last executing test programs: 7.760184424s ago: executing program 2 (id=3733): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xb0000005}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x8000200c}) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000880)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0, 0x1000}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) 7.330197863s ago: executing program 1 (id=3735): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES16], 0x0) 7.139716149s ago: executing program 3 (id=3737): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff", 0x48}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde", 0x6d}], 0x2}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000000)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}, {&(0x7f0000000280)="70f06c25faf4a046c30b0fa7428856df72e7c45644e445efff6bbdd1b874", 0x1e}, {&(0x7f0000000300)="6c9cb88429c2f91d64771d7b9fee5a000cd8456c595f6edcd5a2453c9c0b774758e219816178d70942", 0x29}], 0x5, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 6.817841378s ago: executing program 3 (id=3739): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_open_dev$media(&(0x7f0000000100), 0x80000100, 0x60000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000200)) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000580)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000300)=0x8, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000100)=0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001040)={0xe, {0xfffffae4, 0x1}, {0xfffffffe, 0x0, 0x0, 0x1800000}, {0x8001, 0xfffffffd}}) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x20901) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x810c5701, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r6, 0x400, 0x2) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x40) capset(0x0, &(0x7f0000000240)={0x3, 0x6, 0x8, 0x800001, 0x7ffffffd, 0x2}) syz_io_uring_setup(0x2394, 0x0, &(0x7f0000002580), &(0x7f00000000c0), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000030c0)={0x2020}, 0x2020) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000002c0)={0x56, 0xb49d, 0x4, 0x6, 0xffffffff}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="038709000900eb6d0500000016000000002c047b3b95020000000063460ba000300600fe8000000000000000000000000000bbfe8000000000000000000000000000240000000000000000000000000000000a0051322200004e24000000000000000300ebe972852dd473c4355f526c5c0000010000000400000001000000005ab3934c30b745436958dcefffbff18ca58a06a055fb6389fe9300a5cf7f39675f27c8b1c705ea"], 0x6e) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100000) 6.667782909s ago: executing program 2 (id=3740): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) (fail_nth: 4) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 6.545961854s ago: executing program 3 (id=3742): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x3, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r5, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0xb) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000800)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000a00)={"8b4ee668c48887eb3dfd49da2ceeaa4c", r6, r7, {0x5, 0x4}, {0x2, 0x911}, 0x6, [0x0, 0xc, 0x7, 0x4, 0x0, 0xffff, 0xb7, 0x4, 0x9, 0x351d, 0xffffffffffffffff, 0x1, 0xe68, 0x3b, 0x8, 0x8000]}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000404c05a00b00000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000400)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r4, 0x7af, 0x0) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000480)=[{0x0, 0xdd12}], 0x1, 0x0, 0x0, 0x4008010}, 0x20040851) read$FUSE(r1, &(0x7f0000001d00)={0x2020}, 0x2020) 6.216205514s ago: executing program 2 (id=3743): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000170a01010000000000000000020000080900010073797a300000000047b44bc2c0f4b9eff47b0323775d56d83c050150bf2422d84c6523d464db62654a250544816659000c0cb26ccd0308070ae47fd681eaf08b7385250ee9e2ac92efc3e303f5a9d82f04f3d60876a866a0896dc2c697a0e615507d08b6d194fe9c8a281f4e10b2fbd1f178accbdc7b82a43ba0eaf40953f36f66c8596de3c856942a3d75a656cbb027889e1d64aa59e1fde8ea0925dd756d47f1"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x900, &(0x7f0000000000)={0x9, 0xd, 0x100000}, 0x20) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80007f, &(0x7f00000001c0)="5e9d4b79701f73751756e531", 0xfffffdf4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='io.stat\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) socket$igmp6(0xa, 0x3, 0x2) userfaultfd(0x801) r4 = socket(0x2, 0x3, 0x6) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 5.945944174s ago: executing program 0 (id=3745): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 5.894909264s ago: executing program 0 (id=3746): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x46) 5.793217004s ago: executing program 0 (id=3747): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908", 0x41}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e442", 0x7d}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e26", 0x3a}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e0001"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 5) 4.528194068s ago: executing program 2 (id=3748): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)={0x0, 0x1, 0x5, "de32a12879"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x84, 0x3, "7e0f50"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "1bb114"}}) 4.345854756s ago: executing program 0 (id=3749): prctl$PR_SCHED_CORE(0x53564d41, 0xfffffffffffffffe, 0x0, 0x3, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201500269839140510997160001010203010902120001a90720050a04403f00e0010302"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x53564d41, 0xfffffffffffffffe, 0x0, 0x3, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201500269839140510997160001010203010902120001a90720050a04403f00e0010302"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) (async) 4.175886404s ago: executing program 1 (id=3750): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_open_dev$media(&(0x7f0000000100), 0x80000100, 0x60000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000200)) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000580)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000300)=0x8, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000100)=0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001040)={0xe, {0xfffffae4, 0x1}, {0xfffffffe, 0x0, 0x0, 0x1800000}, {0x8001, 0xfffffffd}}) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x20901) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x810c5701, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r6, 0x400, 0x2) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x40) capset(0x0, &(0x7f0000000240)={0x3, 0x6, 0x8, 0x800001, 0x7ffffffd, 0x2}) syz_io_uring_setup(0x2394, &(0x7f0000000000)={0x0, 0xaa46, 0x0, 0x2, 0x279}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000030c0)={0x2020}, 0x2020) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000002c0)={0x56, 0xb49d, 0x4, 0x6, 0xffffffff}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="038709000900eb6d0500000016000000002c047b3b95020000000063460ba000300600fe8000000000000000000000000000bbfe8000000000000000000000000000240000000000000000000000000000000a0051322200004e24000000000000000300ebe972852dd473c4355f526c5c0000010000000400000001000000005ab3934c30b745436958dcefffbff18ca58a06a055fb6389fe9300a5cf7f39675f27c8b1c705ea"], 0x6e) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100000) 4.097164104s ago: executing program 3 (id=3751): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESHEX=r1, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (fail_nth: 5) 4.014092918s ago: executing program 1 (id=3752): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c35", 0x64}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e0001"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x109000) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x48, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f0000000140)=0x10) socket$pppl2tp(0x18, 0x1, 0x1) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.367789509s ago: executing program 3 (id=3753): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @empty}, {0x2, 0x4e22, @local}, {0x2, 0x20, @empty}, 0x142, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x3, 0x6}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000340)=0x34, 0x4) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0xe) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r3, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) r4 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d00010000000d0904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000002900)=ANY=[@ANYBLOB="002678b6b458f3320400000098ca50b1"], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d6feffffffffffffff537c4c3060c6a405106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000015c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="7c1200001200000128bd7000fedbdf25060208094e244e2000100000030000000300000000020000fd030000000000807f00000001000000b0d436aef62d1d93e89f3ded6b5ff2c4c0d72322f9df7cf3518fa631df4cfd941437b2998153c6028c7a1318dcf60a1122e39373f0cb8a88304ddcb715edffcf01e0de1a48e4c7083cecfc47bed2e35145584a5d9c13109de9b6b5189880233070e0f7255817ea9c20ae2a5d985b8dc443b2a3f100276aa2e7ace483494de5a004ecaecf79562c58021efec0f4b049a6a4562a7c1614805cdd9c1176c9ae5752e864", @ANYRES32=0x0, @ANYBLOB="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"], 0x127c}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x1e) syz_usb_connect(0x5, 0x26d, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0x0, 0x0, 0x47, &(0x7f0000002200)=ANY=[@ANYBLOB="050f47000424100a0d86030000000f08000fc0ff00c058be097b3bf666cdca020c69fbc0000000000000cf000000ffc000000f3f000007100210188b000b100104280005400300810c100a01a00004000ff0678e9156f8ef2780d59c3f65ed42c618dffb50bb20eecf0ada7d3949692957931fb57f2b539908c23c538ed47204bd04ca4f890bd7f5028e0007667e19c29f988ae855ae794afed8ceaf60605515d9fa63df00f35435734277a600b8a752de69ccc7011fbeae377890d01d755fac4e92a4388b99"]}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000027c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000001c0)={0x2020}, 0x1906) r9 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)={0x6c, r10, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @remote, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x0, @mcast2, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) syz_genetlink_get_family_id$devlink(&(0x7f0000002340), r8) 2.783182929s ago: executing program 0 (id=3754): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2.475542751s ago: executing program 0 (id=3755): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d0500904431000000010902120001000080040904"], 0x0) r1 = socket$inet6(0xa, 0x1, 0xfc57) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c) syz_usb_disconnect(r0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.14110054s ago: executing program 1 (id=3756): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@file={0x0, '.\x00'}, 0x6e) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000380)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x14) r3 = dup3(r1, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.017626195s ago: executing program 1 (id=3757): r0 = socket$kcm(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1}, 0x20040900) 1.870026604s ago: executing program 1 (id=3758): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16], 0x0) 1.738402501s ago: executing program 2 (id=3759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x3, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f00000044c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000bc0)=""/247, 0xf7}, {&(0x7f0000000ac0)=""/158, 0x9e}, {&(0x7f0000000880)=""/245, 0xf5}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x4}, 0x8005}], 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000340)="f20f2338650f405a00f20f32670f2169f30f099a7c0000001e010fc79b060000000f01cf673e0f47d7c166bafbacac40", 0x30}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0, 0xf}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) (fail_nth: 6) 21.830972ms ago: executing program 2 (id=3760): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="02180000180000000000000000000000030005000000000002000000e000000200000000000000000800120000000000000000000000000010000000000000000000000000000000ff010000000000000000000000000001fe8000000000000000000000000000aa030006000000000002004374ffffffff000000000000000008001900000000000a"], 0xc0}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = syz_open_dev$media(&(0x7f0000000100), 0x80000100, 0x60000) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r3, 0x12, 0x7, 0x0, &(0x7f0000000200)) ioctl$MEDIA_IOC_ENUM_ENTITIES(r2, 0xc1007c01, &(0x7f0000000580)) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000300)=0x8, 0x4) r5 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_NEXT_CMD_LEN(r5, 0x2283, &(0x7f0000000100)=0x3c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r7, 0xc02c563a, &(0x7f0000001040)={0xe, {0xfffffae4, 0x1}, {0xfffffffe, 0x0, 0x0, 0x1800000}, {0x8001, 0xfffffffd}}) r8 = syz_open_dev$admmidi(&(0x7f0000000100), 0x2, 0x20901) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x810c5701, &(0x7f0000000400)) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r6, 0x400, 0x2) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x40) capset(0x0, &(0x7f0000000240)={0x3, 0x6, 0x8, 0x800001, 0x7ffffffd, 0x2}) syz_io_uring_setup(0x2394, &(0x7f0000000000)={0x0, 0xaa46, 0x0, 0x2, 0x279}, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='fdinfo/3\x00') read$FUSE(r5, &(0x7f00000030c0)={0x2020}, 0x2020) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f00000002c0)={0x56, 0xb49d, 0x4, 0x6, 0xffffffff}) write$tun(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="038709000900eb6d0500000016000000002c047b3b95020000000063460ba000300600fe8000000000000000000000000000bbfe8000000000000000000000000000240000000000000000000000000000000a0051322200004e24000000000000000300ebe972852dd473c4355f526c5c0000010000000400000001000000005ab3934c30b745436958dcefffbff18ca58a06a055fb6389fe9300a5cf7f39675f27c8b1c705ea"], 0x6e) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x100000) 0s ago: executing program 3 (id=3761): r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0xa, 0x8, '9P2000.L'}, 0x15) mq_notify(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xe, 0x4, @thr={0x0, 0x0}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x35, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x1, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect$uac2(0x5, 0xb7, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x35, 0xb2}, [@extension_unit={0x7, 0x24, 0x9, 0x4, 0xa8cf, 0xa}, @effect_unit={0x9, 0x24, 0x7, 0x5, 0x3, 0x1, [0x3]}, @output_terminal={0xc, 0x24, 0x3, 0x1, 0x304, 0x83, 0x5, 0x0, 0x15, 0x22}, @input_terminal={0x10, 0x24, 0x2, 0x1, 0x401, 0x9, 0x7, 0x93, 0x6f, 0x3, 0x7, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1c}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): T15072] vfs_write+0x2a3/0xba0 [ 549.905859][T15072] ? __pfx_vfs_write+0x10/0x10 [ 549.905896][T15072] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 549.905935][T15072] ? lockdep_hardirqs_on+0x7a/0x110 [ 549.905973][T15072] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 549.906001][T15072] ? mutex_lock_nested+0x152/0x1d0 [ 549.906022][T15072] ? fdget_pos+0x252/0x320 [ 549.906050][T15072] ksys_write+0x156/0x270 [ 549.906081][T15072] ? __pfx_ksys_write+0x10/0x10 [ 549.906112][T15072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.906132][T15072] do_syscall_64+0x15f/0xf80 [ 549.906148][T15072] ? trace_irq_disable+0x3b/0x140 [ 549.906174][T15072] ? clear_bhb_loop+0x40/0x90 [ 549.906196][T15072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.906214][T15072] RIP: 0033:0x7f32c4e0d60e [ 549.906231][T15072] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 549.906253][T15072] RSP: 002b:00007f32c309dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 549.906273][T15072] RAX: ffffffffffffffda RBX: 00007f32c309e6c0 RCX: 00007f32c4e0d60e [ 549.906286][T15072] RDX: 0000000000000001 RSI: 00007f32c309e0a0 RDI: 0000000000000007 [ 549.906298][T15072] RBP: 00007f32c309e090 R08: 0000000000000000 R09: 0000000000000000 [ 549.906309][T15072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.906320][T15072] R13: 00007f32c50c6038 R14: 00007f32c50c5fa0 R15: 00007fff5e3a77b8 [ 549.906347][T15072] [ 550.158375][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short [ 550.173019][ T5817] usb 1-1: not running at top speed; connect to a high speed hub [ 550.189568][ T5817] usb 1-1: config 253 has an invalid interface number: 249 but max is 0 [ 550.189605][ T5817] usb 1-1: config 253 has no interface number 0 [ 550.189643][ T5817] usb 1-1: config 253 interface 249 has no altsetting 