last executing test programs: 2.053309868s ago: executing program 3 (id=1028): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b75d937e552300", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ffffffffffffffff"}, 0x28) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f00000000c0)=0x3, 0x4) 1.986167671s ago: executing program 3 (id=1030): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af83, &(0x7f0000000180)) 1.875623629s ago: executing program 0 (id=1032): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x1, 0x484100) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, &(0x7f00000004c0)={0x0, 0x3, 0x14, 0x8003}, 0xff97, 0x0, 0x8, 0x0, 0x80000000, 0x0, 0x0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x453, 0x400, 0x70bd2a, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x4004014}, 0x4000041) ioctl$USBDEVFS_REAPURB(r0, 0x4004550c, 0x0) 1.804596816s ago: executing program 3 (id=1033): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) link(0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66644472667c615540f54d60646e6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',\x00']) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff"], 0x15) fallocate(r4, 0x10, 0x0, 0x72000) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x7fe, {0x2a00, 0x80010000, 0x0, 0x6d5, 0x1, 0x0, 0x9, 0xb, 0x10, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000800", [0x0, 0x5]}}) 1.721315459s ago: executing program 0 (id=1034): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x181000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d87539740f45f819e01177d3d458dd4992861ac00", "f4bd000000801900"}}) 1.66745304s ago: executing program 2 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x44004) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 1.627722286s ago: executing program 1 (id=1036): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x11}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x98}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44815}, 0x44000) 1.502708573s ago: executing program 1 (id=1037): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x28, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x98}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44815}, 0x44000) (fail_nth: 3) 1.443762543s ago: executing program 2 (id=1038): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0800, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020300030c000000ff0e00000000000002000900380000008371068ddd711800030006003200000002000000000000000000000000000000020001000100000000000000000000e0030005003c0000000200"/91], 0x60}, 0x1, 0x7}, 0x0) mount(&(0x7f0000000240)=@sr0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x41081, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)=0x4) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x801) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x6, 0x101, 0x300}}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000280)={0x283}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_helper', 0x22801, 0x197) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f0000000140)={'bridge0\x00', 0x1}) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$netlink(0x10, 0x3, 0xf) 1.317960727s ago: executing program 1 (id=1039): r0 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000240)={0x4, 0x4, 0x1000000}) (fail_nth: 3) 1.241643024s ago: executing program 3 (id=1040): add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) 1.09175806s ago: executing program 1 (id=1041): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$SETALL(r1, 0x0, 0x11, 0x0) semctl$GETVAL(r1, 0x2, 0xc, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) recvmmsg(r2, &(0x7f00000037c0), 0x55, 0x2203, &(0x7f0000003700)={r3, r4+10000000}) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xf}}, './file0\x00'}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000080)="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") ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000300)={0xffff, 0xf35, 0x4, {0xfdc, 0x1}, 0x7, 0x5}) 1.067101735s ago: executing program 3 (id=1042): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c35063780", 0x45}], 0x1}}], 0x1, 0x2090) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x62) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000098c0)={0x0, 0xfa868e62043647d6, r3, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r3, r4, 0x1, 0x0, 0x3}) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000780)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000640)=[{0x2b, 0x0, [0x8, 0x1, 0x100, 0x1, 0x81, 0x8, 0x5, 0x10001, 0x2, 0x3, 0x80, 0x1, 0xb, 0x6, 0x10, 0x3]}], r6, 0x1, 0x1, 0x48}}, 0x20) recvfrom$inet(r0, &(0x7f0000001b00)=""/4093, 0xffd, 0x102, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x2}) shutdown(r0, 0x1) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000000180)=0x40) 845.796667ms ago: executing program 0 (id=1043): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000040)={0x0, 0x0}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r3 = fsopen(&(0x7f00000007c0)='binfmt_misc\x00', 0x1) fchown(r3, 0xffffffffffffffff, 0xee01) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000180)={0xfff, [[0x0, 0x1ff, 0x6267, 0x5e44, 0x7, 0x1, 0x5680, 0xc30], [0x9, 0x8, 0x0, 0x7, 0x5, 0x353, 0x8001, 0x9], [0x8000, 0x4, 0x854, 0x8, 0x8001, 0x6, 0x6, 0x2]], '\x00', [{0x80000001, 0x1, 0x0, 0x0, 0x0, 0x1}, {0xfff, 0xfffffffb, 0x0, 0x1, 0x1, 0x1}, {0xce57, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x5, 0xffff, 0x1, 0x1}, {0xed0c, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x10, 0x0, 0x1, 0x1}, {0x7, 0xffff67fb, 0x0, 0x1, 0x1}, {0x1, 0x9, 0x0, 0x1}, {0x1, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x1, 0xf05, 0x1, 0x0, 0x0, 0x1}, {0x6, 0x40, 0x1, 0x1}, {0xa4b1, 0x10001, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x7}) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) 663.13014ms ago: executing program 3 (id=1044): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f00000034c0)={0x2020}, 0xcac) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 614.528961ms ago: executing program 1 (id=1045): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x10) close_range(r0, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0x4000c0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x6, 0x7, 0x9}}, 0x28) 510.583232ms ago: executing program 0 (id=1046): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0xfff, 0xfffffffffffffffb, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x800, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x10001}, {0x1, 0x6, 0x0, 0xfffffffffffffffe}, 0x2, 0x6e6bbc}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) 423.675313ms ago: executing program 1 (id=1047): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000240035b9000000000000000000000000060003000054f0"], 0x24}}, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000140)={0x0, 0x21, 0x28, {0x28, 0xe, "87fc7d131683fe47718d09b89b8abb01d054c3bbb7deabc81b663e6e407c646f64c64660a633"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbdd, {{}, {0x0, 0x4101}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x40000000) setsockopt$inet6_int(r2, 0x29, 0x4c, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000002080)={0x0, 0x0}, &(0x7f00000020c0)=0xc) setfsuid(r9) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="004386f8681d0000", @ANYRES16=r10, @ANYBLOB="010022bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008c0003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1000}, 0x8000) 380.850117ms ago: executing program 2 (id=1048): r0 = socket$inet_sctp(0x2, 0x1, 0x84) clock_settime(0xa14b8575d015fe92, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv', 0x2) sendto$inet6(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980912, 0x0, '\x00', @value=0xfcdd}}) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c055}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}}, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 310.243601ms ago: executing program 0 (id=1049): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000280)='N', 0x1}], 0x1, 0x0, 0x0, 0x800c055}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 243.828206ms ago: executing program 2 (id=1050): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x9, @pix_mp={0x400, 0xf8, 0x31324d59, 0x4, 0x6, [{0x4, 0xffff}, {0x24, 0x7}, {0x200, 0xffffffff}, {0x7ff, 0xd}, {0x8, 0x1000}, {0x2, 0xc8000000}, {0x6, 0x7}, {0x0, 0x9}], 0x0, 0x0, 0x7, 0x0, 0x6}}) r1 = socket(0x1e, 0x805, 0x0) recvmsg$kcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/101, 0x65}], 0x100000000000028a}, 0x40000021) 222.760751ms ago: executing program 2 (id=1051): r0 = socket(0x11, 0xa, 0xfffffffd) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x0, @multicast2}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x40010000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0x2, 0x20, 0x0, 0x62}, {0x8, 0x12, 0x100000002, 0x0, 0x80fff, 0xfffffffffffffffb, 0x8}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000100000000100000000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000001000100000000000000000000000000000000000000000000000000000000000500000000000000060000bb094138f298c7fd2cb502fdf0cd0000000000000000feffffffffffffff02000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) socket$kcm(0x29, 0x2, 0x0) 110.074495ms ago: executing program 0 (id=1052): r0 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x200, 0x0, 0x0, 0xa, 0x0, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32f1cc26f7061a74df2cfc06c89fd3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a00", "0b000000000000002e43ac000100000000009b4100", [0x9, 0xa]}}) writev(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)="1c1b55", 0x3}], 0x1) 0s ago: executing program 2 (id=1053): r0 = socket$inet_sctp(0x2, 0xa, 0x84) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20c443, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) (async) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x5c, 'devices'}, {0x2b, 'devices'}, {0x2d, 'memory'}, {0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'perf_event'}, {0x2d, 'blkio'}, {0x2b, 'net_cls'}, {0x8b36939747c71dd6, 'rdma'}, {0x2d, 'cpu'}]}, 0x4d) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3007}) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bond0\x00', 0x10) (async) shutdown(r0, 0x1) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0xeb8e, 0x4) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000003300)={0x0, 0xfffffe6e, &(0x7f00000032c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000010201080000000000000000020000052400018014000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x4040040}, 0x8841) kernel console output (not intermixed with test programs): 2472][ T7889] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 236.222576][ T7889] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 236.740475][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.796340][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.034606][ T5602] hid-led 0003:27B8:01ED.0005: item fetching failed at offset 1/5 [ 237.035784][ T5703] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 