.203275][ T6131] usb 4-1: failed to receive control message: -110 [ 655.182402][ T6131] ch341-uart: probe of ttyUSB0 failed with error -110 [ 655.262777][ T6131] usb 4-1: USB disconnect, device number 50 [ 655.263203][ T6128] usb 5-1: USB disconnect, device number 40 [ 655.285473][ T6131] ch341 4-1:0.0: device disconnected [ 657.773314][T10937] Set syz0 is full, maxelem 0 reached [ 658.105369][ T5765] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 658.154753][ T6128] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 658.296834][ T5765] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.309891][ T5765] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 658.322252][ T5765] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 658.333371][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.342525][ T5765] usb 1-1: Product: syz [ 658.347602][ T5765] usb 1-1: Manufacturer: syz [ 658.352229][ T5765] usb 1-1: SerialNumber: syz [ 658.371652][ T6128] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 658.383680][ T6128] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 658.392524][ T6119] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 658.400630][ T6128] usb 2-1: Product: syz [ 658.405348][ T6128] usb 2-1: Manufacturer: syz [ 658.410065][ T6128] usb 2-1: SerialNumber: syz [ 658.418783][ T6128] usb 2-1: config 0 descriptor?? [ 658.426963][ T6128] ch341 2-1:0.0: ch341-uart converter detected [ 658.624544][ T6119] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 658.752476][ T6119] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 659.436279][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 659.449539][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 659.461148][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 659.472480][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 659.483504][T10956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1545'. [ 659.503147][T10956] 9pnet_virtio: no channels available for device syz [ 659.908977][ T6128] usb 2-1: failed to receive control message: -110 [ 660.838195][ T6119] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 660.899050][ T6128] ch341-uart: probe of ttyUSB0 failed with error -110 [ 660.906660][ T6119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.924233][T10950] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 660.945485][ T6119] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 661.012040][ T6128] usb 2-1: USB disconnect, device number 49 [ 661.012105][ T5765] usb 1-1: USB disconnect, device number 47 [ 661.050132][ T6128] ch341 2-1:0.0: device disconnected [ 661.189224][ T6131] usb 5-1: USB disconnect, device number 41 [ 662.714598][ T6119] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 662.764739][ T6128] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 662.805378][ T6134] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 662.828839][T11001] Set syz0 is full, maxelem 0 reached [ 662.896565][T11003] autofs4:pid:11003:autofs_fill_super: called with bogus options [ 662.922873][ T6119] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 662.943953][ T6119] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 662.957004][ T6119] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 662.971640][ T6119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.981430][ T6119] usb 1-1: Product: syz [ 662.992676][ T6119] usb 1-1: Manufacturer: syz [ 662.997102][ T6134] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 662.998495][ T6119] usb 1-1: SerialNumber: syz [ 663.013306][ T6128] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 663.025439][ T6134] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 663.035315][ T6128] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 663.035343][ T6128] usb 4-1: Product: syz [ 663.035359][ T6128] usb 4-1: Manufacturer: syz [ 663.035375][ T6128] usb 4-1: SerialNumber: syz [ 663.059626][ T6134] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 663.060243][ T6128] usb 4-1: config 0 descriptor?? [ 663.069573][ T6134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.109707][ T6128] ch341 4-1:0.0: ch341-uart converter detected [ 663.116417][T10993] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 663.142134][ T6134] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 663.402296][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 663.416260][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 663.427728][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 663.439375][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 663.449987][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1561'. [ 663.469047][T11010] 9pnet_virtio: no channels available for device syz [ 664.551040][ T6128] usb 4-1: failed to receive control message: -110 [ 666.086207][ T6134] usb 5-1: USB disconnect, device number 42 [ 666.879454][ T6131] usb 1-1: USB disconnect, device number 48 [ 667.046798][ T6128] ch341-uart: probe of ttyUSB0 failed with error -110 [ 667.062643][ T6128] usb 4-1: USB disconnect, device number 51 [ 667.070560][ T6128] ch341 4-1:0.0: device disconnected [ 667.936175][T11038] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1579'. [ 668.114609][ T6128] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 668.237497][ T6119] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 668.316580][ T6128] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 