0 [ 550.250924][ T5817] usb 1-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 1.00 [ 550.250965][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.250989][ T5817] usb 1-1: Product: syz [ 550.251007][ T5817] usb 1-1: Manufacturer: syz [ 550.251024][ T5817] usb 1-1: SerialNumber: syz [ 550.390422][T14973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.444638][T15077] netlink: 'syz.2.3536': attribute type 10 has an invalid length. [ 550.467803][T15077] team0: Device vxcan0 is of different type [ 550.524107][ T5817] usb-storage 1-1:253.249: USB Mass Storage device detected [ 550.654336][T15085] binder: BINDER_SET_CONTEXT_MGR already set [ 550.654355][T15085] binder: 15083:15085 ioctl 4018620d 200000000480 returned -16 [ 550.657803][T15085] binder: 15083:15085 ioctl c0306201 200000000040 returned -14 [ 550.751518][ T5817] usb 1-1: USB disconnect, device number 44 [ 551.095889][T14973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.133481][ T823] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 551.217966][T15090] FAULT_INJECTION: forcing a failure. [ 551.217966][T15090] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 551.218011][T15090] CPU: 0 UID: 0 PID: 15090 Comm: syz.0.3541 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.218045][T15090] Tainted: [L]=SOFTLOCKUP [ 551.218054][T15090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.218069][T15090] Call Trace: [ 551.218079][T15090] [ 551.218090][T15090] dump_stack_lvl+0xe8/0x150 [ 551.218125][T15090] should_fail_ex+0x46b/0x600 [ 551.218161][T15090] prepare_alloc_pages+0x22a/0x6b0 [ 551.218207][T15090] __alloc_frozen_pages_noprof+0x12f/0x380 [ 551.218248][T15090] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 551.218289][T15090] ? __pfx_policy_nodemask+0x10/0x10 [ 551.218330][T15090] ? __fget_files+0x2a/0x420 [ 551.218361][T15090] alloc_pages_mpol+0xd1/0x380 [ 551.218401][T15090] alloc_pages_noprof+0xd2/0x2f0 [ 551.218441][T15090] get_free_pages_noprof+0xf/0x80 [ 551.218478][T15090] __pollwait+0x263/0x430 [ 551.218507][T15090] ? __pfx___pollwait+0x10/0x10 [ 551.218529][T15090] datagram_poll_queue+0x8c/0x430 [ 551.218554][T15090] ? __pfx_sock_poll+0x10/0x10 [ 551.218580][T15090] do_select+0x101e/0x15c0 [ 551.218621][T15090] ? do_select+0x7a1/0x15c0 [ 551.218663][T15090] ? __pfx_do_select+0x10/0x10 [ 551.218685][T15090] ? unwind_next_frame+0xa6/0x2550 [ 551.218728][T15090] ? __pfx___pollwait+0x10/0x10 [ 551.218758][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218787][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218817][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218847][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218876][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218905][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218942][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.218971][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.219000][T15090] ? __pfx_pollwake+0x10/0x10 [ 551.219048][T15090] core_sys_select+0x898/0xc30 [ 551.219093][T15090] ? __pfx_core_sys_select+0x10/0x10 [ 551.219143][T15090] ? __pfx_set_user_sigmask+0x10/0x10 [ 551.219177][T15090] ? rt_mutex_slowunlock+0x1cb/0x300 [ 551.219208][T15090] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 551.219248][T15090] __se_sys_pselect6+0x267/0x320 [ 551.219282][T15090] ? __pfx___se_sys_pselect6+0x10/0x10 [ 551.219309][T15090] ? __pfx_ksys_write+0x10/0x10 [ 551.219351][T15090] ? __x64_sys_pselect6+0x21/0xf0 [ 551.219379][T15090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.219407][T15090] do_syscall_64+0x15f/0xf80 [ 551.219432][T15090] ? trace_irq_disable+0x3b/0x140 [ 551.219469][T15090] ? clear_bhb_loop+0x40/0x90 [ 551.219499][T15090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.219525][T15090] RIP: 0033:0x7f9a94edcdd9 [ 551.219549][T15090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.219572][T15090] RSP: 002b:00007f9a9312e028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 551.219599][T15090] RAX: ffffffffffffffda RBX: 00007f9a95155fa0 RCX: 00007f9a94edcdd9 [ 551.219619][T15090] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 551.219636][T15090] RBP: 00007f9a9312e090 R08: 0000000000000000 R09: 0000000000000000 [ 551.219654][T15090] R10: 0000200000002080 R11: 0000000000000246 R12: 0000000000000001 [ 551.219671][T15090] R13: 00007f9a95156038 R14: 00007f9a95155fa0 R15: 00007ffe3fe8ad58 [ 551.219709][T15090] [ 551.393408][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 551.439114][ T823] usb 2-1: config 64 has an invalid interface number: 231 but max is 0 [ 551.439153][ T823] usb 2-1: config 64 has no interface number 0 [ 551.439201][ T823] usb 2-1: config 64 interface 231 has no altsetting 0 [ 551.443148][ T5620] Bluetooth: hci0: command tx timeout [ 551.613613][ T823] usb 2-1: New USB device found, idVendor=0572, idProduct=cb06, bcdDevice=d6.60 [ 551.613647][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.613669][ T823] usb 2-1: Product: syz [ 551.613685][ T823] usb 2-1: Manufacturer: syz [ 551.613701][ T823] usb 2-1: SerialNumber: syz [ 551.752714][T15094] FAULT_INJECTION: forcing a failure. [ 551.752714][T15094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.752758][T15094] CPU: 0 UID: 0 PID: 15094 Comm: syz.2.3543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 551.752793][T15094] Tainted: [L]=SOFTLOCKUP [ 551.752804][T15094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.752820][T15094] Call Trace: [ 551.752829][T15094] [ 551.752840][T15094] dump_stack_lvl+0xe8/0x150 [ 551.752885][T15094] should_fail_ex+0x46b/0x600 [ 551.752922][T15094] _copy_from_iter+0x1d3/0x1670 [ 551.752968][T15094] ? trace_kmem_cache_alloc+0x29/0xe0 [ 551.753003][T15094] ? __alloc_skb+0x27d/0x7d0 [ 551.753036][T15094] ? __pfx__copy_from_iter+0x10/0x10 [ 551.753069][T15094] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 551.753103][T15094] ? __alloc_skb+0x27d/0x7d0 [ 551.753143][T15094] ? netlink_sendmsg+0x650/0xb40 [ 551.753181][T15094] ? skb_put+0x11b/0x210 [ 551.753217][T15094] netlink_sendmsg+0x6c0/0xb40 [ 551.753261][T15094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.753299][T15094] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 551.753346][T15094] ? aa_sock_msg_perm+0x122/0x200 [ 551.753385][T15094] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.753419][T15094] sock_sendmsg_nosec+0x112/0x150 [ 551.753451][T15094] ____sys_sendmsg+0x55c/0x870 [ 551.753496][T15094] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.753544][T15094] ? import_iovec+0x73/0xa0 [ 551.753582][T15094] ___sys_sendmsg+0x2a5/0x360 [ 551.753619][T15094] ? __lock_acquire+0x6b5/0x2d10 [ 551.753649][T15094] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.753723][T15094] ? __fget_files+0x2a/0x420 [ 551.753754][T15094] ? __fget_files+0x3a6/0x420 [ 551.753795][T15094] __x64_sys_sendmsg+0x1c3/0x2a0 [ 551.753836][T15094] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 551.753896][T15094] ? __pfx_ksys_write+0x10/0x10 [ 551.753941][T15094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.753969][T15094] do_syscall_64+0x15f/0xf80 [ 551.753993][T15094] ? trace_irq_disable+0x3b/0x140 [ 551.754029][T15094] ? clear_bhb_loop+0x40/0x90 [ 551.754059][T15094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.754085][T15094] RIP: 0033:0x7f23549bcdd9 [ 551.754109][T15094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.754132][T15094] RSP: 002b:00007f2352c0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.754159][T15094] RAX: ffffffffffffffda RBX: 00007f2354c35fa0 RCX: 00007f23549bcdd9 [ 551.754178][T15094] RDX: 0000000000050094 RSI: 0000200000000240 RDI: 0000000000000003 [ 551.754196][T15094] RBP: 00007f2352c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 551.754213][T15094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.754230][T15094] R13: 00007f2354c36038 R14: 00007f2354c35fa0 R15: 00007ffc5fe4a798 [ 551.754268][T15094] [ 551.840437][T15087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.866769][T15087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.224277][T14305] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 552.413717][T14305] usb 1-1: Using ep0 maxpacket: 16 [ 552.420443][T14305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.441558][T14305] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 552.441593][T14305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.441671][T14305] usb 1-1: Product: syz [ 552.441688][T14305] usb 1-1: Manufacturer: syz [ 552.441705][T14305] usb 1-1: SerialNumber: syz [ 552.509075][T14305] usb 1-1: config 0 descriptor?? [ 552.531164][T14305] asix 1-1:0.0: probe with driver asix failed with error -22 [ 552.705857][T14973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 552.729372][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.732760][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.760071][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.760790][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.784175][T15099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.784884][T15099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.870296][ T5761] usb 1-1: USB disconnect, device number 45 [ 552.884945][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 552.893095][T14973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 553.066254][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.079119][T14973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 553.238660][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 553.266526][T14973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 553.358703][T14973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 553.964063][ T823] cxacru 2-1:64.231: cxacru_bind: interface has incorrect endpoints [ 553.964210][ T823] cxacru 2-1:64.231: usbatm_usb_probe: bind failed: -19! [ 554.009110][ T823] usb 2-1: USB disconnect, device number 87 [ 554.053837][ T5616] usb 1-1: new low-speed USB device number 46 using dummy_hcd [ 554.250859][T14973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.268691][ T5616] usb 1-1: unable to get BOS descriptor or descriptor too short [ 554.270280][ T5616] usb 1-1: config 242 has an invalid descriptor of length 125, skipping remainder of the config [ 554.270312][ T5616] usb 1-1: config 242 has 0 interfaces, different from the descriptor's value: 1 [ 554.304748][ T5616] usb 1-1: string descriptor 0 read error: -22 [ 554.304906][ T5616] usb 1-1: New USB device found, idVendor=0789, idProduct=0170, bcdDevice=89.a0 [ 554.304936][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.417774][T15118] binder: BINDER_SET_CONTEXT_MGR already set [ 554.417793][T15118] binder: 15117:15118 ioctl 4018620d 200000000480 returned -16 [ 554.419735][T15118] binder: 15117:15118 ioctl c0306201 200000000040 returned -14 [ 554.459788][T14973] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.482631][ T1024] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.498637][ T1024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.524387][ T823] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 554.561762][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.561945][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.585994][T15112] binder_alloc: 15111: binder_alloc_buf, no vma [ 554.693693][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 554.701968][ T822] usb 1-1: USB disconnect, device number 46 [ 554.702042][ T823] usb 2-1: unable to get BOS descriptor or descriptor too short [ 554.724872][ T823] usb 2-1: config 6 has an invalid interface number: 212 but max is 1 [ 554.724908][ T823] usb 2-1: config 6 has an invalid interface number: 188 but max is 1 [ 554.724935][ T823] usb 2-1: config 6 has no interface number 0 [ 554.724956][ T823] usb 2-1: config 6 has no interface number 1 [ 554.725009][ T823] usb 2-1: config 6 interface 212 has no altsetting 0 [ 554.725033][ T823] usb 2-1: config 6 interface 188 has no altsetting 0 [ 554.728275][ T823] usb 2-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b6.51 [ 554.728311][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.728337][ T823] usb 2-1: Product: syz [ 554.728355][ T823] usb 2-1: Manufacturer: syz [ 554.728374][ T823] usb 2-1: SerialNumber: syz [ 555.406880][T15122] netlink: 'syz.0.3551': attribute type 29 has an invalid length. [ 555.422509][T15122] netlink: 'syz.0.3551': attribute type 29 has an invalid length. [ 555.538749][ T823] usb 2-1: USB disconnect, device number 88 [ 555.604541][T15122] netlink: 'syz.0.3551': attribute type 29 has an invalid length. [ 556.024898][T14305] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 556.189682][T14305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.189750][T14305] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 556.189780][T14305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.232412][T14305] usb 1-1: config 0 descriptor?? [ 556.279285][T14305] pwc: Askey VC010 type 2 USB webcam detected. [ 556.417980][T15152] vivid-003: disconnect [ 556.471728][T15133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.472863][T15133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.589635][T15152] vivid-003: reconnect [ 556.651414][T14305] pwc: recv_control_msg error -32 req 02 val 2b00 [ 556.652423][T14305] pwc: recv_control_msg error -32 req 02 val 2700 [ 556.889429][T14305] pwc: recv_control_msg error -71 req 02 val 2c00 [ 556.891480][T14305] pwc: recv_control_msg error -71 req 04 val 1000 [ 556.891981][T14305] pwc: recv_control_msg error -71 req 04 val 1300 [ 556.892455][T14305] pwc: recv_control_msg error -71 req 04 val 1400 [ 556.892921][T14305] pwc: recv_control_msg error -71 req 02 val 2000 [ 556.921554][T14305] pwc: recv_control_msg error -71 req 02 val 2100 [ 556.935247][T14305] pwc: recv_control_msg error -71 req 04 val 1500 [ 556.942481][T14305] pwc: recv_control_msg error -71 req 02 val 2500 [ 556.943006][T14305] pwc: recv_control_msg error -71 req 02 val 2400 [ 556.957278][T14305] pwc: recv_control_msg error -71 req 02 val 2600 [ 556.957790][T14305] pwc: recv_control_msg error -71 req 02 val 2900 [ 556.958274][T14305] pwc: recv_control_msg error -71 req 02 val 2800 [ 556.958936][T14305] pwc: recv_control_msg error -71 req 04 val 1100 [ 556.996389][T14305] pwc: recv_control_msg error -71 req 04 val 1200 [ 557.034537][T14973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.093775][T14305] pwc: Registered as video103. [ 557.118189][T14305] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 557.158140][T14305] usb 1-1: USB disconnect, device number 47 [ 557.198488][T15167] binder: 15165:15167 ioctl 4018620d 0 returned -22 [ 557.233610][T15167] binder: 15165:15167 ioctl c0306201 200000000040 returned -22 [ 557.234039][T15167] binder: 15165:15167 ioctl c0306201 200000000640 returned -22 [ 557.440910][T15175] binder: BINDER_SET_CONTEXT_MGR already set [ 557.440928][T15175] binder: 15174:15175 ioctl 4018620d 200000000100 returned -16 [ 557.470187][T15175] binder: BINDER_SET_CONTEXT_MGR already set [ 557.470206][T15175] binder: 15174:15175 ioctl 4018620d 200000004a80 returned -16 [ 557.525645][T15177] FAULT_INJECTION: forcing a failure. [ 557.525645][T15177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.525686][T15177] CPU: 1 UID: 0 PID: 15177 Comm: syz.2.3561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 557.525717][T15177] Tainted: [L]=SOFTLOCKUP [ 557.525726][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.525740][T15177] Call Trace: [ 557.525749][T15177] [ 557.525759][T15177] dump_stack_lvl+0xe8/0x150 [ 557.525796][T15177] should_fail_ex+0x46b/0x600 [ 557.525833][T15177] _copy_from_user+0x2d/0xb0 [ 557.525873][T15177] binder_ioctl_write_read+0x167/0xa490 [ 557.525910][T15177] ? is_bpf_text_address+0x26/0x2b0 [ 557.525948][T15177] ? try_to_take_rt_mutex+0x840/0xb00 [ 557.525982][T15177] ? __kernel_text_address+0xd/0x30 [ 557.526019][T15177] ? __lock_acquire+0x6b5/0x2d10 [ 557.526048][T15177] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 557.526088][T15177] ? stack_depot_save_flags+0x33/0x810 [ 557.526130][T15177] ? do_raw_spin_lock+0x12b/0x2f0 [ 557.526179][T15177] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 557.526223][T15177] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.526262][T15177] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 557.526307][T15177] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 557.526339][T15177] ? reacquire_held_locks+0x104/0x190 [ 557.526367][T15177] ? rt_spin_lock+0x1e0/0x400 [ 557.526399][T15177] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 557.526433][T15177] ? rt_spin_unlock+0x14f/0x200 [ 557.526474][T15177] ? binder_get_thread+0x177/0x6d0 [ 557.526510][T15177] binder_ioctl+0x426/0x1b10 [ 557.526538][T15177] ? tomoyo_path_number_perm+0x219/0x630 [ 557.526567][T15177] ? tomoyo_path_number_perm+0x219/0x630 [ 557.526595][T15177] ? do_vfs_ioctl+0x117b/0x1540 [ 557.526625][T15177] ? __pfx_binder_ioctl+0x10/0x10 [ 