237.044141][ T5602] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -22 [ 237.191046][ T5703] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 237.191074][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.191086][ T5703] usb 3-1: Product: syz [ 237.191095][ T5703] usb 3-1: Manufacturer: syz [ 237.191103][ T5703] usb 3-1: SerialNumber: syz [ 237.227079][ T32] usb 4-1: USB disconnect, device number 19 [ 237.257439][ T5703] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 237.373032][ T5785] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 237.796390][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 237.814757][ T7898] netlink: 40 bytes leftover after parsing attributes in process `syz.2.791'. [ 237.854588][ T7898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.856110][ T7898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.080595][ T5602] usb 3-1: USB disconnect, device number 30 [ 238.199824][ T5722] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 238.277836][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 238.314889][ T7925] forcing mempool usage for bio_alloc_bioset+0x638/0xc90 [ 238.348736][ T5722] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 238.348766][ T5722] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 238.351036][ T5722] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 238.351063][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.351082][ T5722] usb 2-1: Product: syz [ 238.351092][ T5722] usb 2-1: Manufacturer: syz [ 238.351100][ T5722] usb 2-1: SerialNumber: syz [ 238.389872][ T5722] usb 2-1: config 0 descriptor?? [ 238.447318][ T5722] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 238.447580][ T5785] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 238.666324][ T5785] ath9k_htc: Failed to initialize the device [ 238.762359][ T7931] fuse: Bad value for 'fd' [ 238.835378][ T7930] /dev/nullb0: Can't open blockdev [ 238.852353][ T5602] usb 3-1: ath9k_htc: USB layer deinitialized [ 239.427673][ T7942] FAULT_INJECTION: forcing a failure. [ 239.427673][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 239.427777][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.3.809 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 239.427801][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.427814][ T7942] Call Trace: [ 239.427822][ T7942] [ 239.427831][ T7942] dump_stack_lvl+0xe8/0x150 [ 239.427863][ T7942] should_fail_ex+0x46b/0x600 [ 239.427903][ T7942] should_failslab+0xa8/0x100 [ 239.427930][ T7942] __kmalloc_noprof+0xdf/0x7b0 [ 239.427954][ T7942] ? tomoyo_encode+0x28b/0x550 [ 239.427982][ T7942] tomoyo_encode+0x28b/0x550 [ 239.428009][ T7942] tomoyo_realpath_from_path+0x58d/0x5d0 [ 239.428044][ T7942] ? tomoyo_path_number_perm+0x219/0x630 [ 239.428074][ T7942] tomoyo_path_number_perm+0x246/0x630 [ 239.428105][ T7942] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.428134][ T7942] ? __lock_acquire+0x6b5/0x2d10 [ 239.428164][ T7942] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.428219][ T7942] ? __fget_files+0x2a/0x420 [ 239.428243][ T7942] ? __fget_files+0x2a/0x420 [ 239.428261][ T7942] ? __fget_files+0x3a6/0x420 [ 239.428280][ T7942] ? __fget_files+0x2a/0x420 [ 239.428303][ T7942] security_file_ioctl+0xc3/0x2a0 [ 239.428334][ T7942] __se_sys_ioctl+0x47/0x170 [ 239.428361][ T7942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.428384][ T7942] do_syscall_64+0x15f/0x560 [ 239.428414][ T7942] ? clear_bhb_loop+0x40/0x90 [ 239.428440][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.428467][ T7942] RIP: 0033:0x7f878d17ce59 [ 239.428487][ T7942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.428505][ T7942] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.428529][ T7942] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 239.428544][ T7942] RDX: 0000200000000000 RSI: 0000000040046109 RDI: 0000000000000003 [ 239.428558][ T7942] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 239.428571][ T7942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.428584][ T7942] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 239.428618][ T7942] [ 239.428709][ T7942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 239.686790][ T5722] gspca_sunplus: reg_r err -71 [ 239.686888][ T5722] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 239.756942][ T5722] usb 2-1: USB disconnect, device number 21 [ 239.875774][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 240.105731][ T5602] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 240.266068][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 240.272887][ T5602] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.274325][ T5602] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 240.302975][ T5602] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 240.303007][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.303028][ T5602] usb 4-1: Product: syz [ 240.303043][ T5602] usb 4-1: Manufacturer: syz [ 240.303058][ T5602] usb 4-1: SerialNumber: syz [ 240.371344][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 240.371714][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 240.557195][ T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 240.557461][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.598356][ T9] usb 1-1: config 0 descriptor?? [ 240.644266][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 240.696953][ T5602] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 240.720287][ T5602] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 240.878560][ T5602] usb 4-1: 2:1 : can't get High Capability descriptor [ 241.038903][ T9] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 241.277979][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 241.445465][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 241.445488][ T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 241.461847][ T9] usb 1-1: USB disconnect, device number 27 [ 241.473273][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.473300][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.486693][ T32] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 241.486725][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.486745][ T32] usb 3-1: Product: syz [ 241.486760][ T32] usb 3-1: Manufacturer: syz [ 241.486776][ T32] usb 3-1: SerialNumber: syz [ 241.765288][ T7973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.766543][ T7973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.874679][ T32] usb 3-1: unit 4 not found! [ 241.947303][ T32] usb 3-1: USB disconnect, device number 31 [ 242.052188][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 242.241803][ T7983] FAULT_INJECTION: forcing a failure. [ 242.241803][ T7983] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.241842][ T7983] CPU: 0 UID: 0 PID: 7983 Comm: syz.1.824 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.241865][ T7983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.241878][ T7983] Call Trace: [ 242.241886][ T7983] [ 242.241895][ T7983] dump_stack_lvl+0xe8/0x150 [ 242.241927][ T7983] should_fail_ex+0x46b/0x600 [ 242.241961][ T7983] prepare_alloc_pages+0x22a/0x6b0 [ 242.241997][ T7983] __alloc_frozen_pages_noprof+0x12f/0x380 [ 242.242028][ T7983] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 242.242059][ T7983] ? __pfx_policy_nodemask+0x10/0x10 [ 242.242087][ T7983] ? __lock_acquire+0x6b5/0x2d10 [ 242.242126][ T7983] alloc_pages_mpol+0xd1/0x380 [ 242.242156][ T7983] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 242.242185][ T7983] vma_alloc_folio_noprof+0xe1/0x1e0 [ 242.242225][ T7983] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 242.242254][ T7983] ? __pte_offset_map+0x29/0x200 [ 242.242283][ T7983] do_pte_missing+0x822/0x2940 [ 242.242320][ T7983] ? handle_mm_fault+0xed/0x14d0 [ 242.242346][ T7983] handle_mm_fault+0xdc2/0x14d0 [ 242.242374][ T7983] ? handle_mm_fault+0xed/0x14d0 [ 242.242401][ T7983] ? __pfx_handle_mm_fault+0x10/0x10 [ 242.242439][ T7983] ? __lock_acquire+0x6b5/0x2d10 [ 242.242466][ T7983] ? lock_mm_and_find_vma+0xa7/0x340 [ 242.242495][ T7983] do_user_addr_fault+0x75b/0x1340 [ 242.242540][ T7983] exc_page_fault+0x6a/0xc0 [ 242.242569][ T7983] asm_exc_page_fault+0x26/0x30 [ 242.242590][ T7983] RIP: 0010:rep_movs_alternative+0x11/0xa0 [ 242.242615][ T7983] Code: e9 94 29 05 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 242.242632][ T7983] RSP: 0018:ffffc9001bf2f378 EFLAGS: 00050202 [ 242.242652][ T7983] RAX: ffffffff84b58500 RBX: ffffc9001bf2f6e0 RCX: 0000000000000001 [ 242.242668][ T7983] RDX: 0000000000000000 RSI: ffffc9001bf2f6e0 RDI: 0000200000001300 [ 242.242682][ T7983] RBP: ffffc9001bf2f4f0 R08: 0000000000000000 R09: 0000000000000001 [ 242.242695][ T7983] R10: dffffc0000000000 R11: fffff520037e5edc R12: 1ffff920037e5fbf [ 242.242711][ T7983] R13: 0000200000001300 R14: ffffc9001bf2fe08 R15: 0000000000000001 [ 242.242734][ T7983] ? _copy_to_iter+0x1b0/0x17d0 [ 242.242773][ T7983] _copy_to_iter+0x255/0x17d0 [ 242.242806][ T7983] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.242835][ T7983] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.242862][ T7983] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.242893][ T7983] ? __pfx__copy_to_iter+0x10/0x10 [ 242.242923][ T7983] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 242.242968][ T7983] tcp_recvmsg_locked+0x3150/0x3770 [ 242.243023][ T7983] ? __lock_acquire+0x6b5/0x2d10 [ 242.243070][ T7983] ? __pfx_tcp_recvmsg_locked+0x10/0x10 [ 242.243108][ T7983] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.243133][ T7983] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.243158][ T7983] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.243186][ T7983] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 242.243230][ T7983] ? __local_bh_enable+0x1e1/0x2f0 [ 242.243268][ T7983] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 242.243297][ T7983] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.243329][ T7983] tcp_recvmsg+0xf6/0x530 [ 242.243365][ T7983] ? __pfx_tcp_recvmsg+0x10/0x10 [ 242.243395][ T7983] ? __lock_acquire+0x6b5/0x2d10 [ 242.243424][ T7983] ? aa_sock_msg_perm+0x122/0x200 [ 242.243445][ T7983] ? __pfx_inet6_recvmsg+0x10/0x10 [ 242.243468][ T7983] sock_recvmsg_nosec+0x95/0x140 [ 242.243495][ T7983] ____sys_recvmsg+0x23d/0x4f0 [ 242.243536][ T7983] ? __pfx_____sys_recvmsg+0x10/0x10 [ 242.243585][ T7983] ? import_iovec+0x73/0xa0 [ 242.243610][ T7983] ___sys_recvmsg+0x215/0x590 [ 242.243632][ T7983] ? get_pid_task+0x20/0x1f0 [ 242.243656][ T7983] ? __pfx____sys_recvmsg+0x10/0x10 [ 242.243685][ T7983] ? __fget_files+0x2a/0x420 [ 242.243719][ T7983] ? __fget_files+0x3a6/0x420 [ 242.243746][ T7983] __x64_sys_recvmsg+0x1c0/0x2a0 [ 242.243773][ T7983] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 242.243806][ T7983] ? __pfx_ksys_write+0x10/0x10 [ 242.243835][ T7983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.243854][ T7983] do_syscall_64+0x15f/0x560 [ 242.243881][ T7983] ? trace_irq_disable+0x3b/0x140 [ 242.243903][ T7983] ? clear_bhb_loop+0x40/0x90 [ 242.243927][ T7983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.243948][ T7983] RIP: 0033:0x7ff53c09ce59 [ 242.243968][ T7983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.243984][ T7983] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 242.244005][ T7983] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 242.244020][ T7983] RDX: 0000000000000001 RSI: 0000200000003480 RDI: 0000000000000004 [ 242.244032][ T7983] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 242.244044][ T7983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.244057][ T7983] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 242.244091][ T7983] [ 242.435663][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 242.892910][ T7998] FAULT_INJECTION: forcing a failure. [ 242.892910][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.892946][ T7998] CPU: 1 UID: 0 PID: 7998 Comm: syz.1.830 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 242.892970][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.892982][ T7998] Call Trace: [ 242.892990][ T7998] [ 242.892999][ T7998] dump_stack_lvl+0xe8/0x150 [ 242.893046][ T7998] should_fail_ex+0x46b/0x600 [ 242.893080][ T7998] _copy_to_user+0x31/0xb0 [ 242.893104][ T7998] simple_read_from_buffer+0xe1/0x170 [ 242.893144][ T7998] proc_fail_nth_read+0x1be/0x230 [ 242.893179][ T7998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.893207][ T7998] ? rw_verify_area+0x2ac/0x4e0 [ 242.893230][ T7998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.893256][ T7998] vfs_read+0x212/0xa80 [ 242.893289][ T7998] ? __pfx_vfs_read+0x10/0x10 [ 242.893316][ T7998] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 242.893346][ T7998] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.893379][ T7998] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 242.893406][ T7998] ? mutex_lock_nested+0x152/0x1d0 [ 242.893425][ T7998] ? fdget_pos+0x252/0x320 [ 242.893456][ T7998] ksys_read+0x156/0x270 [ 242.893483][ T7998] ? __pfx_ksys_read+0x10/0x10 [ 242.893507][ T7998] ? __pfx_usbdev_ioctl+0x10/0x10 [ 242.893540][ T7998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.893564][ T7998] do_syscall_64+0x15f/0x560 [ 242.893591][ T7998] ? trace_irq_disable+0x3b/0x140 [ 242.893614][ T7998] ? clear_bhb_loop+0x40/0x90 [ 242.893640][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.893661][ T7998] RIP: 0033:0x7ff53c05d68e [ 242.893682][ T7998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 242.893699][ T7998] RSP: 002b:00007ff53a2edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.893722][ T7998] RAX: ffffffffffffffda RBX: 00007ff53a2ee6c0 RCX: 00007ff53c05d68e [ 242.893738][ T7998] RDX: 000000000000000f RSI: 00007ff53a2ee0a0 RDI: 0000000000000004 [ 242.893751][ T7998] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 242.893764][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.893777][ T7998] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 242.893812][ T7998] [ 242.923681][ T5602] usb 4-1: USB disconnect, device number 20 [ 243.401068][ T32] kernel read not supported for file /adsp1 (pid: 32 comm: kworker/1:0) [ 243.521069][ T8015] FAULT_INJECTION: forcing a failure. [ 243.521069][ T8015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.521105][ T8015] CPU: 1 UID: 0 PID: 8015 Comm: syz.1.835 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.521129][ T8015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 243.521141][ T8015] Call Trace: [ 243.521149][ T8015] [ 243.521158][ T8015] dump_stack_lvl+0xe8/0x150 [ 243.521189][ T8015] should_fail_ex+0x46b/0x600 [ 243.521223][ T8015] _copy_from_user+0x2d/0xb0 [ 243.521247][ T8015] video_usercopy+0x36f/0x1450 [ 243.521278][ T8015] ? __pfx___video_do_ioctl+0x10/0x10 [ 243.521307][ T8015] ? __pfx_video_usercopy+0x10/0x10 [ 243.521343][ T8015] ? __fget_files+0x2a/0x420 [ 243.521368][ T8015] ? __fget_files+0x2a/0x420 [ 243.521386][ T8015] ? __fget_files+0x3a6/0x420 [ 243.521410][ T8015] v4l2_ioctl+0x190/0x1e0 [ 243.521445][ T8015] ? __pfx_v4l2_ioctl+0x10/0x10 [ 243.521468][ T8015] __se_sys_ioctl+0xff/0x170 [ 243.521493][ T8015] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.521515][ T8015] do_syscall_64+0x15f/0x560 [ 243.521544][ T8015] ? clear_bhb_loop+0x40/0x90 [ 243.521569][ T8015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.521588][ T8015] RIP: 0033:0x7ff53c09ce59 [ 243.521607][ T8015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.521625][ T8015] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.521647][ T8015] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 243.521661][ T8015] RDX: 0000200000000340 RSI: 00000000c058565d RDI: 0000000000000003 [ 243.521674][ T8015] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 243.521687][ T8015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.521699][ T8015] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 243.521731][ T8015] [ 244.023190][ T8030] FAULT_INJECTION: forcing a failure. [ 244.023190][ T8030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.023215][ T8030] CPU: 1 UID: 0 PID: 8030 Comm: syz.1.841 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 244.023230][ T8030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 244.023236][ T8030] Call Trace: [ 244.023241][ T8030] [ 244.023246][ T8030] dump_stack_lvl+0xe8/0x150 [ 244.023265][ T8030] should_fail_ex+0x46b/0x600 [ 244.023284][ T8030] _copy_to_user+0x31/0xb0 [ 244.023298][ T8030] simple_read_from_buffer+0xe1/0x170 [ 244.023319][ T8030] proc_fail_nth_read+0x1be/0x230 [ 244.023335][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.023349][ T8030] ? rw_verify_area+0x2ac/0x4e0 [ 244.023363][ T8030] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.023376][ T8030] vfs_read+0x212/0xa80 [ 244.023394][ T8030] ? __pfx_vfs_read+0x10/0x10 [ 244.023416][ T8030] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 244.023438][ T8030] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.023452][ T8030] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 244.023470][ T8030] ? mutex_lock_nested+0x152/0x1d0 [ 244.023481][ T8030] ? fdget_pos+0x252/0x320 [ 244.023498][ T8030] ksys_read+0x156/0x270 [ 244.023513][ T8030] ? __pfx_ksys_read+0x10/0x10 [ 244.023531][ T8030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.023544][ T8030] do_syscall_64+0x15f/0x560 [ 244.023558][ T8030] ? trace_irq_disable+0x3b/0x140 [ 244.023571][ T8030] ? clear_bhb_loop+0x40/0x90 [ 244.023585][ T8030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.023596][ T8030] RIP: 0033:0x7ff53c05d68e [ 244.023608][ T8030] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.023618][ T8030] RSP: 002b:00007ff53a2edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.023633][ T8030] RAX: ffffffffffffffda RBX: 00007ff53a2ee6c0 RCX: 00007ff53c05d68e [ 244.023641][ T8030] RDX: 000000000000000f RSI: 00007ff53a2ee0a0 RDI: 0000000000000004 [ 244.023648][ T8030] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 244.023655][ T8030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.023662][ T8030] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 244.023681][ T8030] [ 244.197596][ T5602] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 244.351422][ T5602] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.351495][ T5602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 244.351522][ T5602] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 244.351564][ T5602] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.354603][ T5602] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.354632][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.354653][ T5602] usb 1-1: Product: syz [ 244.354668][ T5602] usb 1-1: Manufacturer: syz [ 244.354683][ T5602] usb 1-1: SerialNumber: syz [ 244.383339][ T8027] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 244.599023][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 245.117296][ T9] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 245.295778][ T1911] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 245.295994][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 245.324119][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 245.324149][ T9] usb 2-1: config 0 has no interface number 0 [ 245.324271][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 245.324301][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 245.353312][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 245.353340][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.353422][ T9] usb 2-1: Product: syz [ 245.353437][ T9] usb 2-1: Manufacturer: syz [ 245.353449][ T9] usb 2-1: SerialNumber: syz [ 245.402409][ T9] usb 2-1: config 0 descriptor?? [ 245.403647][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.403778][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.453885][ T5602] cdc_ncm 1-1:1.0: bind() failure [ 245.465710][ T1911] usb 3-1: Using ep0 maxpacket: 8 [ 245.475754][ T1911] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.475851][ T1911] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.475875][ T1911] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 245.475902][ T1911] usb 3-1: config 0 interface 0 has no altsetting 0 [ 245.475939][ T1911] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 245.476024][ T1911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.550873][ T8051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 245.555420][ T1911] usb 3-1: config 0 descriptor?? [ 245.609067][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.626991][ T8042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 245.671881][ T5602] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 245.693663][ T8052] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 245.693927][ T8052] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 245.723359][ T5602] usb 1-1: USB disconnect, device number 28 [ 245.840227][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 245.840509][ T9] asix 2-1:0.34: probe with driver asix failed with error -61 [ 245.992101][ T1911] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x5 [ 245.992147][ T1911] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 9/40 [ 245.992887][ T1911] kovaplus 0003:1E7D:2D50.0006: parse failed [ 246.012165][ T1911] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 246.172722][ T9] usb 3-1: USB disconnect, device number 32 [ 246.192609][ T8056] FAULT_INJECTION: forcing a failure. [ 246.192609][ T8056] name failslab, interval 1, probability 0, space 0, times 0 [ 246.192641][ T8056] CPU: 1 UID: 0 PID: 8056 Comm: syz.3.851 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.192661][ T8056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.192671][ T8056] Call Trace: [ 246.192677][ T8056] [ 246.192685][ T8056] dump_stack_lvl+0xe8/0x150 [ 246.192711][ T8056] should_fail_ex+0x46b/0x600 [ 246.192740][ T8056] should_failslab+0xa8/0x100 [ 246.192766][ T8056] kmem_cache_alloc_noprof+0x87/0x680 [ 246.192787][ T8056] ? anon_vma_clone+0x3e5/0x9f0 [ 246.192812][ T8056] anon_vma_clone+0x3e5/0x9f0 [ 246.192844][ T8056] __split_vma+0x3a5/0xa40 [ 246.192872][ T8056] ? __lock_acquire+0x6b5/0x2d10 [ 246.192906][ T8056] ? __pfx___split_vma+0x10/0x10 [ 246.192957][ T8056] vms_gather_munmap_vmas+0x32d/0x1380 [ 246.192982][ T8056] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 246.193031][ T8056] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 