668.331172][ T6128] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 668.343328][ T6128] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 668.357438][ T6128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.397453][T11036] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 668.429645][ T6119] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 668.442526][ T6128] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 668.452060][ T6119] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 668.486484][ T6119] usb 1-1: Product: syz [ 668.499630][ T6119] usb 1-1: Manufacturer: syz [ 668.506134][ T6119] usb 1-1: SerialNumber: syz [ 668.568746][ T6119] usb 1-1: config 0 descriptor?? [ 668.606052][ T6119] ch341 1-1:0.0: ch341-uart converter detected [ 670.231318][ T6119] usb 1-1: failed to receive control message: -110 [ 671.684263][ T6119] ch341-uart: probe of ttyUSB0 failed with error -110 [ 671.790397][ T5765] usb 4-1: USB disconnect, device number 52 [ 671.882788][ T6131] usb 1-1: USB disconnect, device number 49 [ 671.929475][ T6131] ch341 1-1:0.0: device disconnected [ 672.079970][T11062] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1589'. [ 673.303651][T11087] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1598'. [ 673.435646][ T6134] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 673.500571][T11090] md: could not open device unknown-block(1,0). [ 673.596176][T11097] binder_alloc: 11096: binder_alloc_buf, no vma [ 673.629615][ T6134] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 673.642643][ T6134] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 673.656451][T11100] binder_alloc: 11096: binder_alloc_buf, no vma [ 673.663632][ T6134] usb 2-1: Product: syz [ 673.669961][ T6134] usb 2-1: Manufacturer: syz [ 673.678209][ T6134] usb 2-1: SerialNumber: syz [ 673.687219][ T6134] usb 2-1: config 0 descriptor?? [ 673.701136][ T6134] ch341 2-1:0.0: ch341-uart converter detected [ 673.734700][ T6119] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 673.928756][ T6119] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.972869][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 673.986113][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 673.996953][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 674.007308][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 674.017170][T11101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 674.032296][T11101] 9pnet_virtio: no channels available for device syz [ 674.810384][ T6134] usb 2-1: failed to receive control message: -110 [ 675.184013][ T6119] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 675.255730][ T6119] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 675.413264][ T6119] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.662777][T11092] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 675.821737][ T6119] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 676.536917][ T6134] ch341-uart: probe of ttyUSB0 failed with error -110 [ 676.830635][ T6134] usb 2-1: USB disconnect, device number 50 [ 678.686481][ T6134] ch341 2-1:0.0: device disconnected [ 678.702670][ T9983] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 678.782810][ T6131] usb 5-1: USB disconnect, device number 43 [ 679.106880][T11117] 0x000000000000-0x0000c0207504 : "" [ 679.112867][T11117] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x20000 [ 679.147969][T11118] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1609'. [ 679.194176][T11119] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 679.241309][T11117] ftl_cs: FTL header not found. [ 679.470461][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 679.478917][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.822384][T11129] binder: BINDER_SET_CONTEXT_MGR already set [ 679.835538][T11129] binder: 11126:11129 ioctl 4018620d 200000004a80 returned -16 [ 679.896439][T11131] Illegal XDP return value 4294967274 on prog (id 100) dev syz_tun, expect packet loss! [ 680.204547][ T6119] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 680.290529][T11119] orangefs_mount: mount request failed with -4 [ 680.404679][ T6119] usb 4-1: Using ep0 maxpacket: 8 [ 680.411581][ T6119] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.441363][ T6119] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.469437][ T6119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 680.495706][ T6119] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 680.530934][ T6119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.566321][ T6119] usb 4-1: config 0 descriptor?? [ 681.072204][ T6119] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 681.097690][ T6119] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 681.124870][ T6119] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 681.152361][ T6119] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 681.175862][ T6119] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 681.217525][ T6119] mcp2221 0003:04D8:00DD.0001: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 681.470062][ T6119] usb 4-1: USB disconnect, device number 53 [ 681.549693][ T6131] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 681.767840][ T6131] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 681.791737][ T6131] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 681.805462][ T6131] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 681.825511][ T6131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.875963][T11141] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 681.909341][ T6131] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 682.457784][T11169] FAULT_INJECTION: forcing a failure. [ 682.457784][T11169] name failslab, interval 1, probability 0, space 0, times 0 [ 682.478620][ T6119] usb 5-1: USB disconnect, device number 44 [ 682.493528][T11169] CPU: 1 PID: 11169 Comm: syz.3.1629 Not tainted syzkaller #0 [ 682.501072][T11169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 682.511267][T11169] Call Trace: [ 682.514600][T11169] [ 682.517580][T11169] dump_stack_lvl+0x18c/0x250 [ 682.522331][T11169] ? show_regs_print_info+0x20/0x20 [ 682.527613][T11169] ? load_image+0x420/0x420 [ 682.532185][T11169] ? __might_sleep+0xe0/0xe0 [ 682.537020][T11169] ? __lock_acquire+0x7d80/0x7d80 [ 682.542104][T11169] ? btf_new_fd+0x5a6/0x9e0 [ 682.546776][T11169] should_fail_ex+0x394/0x4c0 [ 682.551494][T11169] should_failslab+0x9/0x20 [ 682.556030][T11169] slab_pre_alloc_hook+0x59/0x300 [ 682.561175][T11169] ? resv_map_alloc+0x51/0x2c0 [ 682.565963][T11169] __kmem_cache_alloc_node+0x53/0x250 [ 682.571365][T11169] ? resv_map_alloc+0x51/0x2c0 [ 682.576164][T11169] kmalloc_trace+0x2a/0xe0 [ 682.580696][T11169] resv_map_alloc+0x51/0x2c0 [ 682.585309][T11169] hugetlbfs_get_inode+0x64/0x500 [ 682.590620][T11169] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 682.596627][T11169] hugetlb_file_setup+0x215/0x610 [ 682.601722][T11169] ksys_mmap_pgoff+0x1e6/0x720 [ 682.606516][T11169] do_syscall_64+0x55/0xb0 [ 682.611036][T11169] ? clear_bhb_loop+0x40/0x90 [ 682.615737][T11169] ? clear_bhb_loop+0x40/0x90 [ 682.620436][T11169] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.626351][T11169] RIP: 0033:0x7fa360b9e159 [ 682.630789][T11169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.650597][T11169] RSP: 002b:00007fa361a77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 682.659046][T11169] RAX: ffffffffffffffda RBX: 00007fa360e25fa0 RCX: 00007fa360b9e159 [ 682.667055][T11169] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 682.675044][T11169] RBP: 00007fa360c35024 R08: ffffffffffffffff R09: 0000000000000000 [ 682.683037][T11169] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 682.691493][T11169] R13: 00007fa360e26038 R14: 00007fa360e25fa0 R15: 00007fff7a8801e8 [ 682.699659][T11169] [ 682.709690][T11164] md: could not open device unknown-block(1,0). [ 682.731660][ T9983] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 682.743661][ T9983] Bluetooth: hci2: Injecting HCI hardware error event [ 682.753630][ T9983] Bluetooth: hci2: hardware error 0x00 [ 684.272867][T11196] FAULT_INJECTION: forcing a failure. [ 684.272867][T11196] name failslab, interval 1, probability 0, space 0, times 0 [ 684.416570][T11196] CPU: 0 PID: 11196 Comm: syz.4.1639 Not tainted syzkaller #0 [ 684.424185][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.434296][T11196] Call Trace: [ 684.437583][T11196] [ 684.440535][T11196] dump_stack_lvl+0x18c/0x250 [ 684.445426][T11196] ? show_regs_print_info+0x20/0x20 [ 684.450646][T11196] ? load_image+0x420/0x420 [ 684.455178][T11196] ? __might_sleep+0xe0/0xe0 [ 684.459788][T11196] ? __lock_acquire+0x7d80/0x7d80 [ 684.464853][T11196] ? btf_new_fd+0x5a6/0x9e0 [ 684.469401][T11196] should_fail_ex+0x394/0x4c0 [ 684.474402][T11196] should_failslab+0x9/0x20 [ 684.478959][T11196] slab_pre_alloc_hook+0x59/0x300 [ 684.484045][T11196] ? resv_map_alloc+0x51/0x2c0 [ 684.488859][T11196] __kmem_cache_alloc_node+0x53/0x250 [ 684.494371][T11196] ? resv_map_alloc+0x51/0x2c0 [ 684.499202][T11196] kmalloc_trace+0x2a/0xe0 [ 684.503674][T11196] resv_map_alloc+0x51/0x2c0 [ 684.508310][T11196] hugetlbfs_get_inode+0x64/0x500 [ 684.513381][T11196] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 684.519409][T11196] hugetlb_file_setup+0x215/0x610 [ 684.524570][T11196] ksys_mmap_pgoff+0x1e6/0x720 [ 684.529399][T11196] do_syscall_64+0x55/0xb0 [ 684.533881][T11196] ? clear_bhb_loop+0x40/0x90 [ 684.538638][T11196] ? clear_bhb_loop+0x40/0x90 [ 684.543363][T11196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.549739][T11196] RIP: 0033:0x7fb49dd9e159 [ 684.554197][T11196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.574374][T11196] RSP: 002b:00007fb49ebed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 684.582873][T11196] RAX: ffffffffffffffda RBX: 00007fb49e025fa0 RCX: 00007fb49dd9e159 [ 684.590901][T11196] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 684.598924][T11196] RBP: 00007fb49de35024 R08: ffffffffffffffff R09: 0000000000000000 [ 684.606978][T11196] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 684.615008][T11196] R13: 00007fb49e026038 R14: 00007fb49e025fa0 R15: 00007ffd3ea6b6d8 [ 684.623068][T11196] [ 684.807912][ T9983] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 685.175591][ T6131] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 685.235400][ T6134] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 685.364886][ T6131] usb 2-1: Using ep0 maxpacket: 8 [ 685.376546][ T6131] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.405727][ T6131] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.430161][ T6131] usb 2-1: config 0 interface 0 has no altsetting 0 [ 685.453082][ T6134] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 