557.526651][T15177] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 557.526707][T15177] ? __fget_files+0x2a/0x420 [ 557.526733][T15177] ? __fget_files+0x2a/0x420 [ 557.526755][T15177] ? __fget_files+0x3a6/0x420 [ 557.526779][T15177] ? __fget_files+0x2a/0x420 [ 557.526804][T15177] ? bpf_lsm_file_ioctl+0x9/0x20 [ 557.526826][T15177] ? __pfx_binder_ioctl+0x10/0x10 [ 557.526853][T15177] __se_sys_ioctl+0xff/0x170 [ 557.526881][T15177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.526903][T15177] do_syscall_64+0x15f/0xf80 [ 557.526924][T15177] ? clear_bhb_loop+0x40/0x90 [ 557.526948][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.526968][T15177] RIP: 0033:0x7f23549bcdd9 [ 557.526988][T15177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.527006][T15177] RSP: 002b:00007f2352bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 557.527029][T15177] RAX: ffffffffffffffda RBX: 00007f2354c36090 RCX: 00007f23549bcdd9 [ 557.527044][T15177] RDX: 0000200000000480 RSI: 00000000c0306201 RDI: 0000000000000003 [ 557.527058][T15177] RBP: 00007f2352bed090 R08: 0000000000000000 R09: 0000000000000000 [ 557.527072][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.527085][T15177] R13: 00007f2354c36128 R14: 00007f2354c36090 R15: 00007ffc5fe4a798 [ 557.527114][T15177] [ 557.527254][T15177] binder: 15174:15177 ioctl c0306201 200000000480 returned -14 [ 557.866719][T14973] veth0_vlan: entered promiscuous mode [ 557.901420][T14973] veth1_vlan: entered promiscuous mode [ 557.973325][T14305] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 558.010928][T14973] veth0_macvtap: entered promiscuous mode [ 558.047932][T14973] veth1_macvtap: entered promiscuous mode [ 558.097142][T14973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.123304][T14305] usb 1-1: Using ep0 maxpacket: 8 [ 558.141401][T14305] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.141477][T14305] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 558.141509][T14305] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.180154][T14973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.202343][T14305] usb 1-1: config 0 descriptor?? [ 558.219555][T14305] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 558.274312][ T3420] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.276875][ T8116] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.276929][ T8116] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.276972][ T8116] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.943607][T14305] gspca_vc032x: reg_w err -110 [ 558.943701][T14305] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 559.049792][ T9] usb 1-1: USB disconnect, device number 48 [ 559.319950][T15184] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.320004][T15184] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 559.446765][T15184] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 559.446795][T15184] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 559.906322][ T8116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.906349][ T8116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.161314][T15187] netlink: 'syz.0.3564': attribute type 10 has an invalid length. [ 560.223867][T15187] team0: Device vxcan0 is of different type [ 560.372725][T15195] binder: 15194:15195 ioctl 4018620d 0 returned -22 [ 560.386351][T15195] binder: 15194:15195 ioctl c0306201 200000000040 returned -22 [ 560.391784][T15195] binder: 15194:15195 ioctl c0306201 200000000640 returned -22 [ 560.413395][ T822] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 560.480494][ T195] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.480520][ T195] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.553800][ T822] usb 2-1: device descriptor read/64, error -71 [ 560.726667][ T38] audit: type=1326 audit(2000000174.543:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15200 comm="syz.3.3569" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06fb25cdd9 code=0x0 [ 560.773548][ T5616] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 560.813419][ T822] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 560.933341][ T5616] usb 1-1: Using ep0 maxpacket: 16 [ 560.939252][ T5616] usb 1-1: config 6 has an invalid interface number: 152 but max is 3 [ 560.939277][ T5616] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 560.939312][ T5616] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 4 [ 560.939352][ T5616] usb 1-1: config 6 has no interface number 0 [ 560.939404][ T5616] usb 1-1: config 6 interface 152 altsetting 253 endpoint 0xB has invalid wMaxPacketSize 0 [ 560.939437][ T5616] usb 1-1: config 6 interface 152 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 560.939459][ T5616] usb 1-1: config 6 interface 152 has no altsetting 0 [ 560.942521][ T5616] usb 1-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=e9.aa [ 560.942557][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.942588][ T5616] usb 1-1: Product: syz [ 560.942600][ T5616] usb 1-1: Manufacturer: syz [ 560.942613][ T5616] usb 1-1: SerialNumber: syz [ 560.954073][ T822] usb 2-1: device descriptor read/64, error -71 [ 561.066488][ T822] usb usb2-port1: attempt power cycle [ 561.184873][T15204] netlink: 'syz.2.3570': attribute type 10 has an invalid length. [ 561.188518][T15204] team0: Device vxcan0 is of different type [ 561.332120][ T5616] ushc 1-1:6.152: probe with driver ushc failed with error -71 [ 561.404969][ T822] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 561.414033][ T5616] usb 1-1: USB disconnect, device number 49 [ 561.435995][ T822] usb 2-1: device descriptor read/8, error -71 [ 561.593801][ T5343] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 561.675628][ T822] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 561.694035][ T822] usb 2-1: device descriptor read/8, error -71 [ 561.743384][ T5343] usb 3-1: Using ep0 maxpacket: 32 [ 561.746581][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.746619][ T5343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.746664][ T5343] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 561.746692][ T5343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.757760][ T5343] usb 3-1: config 0 descriptor?? [ 561.804066][ T822] usb usb2-port1: unable to enumerate USB device [ 562.212417][ T5343] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 562.212449][ T5343] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 562.325332][T12456] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 562.407352][ T5343] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 562.503449][T12456] usb 1-1: Using ep0 maxpacket: 32 [ 562.509993][T12456] usb 1-1: unable to get BOS descriptor or descriptor too short [ 562.526862][T12456] usb 1-1: config 8 has an invalid interface number: 176 but max is 0 [ 562.526895][T12456] usb 1-1: config 8 has no interface number 0 [ 562.548409][T12456] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 562.548447][T12456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.548473][T12456] usb 1-1: Product: syz [ 562.548491][T12456] usb 1-1: Manufacturer: syz [ 562.548509][T12456] usb 1-1: SerialNumber: syz [ 562.628050][ T5343] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 562.795719][T15223] binder: 15222:15223 ioctl 4018620d 0 returned -22 [ 562.798936][T15223] binder: 15222:15223 ioctl c0306201 200000000040 returned -22 [ 562.799309][T15223] binder: 15222:15223 ioctl c0306201 200000000640 returned -22 [ 562.831484][ T5343] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 562.920864][T12456] usb 1-1: USB disconnect, device number 50 [ 562.959148][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959258][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.046993][T15206] i2c i2c-1: adapter quirk: comb msg only to same addr (addr 0x0008, size 0, write) [ 563.125771][ T5343] usb 3-1: USB disconnect, device number 94 [ 563.388965][T15235] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 563.392868][T15235] team0: Device vxcan0 is of different type [ 563.414974][T15234] FAULT_INJECTION: forcing a failure. [ 563.414974][T15234] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.415018][T15234] CPU: 0 UID: 0 PID: 15234 Comm: syz.3.3579 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 563.415052][T15234] Tainted: [L]=SOFTLOCKUP [ 563.415061][T15234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.415075][T15234] Call Trace: [ 563.415084][T15234] [ 563.415095][T15234] dump_stack_lvl+0xe8/0x150 [ 563.415129][T15234] should_fail_ex+0x46b/0x600 [ 563.415165][T15234] get_futex_key+0xefd/0x1590 [ 563.415202][T15234] ? __pfx_get_futex_key+0x10/0x10 [ 563.415227][T15234] ? __lock_acquire+0x6b5/0x2d10 [ 563.415260][T15234] futex_wake+0x114/0x580 [ 563.415298][T15234] ? __pfx_futex_wake+0x10/0x10 [ 563.415334][T15234] ? do_raw_spin_lock+0x12b/0x2f0 [ 563.415378][T15234] do_futex+0x395/0x420 [ 563.415406][T15234] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 563.415455][T15234] ? __pfx_do_futex+0x10/0x10 [ 563.415479][T15234] ? rt_mutex_slowunlock+0x1cb/0x300 [ 563.415508][T15234] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 563.415544][T15234] __se_sys_futex+0x3a8/0x450 [ 563.415575][T15234] ? ksys_write+0x248/0x270 [ 563.415607][T15234] ? __pfx___se_sys_futex+0x10/0x10 [ 563.415635][T15234] ? __pfx_ksys_write+0x10/0x10 [ 563.415671][T15234] ? __x64_sys_futex+0x21/0xf0 [ 563.415702][T15234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.415726][T15234] do_syscall_64+0x15f/0xf80 [ 563.415748][T15234] ? trace_irq_disable+0x3b/0x140 [ 563.415790][T15234] ? clear_bhb_loop+0x40/0x90 [ 563.415819][T15234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.415844][T15234] RIP: 0033:0x7f06fb25cdd9 [ 563.415867][T15234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 563.415890][T15234] RSP: 002b:00007f06f948d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.415917][T15234] RAX: ffffffffffffffda RBX: 00007f06fb4d6090 RCX: 00007f06fb25cdd9 [ 563.415935][T15234] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000020000000cffc [ 563.415951][T15234] RBP: 00007f06f948d090 R08: 0000000000000000 R09: 0000000000000000 [ 563.415967][T15234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 563.415981][T15234] R13: 00007f06fb4d6128 R14: 00007f06fb4d6090 R15: 00007ffc214333a8 [ 563.416016][T15234] [ 563.983366][ T822] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 564.133394][ T822] usb 3-1: Using ep0 maxpacket: 8 [ 564.137714][ T822] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.137759][ T822] usb 3-1: config 1 interface 0 has no altsetting 0 [ 564.140376][ T822] usb 3-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40 [ 564.140411][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.140428][ T822] usb 3-1: Product: â [ 564.140440][ T822] usb 3-1: Manufacturer: ൭ [ 564.140452][ T822] usb 3-1: SerialNumber: 銨侠æ·êº“葈咔㛽å‘쮉ᮭ [ 564.291151][T15244] binder: 15243:15244 ioctl c0306201 200000000040 returned -22 [ 564.293453][T12456] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 564.431789][ T822] usbhid 3-1:1.0: can't add hid device: -71 [ 564.431881][ T822] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 564.446694][ T822] usb 3-1: USB disconnect, device number 95 [ 564.471938][T12456] usb 1-1: unable to get BOS descriptor or descriptor too short [ 564.482403][T12456] usb 1-1: not running at top speed; connect to a high speed hub [ 564.498860][T12456] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 564.498897][T12456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.498922][T12456] usb 1-1: Product: syz [ 564.498939][T12456] usb 1-1: Manufacturer: syz [ 564.498956][T12456] usb 1-1: SerialNumber: syz [ 564.613607][ T5761] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 564.753427][ T5761] usb 4-1: device descriptor read/64, error -71 [ 564.758616][T12456] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 564.758991][T12456] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 564.817643][T12456] usb 1-1: USB disconnect, device number 51 [ 564.897302][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.922583][ T823] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 564.993472][ T5761] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 565.053398][ T823] usb 2-1: device descriptor read/64, error -71 [ 565.123710][ T5761] usb 4-1: device descriptor read/64, error -71 [ 565.191094][T15256] netlink: 'syz.2.3590': attribute type 10 has an invalid length. [ 565.212802][T15256] team0: Device vxcan0 is of different type [ 565.234486][ T5761] usb usb4-port1: attempt power cycle [ 565.293379][ T823] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 565.337084][T15259] netlink: 'syz.2.3591': attribute type 10 has an invalid length. [ 565.340800][T15259] team0: Device vxcan0 is of different type [ 565.433510][ T823] usb 2-1: device descriptor read/64, error -71 [ 565.473149][T15262] binder: BINDER_SET_CONTEXT_MGR already set [ 565.473164][T15262] binder: 15261:15262 ioctl 4018620d 200000000480 returned -16 [ 565.477183][T15262] binder: 15261:15262 ioctl c0306201 200000000040 returned -22 [ 565.546936][T15264] binder: BINDER_SET_CONTEXT_MGR already set [ 565.546953][T15264] binder: 15263:15264 ioctl 4018620d 200000000480 returned -16 [ 565.548886][T15264] binder: 15263:15264 ioctl c0306201 200000000040 returned -14 [ 565.590824][ T823] usb usb2-port1: attempt power cycle [ 565.633372][ T5616] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 565.633739][ T5761] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 565.656290][ T5761] usb 4-1: device descriptor read/8, error -71 [ 565.783501][ T5616] usb 1-1: Using ep0 maxpacket: 32 [ 565.786163][ T5616] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 565.786196][ T5616] usb 1-1: config 0 has no interface number 0 [ 565.786248][ T5616] usb 1-1: config 0 interface 184 has no altsetting 0 [ 565.789714][ T5616] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 565.789739][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.789756][ T5616] usb 1-1: Product: syz [ 565.789768][ T5616] usb 1-1: Manufacturer: syz [ 565.789781][ T5616] usb 1-1: SerialNumber: syz [ 565.853985][ T5616] usb 1-1: config 0 descriptor?? [ 565.903448][ T5761] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 565.925577][ T5761] usb 4-1: device descriptor read/8, error -71 [ 565.963824][ T823] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 565.996733][ T823] usb 2-1: device descriptor read/8, error -71 [ 566.033905][ T5761] usb usb4-port1: unable to enumerate USB device [ 566.233603][ T823] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 566.259101][ T5616] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 566.259139][ T5616] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 566.259164][ T5616] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 566.259469][ T5616] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 566.269077][ T823] usb 2-1: device descriptor read/8, error -71 [ 566.354812][ T5616] usb 1-1: USB disconnect, device number 52 [ 566.373909][ T823] usb usb2-port1: unable to enumerate USB device [ 566.998737][T15281] netlink: 'syz.0.3600': attribute type 10 has an invalid length. [ 567.001325][T15281] team0: Device vxcan0 is of different type [ 567.093396][T15284] netlink: 'syz.0.3602': attribute type 10 has an invalid length. [ 567.099133][T15284] team0: Device vxcan0 is of different type [ 567.235125][T15287] binder: 15286:15287 ioctl c0306201 200000000040 returned -22 [ 567.354055][ T822] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 567.504385][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 567.506465][ T822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.506495][ T822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.509499][ T822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.509530][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.509547][ T822] usb 3-1: Product: syz [ 567.509559][ T822] usb 3-1: Manufacturer: syz [ 567.509571][ T822] usb 3-1: SerialNumber: syz [ 567.583594][ T822] usb 3-1: 0:2 : does not exist [ 567.737181][ T5616] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 567.788053][ T822] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 567.883933][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 567.886218][ T5616] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 567.886252][ T5616] usb 4-1: config 0 has no interface number 0 [ 567.889185][ T5616] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 567.889218][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.889243][ T5616] usb 4-1: Product: syz [ 567.889262][ T5616] usb 4-1: Manufacturer: syz [ 567.889280][ T5616] usb 4-1: SerialNumber: syz [ 567.955730][ T5616] usb 4-1: config 0 descriptor?? [ 567.972079][ T5616] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 568.024353][ T822] usb 3-1: USB disconnect, device number 96 [ 568.361737][ T5616] usb 4-1: qt2_attach - failed to power on unit: -71 [ 568.362026][ T5616] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 568.406782][ T5616] usb 4-1: USB disconnect, device number 64 [ 568.462522][T15305] netlink: 'syz.1.3611': attribute type 10 has an invalid length. [ 568.479980][T15305] team0: Device vxcan0 is of different type [ 568.536285][T15307] binder: 15306:15307 ioctl c0306201 0 returned -14 [ 568.538101][T15307] binder: 15306:15307 ioctl c0306201 200000000040 returned -22 [ 568.539636][T15307] binder: 15306:15307 ioctl c0306201 200000000640 returned -22 [ 568.823434][ T823] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 568.883401][ T5616] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 568.894887][ T822] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 568.983322][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 568.985477][ T823] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 568.985500][ T823] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 568.985539][ T823] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 568.985559][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.034007][ T822] usb 1-1: device descriptor read/64, error -71 [ 569.034366][ T5616] usb 4-1: Using ep0 maxpacket: 32 [ 569.042297][ T5616] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 569.042377][ T5616] usb 4-1: config 0 has no interface number 0 [ 569.065136][ T5616] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 569.065174][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.065198][ T5616] usb 4-1: Product: syz [ 569.065216][ T5616] usb 4-1: Manufacturer: Ñ‹ [ 569.065233][ T5616] usb 4-1: SerialNumber: syz [ 569.118575][ T5616] usb 4-1: config 0 descriptor?? [ 569.132159][ T5616] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 569.275814][ T822] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 569.328631][ T5616] usb 4-1: qt2_attach - failed to power on unit: -71 [ 569.328926][ T5616] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 569.335055][T15294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.338243][T15294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.424123][ T5616] usb 4-1: USB disconnect, device number 65 [ 569.485811][ T822] usb 1-1: device descriptor read/64, error -71 [ 569.593775][ T822] usb usb1-port1: attempt power cycle [ 569.823535][ T5616] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 569.933414][ T822] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 569.954698][ T822] usb 1-1: device descriptor read/8, error -71 [ 569.973419][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 569.973496][ T823] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 569.978264][ T5616] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 569.978297][ T5616] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 569.980741][ T5616] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 569.980774][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.980799][ T5616] usb 4-1: Product: syz [ 569.980816][ T5616] usb 4-1: Manufacturer: syz [ 569.980834][ T5616] usb 4-1: SerialNumber: syz [ 570.062057][ T5616] usb 4-1: 0:2 : does not exist [ 570.147295][ T823] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 570.147330][ T823] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 570.147354][ T823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 570.147410][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 570.147441][ T823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 570.150042][ T823] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 570.150077][ T823] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 570.150100][ T823] usb 2-1: Product: syz [ 570.150119][ T823] usb 2-1: Manufacturer: syz [ 570.221994][ T822] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 570.254986][ T823] cdc_wdm 2-1:1.0: skipping garbage [ 570.255009][ T823] cdc_wdm 2-1:1.0: skipping garbage [ 570.274974][ T822] usb 1-1: device descriptor read/8, error -71 [ 570.277808][ T823] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 570.277843][ T823] cdc_wdm 2-1:1.0: Unknown control protocol [ 570.342104][ T5616] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 570.383710][ T822] usb usb1-port1: unable to enumerate USB device [ 570.427957][ T5616] usb 4-1: USB disconnect, device number 66 [ 570.518666][T15325] netlink: zone id is out of range [ 570.518684][T15325] netlink: zone id is out of range [ 570.518924][T15325] netlink: zone id is out of range [ 570.518935][T15325] netlink: zone id is out of range [ 570.518945][T15325] netlink: del zone limit has 4 unknown bytes [ 570.555917][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 570.632571][T15325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.649320][T15325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.708422][ T5616] usb 2-1: USB disconnect, device number 97 [ 571.351694][T15330] FAULT_INJECTION: forcing a failure. [ 571.351694][T15330] name failslab, interval 1, probability 0, space 0, times 0 [ 571.351727][T15330] CPU: 1 UID: 0 PID: 15330 Comm: syz.1.3620 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 571.351752][T15330] Tainted: [L]=SOFTLOCKUP [ 571.351759][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.351769][T15330] Call Trace: [ 571.351776][T15330] [ 571.351783][T15330] dump_stack_lvl+0xe8/0x150 [ 571.351809][T15330] should_fail_ex+0x46b/0x600 [ 571.351836][T15330] should_failslab+0xa8/0x100 [ 571.351863][T15330] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 571.351889][T15330] ? __d_alloc+0x37/0x6f0 [ 571.351916][T15330] __d_alloc+0x37/0x6f0 [ 571.351943][T15330] d_alloc+0x4b/0x190 [ 571.351963][T15330] ? lookup_one_qstr_excl+0xc4/0x360 [ 571.351989][T15330] lookup_one_qstr_excl+0xd8/0x360 [ 571.352016][T15330] filename_create+0x20e/0x370 [ 571.352046][T15330] ? __pfx_filename_create+0x10/0x10 [ 571.352075][T15330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.352096][T15330] filename_mkdirat+0xd2/0x520 [ 571.352127][T15330] ? __pfx_filename_mkdirat+0x10/0x10 [ 571.352156][T15330] ? do_getname+0x151/0x250 [ 571.352178][T15330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.352197][T15330] __se_sys_mkdirat+0x35/0x150 [ 571.352223][T15330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.352243][T15330] do_syscall_64+0x15f/0xf80 [ 571.352260][T15330] ? trace_irq_disable+0x3b/0x140 [ 571.352286][T15330] ? clear_bhb_loop+0x40/0x90 [ 571.352308][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.352352][T15330] RIP: 0033:0x7f32c4e4cdd9 [ 571.352375][T15330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.352397][T15330] RSP: 002b:00007f32c309e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 571.352430][T15330] RAX: ffffffffffffffda RBX: 00007f32c50c5fa0 RCX: 00007f32c4e4cdd9 [ 571.352449][T15330] RDX: 0000000000000062 RSI: 0000200000000900 RDI: ffffffffffffff9c [ 571.352469][T15330] RBP: 00007f32c309e090 R08: 0000000000000000 R09: 0000000000000000 [ 571.352481][T15330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.352492][T15330] R13: 00007f32c50c6038 R14: 00007f32c50c5fa0 R15: 00007fff5e3a77b8 [ 571.352519][T15330] [ 571.615664][ T823] usb 3-1: USB disconnect, device number 97 [ 571.765195][T15335] netlink: 'syz.2.3622': attribute type 10 has an invalid length. [ 571.768124][T15335] team0: Device vxcan0 is of different type [ 571.771209][T15336] binder: 15334:15336 ioctl c0306201 0 returned -14 [ 571.772339][T15336] binder: 15334:15336 ioctl c0306201 200000000040 returned -22 [ 571.772546][T15336] binder: 15334:15336 ioctl c0306201 200000000640 returned -22 [ 571.919853][T15340] binder: BINDER_SET_CONTEXT_MGR already set [ 571.919898][T15340] binder: 15339:15340 ioctl 4018620d 200000000100 returned -16 [ 571.943157][T15340] binder: BINDER_SET_CONTEXT_MGR already set [ 571.944163][T15340] binder: 15339:15340 ioctl 4018620d 200000004a80 returned -16 [ 571.963298][ T5616] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 572.123983][ T5616] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 572.124023][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 572.124183][ T5616] usb 4-1: Product: syz [ 572.124202][ T5616] usb 4-1: Manufacturer: syz [ 572.124221][ T5616] usb 4-1: SerialNumber: syz [ 572.137624][ T5616] usb 4-1: config 0 descriptor?? [ 572.205230][ T5616] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 572.205282][ T5616] dvb-usb: bulk message failed: -22 (2/0) [ 572.232649][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 572.283386][ T5616] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 572.283520][ T5616] usb 4-1: media controller created [ 572.331033][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 572.540534][ T5616] dvb-usb: bulk message failed: -22 (1/0) [ 572.583387][ T5761] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 572.619078][ T5616] DVB: Unable to find symbol mt352_attach() [ 572.619724][ T5616] dvb-usb: bulk message failed: -22 (5/0) [ 572.619745][ T5616] zl10353_read_register: readreg error (reg=127, ret==-121) [ 572.619806][ T5616] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 572.717394][ T5616] rc_core: IR keymap rc-dvico-mce not found [ 572.717412][ T5616] Registered IR keymap rc-empty [ 572.718740][ T5616] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 572.734411][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 572.761427][ T5761] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 572.761462][ T5761] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 572.761520][ T5761] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 572.761550][ T5761] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.769109][ T5616] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input31 [ 572.815718][ T823] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 572.838780][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.854158][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.922888][ T5616] dvb-usb: schedule remote query interval to 100 msecs. [ 572.922915][ T5616] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 572.970468][ T5616] usb 4-1: USB disconnect, device number 67 [ 572.999658][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 573.022758][ T823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.022799][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 573.022830][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 573.071130][T15365] binder: BINDER_SET_CONTEXT_MGR already set [ 573.071148][T15365] binder: 15364:15365 ioctl 4018620d 200000000480 returned -16 [ 573.072388][ T823] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 573.072419][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.072441][ T823] usb 2-1: Product: syz [ 573.072458][ T823] usb 2-1: Manufacturer: syz [ 573.072475][ T823] usb 2-1: SerialNumber: syz [ 573.081152][T15365] binder: 15364:15365 ioctl c0306201 0 returned -14 [ 573.111912][T15365] binder: 15364:15365 ioctl c0306201 200000000040 returned -22 [ 573.114142][T15365] binder: 15364:15365 ioctl c0306201 200000000640 returned -22 [ 573.179657][ T823] usb 2-1: config 0 descriptor?? [ 573.213999][ T823] streamzap 2-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 573.398077][ T5616] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 573.414638][ T823] usb 2-1: USB disconnect, device number 98 [ 573.804657][ T5761] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 573.953358][ T5761] usb 3-1: Using ep0 maxpacket: 8 [ 573.959338][ T5761] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 573.959376][ T5761] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.959402][ T5761] usb 3-1: Product: syz [ 573.959421][ T5761] usb 3-1: Manufacturer: syz [ 573.959441][ T5761] usb 3-1: SerialNumber: syz [ 573.974946][ T5761] usb 3-1: config 0 descriptor?? [ 573.984134][ T5616] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 574.087502][ T5761] usb 3-1: selecting invalid altsetting 3 [ 574.087536][ T5761] comedi comedi5: could not set alternate setting 3 in high speed [ 574.087557][ T5761] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 574.129917][ T5761] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 574.207909][ T5616] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 574.207954][ T5616] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 574.207977][ T5616] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.208009][ T5616] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 574.208029][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.280153][ T5616] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 574.298143][ T5616] usb 4-1: invalid MIDI out EP 0 [ 574.349428][ T5343] usb 3-1: USB disconnect, device number 98 [ 574.584655][ T5616] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 574.720493][T15392] binder: 15391:15392 ioctl c0306201 200000000040 returned -22 [ 574.720816][T15392] binder: 15391:15392 ioctl c0306201 200000000640 returned -22 [ 574.789213][T15395] netlink: 'syz.1.3643': attribute type 10 has an invalid length. [ 574.799008][T15395] team0: Device vxcan0 is of different type [ 575.067337][T15404] FAULT_INJECTION: forcing a failure. [ 575.067337][T15404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.067371][T15404] CPU: 1 UID: 0 PID: 15404 Comm: syz.2.3646 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 575.067396][T15404] Tainted: [L]=SOFTLOCKUP [ 575.067403][T15404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 575.067414][T15404] Call Trace: [ 575.067421][T15404] [ 575.067429][T15404] dump_stack_lvl+0xe8/0x150 [ 575.067456][T15404] should_fail_ex+0x46b/0x600 [ 575.067482][T15404] _copy_from_user+0x2d/0xb0 [ 575.067510][T15404] iommufd_fops_ioctl+0x461/0x5d0 [ 575.067539][T15404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 575.067570][T15404] ? __fget_files+0x2a/0x420 [ 575.067595][T15404] ? __fget_files+0x2a/0x420 [ 575.067618][T15404] ? bpf_lsm_file_ioctl+0x9/0x20 [ 575.067638][T15404] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 575.067665][T15404] __se_sys_ioctl+0xff/0x170 [ 575.067691][T15404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.067711][T15404] do_syscall_64+0x15f/0xf80 [ 575.067728][T15404] ? trace_irq_disable+0x3b/0x140 [ 575.067754][T15404] ? clear_bhb_loop+0x40/0x90 [ 575.067775][T15404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.067794][T15404] RIP: 0033:0x7f23549bcdd9 [ 575.067811][T15404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.067859][T15404] RSP: 002b:00007f2352c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.067885][T15404] RAX: ffffffffffffffda RBX: 00007f2354c35fa0 RCX: 00007f23549bcdd9 [ 575.067905][T15404] RDX: 0000200000001200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 575.067922][T15404] RBP: 00007f2352c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 575.067938][T15404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.067954][T15404] R13: 00007f2354c36038 R14: 00007f2354c35fa0 R15: 00007ffc5fe4a798 [ 575.067990][T15404] [ 575.371268][ T5616] usb 1-1: USB disconnect, device number 57 [ 575.565102][T12456] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 575.723600][T12456] usb 3-1: Using ep0 maxpacket: 8 [ 575.729669][T12456] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 575.738135][ T823] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 575.758643][T12456] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 575.758676][T12456] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.758751][T12456] usb 3-1: Product: syz [ 575.758766][T12456] usb 3-1: Manufacturer: syz [ 575.758782][T12456] usb 3-1: SerialNumber: syz [ 575.846646][T12456] usb 3-1: config 0 descriptor?? [ 575.861196][T12456] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 575.973847][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 575.976188][ T823] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 575.976225][ T823] usb 2-1: config 179 has no interface number 0 [ 575.976297][ T823] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 575.976334][ T823] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 575.976544][ T823] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 575.976583][ T823] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 575.976622][ T823] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 575.976677][ T823] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 575.976709][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.087606][T15410] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 576.124337][ T822] usb 3-1: USB disconnect, device number 99 [ 576.399370][ T823] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input32 [ 576.521129][T15410] netlink: 160 bytes leftover after parsing attributes in process `syz.1.3649'. [ 576.521160][T15410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.609948][T15417] binder: 15414:15417 ioctl c0306201 200000000040 returned -22 [ 576.610313][T15417] binder: 15414:15417 ioctl c0306201 200000000640 returned -22 [ 576.955113][ T5616] usb 4-1: USB