246.193070][ T8056] ? mtree_range_walk+0x6fc/0x8b0 [ 246.193092][ T8056] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 246.193128][ T8056] ? mas_find+0xa7d/0xd30 [ 246.193164][ T8056] mmap_region+0x945/0x2280 [ 246.193212][ T8056] ? __pfx_mmap_region+0x10/0x10 [ 246.193238][ T8056] ? __lock_acquire+0x6b5/0x2d10 [ 246.193269][ T8056] ? __lock_acquire+0x6b5/0x2d10 [ 246.193294][ T8056] ? __lock_acquire+0x6b5/0x2d10 [ 246.193332][ T8056] ? __lock_acquire+0x6b5/0x2d10 [ 246.193445][ T8056] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 246.193472][ T8056] ? drm_gem_object_lookup_at_offset+0x314/0x4c0 [ 246.193504][ T8056] ? mm_get_unmapped_area+0xd3/0x100 [ 246.193531][ T8056] ? cap_mmap_addr+0xaf/0x100 [ 246.193560][ T8056] ? bpf_lsm_mmap_addr+0x9/0x50 [ 246.193588][ T8056] ? shmem_mapping+0xd/0x50 [ 246.193617][ T8056] ? memfd_check_seals_mmap+0xcb/0x210 [ 246.193641][ T8056] do_mmap+0xc2f/0x10c0 [ 246.193668][ T8056] ? lockdep_hardirqs_on+0x7a/0x110 [ 246.193697][ T8056] ? __pfx_do_mmap+0x10/0x10 [ 246.193714][ T8056] ? rwbase_write_lock+0x568/0x730 [ 246.193755][ T8056] vm_mmap_pgoff+0x2cc/0x4f0 [ 246.193793][ T8056] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 246.193830][ T8056] ? __fget_files+0x2a/0x420 [ 246.193849][ T8056] ? __fget_files+0x3a6/0x420 [ 246.193867][ T8056] ? __fget_files+0x2a/0x420 [ 246.193891][ T8056] ksys_mmap_pgoff+0x4e8/0x720 [ 246.193911][ T8056] ? __x64_sys_mmap+0x7f/0x140 [ 246.193936][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.193959][ T8056] do_syscall_64+0x15f/0x560 [ 246.193983][ T8056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.194004][ T8056] ? clear_bhb_loop+0x40/0x90 [ 246.194029][ T8056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.194050][ T8056] RIP: 0033:0x7f878d17ce59 [ 246.194071][ T8056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.194089][ T8056] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.194110][ T8056] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 246.194124][ T8056] RDX: 0000000000000004 RSI: 0000000000021000 RDI: 0000200000001000 [ 246.194138][ T8056] RBP: 00007f878b3ce090 R08: 0000000000000003 R09: 0000000100000000 [ 246.194151][ T8056] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 246.194164][ T8056] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 246.194196][ T8056] [ 246.378190][ T5602] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 246.543907][ T5602] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 246.543937][ T5602] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.543955][ T5602] usb 1-1: Product: syz [ 246.543968][ T5602] usb 1-1: Manufacturer: syz [ 246.543981][ T5602] usb 1-1: SerialNumber: syz [ 246.647573][ T8062] FAULT_INJECTION: forcing a failure. [ 246.647573][ T8062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.647597][ T8062] CPU: 0 UID: 0 PID: 8062 Comm: syz.3.853 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 246.647617][ T8062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.647624][ T8062] Call Trace: [ 246.647629][ T8062] [ 246.647634][ T8062] dump_stack_lvl+0xe8/0x150 [ 246.647654][ T8062] should_fail_ex+0x46b/0x600 [ 246.647673][ T8062] _copy_from_user+0x2d/0xb0 [ 246.647687][ T8062] video_usercopy+0x36f/0x1450 [ 246.647706][ T8062] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 246.647724][ T8062] ? __pfx_video_usercopy+0x10/0x10 [ 246.647744][ T8062] ? __fget_files+0x2a/0x420 [ 246.647758][ T8062] ? __fget_files+0x2a/0x420 [ 246.647768][ T8062] ? __fget_files+0x3a6/0x420 [ 246.647780][ T8062] v4l2_ioctl+0x190/0x1e0 [ 246.647794][ T8062] ? __pfx_v4l2_ioctl+0x10/0x10 [ 246.647807][ T8062] __se_sys_ioctl+0xff/0x170 [ 246.647821][ T8062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.647834][ T8062] do_syscall_64+0x15f/0x560 [ 246.647849][ T8062] ? trace_irq_disable+0x3b/0x140 [ 246.647862][ T8062] ? clear_bhb_loop+0x40/0x90 [ 246.647876][ T8062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.647888][ T8062] RIP: 0033:0x7f878d17ce59 [ 246.647899][ T8062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.647910][ T8062] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.647924][ T8062] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 246.647932][ T8062] RDX: 0000200000000100 RSI: 00000000c040563e RDI: 0000000000000003 [ 246.647940][ T8062] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 246.647947][ T8062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.647954][ T8062] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 246.647972][ T8062] [ 246.949576][ T5602] rtl8150 1-1:1.0: couldn't reset the device [ 246.950588][ T5602] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 246.993753][ T5602] usb 1-1: USB disconnect, device number 29 [ 247.165912][ T9] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 247.331079][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.332360][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 247.332387][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 247.332438][ T9] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 247.332485][ T9] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 247.332527][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 247.332554][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 247.338260][ T9] usb 3-1: string descriptor 0 read error: -22 [ 247.338405][ T9] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 247.338427][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.370561][ T8072] netlink: 'syz.3.857': attribute type 21 has an invalid length. [ 247.584515][ T8076] mmap: syz.1.846 (8076) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 247.626889][ T8067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.627712][ T8067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.222018][ T8079] FAULT_INJECTION: forcing a failure. [ 248.222018][ T8079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.222056][ T8079] CPU: 1 UID: 0 PID: 8079 Comm: syz.0.859 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.222080][ T8079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.222090][ T8079] Call Trace: [ 248.222103][ T8079] [ 248.222111][ T8079] dump_stack_lvl+0xe8/0x150 [ 248.222139][ T8079] should_fail_ex+0x46b/0x600 [ 248.222166][ T8079] __kvm_read_guest_page+0x18d/0x240 [ 248.222193][ T8079] kvm_fetch_guest_virt+0x12b/0x170 [ 248.222216][ T8079] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 248.222236][ T8079] __do_insn_fetch_bytes+0x31c/0x700 [ 248.222264][ T8079] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 248.222299][ T8079] ? __lock_acquire+0x6b5/0x2d10 [ 248.222325][ T8079] x86_decode_insn+0x38e/0x5df0 [ 248.222349][ T8079] ? __lock_acquire+0x6b5/0x2d10 [ 248.222383][ T8079] ? unwind_next_frame+0xa6/0x2550 [ 248.222409][ T8079] ? __pfx_x86_decode_insn+0x10/0x10 [ 248.222446][ T8079] ? vmx_read_guest_seg_ar+0x3e9/0x640 [ 248.222472][ T8079] ? __asan_memset+0x22/0x50 [ 248.222495][ T8079] ? init_decode_cache+0xea/0x160 [ 248.222511][ T8079] ? init_emulate_ctxt+0x514/0x6c0 [ 248.222536][ T8079] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 248.222560][ T8079] ? __lock_acquire+0x6b5/0x2d10 [ 248.222581][ T8079] x86_emulate_instruction+0x64a/0x21c0 [ 248.222605][ T8079] ? __lock_acquire+0x6b5/0x2d10 [ 248.222630][ T8079] ? __lock_acquire+0x6b5/0x2d10 [ 248.222649][ T8079] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 248.222670][ T8079] ? do_raw_spin_lock+0x12b/0x2f0 [ 248.222689][ T8079] ? vmx_handle_exit_irqoff+0xff/0xac0 [ 248.222705][ T8079] ? vmx_read_guest_seg_ar+0x399/0x640 [ 248.222729][ T8079] ? __pfx_vmx_handle_exit_irqoff+0x10/0x10 [ 248.222753][ T8079] handle_ud+0x1a8/0x680 [ 248.222775][ T8079] ? __pfx_handle_ud+0x10/0x10 [ 248.222794][ T8079] ? clear_bhb_loop+0x40/0x90 [ 248.222810][ T8079] ? clear_bhb_loop+0x40/0x90 [ 248.222825][ T8079] ? vmx_vcpu_run+0x1000/0x2ec0 [ 248.222853][ T8079] ? __pfx_handle_exception_nmi+0x10/0x10 [ 248.222873][ T8079] vmx_handle_exit+0x1081/0x17e0 [ 248.222907][ T8079] vcpu_run+0x5c5b/0x7830 [ 248.222922][ T8079] ? segmented_read+0x2d0/0x3f0 [ 248.222949][ T8079] ? vcpu_run+0x4982/0x7830 [ 248.223009][ T8079] ? __pfx_vcpu_run+0x10/0x10 [ 248.223025][ T8079] ? __asan_memcpy+0x40/0x70 [ 248.223048][ T8079] ? complete_emulated_mmio+0x53e/0x900 [ 248.223081][ T8079] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 248.223109][ T8079] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 248.223125][ T8079] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 248.223172][ T8079] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 248.223194][ T8079] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.223215][ T8079] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 248.223234][ T8079] ? _mutex_lock_killable+0x152/0x1d0 [ 248.223251][ T8079] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 248.223275][ T8079] kvm_vcpu_ioctl+0xa65/0xfe0 [ 248.223302][ T8079] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.223341][ T8079] ? __fget_files+0x2a/0x420 [ 248.223359][ T8079] ? __fget_files+0x2a/0x420 [ 248.223373][ T8079] ? __fget_files+0x3a6/0x420 [ 248.223387][ T8079] ? __fget_files+0x2a/0x420 [ 248.223404][ T8079] ? bpf_lsm_file_ioctl+0x9/0x20 [ 248.223433][ T8079] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 248.223455][ T8079] __se_sys_ioctl+0xff/0x170 [ 248.223474][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.223490][ T8079] do_syscall_64+0x15f/0x560 [ 248.223510][ T8079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.223526][ T8079] ? clear_bhb_loop+0x40/0x90 [ 248.223544][ T8079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.223559][ T8079] RIP: 0033:0x7f22f7f4ce59 [ 248.223575][ T8079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.223588][ T8079] RSP: 002b:00007f22f619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.223606][ T8079] RAX: ffffffffffffffda RBX: 00007f22f81c5fa0 RCX: 00007f22f7f4ce59 [ 248.223618][ T8079] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 248.223628][ T8079] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.223637][ T8079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.223647][ T8079] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 248.223674][ T8079] [ 248.829838][ T8084] FAULT_INJECTION: forcing a failure. [ 248.829838][ T8084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.829873][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.0.860 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 248.829903][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.829917][ T8084] Call Trace: [ 248.829925][ T8084] [ 248.829933][ T8084] dump_stack_lvl+0xe8/0x150 [ 248.829962][ T8084] should_fail_ex+0x46b/0x600 [ 248.829987][ T8084] _copy_from_user+0x2d/0xb0 [ 248.830006][ T8084] hci_get_conn_info+0xb3/0x2f0 [ 248.830023][ T8084] ? __pfx_hci_get_conn_info+0x10/0x10 [ 248.830046][ T8084] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.830071][ T8084] hci_sock_ioctl+0x891/0x940 [ 248.830092][ T8084] sock_do_ioctl+0x101/0x320 [ 248.830111][ T8084] ? __pfx_sock_do_ioctl+0x10/0x10 [ 248.830140][ T8084] sock_ioctl+0x5c9/0x7f0 [ 248.830203][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 248.830219][ T8084] ? __fget_files+0x2a/0x420 [ 248.830233][ T8084] ? __fget_files+0x3a6/0x420 [ 248.830247][ T8084] ? __fget_files+0x2a/0x420 [ 248.830264][ T8084] ? bpf_lsm_file_ioctl+0x9/0x20 [ 248.830286][ T8084] ? __pfx_sock_ioctl+0x10/0x10 [ 248.830301][ T8084] __se_sys_ioctl+0xff/0x170 [ 248.830320][ T8084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.830337][ T8084] do_syscall_64+0x15f/0x560 [ 248.830357][ T8084] ? trace_irq_disable+0x3b/0x140 [ 248.830375][ T8084] ? clear_bhb_loop+0x40/0x90 [ 248.830394][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.830411][ T8084] RIP: 0033:0x7f22f7f4ce59 [ 248.830491][ T8084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.830507][ T8084] RSP: 002b:00007f22f619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.830525][ T8084] RAX: ffffffffffffffda RBX: 00007f22f81c5fa0 RCX: 00007f22f7f4ce59 [ 248.830537][ T8084] RDX: 00002000000006c0 RSI: 00000000800448d5 RDI: 0000000000000004 [ 248.830547][ T8084] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 248.830557][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.830566][ T8084] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 248.830593][ T8084] [ 248.870711][ T5723] usb 2-1: USB disconnect, device number 22 [ 249.240287][ T8087] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 249.240312][ T8087] netlink: 152 bytes leftover after parsing attributes in process `syz.1.861'. [ 249.243159][ T8088] netlink: 'syz.1.861': attribute type 4 has an invalid length. [ 249.243176][ T8088] netlink: 152 bytes leftover after parsing attributes in process `syz.1.861'. [ 250.283682][ T37] audit: type=1400 audit(1779479844.036:7): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/current" pid=8098 comm="syz.3.865" [ 250.391633][ T9] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 250.630211][ T8106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.868'. [ 250.867443][ T9] usb 3-1: USB disconnect, device number 33 [ 251.080920][ T8115] netlink: 48 bytes leftover after parsing attributes in process `syz.1.871'. [ 251.081839][ T37] audit: type=1107 audit(1779479844.836:8): pid=8109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='^jiäùõÝ–šËü qH' [ 251.658821][ T8130] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 251.658845][ T8130] netlink: 'syz.1.874': attribute type 2 has an invalid length. [ 252.378969][ T8142] FAULT_INJECTION: forcing a failure. [ 252.378969][ T8142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.379003][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.3.878 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.379022][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.379032][ T8142] Call Trace: [ 252.379039][ T8142] [ 252.379045][ T8142] dump_stack_lvl+0xe8/0x150 [ 252.379072][ T8142] should_fail_ex+0x46b/0x600 [ 252.379109][ T8142] _copy_from_iter+0x1d3/0x1670 [ 252.379143][ T8142] ? trace_kmem_cache_alloc+0x29/0xe0 [ 252.379161][ T8142] ? __alloc_skb+0x27d/0x7d0 [ 252.379182][ T8142] ? __pfx__copy_from_iter+0x10/0x10 [ 252.379204][ T8142] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 252.379222][ T8142] ? __alloc_skb+0x27d/0x7d0 [ 252.379248][ T8142] ? netlink_sendmsg+0x650/0xb40 [ 252.379271][ T8142] ? skb_put+0x11b/0x210 [ 252.379297][ T8142] netlink_sendmsg+0x6c0/0xb40 [ 252.379326][ T8142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.379352][ T8142] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 252.379375][ T8142] ? aa_sock_msg_perm+0x122/0x200 [ 252.379392][ T8142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.379412][ T8142] sock_sendmsg_nosec+0x112/0x150 [ 252.379433][ T8142] ____sys_sendmsg+0x55c/0x870 [ 252.379461][ T8142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.379492][ T8142] ? import_iovec+0x73/0xa0 [ 252.379514][ T8142] ___sys_sendmsg+0x2a5/0x360 [ 252.379535][ T8142] ? __lock_acquire+0x6b5/0x2d10 [ 252.379562][ T8142] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.379592][ T8142] ? lapic_next_event+0x11/0x20 [ 252.379611][ T8142] ? clockevents_program_event+0x491/0x630 [ 252.379662][ T8142] ? __fget_files+0x2a/0x420 [ 252.379677][ T8142] ? __fget_files+0x3a6/0x420 [ 252.379702][ T8142] __x64_sys_sendmsg+0x1c3/0x2a0 [ 252.379727][ T8142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.379758][ T8142] ? __pfx_ksys_write+0x10/0x10 [ 252.379787][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.379806][ T8142] do_syscall_64+0x15f/0x560 [ 252.379829][ T8142] ? trace_irq_disable+0x3b/0x140 [ 252.379847][ T8142] ? clear_bhb_loop+0x40/0x90 [ 252.379867][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.379882][ T8142] RIP: 0033:0x7f878d17ce59 [ 252.379898][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.379913][ T8142] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.379931][ T8142] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 252.379944][ T8142] RDX: 0000000020004810 RSI: 0000200000000140 RDI: 0000000000000003 [ 252.379955][ T8142] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 252.379965][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.379975][ T8142] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 252.380003][ T8142] [ 252.899995][ T8154] FAULT_INJECTION: forcing a failure. [ 252.899995][ T8154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.900027][ T8154] CPU: 1 UID: 0 PID: 8154 Comm: syz.1.883 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.900048][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.900059][ T8154] Call Trace: [ 252.900065][ T8154] [ 252.900073][ T8154] dump_stack_lvl+0xe8/0x150 [ 252.900097][ T8154] should_fail_ex+0x46b/0x600 [ 252.900125][ T8154] _copy_to_user+0x31/0xb0 [ 252.900146][ T8154] sctp_getsockopt_pr_supported+0x225/0x2f0 [ 252.900168][ T8154] ? __local_bh_enable+0x1e1/0x2f0 [ 252.900194][ T8154] ? __pfx_sctp_getsockopt_pr_supported+0x10/0x10 [ 252.900219][ T8154] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 252.900242][ T8154] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.900267][ T8154] sctp_getsockopt+0x9f8/0xb90 [ 252.900289][ T8154] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 252.900320][ T8154] do_sock_getsockopt+0x51d/0x7e0 [ 252.900348][ T8154] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 252.900384][ T8154] ? __fget_files+0x3a6/0x420 [ 252.900401][ T8154] ? __fget_files+0x2a/0x420 [ 252.900425][ T8154] __x64_sys_getsockopt+0x1aa/0x250 [ 252.900454][ T8154] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.900473][ T8154] do_syscall_64+0x15f/0x560 [ 252.900495][ T8154] ? trace_irq_disable+0x3b/0x140 [ 252.900513][ T8154] ? clear_bhb_loop+0x40/0x90 [ 252.900534][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.900553][ T8154] RIP: 0033:0x7ff53c09ce59 [ 252.900578][ T8154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.900596][ T8154] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 252.900619][ T8154] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 252.900643][ T8154] RDX: 0000000000000071 RSI: 0000000000000084 RDI: 0000000000000003 [ 252.900655][ T8154] RBP: 00007ff53a2ee090 R08: 00002000000000c0 R09: 0000000000000000 [ 252.900668][ T8154] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 252.900681][ T8154] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 252.900714][ T8154] [ 253.127871][ T8160] tipc: Started in network mode [ 253.127893][ T8160] tipc: Node identity 4246, cluster identity 4711 [ 253.127906][ T8160] tipc: Node number set to 16966 [ 253.526424][ T5785] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 253.655887][ T32] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 253.705696][ T5785] usb 3-1: Using ep0 maxpacket: 8 [ 253.707693][ T5785] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 253.707721][ T5785] usb 3-1: config 0 has no interface number 0 [ 253.707768][ T5785] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 253.707793][ T5785] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 253.707820][ T5785] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 253.707847][ T5785] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 253.707891][ T5785] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 253.707915][ T5785] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.812111][ T5785] usb 3-1: config 0 descriptor?? [ 253.838900][ T5785] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 253.875880][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 253.886234][ T32] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 253.886266][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.886286][ T32] usb 1-1: Product: syz [ 253.886301][ T32] usb 1-1: Manufacturer: syz [ 253.886315][ T32] usb 1-1: SerialNumber: syz [ 253.931762][ T32] usb 1-1: config 0 descriptor?? [ 253.947513][ T32] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 254.052705][ T5785] usb 3-1: USB disconnect, device number 34 [ 254.130512][ T5785] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 254.332081][ T8183] FAULT_INJECTION: forcing a failure. [ 254.332081][ T8183] name failslab, interval 1, probability 0, space 0, times 0 [ 254.332112][ T8183] CPU: 0 UID: 0 PID: 8183 Comm: syz.3.893 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 254.332127][ T8183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 254.332135][ T8183] Call Trace: [ 254.332139][ T8183] [ 254.332145][ T8183] dump_stack_lvl+0xe8/0x150 [ 254.332173][ T8183] should_fail_ex+0x46b/0x600 [ 254.332207][ T8183] should_failslab+0xa8/0x100 [ 254.332233][ T8183] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 254.332254][ T8183] ? __alloc_skb+0x1d0/0x7d0 [ 254.332276][ T8183] ? lockdep_hardirqs_on+0x7a/0x110 [ 254.332295][ T8183] __alloc_skb+0x1d0/0x7d0 [ 254.332312][ T8183] alloc_skb_with_frags+0xc8/0x760 [ 254.332330][ T8183] ? save_netdev_trace_buffer+0x18f/0x5f0 [ 254.332364][ T8183] ? save_netdev_trace_buffer+0x4cf/0x5f0 [ 254.332390][ T8183] sock_alloc_send_pskb+0x884/0x9a0 [ 254.332425][ T8183] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 254.332457][ T8183] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 254.332477][ T8183] ? dev_get_by_index+0x22/0x2f0 [ 254.332488][ T8183] ? dev_get_by_index+0x22/0x2f0 [ 254.332507][ T8183] packet_sendmsg+0x3167/0x4fd0 [ 254.332531][ T8183] ? aa_label_sk_perm+0x532/0x6e0 [ 254.332572][ T8183] ? __lock_acquire+0x6b5/0x2d10 [ 254.332597][ T8183] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 254.332624][ T8183] ? __lock_acquire+0x6b5/0x2d10 [ 254.332643][ T8183] ? unwind_next_frame+0xa6/0x2550 [ 254.332669][ T8183] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.332692][ T8183] ? aa_sk_perm+0x703/0x950 [ 254.332728][ T8183] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.332755][ T8183] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 254.332782][ T8183] ? aa_sock_msg_perm+0x122/0x200 [ 254.332800][ T8183] ? __pfx_packet_sendmsg+0x10/0x10 [ 254.332810][ T8183] sock_sendmsg_nosec+0x112/0x150 [ 254.332825][ T8183] ____sys_sendmsg+0x55c/0x870 [ 254.332846][ T8183] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.332884][ T8183] ? import_iovec+0x73/0xa0 [ 254.332923][ T8183] ___sys_sendmsg+0x2a5/0x360 [ 254.332949][ T8183] ? __lock_acquire+0x6b5/0x2d10 [ 254.333043][ T8183] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.333115][ T8183] ? __fget_files+0x2a/0x420 [ 254.333137][ T8183] ? __fget_files+0x3a6/0x420 [ 254.333191][ T8183] __x64_sys_sendmsg+0x1c3/0x2a0 [ 254.333223][ T8183] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.333251][ T8183] ? __pfx_ksys_write+0x10/0x10 [ 254.333276][ T8183] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.333298][ T8183] do_syscall_64+0x15f/0x560 [ 254.333326][ T8183] ? trace_irq_disable+0x3b/0x140 [ 254.333349][ T8183] ? clear_bhb_loop+0x40/0x90 [ 254.333373][ T8183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.333393][ T8183] RIP: 0033:0x7f878d17ce59 [ 254.333412][ T8183] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.333423][ T8183] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.333438][ T8183] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 254.333447][ T8183] RDX: 0000000004000080 RSI: 0000200000000080 RDI: 0000000000000003 [ 254.333459][ T8183] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 254.333471][ T8183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.333483][ T8183] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 254.333515][ T8183] [ 254.504840][ T8185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 254.504897][ T8185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.894'. [ 254.558922][ T32] gspca_sonixj: reg_w1 err -71 [ 254.559029][ T32] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 254.725525][ T32] usb 1-1: USB disconnect, device number 30 [ 254.993091][ T37] audit: type=1800 audit(1779479848.746:9): pid=8185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.894" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 255.220394][ T8193] FAULT_INJECTION: forcing a failure. [ 255.220394][ T8193] name failslab, interval 1, probability 0, space 0, times 0 [ 255.220433][ T8193] CPU: 1 UID: 0 PID: 8193 Comm: syz.2.895 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 255.220458][ T8193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.220471][ T8193] Call Trace: [ 255.220479][ T8193] [ 255.220487][ T8193] dump_stack_lvl+0xe8/0x150 [ 255.220520][ T8193] should_fail_ex+0x46b/0x600 [ 255.220553][ T8193] should_failslab+0xa8/0x100 [ 255.220579][ T8193] kmem_cache_alloc_noprof+0x87/0x680 [ 255.220603][ T8193] ? security_inode_alloc+0x39/0x310 [ 255.220640][ T8193] security_inode_alloc+0x39/0x310 [ 255.220663][ T8193] inode_init_always_gfp+0x99a/0xd50 [ 255.220693][ T8193] ? __pfx_sock_alloc_inode+0x10/0x10 [ 255.220713][ T8193] alloc_inode+0x82/0x1b0 [ 255.220739][ T8193] __sock_create+0x11e/0x960 [ 255.220757][ T8193] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 255.220790][ T8193] rfcomm_dlc_open+0x364/0x1210 [ 255.220817][ T8193] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 255.220856][ T8193] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 255.220892][ T8193] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 255.220920][ T8193] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.220948][ T8193] rfcomm_sock_connect+0x2f7/0x640 [ 255.220974][ T8193] __sys_connect+0x315/0x450 [ 255.221002][ T8193] ? __pfx___sys_connect+0x10/0x10 [ 255.221033][ T8193] ? __pfx_ksys_write+0x10/0x10 [ 255.221060][ T8193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.221078][ T8193] __x64_sys_connect+0x7a/0x90 [ 255.221105][ T8193] do_syscall_64+0x15f/0x560 [ 255.221132][ T8193] ? trace_irq_disable+0x3b/0x140 [ 255.221154][ T8193] ? clear_bhb_loop+0x40/0x90 [ 255.221180][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.221200][ T8193] RIP: 0033:0x7fb2c97cce59 [ 255.221221][ T8193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.221238][ T8193] RSP: 002b:00007fb2c79dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 255.221261][ T8193] RAX: ffffffffffffffda RBX: 00007fb2c9a46180 RCX: 00007fb2c97cce59 [ 255.221278][ T8193] RDX: 000000000000000a RSI: 0000200000005dc0 RDI: 0000000000000008 [ 255.221310][ T8193] RBP: 00007fb2c79dc090 R08: 0000000000000000 R09: 0000000000000000 [ 255.221323][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.221336][ T8193] R13: 00007fb2c9a46218 R14: 00007fb2c9a46180 R15: 00007ffdda06b768 [ 255.221371][ T8193] [ 255.221603][ T8193] socket: no more sockets [ 255.363383][ T32] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 255.669058][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 255.685734][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 255.692906][ T32] usb 4-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 255.692933][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.692952][ T32] usb 4-1: Product: syz [ 255.692965][ T32] usb 4-1: Manufacturer: syz [ 255.692978][ T32] usb 4-1: SerialNumber: syz [ 255.962542][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.962656][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.109993][ T8199] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 256.214854][ T8202] tipc: Failed to remove unknown binding: 66,0,0/0:3022563686/3022563688 [ 256.214898][ T8202] tipc: Failed to remove unknown binding: 66,0,0/0:3022563686/3022563687 [ 256.809402][ T8210] tipc: Failed to remove unknown binding: 66,0,0/16966:1757481461/1757481463 [ 256.817188][ T8210] tipc: Failed to remove unknown binding: 66,0,0/16966:1757481461/1757481462 [ 257.044630][ T8213] FAULT_INJECTION: forcing a failure. [ 257.044630][ T8213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.044666][ T8213] CPU: 1 UID: 0 PID: 8213 Comm: syz.2.902 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 257.044691][ T8213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 257.044704][ T8213] Call Trace: [ 257.044712][ T8213] [ 257.044727][ T8213] dump_stack_lvl+0xe8/0x150 [ 257.044761][ T8213] should_fail_ex+0x46b/0x600 [ 257.044797][ T8213] _copy_to_user+0x31/0xb0 [ 257.044822][ T8213] simple_read_from_buffer+0xe1/0x170 [ 257.044860][ T8213] proc_fail_nth_read+0x1be/0x230 [ 257.044889][ T8213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.044917][ T8213] ? rw_verify_area+0x2ac/0x4e0 [ 257.044941][ T8213] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.044965][ T8213] vfs_read+0x212/0xa80 [ 257.044997][ T8213] ? __pfx_vfs_read+0x10/0x10 [ 257.045022][ T8213] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 257.045049][ T8213] ? lockdep_hardirqs_on+0x7a/0x110 [ 257.045076][ T8213] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 257.045103][ T8213] ? mutex_lock_nested+0x152/0x1d0 [ 257.045124][ T8213] ? fdget_pos+0x252/0x320 [ 257.045154][ T8213] ksys_read+0x156/0x270 [ 257.045182][ T8213] ? __pfx_ksys_read+0x10/0x10 [ 257.045214][ T8213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.045237][ T8213] do_syscall_64+0x15f/0x560 [ 257.045274][ T8213] ? clear_bhb_loop+0x40/0x90 [ 257.045300][ T8213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.045320][ T8213] RIP: 0033:0x7fb2c978d68e [ 257.045340][ T8213] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 257.045357][ T8213] RSP: 002b:00007fb2c7a1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.045379][ T8213] RAX: ffffffffffffffda RBX: 00007fb2c7a1e6c0 RCX: 00007fb2c978d68e [ 257.045394][ T8213] RDX: 000000000000000f RSI: 00007fb2c7a1e0a0 RDI: 0000000000000004 [ 257.045407][ T8213] RBP: 00007fb2c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.045420][ T8213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.045431][ T8213] R13: 00007fb2c9a46038 R14: 00007fb2c9a45fa0 R15: 00007ffdda06b768 [ 257.045465][ T8213] [ 257.155888][ T5621] Bluetooth: hci2: command 0x0406 tx timeout [ 258.747009][ T32] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 258.747516][ T32] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 258.861739][ T32] usb 4-1: USB disconnect, device number 21 [ 259.681231][ T32] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 259.714416][ T8247] syzkaller0: entered promiscuous mode [ 259.714434][ T8247] syzkaller0: entered allmulticast mode [ 259.859443][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 259.862029][ T32] usb 4-1: config 1 interface 0 has no altsetting 0 [ 259.887998][ T32] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.40 [ 259.888033][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.888053][ T32] usb 4-1: Product: syz [ 259.888068][ T32] usb 4-1: Manufacturer: syz [ 259.888083][ T32] usb 4-1: SerialNumber: syz [ 260.420871][ T8242] evm: overlay not supported [ 260.674968][ T32] appletouch 4-1:1.0: Failed to read mode from device. [ 260.675278][ T32] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 260.695514][ T1911] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 260.699664][ T32] usb 4-1: USB disconnect, device number 22 [ 260.850124][ T1911] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 260.850157][ T1911] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 260.850180][ T1911] usb 3-1: config 150 has no interface number 0 [ 260.850237][ T1911] usb 3-1: config 150 interface 204 has no altsetting 0 [ 260.853706][ T1911] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 260.853735][ T1911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.853756][ T1911] usb 3-1: Product: syz [ 260.853772][ T1911] usb 3-1: Manufacturer: syz [ 260.853787][ T1911] usb 3-1: SerialNumber: syz [ 260.985877][ T5785] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 261.137314][ T1911] xr_serial 3-1:150.204: skipping garbage [ 261.137376][ T1911] xr_serial 3-1:150.204: xr_serial converter detected [ 261.168769][ T5785] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.168799][ T5785] usb 2-1: config 0 has no interfaces? [ 261.179891][ T5785] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 261.179921][ T5785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.179940][ T5785] usb 2-1: Product: syz [ 261.179955][ T5785] usb 2-1: Manufacturer: syz [ 261.179969][ T5785] usb 2-1: SerialNumber: syz [ 261.195016][ T5785] usb 2-1: config 0 descriptor?? [ 261.289854][ T8268] FAULT_INJECTION: forcing a failure. [ 261.289854][ T8268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.289893][ T8268] CPU: 1 UID: 0 PID: 8268 Comm: syz.0.920 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 261.289923][ T8268] Tainted: [L]=SOFTLOCKUP [ 261.289930][ T8268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.289942][ T8268] Call Trace: [ 261.289951][ T8268] [ 261.289970][ T8268] dump_stack_lvl+0xe8/0x150 [ 261.290007][ T8268] should_fail_ex+0x46b/0x600 [ 261.290041][ T8268] _copy_to_user+0x31/0xb0 [ 261.290068][ T8268] simple_read_from_buffer+0xe1/0x170 [ 261.290105][ T8268] proc_fail_nth_read+0x1be/0x230 [ 261.290132][ T8268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.290159][ T8268] ? rw_verify_area+0x2ac/0x4e0 [ 261.290181][ T8268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 261.290205][ T8268] vfs_read+0x212/0xa80 [ 261.290237][ T8268] ? __pfx_vfs_read+0x10/0x10 [ 261.290265][ T8268] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 261.290293][ T8268] ? lockdep_hardirqs_on+0x7a/0x110 [ 261.290319][ T8268] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 261.290344][ T8268] ? mutex_lock_nested+0x152/0x1d0 [ 261.290374][ T8268] ? fdget_pos+0x252/0x320 [ 261.290404][ T8268] ksys_read+0x156/0x270 [ 261.290430][ T8268] ? __pfx_ksys_read+0x10/0x10 [ 