685.472517][ T6131] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 685.483183][ T6134] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 685.500577][ T6131] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.510617][ T6134] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 685.531091][ T6134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.543491][ T6131] usb 2-1: config 0 descriptor?? [ 685.589278][T11211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 686.008508][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.330911][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.477071][ T6134] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 686.520699][ T6131] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 686.529004][ T6131] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 686.537433][ T6131] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 686.548053][ T6131] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 686.556675][ T6131] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 686.566673][ T6131] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 686.677916][ T6134] usb 5-1: USB disconnect, device number 45 [ 686.903292][ T6128] usb 2-1: USB disconnect, device number 51 [ 687.400164][T11234] FAULT_INJECTION: forcing a failure. [ 687.400164][T11234] name fail_futex, interval 1, probability 0, space 0, times 1 [ 687.427016][T11234] CPU: 0 PID: 11234 Comm: syz.0.1654 Not tainted syzkaller #0 [ 687.434577][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.445022][T11234] Call Trace: [ 687.448354][T11234] [ 687.451340][T11234] dump_stack_lvl+0x18c/0x250 [ 687.456071][T11234] ? show_regs_print_info+0x20/0x20 [ 687.461306][T11234] ? load_image+0x420/0x420 [ 687.465909][T11234] should_fail_ex+0x394/0x4c0 [ 687.470602][T11234] get_futex_key+0x136/0x1030 [ 687.475311][T11234] ? lockdep_hardirqs_on+0x98/0x150 [ 687.480536][T11234] ? futex_setup_timer+0xc0/0xc0 [ 687.485592][T11234] futex_wake+0x127/0x4f0 [ 687.489969][T11234] ? __kmem_cache_free+0xba/0x1f0 [ 687.495052][T11234] ? futex_wake_mark+0x150/0x150 [ 687.500223][T11234] ? btf_new_fd+0x5a6/0x9e0 [ 687.504897][T11234] ? bpf_btf_show_fdinfo+0x80/0x80 [ 687.510079][T11234] do_futex+0x35d/0x3e0 [ 687.514354][T11234] ? __ia32_sys_get_robust_list+0x110/0x110 [ 687.520289][T11234] ? bpf_link_show_fdinfo+0x390/0x390 [ 687.525768][T11234] __se_sys_futex+0x3a9/0x440 [ 687.530458][T11234] ? __x64_sys_futex+0xf0/0xf0 [ 687.535286][T11234] ? __x64_sys_futex+0x21/0xf0 [ 687.540190][T11234] do_syscall_64+0x55/0xb0 [ 687.544647][T11234] ? clear_bhb_loop+0x40/0x90 [ 687.549329][T11234] ? clear_bhb_loop+0x40/0x90 [ 687.554010][T11234] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 687.559907][T11234] RIP: 0033:0x7f1ecdb9e159 [ 687.564428][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.584139][T11234] RSP: 002b:00007f1eceae50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 687.592585][T11234] RAX: ffffffffffffffda RBX: 00007f1ecde25fa8 RCX: 00007f1ecdb9e159 [ 687.600755][T11234] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1ecde25fac [ 687.608751][T11234] RBP: 00007f1ecde25fa0 R08: 0000000000745d1e R09: 0000000000000000 [ 687.616854][T11234] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 687.624867][T11234] R13: 00007f1ecde26038 R14: 00007fff457ad9e0 R15: 00007fff457adac8 [ 687.632872][T11234] [ 689.337505][ T6134] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 689.431054][T11261] syzkaller0: entered promiscuous mode [ 689.455599][T11261] syzkaller0: entered allmulticast mode [ 689.532204][ T6134] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 689.555275][ T6134] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 689.569703][ T6134] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 689.580059][ T6134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.700903][T11257] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 689.737601][ T6134] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 689.986603][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 690.166675][T11264] zram0: detected capacity change from 0 to 8 [ 690.286755][ T6128] usb 2-1: USB disconnect, device number 52 [ 692.141857][T11295] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 692.289326][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 692.345490][ T6134] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 692.358049][ T9983] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 692.573328][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.850516][ T6134] usb 1-1: Using ep0 maxpacket: 32 [ 692.889481][ T6134] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 692.901003][ T6134] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 692.914891][ T6134] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 692.931510][ T6134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 692.953437][ T6134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 692.992623][ T6134] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 693.162704][ T6134] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 693.345808][ T6134] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 693.363135][ T6134] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 693.393669][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.440814][ T6134] usb 1-1: config 0 descriptor?? [ 