disconnect, device number 68 [ 577.184653][ T822] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 577.278303][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 577.278383][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 577.279359][ T823] usb 2-1: USB disconnect, device number 99 [ 577.293573][ T5761] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 577.333557][ T822] usb 3-1: Using ep0 maxpacket: 16 [ 577.335583][ T822] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.335613][ T822] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.338816][ T822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.338853][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.338876][ T822] usb 3-1: Product: syz [ 577.338889][ T822] usb 3-1: Manufacturer: syz [ 577.338901][ T822] usb 3-1: SerialNumber: syz [ 577.427928][ T822] usb 3-1: 0:2 : does not exist [ 577.446303][ T5761] usb 1-1: Using ep0 maxpacket: 16 [ 577.462725][ T5761] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 577.462760][ T5761] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 577.507307][ T5761] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 577.507335][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.507397][ T5761] usb 1-1: Product: syz [ 577.507409][ T5761] usb 1-1: Manufacturer: syz [ 577.507422][ T5761] usb 1-1: SerialNumber: syz [ 577.631942][ T822] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 577.718504][ T5761] usb 1-1: 0:2 : does not exist [ 577.742305][ T822] usb 3-1: USB disconnect, device number 100 [ 577.804625][ T5761] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 577.844074][ T5817] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 577.929899][ T5761] usb 1-1: USB disconnect, device number 58 [ 578.008557][ T5817] usb 4-1: unable to get BOS descriptor or descriptor too short [ 578.011079][ T5817] usb 4-1: config 0 has an invalid interface number: 175 but max is 0 [ 578.011110][ T5817] usb 4-1: config 0 has no interface number 0 [ 578.011147][ T5817] usb 4-1: config 0 interface 175 has no altsetting 0 [ 578.030908][ T5817] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=22.1a [ 578.030944][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.030967][ T5817] usb 4-1: Product: syz [ 578.030983][ T5817] usb 4-1: Manufacturer: syz [ 578.031000][ T5817] usb 4-1: SerialNumber: syz [ 578.096652][ T5817] usb 4-1: config 0 descriptor?? [ 578.097606][ T5614] udevd[5614]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 578.149731][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.333150][T15440] binder: BINDER_SET_CONTEXT_MGR already set [ 578.333282][T15440] binder: 15439:15440 ioctl 4018620d 200000000100 returned -16 [ 578.348243][ T5343] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 578.527512][T15443] pipefs: Unknown parameter 'max' [ 578.538391][ T5343] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 578.538432][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.538459][ T5343] usb 2-1: Product: syz [ 578.538477][ T5343] usb 2-1: Manufacturer: syz [ 578.538495][ T5343] usb 2-1: SerialNumber: syz [ 578.667977][T15446] binder: BINDER_SET_CONTEXT_MGR already set [ 578.691409][T15446] binder: 15445:15446 ioctl 4018620d 200000000480 returned -16 [ 578.717084][T15448] binder: 15447:15448 ioctl c0306201 200000000040 returned -22 [ 578.717867][T15448] binder: 15447:15448 ioctl c0306201 200000000640 returned -22 [ 578.753159][T15446] binder: 15445:15446 ioctl c0306201 200000000040 returned -22 [ 578.753849][T15446] binder: 15445:15446 ioctl c0306201 200000000640 returned -22 [ 579.045623][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 579.045706][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 579.141154][ T5817] usb_ehset_test 4-1:0.175: probe with driver usb_ehset_test failed with error -32 [ 579.156121][ T5817] usb 4-1: USB disconnect, device number 69 [ 579.331437][T15454] binder: BINDER_SET_CONTEXT_MGR already set [ 579.331456][T15454] binder: 15451:15454 ioctl 4018620d 200000000240 returned -16 [ 579.357609][T15454] binder: BINDER_SET_CONTEXT_MGR already set [ 579.357761][T15454] binder: 15451:15454 ioctl 4018620d 200000000040 returned -16 [ 579.361940][T15454] FAULT_INJECTION: forcing a failure. [ 579.361940][T15454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 579.361975][T15454] CPU: 0 UID: 0 PID: 15454 Comm: syz.2.3664 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 579.362007][T15454] Tainted: [L]=SOFTLOCKUP [ 579.362015][T15454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 579.362027][T15454] Call Trace: [ 579.362034][T15454] [ 579.362043][T15454] dump_stack_lvl+0xe8/0x150 [ 579.362074][T15454] should_fail_ex+0x46b/0x600 [ 579.362104][T15454] _copy_from_user+0x2d/0xb0 [ 579.362135][T15454] binder_ioctl_write_read+0x167/0xa490 [ 579.362166][T15454] ? is_bpf_text_address+0x26/0x2b0 [ 579.362196][T15454] ? try_to_take_rt_mutex+0x840/0xb00 [ 579.362225][T15454] ? __kernel_text_address+0xd/0x30 [ 579.362258][T15454] ? __lock_acquire+0x6b5/0x2d10 [ 579.362283][T15454] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 579.362313][T15454] ? stack_depot_save_flags+0x33/0x810 [ 579.362346][T15454] ? do_raw_spin_lock+0x12b/0x2f0 [ 579.362384][T15454] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 579.362415][T15454] ? lockdep_hardirqs_on+0x7a/0x110 [ 579.362450][T15454] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 579.362481][T15454] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 579.362507][T15454] ? reacquire_held_locks+0x104/0x190 [ 579.362530][T15454] ? rt_spin_lock+0x1e0/0x400 [ 579.362555][T15454] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 579.362583][T15454] ? rt_spin_unlock+0x14f/0x200 [ 579.362619][T15454] ? binder_get_thread+0x177/0x6d0 [ 579.362655][T15454] binder_ioctl+0x426/0x1b10 [ 579.362694][T15454] ? tomoyo_path_number_perm+0x219/0x630 [ 579.362722][T15454] ? tomoyo_path_number_perm+0x219/0x630 [ 579.362751][T15454] ? do_vfs_ioctl+0x117b/0x1540 [ 579.362782][T15454] ? __pfx_binder_ioctl+0x10/0x10 [ 579.362809][T15454] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 579.362867][T15454] ? __fget_files+0x2a/0x420 [ 579.362894][T15454] ? __fget_files+0x2a/0x420 [ 579.362918][T15454] ? __fget_files+0x3a6/0x420 [ 579.362942][T15454] ? __fget_files+0x2a/0x420 [ 579.362971][T15454] ? bpf_lsm_file_ioctl+0x9/0x20 [ 579.362996][T15454] ? __pfx_binder_ioctl+0x10/0x10 [ 579.363028][T15454] __se_sys_ioctl+0xff/0x170 [ 579.363058][T15454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.363080][T15454] do_syscall_64+0x15f/0xf80 [ 579.363099][T15454] ? trace_irq_disable+0x3b/0x140 [ 579.363128][T15454] ? clear_bhb_loop+0x40/0x90 [ 579.363152][T15454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.363173][T15454] RIP: 0033:0x7f23549bcdd9 [ 579.363193][T15454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.363212][T15454] RSP: 002b:00007f2352c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.363235][T15454] RAX: ffffffffffffffda RBX: 00007f2354c35fa0 RCX: 00007f23549bcdd9 [ 579.363250][T15454] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003 [ 579.363264][T15454] RBP: 00007f2352c0e090 R08: 0000000000000000 R09: 0000000000000000 [ 579.363276][T15454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.363289][T15454] R13: 00007f2354c36038 R14: 00007f2354c35fa0 R15: 00007ffc5fe4a798 [ 579.363318][T15454] [ 579.420252][T15454] binder: 15451:15454 ioctl c0306201 200000000180 returned -14 [ 580.152030][T15465] binder: BINDER_SET_CONTEXT_MGR already set [ 580.152050][T15465] binder: 15464:15465 ioctl 4018620d 200000000480 returned -16 [ 580.203846][T15467] binder: 15466:15467 ioctl c0306201 200000000040 returned -22 [ 580.204209][T15467] binder: 15466:15467 ioctl c0306201 200000000640 returned -22 [ 580.295992][T15469] binder: 15468:15469 ioctl c0306201 200000000040 returned -22 [ 580.297290][T15469] binder: 15468:15469 ioctl c0306201 200000000640 returned -22 [ 580.543563][T15479] netlink: 'syz.3.3674': attribute type 8 has an invalid length. [ 580.733467][ T5817] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 581.823290][ T5817] usb 1-1: unable to get BOS descriptor or descriptor too short [ 581.846272][ T5817] usb 1-1: config 0 has an invalid interface number: 175 but max is 0 [ 581.846302][ T5817] usb 1-1: config 0 has no interface number 0 [ 581.846333][ T5817] usb 1-1: config 0 interface 175 has no altsetting 0 [ 581.878224][ T5817] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=22.1a [ 581.878261][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.878285][ T5817] usb 1-1: Product: syz [ 581.878304][ T5817] usb 1-1: Manufacturer: syz [ 581.878323][ T5817] usb 1-1: SerialNumber: syz [ 581.954144][ T5817] usb 1-1: config 0 descriptor?? [ 582.488054][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -EPROTO [ 582.488119][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 582.488157][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 582.554074][ T5343] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 582.822822][ T5343] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 582.909107][ T5817] usb_ehset_test 1-1:0.175: probe with driver usb_ehset_test failed with error -32 [ 582.927196][ T5343] usb 2-1: USB disconnect, device number 100 [ 582.943334][ T5817] usb 1-1: USB disconnect, device number 59 [ 583.153516][T15495] binder: 15494:15495 ioctl c0306201 200000000040 returned -22 [ 583.153855][T15495] binder: 15494:15495 ioctl c0306201 200000000640 returned -22 [ 583.204837][T15497] binder: 15496:15497 ioctl c0306201 200000000040 returned -22 [ 583.205230][T15497] binder: 15496:15497 ioctl c0306201 200000000640 returned -22 [ 583.503394][ T5343] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 583.558254][T15503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 583.663305][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 583.667262][ T5343] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 583.667382][ T5343] usb 4-1: can't read configurations, error -61 [ 583.772942][T15509] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'. [ 583.794399][ T5343] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 583.943498][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 583.943710][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 583.946737][ T5343] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 583.946777][ T5343] usb 4-1: can't read configurations, error -61 [ 583.947129][ T5343] usb usb4-port1: attempt power cycle [ 584.076758][ T9] usb 1-1: device descriptor read/64, error -71 [ 584.143377][ T5616] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 584.170892][T15520] binder: BINDER_SET_CONTEXT_MGR already set [ 584.170907][T15520] binder: 15519:15520 ioctl 4018620d 200000000480 returned -16 [ 584.172609][T15520] binder: 15519:15520 ioctl c0306201 200000000040 returned -22 [ 584.172837][T15520] binder: 15519:15520 ioctl c0306201 200000000640 returned -22 [ 584.256242][T15522] binder: BINDER_SET_CONTEXT_MGR already set [ 584.256256][T15522] binder: 15521:15522 ioctl 4018620d 200000000480 returned -16 [ 584.258725][T15522] binder: 15521:15522 ioctl c0306201 200000000040 returned -22 [ 584.258966][T15522] binder: 15521:15522 ioctl c0306201 200000000640 returned -22 [ 584.295512][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 584.297920][ T5616] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 584.297962][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 584.297980][ T5616] usb 2-1: Product: syz [ 584.297992][ T5616] usb 2-1: Manufacturer: syz [ 584.298005][ T5616] usb 2-1: SerialNumber: syz [ 584.306944][ T5343] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 584.320190][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 584.325641][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 584.371447][ T5343] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.371486][ T5343] usb 4-1: can't read configurations, error -61 [ 584.384706][ T5616] usb 2-1: config 0 descriptor?? [ 584.387710][T15511] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 584.412332][ T5616] hub 2-1:0.0: bad descriptor, ignoring hub [ 584.412378][ T5616] hub 2-1:0.0: probe with driver hub failed with error -5 [ 584.493477][ T9] usb 1-1: device descriptor read/64, error -71 [ 584.523747][ T5343] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 584.544028][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 584.548605][ T5343] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 584.548647][ T5343] usb 4-1: can't read configurations, error -61 [ 584.549032][ T5343] usb usb4-port1: unable to enumerate USB device [ 584.602271][T15511] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 584.602271][T15511] The task syz.1.3689 (15511) triggered the difference, watch for misbehavior. [ 584.604661][ T9] usb usb1-port1: attempt power cycle [ 584.715141][ T5817] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 584.744101][ T5343] usb 2-1: USB disconnect, device number 101 [ 584.874319][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 584.881904][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.881999][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 584.905598][ T5817] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.905635][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.905664][ T5817] usb 3-1: Product: syz [ 584.905676][ T5817] usb 3-1: Manufacturer: syz [ 584.905690][ T5817] usb 3-1: SerialNumber: syz [ 584.943443][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 584.947466][T15532] tmpfs: Bad value for 'mpol' [ 584.975541][ T5817] usb 3-1: 0:2 : does not exist [ 584.987363][ T9] usb 1-1: device descriptor read/8, error -71 [ 585.153979][ T5817] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 585.233400][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 585.255660][ T9] usb 1-1: device descriptor read/8, error -71 [ 585.281883][ T5817] usb 3-1: USB disconnect, device number 101 [ 585.368555][ T9] usb usb1-port1: unable to enumerate USB device [ 585.368560][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.822328][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 586.223326][ T9] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 586.318657][T15539] FAULT_INJECTION: forcing a failure. [ 586.318657][T15539] name failslab, interval 1, probability 0, space 0, times 0 [ 586.318700][T15539] CPU: 1 UID: 0 PID: 15539 Comm: syz.3.3699 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.318735][T15539] Tainted: [L]=SOFTLOCKUP [ 586.318744][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.318767][T15539] Call Trace: [ 586.318778][T15539] [ 586.318788][T15539] dump_stack_lvl+0xe8/0x150 [ 586.318823][T15539] should_fail_ex+0x46b/0x600 [ 586.318860][T15539] should_failslab+0xa8/0x100 [ 586.318898][T15539] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 586.318933][T15539] ? __alloc_skb+0x1d0/0x7d0 [ 586.318964][T15539] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.319007][T15539] __alloc_skb+0x1d0/0x7d0 [ 586.319045][T15539] pfkey_sendmsg+0xd42/0x1120 [ 586.319091][T15539] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 586.319141][T15539] ? __pfx_aa_sk_perm+0x10/0x10 [ 586.319172][T15539] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 586.319218][T15539] ? aa_sock_msg_perm+0x122/0x200 [ 586.319254][T15539] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 586.319281][T15539] sock_sendmsg_nosec+0x112/0x150 [ 586.319313][T15539] ____sys_sendmsg+0x55c/0x870 [ 586.319356][T15539] ? __pfx_____sys_sendmsg+0x10/0x10 [ 586.319402][T15539] ? import_iovec+0x73/0xa0 [ 586.319442][T15539] ___sys_sendmsg+0x2a5/0x360 [ 586.319476][T15539] ? __lock_acquire+0x6b5/0x2d10 [ 586.319506][T15539] ? __pfx____sys_sendmsg+0x10/0x10 [ 586.319579][T15539] ? __fget_files+0x2a/0x420 [ 586.319608][T15539] ? __fget_files+0x3a6/0x420 [ 586.319648][T15539] __x64_sys_sendmsg+0x1c3/0x2a0 [ 586.319687][T15539] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 586.319735][T15539] ? __pfx_ksys_write+0x10/0x10 [ 586.319786][T15539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.319814][T15539] do_syscall_64+0x15f/0xf80 [ 586.319837][T15539] ? trace_irq_disable+0x3b/0x140 [ 586.319873][T15539] ? clear_bhb_loop+0x40/0x90 [ 586.319902][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.319928][T15539] RIP: 0033:0x7f06fb25cdd9 [ 586.319951][T15539] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.319973][T15539] RSP: 002b:00007f06f94ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 586.320000][T15539] RAX: ffffffffffffffda RBX: 00007f06fb4d5fa0 RCX: 00007f06fb25cdd9 [ 586.320019][T15539] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 586.320036][T15539] RBP: 00007f06f94ae090 R08: 0000000000000000 R09: 0000000000000000 [ 586.320053][T15539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.320069][T15539] R13: 00007f06fb4d6038 R14: 00007f06fb4d5fa0 R15: 00007ffc214333a8 [ 586.320107][T15539] [ 586.355532][ T9] usb 2-1: device descriptor read/64, error -71 [ 586.596871][ T9] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 586.671369][T15542] binder: 15540:15542 ioctl c0306201 0 returned -14 [ 586.671799][T15542] binder: 15540:15542 ioctl c0306201 200000000640 returned -22 [ 586.683987][T15543] binder: BINDER_SET_CONTEXT_MGR already set [ 586.684007][T15543] binder: 15541:15543 ioctl 4018620d 200000000480 returned -16 [ 586.688521][T15543] binder: 15541:15543 ioctl c0306201 200000000040 returned -22 [ 586.738353][ T9] usb 2-1: device descriptor read/64, error -71 [ 586.846836][ T9] usb usb2-port1: attempt power cycle [ 586.930928][T15552] FAULT_INJECTION: forcing a failure. [ 586.930928][T15552] name failslab, interval 1, probability 0, space 0, times 0 [ 586.930964][T15552] CPU: 0 UID: 0 PID: 15552 Comm: syz.3.3705 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 586.930990][T15552] Tainted: [L]=SOFTLOCKUP [ 586.930997][T15552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.931009][T15552] Call Trace: [ 586.931016][T15552] [ 586.931025][T15552] dump_stack_lvl+0xe8/0x150 [ 586.931051][T15552] should_fail_ex+0x46b/0x600 [ 586.931078][T15552] should_failslab+0xa8/0x100 [ 586.931105][T15552] __kmalloc_cache_noprof+0x84/0x690 [ 586.931132][T15552] ? autofs_wait+0x31a/0x1950 [ 586.931150][T15552] ? __task_pid_nr_ns+0x399/0x470 [ 586.931172][T15552] autofs_wait+0x31a/0x1950 [ 586.931199][T15552] ? __pfx_autofs_wait+0x10/0x10 [ 586.931217][T15552] ? lockdep_hardirqs_on+0x7a/0x110 [ 586.931247][T15552] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 586.931270][T15552] ? reacquire_held_locks+0x104/0x190 [ 586.931291][T15552] ? rt_spin_lock+0x1e0/0x400 [ 586.931315][T15552] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 586.931340][T15552] ? rt_spin_unlock+0x14f/0x200 [ 586.931364][T15552] autofs_mount_wait+0x16b/0x390 [ 586.931386][T15552] autofs_d_automount+0x64e/0x810 [ 586.931409][T15552] __traverse_mounts+0x301/0x5d0 [ 586.931437][T15552] step_into_slowpath+0x475/0x7e0 [ 586.931463][T15552] ? __pfx_step_into_slowpath+0x10/0x10 [ 586.931484][T15552] ? lookup_slow+0x5e/0x70 [ 586.931509][T15552] ? up_read+0x23/0x40 [ 586.931534][T15552] path_lookupat+0x433/0x8c0 [ 586.931566][T15552] filename_lookup+0x256/0x5d0 [ 586.931590][T15552] ? __pfx_filename_lookup+0x10/0x10 [ 586.931627][T15552] ? kmem_cache_alloc_noprof+0x388/0x680 [ 586.931650][T15552] ? do_getname_kernel+0x97/0x230 [ 586.931671][T15552] ? __asan_memcpy+0x40/0x70 [ 586.931692][T15552] ? do_getname_kernel+0x183/0x230 [ 586.931736][T15552] kern_path+0x3d/0x150 [ 586.931759][T15552] unix_find_other+0x19d/0xb40 [ 586.931791][T15552] ? __pfx_unix_find_other+0x10/0x10 [ 586.931816][T15552] ? __might_fault+0xaf/0x130 [ 586.931845][T15552] ? tomoyo_socket_connect_permission+0x1b1/0x290 [ 586.931877][T15552] unix_dgram_connect+0x2cf/0xc20 [ 586.931906][T15552] ? bpf_lsm_socket_connect+0x9/0x20 [ 586.931936][T15552] __sys_connect+0x315/0x450 [ 586.931961][T15552] ? __pfx___sys_connect+0x10/0x10 [ 586.931995][T15552] ? __pfx_ksys_write+0x10/0x10 [ 586.932023][T15552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.932043][T15552] __x64_sys_connect+0x7a/0x90 [ 586.932067][T15552] do_syscall_64+0x15f/0xf80 [ 586.932085][T15552] ? trace_irq_disable+0x3b/0x140 [ 586.932111][T15552] ? clear_bhb_loop+0x40/0x90 [ 586.932133][T15552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.932151][T15552] RIP: 0033:0x7f06fb25cdd9 [ 586.932168][T15552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.932184][T15552] RSP: 002b:00007f06f94ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 586.932204][T15552] RAX: ffffffffffffffda RBX: 00007f06fb4d5fa0 RCX: 00007f06fb25cdd9 [ 586.932217][T15552] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000007 [ 586.932229][T15552] RBP: 00007f06f94ae090 R08: 0000000000000000 R09: 0000000000000000 [ 586.932241][T15552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.932253][T15552] R13: 00007f06fb4d6038 R14: 00007f06fb4d5fa0 R15: 00007ffc214333a8 [ 586.932279][T15552] [ 587.223261][T14305] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 587.253396][ T9] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 587.355194][ T9] usb 2-1: device descriptor read/8, error -71 [ 587.389121][T15558] batadv_slave_0: entered promiscuous mode [ 587.425952][T14305] usb 1-1: unable to get BOS descriptor or descriptor too short [ 587.435593][T14305] usb 1-1: not running at top speed; connect to a high speed hub [ 587.440879][T14305] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.440913][T14305] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.451843][T14305] usb 1-1: string descriptor 0 read error: -22 [ 587.452047][T14305] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.452077][T14305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.537656][T14305] usb 1-1: 0:2 : does not exist [ 587.633720][ T9] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 587.655968][ T9] usb 2-1: device descriptor read/8, error -71 [ 587.764021][ T9] usb usb2-port1: unable to enumerate USB device [ 587.878095][T15567] netlink: 'syz.2.3709': attribute type 49 has an invalid length. [ 588.044328][T15557] batadv_slave_0: left promiscuous mode [ 588.144597][T15573] binder: 15572:15573 ioctl c0306201 0 returned -14 [ 588.145129][T15573] binder: 15572:15573 ioctl c0306201 200000000640 returned -22 [ 588.225159][T15575] binder: 15574:15575 ioctl c0306201 200000000040 returned -22 [ 588.243635][ T5817] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 588.364639][T15579] overlay: Bad value for 'workdir' [ 588.403471][ T5817] usb 3-1: device descriptor read/64, error -71 [ 588.655381][ T5817] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 588.803418][ T5817] usb 3-1: device descriptor read/64, error -71 [ 588.932262][ T5817] usb usb3-port1: attempt power cycle [ 588.963701][ T823] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 589.148839][ T823] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 589.148890][ T823] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 589.149102][ T823] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 589.149140][ T823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 589.149161][ T823] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 589.151675][ T823] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 589.151700][ T823] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 589.151915][ T823] usb 4-1: Product: syz [ 589.151928][ T823] usb 4-1: Manufacturer: syz [ 589.272503][ T823] cdc_wdm 4-1:1.0: skipping garbage [ 589.272522][ T823] cdc_wdm 4-1:1.0: skipping garbage [ 589.307508][ T5817] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 589.337352][ T5817] usb 3-1: device descriptor read/8, error -71 [ 589.338670][ T823] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 589.338693][ T823] cdc_wdm 4-1:1.0: Unknown control protocol [ 589.475720][T15582] netlink: zone id is out of range [ 589.475739][T15582] netlink: zone id is out of range [ 589.475751][T15582] netlink: zone id is out of range [ 589.475823][T15582] netlink: zone id is out of range [ 589.475834][T15582] netlink: del zone limit has 4 unknown bytes [ 589.594380][ T5817] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 589.608815][ T823] usb 4-1: USB disconnect, device number 74 [ 589.631579][ T5817] usb 3-1: device descriptor read/8, error -71 [ 589.744701][ T5817] usb usb3-port1: unable to enumerate USB device [ 589.827318][T14305] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 589.855695][T14305] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 589.861556][T14305] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 589.977097][T14305] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 590.017299][T15594] binder: 15593:15594 ioctl c0306201 0 returned -14 [ 590.017613][T15594] binder: 15593:15594 ioctl c0306201 200000000640 returned -22 [ 590.039323][T14305] usb 1-1: USB disconnect, device number 64 [ 590.138867][T15596] binder: 15595:15596 ioctl c0306201 200000000040 returned -22 [ 590.390409][T15601] binder: 15600:15601 ioctl c0306201 200000000680 returned -14 [ 590.593356][ T5343] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 590.743330][ T5343] usb 2-1: Using ep0 maxpacket: 8 [ 590.745463][ T5343] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.745505][ T5343] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 590.745527][ T5343] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 590.745548][ T5343] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 590.748020][ T5343] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 590.748055][ T5343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 590.748072][ T5343] usb 2-1: Product: syz [ 590.748084][ T5343] usb 2-1: Manufacturer: syz [ 590.748097][ T5343] usb 2-1: SerialNumber: syz [ 590.846833][ T5343] usb 2-1: config 0 descriptor?? [ 591.057803][ T5343] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 591.057838][ T5343] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 591.125662][T15612] binder: 15611:15612 ioctl c0306201 0 returned -14 [ 591.134130][T15612] binder: 15611:15612 ioctl c0306201 200000000640 returned -22 [ 591.257561][ T5343] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 591.257594][ T5343] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 591.257620][ T5343] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 591.302234][T15617] FAULT_INJECTION: forcing a failure. [ 591.302234][T15617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.302277][T15617] CPU: 0 UID: 0 PID: 15617 Comm: syz.3.3728 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 591.302313][T15617] Tainted: [L]=SOFTLOCKUP [ 591.302322][T15617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.302337][T15617] Call Trace: [ 591.302346][T15617] [ 591.302355][T15617] dump_stack_lvl+0xe8/0x150 [ 591.302387][T15617] should_fail_ex+0x46b/0x600 [ 591.302420][T15617] _copy_to_user+0x31/0xb0 [ 591.302456][T15617] simple_read_from_buffer+0xe1/0x170 [ 591.302490][T15617] proc_fail_nth_read+0x1be/0x230 [ 591.302524][T15617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.302560][T15617] ? rw_verify_area+0x2ac/0x4e0 [ 591.302592][T15617] ? tun_chr_write_iter+0x19d/0x210 [ 591.302626][T15617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 591.302659][T15617] vfs_read+0x212/0xa80 [ 591.302711][T15617] ? __pfx_vfs_read+0x10/0x10 [ 591.302748][T15617] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 591.302786][T15617] ? lockdep_hardirqs_on+0x7a/0x110 [ 591.302823][T15617] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 591.302860][T15617] ? mutex_lock_nested+0x152/0x1d0 [ 591.302888][T15617] ? fdget_pos+0x252/0x320 [ 591.302927][T15617] ksys_read+0x156/0x270 [ 591.302964][T15617] ? __pfx_ksys_read+0x10/0x10 [ 591.303006][T15617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.303033][T15617] do_syscall_64+0x15f/0xf80 [ 591.303056][T15617] ? trace_irq_disable+0x3b/0x140 [ 591.303092][T15617] ? clear_bhb_loop+0x40/0x90 [ 591.303123][T15617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.303149][T15617] RIP: 0033:0x7f06fb21d60e [ 591.303172][T15617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 591.303194][T15617] RSP: 002b:00007f06f94adfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 591.303221][T15617] RAX: ffffffffffffffda RBX: 00007f06f94ae6c0 RCX: 00007f06fb21d60e [ 591.303238][T15617] RDX: 000000000000000f RSI: 00007f06f94ae0a0 RDI: 0000000000000005 [ 591.303256][T15617] RBP: 00007f06f94ae090 R08: 0000000000000000 R09: 0000000000000000 [ 591.303272][T15617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.303288][T15617] R13: 00007f06fb4d6038 R14: 00007f06fb4d5fa0 R15: 00007ffc214333a8 [ 591.303326][T15617] [ 591.621745][T15598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.623070][T15598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.788018][ T5343] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 591.788303][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 591.788620][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 591.788735][ T5343] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 591.789237][ T5343] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 592.193600][T15598] tipc: Enabling of bearer rejected, already enabled [ 592.223533][ T5343] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 592.373486][ T5343] usb 4-1: Using ep0 maxpacket: 16 [ 592.378097][ T5343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.378129][ T5343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 592.384303][ T5343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 592.384414][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.384481][ T5343] usb 4-1: Product: syz [ 592.384533][ T5343] usb 4-1: Manufacturer: syz [ 592.384582][ T5343] usb 4-1: SerialNumber: syz [ 592.394303][ T5620] Bluetooth: hci0: command 0x0405 tx timeout [ 592.606803][ T5343] usb 4-1: 0:2 : does not exist [ 592.715889][ T5616] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 592.767933][ T5343] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 592.877267][ T5616] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 592.877304][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.877330][ T5616] usb 1-1: Product: syz [ 592.877349][ T5616] usb 1-1: Manufacturer: syz [ 592.877367][ T5616] usb 1-1: SerialNumber: syz [ 592.923508][ T5616] usb 1-1: config 0 descriptor?? [ 593.093047][ T5343] usb 4-1: USB disconnect, device number 75 [ 593.141607][T15625] netlink: 'syz.0.3731': attribute type 27 has an invalid length. [ 593.400665][T15647] netlink: 'syz.0.3731': attribute type 27 has an invalid length. [ 593.425505][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 593.532782][ T823] usb 2-1: USB disconnect, device number 106 [ 593.591844][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 593.625104][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.860702][T15657] binder: 15656:15657 ioctl c0306201 200000000640 returned -22 [ 593.903638][ T5616] usb 1-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 593.903667][ T5616] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 593.903698][ T5616] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 593.961660][ T5616] usb 1-1: USB disconnect, device number 65 [ 594.234780][ T823] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 594.373503][ T823] usb 2-1: device descriptor read/64, error -71 [ 594.485875][T15675] FAULT_INJECTION: forcing a failure. [ 594.485875][T15675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 594.485917][T15675] CPU: 1 UID: 0 PID: 15675 Comm: syz.2.3740 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 594.485952][T15675] Tainted: [L]=SOFTLOCKUP [ 594.485962][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 594.485984][T15675] Call Trace: [ 594.485994][T15675] [ 594.486005][T15675] dump_stack_lvl+0xe8/0x150 [ 594.486041][T15675] should_fail_ex+0x46b/0x600 [ 594.486079][T15675] _copy_to_user+0x31/0xb0 [ 594.486118][T15675] do_ip_vs_get_ctl+0x7ca/0xe10 [ 594.486161][T15675] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 594.486210][T15675] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 594.486286][T15675] ? lockdep_hardirqs_on+0x7a/0x110 [ 594.486324][T15675] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 594.486362][T15675] ? rt_mutex_slowunlock+0x1cb/0x300 [ 594.486393][T15675] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 594.486432][T15675] ? nf_getsockopt+0x224/0x290 [ 594.486465][T15675] nf_getsockopt+0x26e/0x290 [ 594.486499][T15675] ip_getsockopt+0x19e/0x230 [ 594.486537][T15675] ? __pfx_ip_getsockopt+0x10/0x10 [ 594.486572][T15675] ? sock_common_getsockopt+0x2d/0xb0 [ 594.486603][T15675] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 594.486635][T15675] do_sock_getsockopt+0x51d/0x7e0 [ 594.486677][T15675] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 594.486731][T15675] ? __fget_files+0x3a6/0x420 [ 594.486760][T15675] ? __fget_files+0x2a/0x420 [ 594.486797][T15675] __x64_sys_getsockopt+0x1aa/0x250 [ 594.486840][T15675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.486868][T15675] do_syscall_64+0x15f/0xf80 [ 594.486891][T15675] ? trace_irq_disable+0x3b/0x140 [ 594.486926][T15675] ? clear_bhb_loop+0x40/0x90 [ 594.486957][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.486981][T15675] RIP: 0033:0x7f23549bcdd9 [ 594.487004][T15675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.487025][T15675] RSP: 002b:00007f2352c0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 594.487051][T15675] RAX: ffffffffffffffda RBX: 00007f2354c35fa0 RCX: 00007f23549bcdd9 [ 594.487070][T15675] RDX: 0000000000000481 RSI: 0000000000000000 RDI: 0000000000000003 [ 594.487085][T15675] RBP: 00007f2352c0e090 R08: 0000200000000040 R09: 0000000000000000 [ 594.487102][T15675] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.487119][T15675] R13: 00007f2354c36038 R14: 00007f2354c35fa0 R15: 