693.529267][T11311] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1679'. [ 693.711956][ T6134] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 50 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 693.745388][ T6134] usb 1-1: USB disconnect, device number 50 [ 693.760317][ T6134] usblp0: removed [ 693.774688][ T6119] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 693.883126][T11295] orangefs_mount: mount request failed with -4 [ 694.404555][ T9983] Bluetooth: hci3: command 0x0406 tx timeout [ 694.765490][ T6119] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 694.777537][ T6119] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 694.788764][ T6119] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 694.800547][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.816535][T11309] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 694.841615][ T6119] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 695.085440][ T6134] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 695.297651][ T6119] usb 2-1: USB disconnect, device number 53 [ 695.640976][T11334] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1689'. [ 695.952566][T11338] binder: BINDER_SET_CONTEXT_MGR already set [ 696.026601][T11338] binder: 11337:11338 ioctl 4018620d 200000004a80 returned -16 [ 697.529267][T11355] netlink: 'syz.1.1695': attribute type 8 has an invalid length. [ 697.983289][T11368] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1699'. [ 698.105076][T11370] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 698.315905][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 698.323799][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 698.501462][T11380] binder: BINDER_SET_CONTEXT_MGR already set [ 698.513076][T11380] binder: 11379:11380 ioctl 4018620d 200000004a80 returned -16 [ 698.695196][ T6134] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 698.878242][ T6134] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.893494][ T6134] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 698.910636][ T6134] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.930869][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.962989][T11377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 698.991179][ T6134] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 699.862131][ T6134] usb 1-1: USB disconnect, device number 52 [ 699.929443][T11373] orangefs_mount: mount request failed with -4 [ 701.041679][T11403] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1710'. [ 701.337234][T11409] binder: BINDER_SET_CONTEXT_MGR already set [ 701.398776][T11409] binder: 11408:11409 ioctl 4018620d 200000004a80 returned -16 [ 703.072710][T11439] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1720'. [ 703.386388][T11445] binder: BINDER_SET_CONTEXT_MGR already set [ 703.392414][T11445] binder: 11444:11445 ioctl 4018620d 200000004a80 returned -16 [ 703.484747][ T6134] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 703.669395][ T6134] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 703.681459][ T6134] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 703.706919][ T6134] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 703.717799][ T6134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.731842][T11441] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 703.747815][ T6134] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 704.095310][T11452] netlink: 'syz.4.1724': attribute type 8 has an invalid length. [ 704.251406][ T6134] usb 1-1: USB disconnect, device number 53 [ 706.155857][T11474] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 706.258011][ T3500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.571146][ T3500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.371878][T11487] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1733'. [ 707.720474][T11475] orangefs_mount: mount request failed with -4 [ 708.284645][ T6134] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 708.299548][T11502] netlink: 'syz.0.1739': attribute type 8 has an invalid length. [ 708.489434][ T6134] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 708.507371][ T6134] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 709.398221][ T6134] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 709.410937][ T6134] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.436549][T11515] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1744'. [ 709.437401][T11495] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 709.481699][ T6134] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 709.774805][ T6119] usb 2-1: USB disconnect, device number 54 [ 710.080404][T11527] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 710.101560][T11526] binder: BINDER_SET_CONTEXT_MGR already set [ 710.122798][T11526] binder: 11525:11526 ioctl 4018620d 200000004a80 returned -16 [ 710.666760][T11534] 9pnet_virtio: no channels available for device syz [ 710.698290][T11534] CacheFiles: Failed to register: -95 [ 711.060717][T11541] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1754'. [ 711.538955][ T6119] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 711.769725][ T6119] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 711.844706][ T6119] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 711.866768][T11567] binder: BINDER_SET_CONTEXT_MGR already set [ 711.887787][ T6119] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 711.905484][T11567] binder: 11566:11567 ioctl 4018620d 200000004a80 returned -16 [ 711.955000][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.005096][T11551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 712.026345][ T6119] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 712.370185][ T6134] usb 2-1: USB disconnect, device number 55 [ 712.941509][T11584] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1766'. [ 713.192122][T11594] loop5: detected capacity change from 0 to 7 [ 713.280744][T11594] Dev loop5: unable to read RDB block 7 [ 713.297800][T11594] loop5: unable to read partition table [ 713.395592][T11594] loop5: partition table beyond EOD, truncated [ 713.567697][T11594] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 713.634747][T11607] binder: BINDER_SET_CONTEXT_MGR already set [ 713.699375][T11607] binder: 11606:11607 ioctl 4018620d 200000004a80 returned -16 [ 714.559958][T11622] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1777'. [ 714.655927][ T6134] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 714.860174][ T6134] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 714.882416][ T6134] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 714.904937][ T6134] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 714.927222][ T6134] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.969980][T11620] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 714.982777][ T6134] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 715.269532][ T6134] usb 4-1: USB disconnect, device number 54 [ 715.689842][T11627] orangefs_mount: mount request failed with -4 [ 716.649056][T11650] binder: BINDER_SET_CONTEXT_MGR already set [ 716.655892][T11650] binder: 11649:11650 ioctl 4018620d 200000004a80 returned -16 [ 716.686072][T11652] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1786'. [ 717.125653][T11399] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 717.316885][T11399] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 717.330550][T11399] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 717.349629][T11399] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.366765][T11399] usb 4-1: Product: syz [ 717.377094][T11399] usb 4-1: Manufacturer: syz [ 717.388162][T11399] usb 4-1: SerialNumber: syz [ 717.409704][T11399] sisusb 4-1:1.0: Invalid USB2VGA device [ 717.418800][T11399] sisusb: probe of 4-1:1.0 failed with error -22 [ 717.613733][T11677] binder_alloc: 11676: binder_alloc_buf, no vma [ 718.032478][T11683] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1795'. [ 718.103828][T11673] orangefs_mount: mount request failed with -4 [ 719.488100][T11701] binder_alloc: 11700: binder_alloc_buf, no vma [ 719.911958][T11399] usb 4-1: USB disconnect, device number 55 [ 720.708044][T11717] orangefs_mount: mount request failed with -4 [ 721.674769][T11747] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 721.826301][T11751] binder_alloc: 11750: binder_alloc_buf, no vma [ 722.435328][ T5818] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 722.628355][ T5818] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 722.698710][ T5818] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 722.733749][ T5818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.788920][ T5818] usb 5-1: Product: syz [ 722.822651][ T5818] usb 5-1: Manufacturer: syz [ 722.859352][ T5818] usb 5-1: SerialNumber: syz [ 722.923269][ T5818] sisusb 5-1:1.0: Invalid USB2VGA device [ 722.952561][ T5818] sisusb: probe of 5-1:1.0 failed with error -22 [ 723.792680][T11793] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 723.860444][T11793] ERROR: device name not specified. [ 725.452060][ T6134] usb 5-1: USB disconnect, device number 46 [ 725.577207][T11816] loop5: detected capacity change from 0 to 7 [ 725.586930][T11816] Dev loop5: unable to read RDB block 7 [ 725.592687][T11816] loop5: unable to read partition table [ 725.599198][T11816] loop5: partition table beyond EOD, truncated [ 725.606134][T11816] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 726.054552][ T6126] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 726.256543][ T6126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 726.312449][ T6126] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 726.354669][ T6126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.395685][ T6126] usb 1-1: Product: syz [ 726.424239][ T6126] usb 1-1: Manufacturer: syz [ 726.428923][ T6126] usb 1-1: SerialNumber: syz [ 726.494708][ T6126] sisusb 1-1:1.0: Invalid USB2VGA device [ 726.517222][ T6126] sisusb: probe of 1-1:1.0 failed with error -22 [ 727.513069][T11845] syzkaller0: entered promiscuous mode [ 727.519687][T11845] syzkaller0: entered allmulticast mode [ 728.767419][ T6119] usb 1-1: USB disconnect, device number 54 [ 729.142468][T11867] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 729.204457][T11867] ERROR: device name not specified. [ 731.125551][ T5818] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 731.317564][ T5818] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.331355][ T5818] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 731.343793][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.392856][ T5818] usb 2-1: Product: syz [ 731.399287][ T5818] usb 2-1: Manufacturer: syz [ 731.418550][ T5818] usb 2-1: SerialNumber: syz [ 731.449227][ T5818] sisusb 2-1:1.0: Invalid USB2VGA device [ 731.465610][ T5818] sisusb: probe of 2-1:1.0 failed with error -22 [ 733.150803][T11937] loop5: detected capacity change from 0 to 7 [ 733.301708][T11937] Dev loop5: unable to read RDB block 7 [ 733.312897][T11937] loop5: unable to read partition table [ 733.329220][T11937] loop5: partition table beyond EOD, truncated [ 733.351717][T11937] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 733.434654][ T6119] usb 2-1: USB disconnect, device number 56 [ 733.453495][T11943] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 733.653267][T11943] ERROR: device name not specified. [ 735.329886][ T6119] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 735.667000][ T6119] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 735.679075][ T6119] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 735.690834][ T6119] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.717206][ T6119] usb 1-1: Product: syz [ 735.738362][ T6119] usb 1-1: Manufacturer: syz [ 735.753352][ T6119] usb 1-1: SerialNumber: syz [ 735.770055][ T6119] sisusb 1-1:1.0: Invalid USB2VGA device [ 735.807844][ T6119] sisusb: probe of 1-1:1.0 failed with error -22 [ 737.677360][ T5818] usb 1-1: USB disconnect, device number 55 [ 738.057294][T12026] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 738.535729][T12035] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 739.180193][T12026] orangefs_mount: mount request failed with -4 [ 740.365182][ T5818] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 740.496423][T12052] loop5: detected capacity change from 0 to 7 [ 740.525252][T12052] Dev loop5: unable to read RDB block 7 [ 740.536842][T12052] loop5: unable to read partition table [ 740.543373][T12052] loop5: partition table beyond EOD, truncated [ 740.553756][T12052] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 740.556995][ T5818] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 740.601394][ T5818] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 740.643231][ T5818] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 740.655780][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.666647][ T5818] usb 1-1: Product: syz [ 740.681510][ T5818] usb 1-1: Manufacturer: syz [ 740.703190][ T5818] usb 1-1: SerialNumber: syz [ 740.976581][ T5818] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 56 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 741.198296][ T6134] usb 1-1: USB disconnect, device number 56 [ 741.248216][ T6134] usblp0: removed [ 742.827757][T12087] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 743.271767][ T5818] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 743.477218][ T5818] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 743.491104][ T5818] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 743.509728][ T5818] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 743.548818][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.555120][T12104] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 743.665474][T12093] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 743.859986][ T5818] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 743.873745][T12087] orangefs_mount: mount request failed with -4 [ 744.232878][ T5818] usb 4-1: USB disconnect, device number 56 [ 746.246101][ T5818] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 746.289229][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 746.302725][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 746.317090][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 746.328412][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 746.339378][T12139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 746.358082][T12139] 9pnet_virtio: no channels available for device syz [ 746.496279][ T5818] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 747.100480][ T5818] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 747.128931][ T5818] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 747.139199][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.163372][ T5818] usb 4-1: Product: syz [ 747.171549][ T5818] usb 4-1: Manufacturer: syz [ 747.188497][ T5818] usb 4-1: SerialNumber: syz [ 747.264643][T12144] binder: 12143:12144 ioctl 4018620d 0 returned -22 [ 747.439437][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.446562][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.456564][ T5818] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 747.656271][ T5818] usb 4-1: USB disconnect, device number 57 [ 747.667261][ T5818] usblp0: removed [ 747.774575][ T6119] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 747.986624][ T6119] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 747.998372][ T6119] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 748.008909][ T6119] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 748.018539][ T6119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.030819][T12150] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 748.049099][ T6119] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 748.340181][ T5818] usb 2-1: USB disconnect, device number 57 [ 748.651395][T12163] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 748.811684][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 748.827052][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 