00007ffc5fe4a798 [ 594.487163][T15675] [ 594.703416][ T823] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 594.864111][ T823] usb 2-1: device descriptor read/64, error -71 [ 594.983748][ T823] usb usb2-port1: attempt power cycle [ 595.091082][T15690] binder: 15689:15690 ioctl c0306201 200000000640 returned -22 [ 595.096694][ T5817] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 595.143472][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 595.275972][ T5817] usb 3-1: Using ep0 maxpacket: 16 [ 595.283816][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.283848][ T5817] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.308550][ T5817] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 595.308647][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.308672][ T5817] usb 3-1: Product: syz [ 595.308691][ T5817] usb 3-1: Manufacturer: syz [ 595.308732][ T5817] usb 3-1: SerialNumber: syz [ 595.355425][ T823] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 595.385046][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.385088][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.385133][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 595.385160][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.386045][ T823] usb 2-1: device descriptor read/8, error -71 [ 595.447409][ T9] usb 4-1: config 0 descriptor?? [ 595.508509][ T5817] usb 3-1: 0:2 : does not exist [ 595.619396][ T60] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 595.664825][ T823] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 595.696540][ T823] usb 2-1: device descriptor read/8, error -71 [ 595.734198][ T5817] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 595.805905][ T823] usb usb2-port1: unable to enumerate USB device [ 595.842409][ T5817] usb 3-1: USB disconnect, device number 106 [ 595.878186][T15699] FAULT_INJECTION: forcing a failure. [ 595.878186][T15699] name failslab, interval 1, probability 0, space 0, times 0 [ 595.878226][T15699] CPU: 1 UID: 0 PID: 15699 Comm: syz.0.3747 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 595.878258][T15699] Tainted: [L]=SOFTLOCKUP [ 595.878268][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.878281][T15699] Call Trace: [ 595.878289][T15699] [ 595.878299][T15699] dump_stack_lvl+0xe8/0x150 [ 595.878332][T15699] should_fail_ex+0x46b/0x600 [ 595.878365][T15699] should_failslab+0xa8/0x100 [ 595.878400][T15699] __kmalloc_noprof+0xdf/0x7b0 [ 595.878428][T15699] ? mutex_rt_init_lockdep+0x66/0x80 [ 595.878456][T15699] ? security_task_alloc+0x4d/0x330 [ 595.878487][T15699] security_task_alloc+0x4d/0x330 [ 595.878516][T15699] copy_process+0x1d1a/0x4450 [ 595.878560][T15699] ? copy_process+0xd87/0x4450 [ 595.878598][T15699] ? __pfx_copy_process+0x10/0x10 [ 595.878640][T15699] vhost_task_create+0x1f9/0x380 [ 595.878663][T15699] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 595.878702][T15699] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 595.878739][T15699] ? __pfx_vhost_task_create+0x10/0x10 [ 595.878768][T15699] ? __pfx_vhost_task_fn+0x10/0x10 [ 595.878793][T15699] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 595.878825][T15699] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.878856][T15699] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 595.878886][T15699] ? mutex_lock_nested+0x152/0x1d0 [ 595.878910][T15699] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 595.878945][T15699] kvm_mmu_post_init_vm+0x147/0x2d0 [ 595.878978][T15699] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 595.879028][T15699] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 595.879054][T15699] ? do_raw_spin_lock+0x12b/0x2f0 [ 595.879092][T15699] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 595.879122][T15699] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.879153][T15699] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 595.879184][T15699] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 595.879222][T15699] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 595.879251][T15699] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 595.879283][T15699] ? lockdep_hardirqs_on+0x7a/0x110 [ 595.879313][T15699] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 595.879343][T15699] ? rt_write_unlock+0x190/0x230 [ 595.879373][T15699] kvm_vcpu_ioctl+0xa65/0xfe0 [ 595.879413][T15699] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 595.879469][T15699] ? __fget_files+0x2a/0x420 [ 595.879502][T15699] ? __fget_files+0x2a/0x420 [ 595.879530][T15699] ? __fget_files+0x3a6/0x420 [ 595.879557][T15699] ? __fget_files+0x2a/0x420 [ 595.879588][T15699] ? bpf_lsm_file_ioctl+0x9/0x20 [ 595.879616][T15699] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 595.879650][T15699] __se_sys_ioctl+0xff/0x170 [ 595.879685][T15699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.879713][T15699] do_syscall_64+0x15f/0xf80 [ 595.879737][T15699] ? clear_bhb_loop+0x40/0x90 [ 595.879766][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.879791][T15699] RIP: 0033:0x7f9a94edcdd9 [ 595.879814][T15699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.879837][T15699] RSP: 002b:00007f9a9310d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.879864][T15699] RAX: ffffffffffffffda RBX: 00007f9a95156090 RCX: 00007f9a94edcdd9 [ 595.879883][T15699] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 595.879899][T15699] RBP: 00007f9a9310d090 R08: 0000000000000000 R09: 0000000000000000 [ 595.879915][T15699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.879932][T15699] R13: 00007f9a95156128 R14: 00007f9a95156090 R15: 00007ffe3fe8ad58 [ 595.879968][T15699] [ 596.288009][ T9] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 596.288049][ T9] playstation 0003:054C:0BA0.0019: unknown main item tag 0x0 [ 596.360624][ T9] playstation 0003:054C:0BA0.0019: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.3-1/input0 [ 596.386388][ T5863] udevd[5863]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 596.413981][ T9] playstation 0003:054C:0BA0.0019: Failed to retrieve feature with reportID 18: -71 [ 596.414016][ T9] playstation 0003:054C:0BA0.0019: Failed to retrieve DualShock4 pairing info: -71 [ 596.414070][ T9] playstation 0003:054C:0BA0.0019: Failed to get MAC address from DualShock4 [ 596.414094][ T9] playstation 0003:054C:0BA0.0019: Failed to create dualshock4. [ 596.464721][ T9] playstation 0003:054C:0BA0.0019: probe with driver playstation failed with error -71 [ 596.480654][ T9] usb 4-1: USB disconnect, device number 76 [ 596.625360][T15701] fido_id[15701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 596.834382][ T5817] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 596.943468][ T5616] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 596.983365][ T5817] usb 3-1: Using ep0 maxpacket: 32 [ 596.986619][ T5817] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 596.986648][ T5817] usb 3-1: config 0 has no interface number 0 [ 596.986691][ T5817] usb 3-1: config 0 interface 184 has no altsetting 0 [ 597.008387][ T5817] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 597.008510][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.008578][ T5817] usb 3-1: Product: syz [ 597.008624][ T5817] usb 3-1: Manufacturer: syz [ 597.008676][ T5817] usb 3-1: SerialNumber: syz [ 597.060545][ T5817] usb 3-1: config 0 descriptor?? [ 597.068436][T15710] FAULT_INJECTION: forcing a failure. [ 597.068436][T15710] name failslab, interval 1, probability 0, space 0, times 0 [ 597.068478][T15710] CPU: 0 UID: 0 PID: 15710 Comm: syz.3.3751 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.068513][T15710] Tainted: [L]=SOFTLOCKUP [ 597.068523][T15710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.068538][T15710] Call Trace: [ 597.068548][T15710] [ 597.068559][T15710] dump_stack_lvl+0xe8/0x150 [ 597.068595][T15710] should_fail_ex+0x46b/0x600 [ 597.068633][T15710] should_failslab+0xa8/0x100 [ 597.068673][T15710] __kmalloc_noprof+0xdf/0x7b0 [ 597.068708][T15710] ? kfree+0x4d/0x6c0 [ 597.068737][T15710] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 597.068784][T15710] tomoyo_realpath_from_path+0xe3/0x5d0 [ 597.068839][T15710] tomoyo_check_open_permission+0x229/0x470 [ 597.068875][T15710] ? tomoyo_check_open_permission+0x1d3/0x470 [ 597.068910][T15710] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 597.068946][T15710] ? __asan_memset+0x22/0x50 [ 597.069003][T15710] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 597.069040][T15710] ? tomoyo_file_open+0x166/0x220 [ 597.069072][T15710] security_file_open+0xa9/0x240 [ 597.069105][T15710] do_dentry_open+0x4c0/0x13e0 [ 597.069138][T15710] ? vfs_open+0x31/0x350 [ 597.069177][T15710] vfs_open+0x3b/0x350 [ 597.069202][T15710] ? path_openat+0x2e2b/0x38a0 [ 597.069239][T15710] path_openat+0x2e43/0x38a0 [ 597.069308][T15710] ? __pfx_path_openat+0x10/0x10 [ 597.069347][T15710] ? kasan_save_track+0x4f/0x80 [ 597.069377][T15710] ? kasan_save_track+0x3e/0x80 [ 597.069407][T15710] ? __kasan_slab_alloc+0x6c/0x80 [ 597.069438][T15710] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 597.069480][T15710] ? do_raw_spin_lock+0x12b/0x2f0 [ 597.069524][T15710] do_file_open+0x23e/0x4a0 [ 597.069558][T15710] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 597.069599][T15710] ? __pfx_do_file_open+0x10/0x10 [ 597.069630][T15710] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 597.069685][T15710] ? alloc_fd+0x64e/0x6c0 [ 597.069726][T15710] do_sys_openat2+0x113/0x200 [ 597.069759][T15710] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.069789][T15710] ? ksys_write+0x248/0x270 [ 597.069827][T15710] ? __pfx_ksys_write+0x10/0x10 [ 597.069865][T15710] __x64_sys_openat+0x138/0x170 [ 597.069898][T15710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.069926][T15710] do_syscall_64+0x15f/0xf80 [ 597.069950][T15710] ? trace_irq_disable+0x3b/0x140 [ 597.069987][T15710] ? clear_bhb_loop+0x40/0x90 [ 597.070018][T15710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.070044][T15710] RIP: 0033:0x7f06fb25cdd9 [ 597.070068][T15710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.070091][T15710] RSP: 002b:00007f06f948d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.070119][T15710] RAX: ffffffffffffffda RBX: 00007f06fb4d6090 RCX: 00007f06fb25cdd9 [ 597.070138][T15710] RDX: 0000000000101001 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 597.070163][T15710] RBP: 00007f06f948d090 R08: 0000000000000000 R09: 0000000000000000 [ 597.070180][T15710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.070196][T15710] R13: 00007f06fb4d6128 R14: 00007f06fb4d6090 R15: 00007ffc214333a8 [ 597.070234][T15710] [ 597.070245][T15710] ERROR: Out of memory at tomoyo_realpath_from_path. [ 597.354209][ T5616] usb 1-1: unable to get BOS descriptor or descriptor too short [ 597.404853][ T5616] usb 1-1: config 169 has an invalid descriptor of length 10, skipping remainder of the config [ 597.404885][ T5616] usb 1-1: config 169 has 0 interfaces, different from the descriptor's value: 1 [ 597.485691][ T5616] usb 1-1: New USB device found, idVendor=0951, idProduct=1697, bcdDevice= 1.00 [ 597.485730][ T5616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.485754][ T5616] usb 1-1: Product: syz [ 597.485772][ T5616] usb 1-1: Manufacturer: syz [ 597.485791][ T5616] usb 1-1: SerialNumber: syz [ 597.666172][ T60] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 597.699947][T15713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.709966][T15713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.730798][ T5616] usb 1-1: USB disconnect, device number 66 [ 598.123435][ T823] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 598.283513][ T823] usb 4-1: Using ep0 maxpacket: 8 [ 598.290984][ T823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.291141][ T823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 598.291177][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 598.291208][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 598.351048][ T823] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 598.351495][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 598.351522][ T823] usb 4-1: Product: syz [ 598.351540][ T823] usb 4-1: Manufacturer: syz [ 598.351558][ T823] usb 4-1: SerialNumber: syz [ 598.406441][ T823] usb 4-1: config 0 descriptor?? [ 598.531335][T15720] binder: 15719:15720 ioctl c0306201 200000000640 returned -22 [ 598.570562][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 598.570602][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 598.617966][ T823] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 598.617998][ T823] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 598.631518][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 598.660361][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 598.660395][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 598.660418][ T5817] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 598.661001][ T5817] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 598.758319][ T5817] usb 3-1: USB disconnect, device number 107 [ 598.819880][ T823] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 598.819912][ T823] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 598.819937][ T823] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 598.988258][T15724] binder_alloc: 15723: binder_alloc_buf, no vma [ 599.033542][T14335] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 599.062287][T15718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 599.062994][T15718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 599.196454][T14335] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 599.196533][T14335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.241737][T14335] usb 1-1: config 0 descriptor?? [ 599.273092][T14335] pwc: Samsung MPC-C10 USB webcam detected. [ 599.333695][ T823] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 599.334045][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 599.334246][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 599.334392][ T823] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 599.334450][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 599.386755][ T823] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 599.443766][ T9] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 599.473554][T14335] pwc: send_video_command error -71 [ 599.473577][T14335] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 599.473811][T14335] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 599.483976][T14335] usb 1-1: USB disconnect, device number 67 [ 599.529149][T15731] FAULT_INJECTION: forcing a failure. [ 599.529149][T15731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 599.529193][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.2.3759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.529228][T15731] Tainted: [L]=SOFTLOCKUP [ 599.529238][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.529253][T15731] Call Trace: [ 599.529263][T15731] [ 599.529274][T15731] dump_stack_lvl+0xe8/0x150 [ 599.529312][T15731] should_fail_ex+0x46b/0x600 [ 599.529351][T15731] prepare_alloc_pages+0x22a/0x6b0 [ 599.529397][T15731] __alloc_frozen_pages_noprof+0x12f/0x380 [ 599.529442][T15731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 599.529487][T15731] ? __pfx_policy_nodemask+0x10/0x10 [ 599.529528][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.529568][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.529611][T15731] alloc_pages_mpol+0xd1/0x380 [ 599.529662][T15731] alloc_pages_noprof+0xd2/0x2f0 [ 599.529704][T15731] get_free_pages_noprof+0xf/0x80 [ 599.529744][T15731] __kasan_populate_vmalloc+0x38/0x1d0 [ 599.529776][T15731] ? rt_spin_unlock+0x160/0x200 [ 599.529816][T15731] alloc_vmap_area+0xd47/0x1480 [ 599.529865][T15731] ? __pfx_alloc_vmap_area+0x10/0x10 [ 599.529900][T15731] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 599.529938][T15731] ? __get_vm_area_node+0x171/0x350 [ 599.529969][T15731] ? copy_process+0x89b/0x4450 [ 599.530006][T15731] __get_vm_area_node+0x226/0x350 [ 599.530044][T15731] __vmalloc_node_range_noprof+0x36a/0x1750 [ 599.530079][T15731] ? copy_process+0x89b/0x4450 [ 599.530111][T15731] ? percpu_ref_get_many+0x19/0x140 [ 599.530195][T15731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.530235][T15731] ? rcu_is_watching+0x15/0xb0 [ 599.530265][T15731] ? memcpy_and_pad+0x48/0x80 [ 599.530298][T15731] __vmalloc_node_noprof+0xc2/0x100 [ 599.530333][T15731] ? copy_process+0x89b/0x4450 [ 599.530365][T15731] ? copy_process+0x89b/0x4450 [ 599.530403][T15731] dup_task_struct+0x298/0x840 [ 599.530438][T15731] ? rt_spin_unlock+0x160/0x200 [ 599.530478][T15731] copy_process+0x89b/0x4450 [ 599.530546][T15731] ? __pfx_copy_process+0x10/0x10 [ 599.530595][T15731] vhost_task_create+0x1f9/0x380 [ 599.530638][T15731] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 599.530682][T15731] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 599.530722][T15731] ? __pfx_vhost_task_create+0x10/0x10 [ 599.530758][T15731] ? __pfx_vhost_task_fn+0x10/0x10 [ 599.530790][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.530829][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.530866][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.530904][T15731] ? mutex_lock_nested+0x152/0x1d0 [ 599.530934][T15731] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 599.530975][T15731] kvm_mmu_post_init_vm+0x147/0x2d0 [ 599.531016][T15731] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 599.531061][T15731] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 599.531091][T15731] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.531140][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.531179][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.531216][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.531256][T15731] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 599.531295][T15731] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 599.531329][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.531366][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.531404][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.531441][T15731] ? rt_write_unlock+0x190/0x230 [ 599.531477][T15731] kvm_vcpu_ioctl+0xa65/0xfe0 [ 599.531520][T15731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.531578][T15731] ? __fget_files+0x2a/0x420 [ 599.531610][T15731] ? __fget_files+0x2a/0x420 [ 599.531637][T15731] ? __fget_files+0x3a6/0x420 [ 599.531674][T15731] ? __fget_files+0x2a/0x420 [ 599.531708][T15731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.531734][T15731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.531772][T15731] __se_sys_ioctl+0xff/0x170 [ 599.531808][T15731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.531836][T15731] do_syscall_64+0x15f/0xf80 [ 599.531860][T15731] ? trace_irq_disable+0x3b/0x140 [ 599.531894][T15731] ? clear_bhb_loop+0x40/0x90 [ 599.531925][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.531950][T15731] RIP: 0033:0x7f23549bcdd9 [ 599.531973][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.531994][T15731] RSP: 002b:00007f2352bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.532025][T15731] RAX: ffffffffffffffda RBX: 00007f2354c36090 RCX: 00007f23549bcdd9 [ 599.532039][T15731] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 599.532050][T15731] RBP: 00007f2352bed090 R08: 0000000000000000 R09: 0000000000000000 [ 599.532061][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.532072][T15731] R13: 00007f2354c36128 R14: 00007f2354c36090 R15: 00007ffc5fe4a798 [ 599.532099][T15731] [ 599.532788][T15731] warn_alloc: 1 callbacks suppressed [ 599.532806][T15731] syz.2.3759: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 599.532886][T15731] CPU: 1 UID: 0 PID: 15731 Comm: syz.2.3759 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 599.532918][T15731] Tainted: [L]=SOFTLOCKUP [ 599.532928][T15731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 599.532944][T15731] Call Trace: [ 599.532954][T15731] [ 599.532964][T15731] dump_stack_lvl+0xe8/0x150 [ 599.533000][T15731] warn_alloc+0x24c/0x270 [ 599.533036][T15731] ? kasan_quarantine_put+0xbb/0x1f0 [ 599.533073][T15731] ? __pfx_warn_alloc+0x10/0x10 [ 599.533110][T15731] ? __get_vm_area_node+0x23f/0x350 [ 599.533140][T15731] ? __get_vm_area_node+0x171/0x350 [ 599.533176][T15731] ? copy_process+0x89b/0x4450 [ 599.533212][T15731] ? __get_vm_area_node+0x23f/0x350 [ 599.533251][T15731] __vmalloc_node_range_noprof+0x38f/0x1750 [ 599.533284][T15731] ? percpu_ref_get_many+0x19/0x140 [ 599.533352][T15731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 599.533391][T15731] ? rcu_is_watching+0x15/0xb0 [ 599.533420][T15731] ? memcpy_and_pad+0x48/0x80 [ 599.533454][T15731] __vmalloc_node_noprof+0xc2/0x100 [ 599.533487][T15731] ? copy_process+0x89b/0x4450 [ 599.533519][T15731] ? copy_process+0x89b/0x4450 [ 599.533555][T15731] dup_task_struct+0x298/0x840 [ 599.533588][T15731] ? rt_spin_unlock+0x160/0x200 [ 599.533624][T15731] copy_process+0x89b/0x4450 [ 599.533701][T15731] ? __pfx_copy_process+0x10/0x10 [ 599.533750][T15731] vhost_task_create+0x1f9/0x380 [ 599.533778][T15731] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 599.533816][T15731] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 599.533854][T15731] ? __pfx_vhost_task_create+0x10/0x10 [ 599.533891][T15731] ? __pfx_vhost_task_fn+0x10/0x10 [ 599.533922][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.533962][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.533989][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.534015][T15731] ? mutex_lock_nested+0x152/0x1d0 [ 599.534035][T15731] ? kvm_mmu_post_init_vm+0x8f/0x2d0 [ 599.534064][T15731] kvm_mmu_post_init_vm+0x147/0x2d0 [ 599.534092][T15731] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 599.534122][T15731] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 599.534144][T15731] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.534177][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.534206][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.534233][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.534260][T15731] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 599.534287][T15731] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 599.534312][T15731] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.534339][T15731] ? lockdep_hardirqs_on+0x7a/0x110 [ 599.534365][T15731] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 599.534392][T15731] ? rt_write_unlock+0x190/0x230 [ 599.534418][T15731] kvm_vcpu_ioctl+0xa65/0xfe0 [ 599.534448][T15731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.534489][T15731] ? __fget_files+0x2a/0x420 [ 599.534513][T15731] ? __fget_files+0x2a/0x420 [ 599.534533][T15731] ? __fget_files+0x3a6/0x420 [ 599.534552][T15731] ? __fget_files+0x2a/0x420 [ 599.534576][T15731] ? bpf_lsm_file_ioctl+0x9/0x20 [ 599.534595][T15731] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 599.534621][T15731] __se_sys_ioctl+0xff/0x170 [ 599.534653][T15731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.534673][T15731] do_syscall_64+0x15f/0xf80 [ 599.534690][T15731] ? trace_irq_disable+0x3b/0x140 [ 599.534716][T15731] ? clear_bhb_loop+0x40/0x90 [ 599.534737][T15731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.534756][T15731] RIP: 0033:0x7f23549bcdd9 [ 599.534773][T15731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.534789][T15731] RSP: 002b:00007f2352bed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.534808][T15731] RAX: ffffffffffffffda RBX: 00007f2354c36090 RCX: 00007f23549bcdd9 [ 599.534822][T15731] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 599.534834][T15731] RBP: 00007f2352bed090 R08: 0000000000000000 R09: 0000000000000000 [ 599.534845][T15731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.534857][T15731] R13: 00007f2354c36128 R14: 00007f2354c36090 R15: 00007ffc5fe4a798 [ 599.534917][T15731] [ 599.542912][T15731] Mem-Info: [ 599.542966][T15731] active_anon:6172 inactive_anon:0 isolated_anon:0 [ 599.542966][T15731] active_file:0 inactive_file:53765 isolated_file:0 [ 599.542966][T15731] unevictable:768 dirty:32 writeback:0 [ 599.542966][T15731] slab_reclaimable:11945 slab_unreclaimable:103274 [ 599.542966][T15731] mapped:25640 shmem:1292 pagetables:1250 [ 599.542966][T15731] sec_pagetables:0 bounce:0 [ 599.542966][T15731] kernel_misc_reclaimable:0 [ 599.542966][T15731] free:1314512 free_pcp:2502 free_cma:0 [ 599.543354][T15731] Node 0 active_anon:24688kB inactive_anon:0kB active_file:0kB inactive_file:214864kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102560kB dirty:124kB writeback:0kB shmem:3632kB kernel_stack:13312kB pagetables:4852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.543513][T15731] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 599.543670][T15731] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.543846][T15731] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 599.543981][T15731] Node 0 DMA32 free:1312920kB boost:0kB min:3912kB low:6436kB high:8960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24688kB inactive_anon:0kB active_file:0kB inactive_file:214864kB unevictable:1536kB writepending:124kB zspages:0kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:10000kB local_pcp:5344kB free_cma:0kB [ 599.544189][T15731] lowmem_reserve[]: 0 0 0 0 0 [ 599.544295][T15731] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:896kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 599.547518][T15731] lowmem_reserve[]: 0 0 0 0 0 [ 599.547652][T15731] Node 1 Normal free:3929768kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 599.547843][T15731] lowmem_reserve[]: 0 0 0 0 0 [ 599.547965][T15731] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 599.551023][T15731] Node 0 DMA32: 897*4kB (UM) 757*8kB (UM) 424*16kB (UM) 328*32kB (UME) 250*64kB (UME) 82*128kB (UME) 58*256kB (UME) 41*512kB (UME) 13*1024kB (ME) 5*2048kB (ME) 293*4096kB (UM) = 1312940kB [ 599.551539][T15731] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 599.555814][T15731] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 9*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 1*256kB (M) 2*512kB (M) 3*1024kB (UM) 0*2048kB 958*4096kB (M) = 3929768kB [ 599.558948][T15731] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.559006][T15731] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.559061][T15731] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 599.559116][T15731] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 599.559170][T15731] 55053 total pagecache pages [ 599.559195][T15731] 0 pages in swap cache [ 599.559226][T15731] Free swap = 124996kB [ 599.559250][T15731] Total swap = 124996kB [ 599.559282][T15731] 2097051 pages RAM [ 599.559306][T15731] 0 pages HighMem/MovableOnly [ 599.559330][T15731] 427025 pages reserved [ 599.559361][T15731] 0 pages cma reserved [ 599.583341][ T9] usb 2-1: device descriptor read/64, error -71 [ 599.839145][ T5620] Bluetooth: hci0: command 0x0405 tx timeout [ 600.031888][T14335] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 600.307885][T14335] usb 1-1: device descriptor read/64, error -71 [ 600.603857][T14335] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 600.986527][ T5761] usb 4-1: USB disconnect, device number 77 [ 601.014211][T14335] usb 1-1: device descriptor read/64, error -71 [ 601.073370][ T9] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 601.150519][T14335] usb usb1-port1: attempt power cycle [ 601.182643][T15733] kAFS: unable to lookup cell '(' [ 601.222002][ T9] usb 2-1: device descriptor read/64, error -71 [ 601.249696][T15736] kAFS: unable to lookup cell '(,c¾ûL' [ 601.323308][ T29] ------------[ cut here ]------------ [ 601.323324][ T29] ODEBUG: activate active (active state 0) object: ffff88804f61aed8 object type: rcu_head hint: 0x0 [ 601.323368][ T29] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: rcuc/1/29 [ 601.323412][ T29] Modules linked in: [ 601.323437][ T29] CPU: 1 UID: 0 PID: 29 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.323470][ T29] Tainted: [L]=SOFTLOCKUP [ 601.323481][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.323496][ T29] RIP: 0010:debug_print_object+0x18a/0x230 [ 601.323527][ T29] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8d e3 6e fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 14 ed 0a 48 83 c4 10 5b 41 5c [ 601.323550][ T29] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010246 [ 601.323572][ T29] RAX: 1ffffffff169c2ac RBX: dffffc0000000000 RCX: 0000000000000000 [ 601.323591][ T29] RDX: ffffffff8baa7920 RSI: ffffffff8baa7340 RDI: ffffffff8fb76f20 [ 601.323611][ T29] RBP: ffffffff8baa7920 R08: ffff88804f61aed8 R09: ffffffff8b4e15c0 [ 601.323630][ T29] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: 0000000000000000 [ 601.323648][ T29] R13: ffffffff8fb76f20 R14: ffff88804f61aed8 R15: ffffffff8b4e1560 [ 601.323668][ T29] FS: 0000000000000000(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000 [ 601.323689][ T29] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 601.323706][ T29] CR2: 00007ffc21432c90 CR3: 000000003fcba000 CR4: 00000000003526f0 [ 601.323727][ T29] Call Trace: [ 601.323737][ T29] [ 601.323754][ T29] debug_object_activate+0x256/0x3a0 [ 601.323803][ T29] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 601.323838][ T29] call_rcu+0x43/0x890 [ 601.323858][ T9] usb usb2-port1: attempt power cycle [ 601.323873][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.323907][ T29] ? kvfree_call_rcu+0xd4/0x3c0 [ 601.323947][ T29] delete_node+0x1bc/0xa60 [ 601.323991][ T29] radix_tree_delete_item+0x2ef/0x400 [ 601.324036][ T29] afs_cell_destroy+0x16f/0x2c0 [ 601.324067][ T29] ? __pfx_afs_cell_destroy+0x10/0x10 [ 601.324100][ T29] rcu_cpu_kthread+0x99e/0x1470 [ 601.324138][ T29] ? rcu_cpu_kthread+0x205/0x1470 [ 601.324176][ T29] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 601.324205][ T29] ? schedule+0x90/0x360 [ 601.324250][ T29] ? smpboot_thread_fn+0x4d/0xa50 [ 601.324288][ T29] smpboot_thread_fn+0x541/0xa50 [ 601.324326][ T29] ? smpboot_thread_fn+0x4d/0xa50 [ 601.324397][ T29] kthread+0x388/0x470 [ 601.324424][ T29] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 601.324459][ T29] ? __pfx_kthread+0x10/0x10 [ 601.324486][ T29] ret_from_fork+0x514/0xb70 [ 601.324518][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 601.324549][ T29] ? __switch_to+0xc79/0x1410 [ 601.324591][ T29] ? __pfx_kthread+0x10/0x10 [ 601.324617][ T29] ret_from_fork_asm+0x1a/0x30 [ 601.324669][ T29] [ 601.324693][ T29] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 601.324716][ T29] CPU: 1 UID: 0 PID: 29 Comm: rcuc/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 601.324749][ T29] Tainted: [L]=SOFTLOCKUP [ 601.324760][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.324782][ T29] Call Trace: [ 601.324792][ T29] [ 601.324802][ T29] vpanic+0x56c/0xa60 [ 601.324839][ T29] ? __pfx__printk+0x10/0x10 [ 601.324866][ T29] ? __pfx_vpanic+0x10/0x10 [ 601.324899][ T29] ? is_bpf_text_address+0x292/0x2b0 [ 601.324926][ T29] ? is_bpf_text_address+0x26/0x2b0 [ 601.324961][ T29] panic+0xc5/0xd0 [ 601.324997][ T29] ? __pfx_panic+0x10/0x10 [ 601.325035][ T29] ? ret_from_fork_asm+0x1a/0x30 [ 601.325062][ T29] __warn+0x315/0x4c0 [ 601.325086][ T29] ? debug_print_object+0xec/0x230 [ 601.325108][ T29] ? debug_print_object+0xec/0x230 [ 601.325129][ T29] __report_bug+0x29a/0x540 [ 601.325152][ T29] ? debug_print_object+0xec/0x230 [ 601.325173][ T29] ? __pfx___report_bug+0x10/0x10 [ 601.325195][ T29] ? __pv_queued_spin_lock_slowpath+0x2e3/0xbc0 [ 601.325232][ T29] report_bug_entry+0x19a/0x290 [ 601.325250][ T29] ? debug_print_object+0x18a/0x230 [ 601.325270][ T29] ? debug_print_object+0x18f/0x230 [ 601.325290][ T29] handle_bug+0xce/0x200 [ 601.325310][ T29] exc_invalid_op+0x1a/0x50 [ 601.325330][ T29] asm_exc_invalid_op+0x1a/0x20 [ 601.325348][ T29] RIP: 0010:debug_print_object+0x18a/0x230 [ 601.325370][ T29] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 8d e3 6e fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 53 14 ed 0a 48 83 c4 10 5b 41 5c [ 601.325386][ T29] RSP: 0018:ffffc90000a3f988 EFLAGS: 00010246 [ 601.325403][ T29] RAX: 1ffffffff169c2ac RBX: dffffc0000000000 RCX: 0000000000000000 [ 601.325417][ T29] RDX: ffffffff8baa7920 RSI: ffffffff8baa7340 RDI: ffffffff8fb76f20 [ 601.325431][ T29] RBP: ffffffff8baa7920 R08: ffff88804f61aed8 R09: ffffffff8b4e15c0 [ 601.325445][ T29] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: 0000000000000000 [ 601.325458][ T29] R13: ffffffff8fb76f20 R14: ffff88804f61aed8 R15: ffffffff8b4e1560 [ 601.325490][ T29] debug_object_activate+0x256/0x3a0 [ 601.325519][ T29] ? __pfx_radix_tree_node_rcu_free+0x10/0x10 [ 601.325546][ T29] call_rcu+0x43/0x890 [ 601.325570][ T29] ? do_raw_spin_lock+0x12b/0x2f0 [ 601.325594][ T29] ? kvfree_call_rcu+0xd4/0x3c0 [ 601.325623][ T29] delete_node+0x1bc/0xa60 [ 601.325653][ T29] radix_tree_delete_item+0x2ef/0x400 [ 601.325685][ T29] afs_cell_destroy+0x16f/0x2c0 [ 601.325707][ T29] ? __pfx_afs_cell_destroy+0x10/0x10 [ 601.325730][ T29] rcu_cpu_kthread+0x99e/0x1470 [ 601.325756][ T29] ? rcu_cpu_kthread+0x205/0x1470 [ 601.325788][ T29] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 601.325808][ T29] ? schedule+0x90/0x360 [ 601.325839][ T29] ? smpboot_thread_fn+0x4d/0xa50 [ 601.325864][ T29] smpboot_thread_fn+0x541/0xa50 [ 601.325892][ T29] ? smpboot_thread_fn+0x4d/0xa50 [ 601.325925][ T29] kthread+0x388/0x470 [ 601.325943][ T29] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 601.325969][ T29] ? __pfx_kthread+0x10/0x10 [ 601.325988][ T29] ret_from_fork+0x514/0xb70 [ 601.326011][ T29] ? __pfx_ret_from_fork+0x10/0x10 [ 601.326032][ T29] ? __switch_to+0xc79/0x1410 [ 601.326062][ T29] ? __pfx_kthread+0x10/0x10 [ 601.326081][ T29] ret_from_fork_asm+0x1a/0x30 [ 601.326116][ T29] [ 601.326873][ T29] Kernel Offset: disabled