748.841603][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 748.852108][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 748.862108][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 748.884659][T12165] 9pnet_virtio: no channels available for device syz [ 750.995958][T12182] binder: 12181:12182 ioctl 4018620d 0 returned -22 [ 751.098749][T12185] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 751.209994][T12163] orangefs_mount: mount request failed with -4 [ 751.416661][T12189] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 751.428639][T12189] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 751.437060][T12189] CPU: 0 PID: 12189 Comm: syz.0.1934 Not tainted syzkaller #0 [ 751.444533][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 751.454761][T12189] RIP: 0010:vsscanf+0x19a/0x2520 [ 751.459705][T12189] Code: 48 c7 c6 50 7d 74 8e e8 b4 e2 06 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 751.479408][T12189] RSP: 0018:ffffc9000d57f640 EFLAGS: 00010246 [ 751.485582][T12189] RAX: 0000000000000000 RBX: ffffffff8ad68681 RCX: 0000000000000001 [ 751.493743][T12189] RDX: ffffffff8a80947c RSI: ffffffff8e747d50 RDI: 0000000000000030 [ 751.501713][T12189] RBP: ffffc9000d57f770 R08: ffff8880285c9e00 R09: 0000000000000002 [ 751.509686][T12189] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad68680 [ 751.517663][T12189] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 751.525778][T12189] FS: 00007f1eceae56c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 751.534828][T12189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.541608][T12189] CR2: 000000110c24ceb0 CR3: 0000000026395000 CR4: 00000000003506f0 [ 751.549782][T12189] Call Trace: [ 751.553095][T12189] [ 751.556072][T12189] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 751.562442][T12189] ? bprintf+0x140/0x140 [ 751.566708][T12189] ? lock_acquire+0x208/0x420 [ 751.572008][T12189] sscanf+0xe3/0x140 [ 751.575993][T12189] ? __might_fault+0xaa/0x120 [ 751.580687][T12189] ? skip_atoi+0xe0/0xe0 [ 751.584955][T12189] ? stack_trace_save+0xaa/0x100 [ 751.589902][T12189] ? __might_fault+0xaa/0x120 [ 751.594581][T12189] ? __might_fault+0xc6/0x120 [ 751.599262][T12189] ? __might_fault+0xaa/0x120 [ 751.603933][T12189] ? split_huge_pages_write+0x372/0x1b60 [ 751.609580][T12189] split_huge_pages_write+0x391/0x1b60 [ 751.615158][T12189] ? lockdep_unlock+0x146/0x2e0 [ 751.620122][T12189] ? lockdep_lock+0x230/0x230 [ 751.624824][T12189] ? add_lock_to_list+0x191/0x280 [ 751.629875][T12189] ? deferred_split_scan+0x940/0x940 [ 751.635236][T12189] ? debugfs_file_get+0x36c/0x460 [ 751.640305][T12189] ? rcu_read_lock_any_held+0xb4/0x140 [ 751.645787][T12189] ? rcu_read_lock_bh_held+0x100/0x100 [ 751.651285][T12189] full_proxy_write+0x110/0x1c0 [ 751.656348][T12189] ? full_proxy_read+0x1c0/0x1c0 [ 751.662099][T12189] vfs_write+0x299/0x9a0 [ 751.666374][T12189] ? file_end_write+0x250/0x250 [ 751.671250][T12189] ? __fget_files+0x28/0x460 [ 751.675848][T12189] ? __fget_files+0x3fc/0x460 [ 751.680549][T12189] ? __fdget_pos+0x2a3/0x330 [ 751.685329][T12189] ? ksys_write+0x74/0x260 [ 751.689782][T12189] ksys_write+0x151/0x260 [ 751.694157][T12189] ? __ia32_sys_read+0x90/0x90 [ 751.698932][T12189] ? lockdep_hardirqs_on+0x98/0x150 [ 751.704138][T12189] do_syscall_64+0x55/0xb0 [ 751.708552][T12189] ? clear_bhb_loop+0x40/0x90 [ 751.713242][T12189] ? clear_bhb_loop+0x40/0x90 [ 751.717943][T12189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 751.723843][T12189] RIP: 0033:0x7f1ecdb9e159 [ 751.728287][T12189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.747935][T12189] RSP: 002b:00007f1eceae5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 751.756516][T12189] RAX: ffffffffffffffda RBX: 00007f1ecde25fa0 RCX: 00007f1ecdb9e159 [ 751.764514][T12189] RDX: 0000000000000001 RSI: 0000200000000180 RDI: 0000000000000003 [ 751.772511][T12189] RBP: 00007f1ecdc35024 R08: 0000000000000000 R09: 0000000000000000 [ 751.780497][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 751.788484][T12189] R13: 00007f1ecde26038 R14: 00007f1ecde25fa0 R15: 00007fff457adac8 [ 751.796466][T12189] [ 751.799483][T12189] Modules linked in: [ 751.865316][T12189] ---[ end trace 0000000000000000 ]--- [ 751.870973][T12189] RIP: 0010:vsscanf+0x19a/0x2520 [ 751.878037][T12189] Code: 48 c7 c6 50 7d 74 8e e8 b4 e2 06 f7 41 83 fe 25 74 4d 45 85 f6 0f 84 1e 22 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 bd 1b 00 00 41 0f b6 1f 45 0f b6 f6 44 [ 751.899610][T12189] RSP: 0018:ffffc9000d57f640 EFLAGS: 00010246 [ 751.918703][T12189] RAX: 0000000000000000 RBX: ffffffff8ad68681 RCX: 0000000000000001 [ 751.977088][T12189] RDX: ffffffff8a80947c RSI: ffffffff8e747d50 RDI: 0000000000000030 [ 751.985761][T12189] RBP: ffffc9000d57f770 R08: ffff8880285c9e00 R09: 0000000000000002 [ 751.994627][T12189] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff8ad68680 [ 752.004467][T12189] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000 [ 752.013139][T12189] FS: 00007f1eceae56c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 752.023297][T12189] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.030964][T12189] CR2: 00007fe0601ed158 CR3: 0000000026395000 CR4: 00000000003506e0 [ 752.041007][T12189] Kernel panic - not syncing: Fatal exception [ 752.047447][T12189] Kernel Offset: disabled [ 752.051778][T12189] Rebooting in 86400 seconds..