261.290451][ T8268] ? fput+0xa0/0xd0 [ 261.290489][ T8268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.290509][ T8268] do_syscall_64+0x15f/0x560 [ 261.290535][ T8268] ? trace_irq_disable+0x3b/0x140 [ 261.290557][ T8268] ? clear_bhb_loop+0x40/0x90 [ 261.290581][ T8268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.290601][ T8268] RIP: 0033:0x7f22f7f0d68e [ 261.290620][ T8268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 261.290636][ T8268] RSP: 002b:00007f22f619dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 261.290657][ T8268] RAX: ffffffffffffffda RBX: 00007f22f619e6c0 RCX: 00007f22f7f0d68e [ 261.290671][ T8268] RDX: 000000000000000f RSI: 00007f22f619e0a0 RDI: 0000000000000005 [ 261.290684][ T8268] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.290697][ T8268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.290709][ T8268] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 261.290741][ T8268] [ 261.699565][ T5785] usb 2-1: USB disconnect, device number 23 [ 261.758522][ T8278] FAULT_INJECTION: forcing a failure. [ 261.758522][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 261.758563][ T8278] CPU: 0 UID: 0 PID: 8278 Comm: syz.0.923 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 261.758593][ T8278] Tainted: [L]=SOFTLOCKUP [ 261.758600][ T8278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 261.758611][ T8278] Call Trace: [ 261.758625][ T8278] [ 261.758633][ T8278] dump_stack_lvl+0xe8/0x150 [ 261.758664][ T8278] should_fail_ex+0x46b/0x600 [ 261.758698][ T8278] should_failslab+0xa8/0x100 [ 261.758723][ T8278] __kmalloc_noprof+0xdf/0x7b0 [ 261.758746][ T8278] ? sock_kmalloc+0xd6/0x160 [ 261.758781][ T8278] sock_kmalloc+0xd6/0x160 [ 261.758813][ T8278] ____sys_sendmsg+0x1ca/0x870 [ 261.758849][ T8278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.758887][ T8278] ? import_iovec+0x73/0xa0 [ 261.758913][ T8278] ___sys_sendmsg+0x2a5/0x360 [ 261.758940][ T8278] ? __lock_acquire+0x6b5/0x2d10 [ 261.758970][ T8278] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.759030][ T8278] ? __fget_files+0x2a/0x420 [ 261.759048][ T8278] ? __fget_files+0x3a6/0x420 [ 261.759077][ T8278] __x64_sys_sendmsg+0x1c3/0x2a0 [ 261.759107][ T8278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 261.759144][ T8278] ? __pfx_ksys_write+0x10/0x10 [ 261.759179][ T8278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.759200][ T8278] do_syscall_64+0x15f/0x560 [ 261.759226][ T8278] ? trace_irq_disable+0x3b/0x140 [ 261.759247][ T8278] ? clear_bhb_loop+0x40/0x90 [ 261.759280][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.759300][ T8278] RIP: 0033:0x7f22f7f4ce59 [ 261.759321][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.759337][ T8278] RSP: 002b:00007f22f619e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.759359][ T8278] RAX: ffffffffffffffda RBX: 00007f22f81c5fa0 RCX: 00007f22f7f4ce59 [ 261.759374][ T8278] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000005 [ 261.759387][ T8278] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 261.759400][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.759412][ T8278] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 261.759445][ T8278] [ 261.950493][ T1911] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 261.950561][ T1911] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 262.050951][ T1911] usb 3-1: USB disconnect, device number 35 [ 262.070165][ T1911] xr_serial 3-1:150.204: device disconnected [ 262.233955][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.528225][ T44] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 262.582091][ T8296] netlink: 'syz.2.930': attribute type 5 has an invalid length. [ 262.679200][ T44] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 262.679232][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.691643][ T44] usb 2-1: config 0 descriptor?? [ 262.718590][ T8299] syz.2.931 (8299) used greatest stack depth: 15608 bytes left [ 262.723249][ T44] cp210x 2-1:0.0: cp210x converter detected [ 262.824894][ T8301] FAULT_INJECTION: forcing a failure. [ 262.824894][ T8301] name failslab, interval 1, probability 0, space 0, times 0 [ 262.824933][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.2.932 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 262.824961][ T8301] Tainted: [L]=SOFTLOCKUP [ 262.824969][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.824981][ T8301] Call Trace: [ 262.824989][ T8301] [ 262.824997][ T8301] dump_stack_lvl+0xe8/0x150 [ 262.825028][ T8301] should_fail_ex+0x46b/0x600 [ 262.825060][ T8301] should_failslab+0xa8/0x100 [ 262.825086][ T8301] __kmalloc_noprof+0xdf/0x7b0 [ 262.825107][ T8301] ? __kmalloc_cache_noprof+0x3a6/0x690 [ 262.825127][ T8301] ? alloc_pipe_info+0x1fc/0x4d0 [ 262.825149][ T8301] ? alloc_pipe_info+0xe8/0x4d0 [ 262.825176][ T8301] alloc_pipe_info+0x1fc/0x4d0 [ 262.825203][ T8301] splice_direct_to_actor+0xa19/0xc80 [ 262.825239][ T8301] ? kstrtouint+0x6e/0xe0 [ 262.825274][ T8301] ? __pfx_direct_splice_actor+0x10/0x10 [ 262.825298][ T8301] ? __pfx_aa_file_perm+0x10/0x10 [ 262.825321][ T8301] ? __lock_acquire+0x6b5/0x2d10 [ 262.825344][ T8301] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 262.825376][ T8301] do_splice_direct+0x19b/0x2a0 [ 262.825402][ T8301] ? __pfx_do_splice_direct+0x10/0x10 [ 262.825424][ T8301] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 262.825465][ T8301] ? rw_verify_area+0x25b/0x4e0 [ 262.825513][ T8301] do_sendfile+0x547/0x7e0 [ 262.825614][ T8301] ? __pfx_do_sendfile+0x10/0x10 [ 262.825707][ T8301] __se_sys_sendfile64+0xdf/0x1a0 [ 262.825744][ T8301] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 262.825783][ T8301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.825806][ T8301] do_syscall_64+0x15f/0x560 [ 262.825833][ T8301] ? trace_irq_disable+0x3b/0x140 [ 262.825856][ T8301] ? clear_bhb_loop+0x40/0x90 [ 262.825881][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.825902][ T8301] RIP: 0033:0x7fb2c97cce59 [ 262.825922][ T8301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.825940][ T8301] RSP: 002b:00007fb2c7a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 262.825963][ T8301] RAX: ffffffffffffffda RBX: 00007fb2c9a45fa0 RCX: 00007fb2c97cce59 [ 262.825978][ T8301] RDX: 0000200000000440 RSI: 0000000000000003 RDI: 0000000000000005 [ 262.825991][ T8301] RBP: 00007fb2c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 262.826003][ T8301] R10: 0000000000001002 R11: 0000000000000246 R12: 0000000000000001 [ 262.826016][ T8301] R13: 00007fb2c9a46038 R14: 00007fb2c9a45fa0 R15: 00007ffdda06b768 [ 262.826048][ T8301] [ 263.257596][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.263908][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.306430][ T44] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 263.306463][ T44] cp210x 2-1:0.0: querying part number failed [ 263.468253][ T44] usb 2-1: cp210x converter now attached to ttyUSB0 [ 263.490247][ T8312] tmpfs: Unknown parameter 'func' [ 263.497735][ T1911] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 263.539406][ T44] usb 2-1: USB disconnect, device number 24 [ 263.640220][ T44] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.645974][ T44] cp210x 2-1:0.0: device disconnected [ 263.657259][ T1911] usb 1-1: Using ep0 maxpacket: 16 [ 263.660143][ T1911] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.660204][ T1911] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 263.660227][ T1911] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 263.664964][ T1911] usb 1-1: New USB device found, idVendor=0499, idProduct=1017, bcdDevice= 0.40 [ 263.665004][ T1911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.665024][ T1911] usb 1-1: Product: syz [ 263.665038][ T1911] usb 1-1: Manufacturer: syz [ 263.665052][ T1911] usb 1-1: SerialNumber: syz [ 264.044165][ T1911] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 264.383315][ T1911] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 264.398784][ T1911] usb 1-1: USB disconnect, device number 31 [ 264.522750][ T8327] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 264.522774][ T8327] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 264.528353][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.885774][ T5723] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 265.200848][ T5723] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 265.200881][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.243258][ T5723] usb 3-1: config 0 descriptor?? [ 265.775431][ T8343] netlink: 'syz.0.947': attribute type 5 has an invalid length. [ 265.823792][ T8343] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 265.823825][ T8343] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 265.845797][ T1911] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 265.865109][ T5723] usb 3-1: Cannot set MAC address [ 265.865421][ T5723] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 265.901508][ T5723] usb 3-1: USB disconnect, device number 36 [ 266.005720][ T1911] usb 2-1: Using ep0 maxpacket: 32 [ 266.014319][ T1911] usb 2-1: unable to get BOS descriptor or descriptor too short [ 266.025841][ T1911] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 266.033530][ T1911] usb 2-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 266.033561][ T1911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.033580][ T1911] usb 2-1: Product: syz [ 266.033595][ T1911] usb 2-1: Manufacturer: syz [ 266.033609][ T1911] usb 2-1: SerialNumber: syz [ 266.336529][ T8352] FAULT_INJECTION: forcing a failure. [ 266.336529][ T8352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.336569][ T8352] CPU: 1 UID: 0 PID: 8352 Comm: syz.2.952 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.336598][ T8352] Tainted: [L]=SOFTLOCKUP [ 266.336606][ T8352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.336617][ T8352] Call Trace: [ 266.336625][ T8352] [ 266.336633][ T8352] dump_stack_lvl+0xe8/0x150 [ 266.336662][ T8352] should_fail_ex+0x46b/0x600 [ 266.336695][ T8352] _copy_from_user+0x2d/0xb0 [ 266.336718][ T8352] sock_do_ioctl+0x195/0x320 [ 266.336741][ T8352] ? __pfx_sock_do_ioctl+0x10/0x10 [ 266.336785][ T8352] sock_ioctl+0x5c9/0x7f0 [ 266.336808][ T8352] ? __pfx_sock_ioctl+0x10/0x10 [ 266.336827][ T8352] ? __fget_files+0x2a/0x420 [ 266.336846][ T8352] ? __fget_files+0x3a6/0x420 [ 266.336864][ T8352] ? __fget_files+0x2a/0x420 [ 266.336886][ T8352] ? bpf_lsm_file_ioctl+0x9/0x20 [ 266.336914][ T8352] ? __pfx_sock_ioctl+0x10/0x10 [ 266.336934][ T8352] __se_sys_ioctl+0xff/0x170 [ 266.336969][ T8352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.336992][ T8352] do_syscall_64+0x15f/0x560 [ 266.337020][ T8352] ? clear_bhb_loop+0x40/0x90 [ 266.337044][ T8352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.337065][ T8352] RIP: 0033:0x7fb2c97cce59 [ 266.337085][ T8352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.337101][ T8352] RSP: 002b:00007fb2c7a1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.337125][ T8352] RAX: ffffffffffffffda RBX: 00007fb2c9a45fa0 RCX: 00007fb2c97cce59 [ 266.337141][ T8352] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000006 [ 266.337154][ T8352] RBP: 00007fb2c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.337167][ T8352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.337178][ T8352] R13: 00007fb2c9a46038 R14: 00007fb2c9a45fa0 R15: 00007ffdda06b768 [ 266.337209][ T8352] [ 266.565054][ T8355] FAULT_INJECTION: forcing a failure. [ 266.565054][ T8355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.565093][ T8355] CPU: 1 UID: 0 PID: 8355 Comm: syz.2.953 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 266.565122][ T8355] Tainted: [L]=SOFTLOCKUP [ 266.565129][ T8355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 266.565141][ T8355] Call Trace: [ 266.565155][ T8355] [ 266.565163][ T8355] dump_stack_lvl+0xe8/0x150 [ 266.565195][ T8355] should_fail_ex+0x46b/0x600 [ 266.565230][ T8355] _copy_to_user+0x31/0xb0 [ 266.565256][ T8355] simple_read_from_buffer+0xe1/0x170 [ 266.565295][ T8355] proc_fail_nth_read+0x1be/0x230 [ 266.565323][ T8355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.565350][ T8355] ? rw_verify_area+0x2ac/0x4e0 [ 266.565374][ T8355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.565399][ T8355] vfs_read+0x212/0xa80 [ 266.565433][ T8355] ? __pfx_vfs_read+0x10/0x10 [ 266.565460][ T8355] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 266.565490][ T8355] ? lockdep_hardirqs_on+0x7a/0x110 [ 266.565518][ T8355] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 266.565545][ T8355] ? mutex_lock_nested+0x152/0x1d0 [ 266.565565][ T8355] ? fdget_pos+0x252/0x320 [ 266.565594][ T8355] ksys_read+0x156/0x270 [ 266.565621][ T8355] ? __pfx_ksys_read+0x10/0x10 [ 266.565642][ T8355] ? fput+0xa0/0xd0 [ 266.565681][ T8355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.565704][ T8355] do_syscall_64+0x15f/0x560 [ 266.565732][ T8355] ? trace_irq_disable+0x3b/0x140 [ 266.565755][ T8355] ? clear_bhb_loop+0x40/0x90 [ 266.565782][ T8355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.565802][ T8355] RIP: 0033:0x7fb2c978d68e [ 266.565823][ T8355] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 266.565840][ T8355] RSP: 002b:00007fb2c7a1dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.565863][ T8355] RAX: ffffffffffffffda RBX: 00007fb2c7a1e6c0 RCX: 00007fb2c978d68e [ 266.565879][ T8355] RDX: 000000000000000f RSI: 00007fb2c7a1e0a0 RDI: 0000000000000004 [ 266.565892][ T8355] RBP: 00007fb2c7a1e090 R08: 0000000000000000 R09: 0000000000000000 [ 266.565914][ T8355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.565927][ T8355] R13: 00007fb2c9a46038 R14: 00007fb2c9a45fa0 R15: 00007ffdda06b768 [ 266.565961][ T8355] [ 266.569011][ T1911] usb 2-1: unable to issue vendor read request (ret = -71) [ 266.569681][ T1911] usb 2-1: unable to issue vendor read request (ret = -71) [ 266.635818][ T1911] usb 2-1: unable to issue vendor read request (ret = -71) [ 266.658063][ T1911] usb 2-1: unable to issue vendor read request (ret = -71) [ 266.988547][ T1911] usb 2-1: USB disconnect, device number 25 [ 267.222051][ T6127] udevd[6127]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.598574][ T1911] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 267.725650][ T1911] usb 3-1: device descriptor read/64, error -71 [ 267.975702][ T1911] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 268.060784][ T8384] netlink: 'syz.3.963': attribute type 29 has an invalid length. [ 268.105680][ T1911] usb 3-1: device descriptor read/64, error -71 [ 268.152714][ T8387] FAULT_INJECTION: forcing a failure. [ 268.152714][ T8387] name failslab, interval 1, probability 0, space 0, times 0 [ 268.152786][ T8387] CPU: 1 UID: 0 PID: 8387 Comm: syz.1.965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.152817][ T8387] Tainted: [L]=SOFTLOCKUP [ 268.152824][ T8387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.152836][ T8387] Call Trace: [ 268.152845][ T8387] [ 268.152854][ T8387] dump_stack_lvl+0xe8/0x150 [ 268.152886][ T8387] should_fail_ex+0x46b/0x600 [ 268.152961][ T8387] should_failslab+0xa8/0x100 [ 268.152989][ T8387] __kmalloc_noprof+0xdf/0x7b0 [ 268.153014][ T8387] ? sock_kmalloc+0xd6/0x160 [ 268.153051][ T8387] sock_kmalloc+0xd6/0x160 [ 268.153084][ T8387] aead_recvmsg+0x718/0x1160 [ 268.153140][ T8387] ? __pfx_aead_recvmsg+0x10/0x10 [ 268.153166][ T8387] ? __lock_acquire+0x6b5/0x2d10 [ 268.153196][ T8387] ? aa_sock_msg_perm+0x122/0x200 [ 268.153217][ T8387] ? __pfx_aead_recvmsg+0x10/0x10 [ 268.153246][ T8387] sock_recvmsg_nosec+0x10c/0x140 [ 268.153273][ T8387] ____sys_recvmsg+0x23d/0x4f0 [ 268.153315][ T8387] ? __pfx_____sys_recvmsg+0x10/0x10 [ 268.153363][ T8387] ? import_iovec+0x73/0xa0 [ 268.153390][ T8387] ___sys_recvmsg+0x215/0x590 [ 268.153418][ T8387] ? get_pid_task+0x20/0x1f0 [ 268.153448][ T8387] ? __pfx____sys_recvmsg+0x10/0x10 [ 268.153484][ T8387] ? __fget_files+0x2a/0x420 [ 268.153525][ T8387] ? __fget_files+0x3a6/0x420 [ 268.153556][ T8387] __x64_sys_recvmsg+0x1c0/0x2a0 [ 268.153591][ T8387] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 268.153633][ T8387] ? __pfx_ksys_write+0x10/0x10 [ 268.153668][ T8387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.153692][ T8387] do_syscall_64+0x15f/0x560 [ 268.153719][ T8387] ? trace_irq_disable+0x3b/0x140 [ 268.153743][ T8387] ? clear_bhb_loop+0x40/0x90 [ 268.153769][ T8387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.153789][ T8387] RIP: 0033:0x7ff53c09ce59 [ 268.153810][ T8387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.153828][ T8387] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 268.153851][ T8387] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 268.153867][ T8387] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 268.153880][ T8387] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 268.153893][ T8387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.153906][ T8387] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 268.153947][ T8387] [ 268.272843][ T1911] usb usb3-port1: attempt power cycle [ 268.369271][ T8390] FAULT_INJECTION: forcing a failure. [ 268.369271][ T8390] name failslab, interval 1, probability 0, space 0, times 0 [ 268.369308][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.1.967 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.369334][ T8390] Tainted: [L]=SOFTLOCKUP [ 268.369341][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.369352][ T8390] Call Trace: [ 268.369359][ T8390] [ 268.369367][ T8390] dump_stack_lvl+0xe8/0x150 [ 268.369396][ T8390] should_fail_ex+0x46b/0x600 [ 268.369426][ T8390] should_failslab+0xa8/0x100 [ 268.369449][ T8390] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 268.369472][ T8390] ? dh_data_from_key+0x1aa/0x280 [ 268.369503][ T8390] kmemdup_noprof+0x2b/0x70 [ 268.369531][ T8390] dh_data_from_key+0x1aa/0x280 [ 268.369553][ T8390] __keyctl_dh_compute+0x37a/0xd10 [ 268.369578][ T8390] ? __lock_acquire+0x6b5/0x2d10 [ 268.369603][ T8390] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 268.369649][ T8390] ? __lock_acquire+0x6b5/0x2d10 [ 268.369673][ T8390] ? get_pid_task+0x20/0x1f0 [ 268.369696][ T8390] keyctl_dh_compute+0x124/0x180 [ 268.369719][ T8390] ? __pfx_keyctl_dh_compute+0x10/0x10 [ 268.369746][ T8390] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.369771][ T8390] __se_sys_keyctl+0x44c/0x9e0 [ 268.369797][ T8390] ? __pfx___se_sys_keyctl+0x10/0x10 [ 268.369821][ T8390] ? lockdep_hardirqs_on+0x7a/0x110 [ 268.369845][ T8390] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.369869][ T8390] ? rt_mutex_slowunlock+0x1cb/0x300 [ 268.369888][ T8390] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.369924][ T8390] ? fput+0xa0/0xd0 [ 268.369950][ T8390] ? ksys_write+0x248/0x270 [ 268.369974][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 268.370000][ T8390] ? __x64_sys_keyctl+0x20/0xc0 [ 268.370023][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.370043][ T8390] do_syscall_64+0x15f/0x560 [ 268.370066][ T8390] ? trace_irq_disable+0x3b/0x140 [ 268.370085][ T8390] ? clear_bhb_loop+0x40/0x90 [ 268.370107][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.370125][ T8390] RIP: 0033:0x7ff53c09ce59 [ 268.370142][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.370158][ T8390] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 268.370179][ T8390] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 268.370193][ T8390] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000017 [ 268.370204][ T8390] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 268.370216][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.370227][ T8390] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 268.370257][ T8390] [ 268.556113][ T8393] FAULT_INJECTION: forcing a failure. [ 268.556113][ T8393] name failslab, interval 1, probability 0, space 0, times 0 [ 268.556148][ T8393] CPU: 1 UID: 0 PID: 8393 Comm: syz.1.968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.556182][ T8393] Tainted: [L]=SOFTLOCKUP [ 268.556189][ T8393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.556199][ T8393] Call Trace: [ 268.556207][ T8393] [ 268.556214][ T8393] dump_stack_lvl+0xe8/0x150 [ 268.556242][ T8393] should_fail_ex+0x46b/0x600 [ 268.556274][ T8393] should_failslab+0xa8/0x100 [ 268.556297][ T8393] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 268.556317][ T8393] ? __d_alloc+0x37/0x6f0 [ 268.556342][ T8393] __d_alloc+0x37/0x6f0 [ 268.556367][ T8393] d_alloc+0x4b/0x190 [ 268.556385][ T8393] ? lookup_one_qstr_excl+0xc4/0x360 [ 268.556408][ T8393] lookup_one_qstr_excl+0xd8/0x360 [ 268.556433][ T8393] filename_create+0x20e/0x370 [ 268.556461][ T8393] ? __pfx_filename_create+0x10/0x10 [ 268.556493][ T8393] filename_mknodat+0x18c/0x670 [ 268.556521][ T8393] ? __pfx_filename_mknodat+0x10/0x10 [ 268.556546][ T8393] ? do_getname+0x151/0x250 [ 268.556571][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.556591][ T8393] __se_sys_mknodat+0x3b/0x150 [ 268.556612][ T8393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.556632][ T8393] do_syscall_64+0x15f/0x560 [ 268.556655][ T8393] ? trace_irq_disable+0x3b/0x140 [ 268.556680][ T8393] ? clear_bhb_loop+0x40/0x90 [ 268.556702][ T8393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.556719][ T8393] RIP: 0033:0x7ff53c09ce59 [ 268.556737][ T8393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.556752][ T8393] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 268.556772][ T8393] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 268.556786][ T8393] RDX: 000000000000c000 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 268.556800][ T8393] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 268.556811][ T8393] R10: 000000000000000e R11: 0000000000000246 R12: 0000000000000001 [ 268.556822][ T8393] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 268.556853][ T8393] [ 268.706653][ T44] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 269.015885][ T1911] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 269.036913][ T1911] usb 3-1: device descriptor read/8, error -71 [ 269.125656][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 269.142176][ T44] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.142235][ T44] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.142279][ T44] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 269.142293][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.155610][ T44] usb 4-1: config 0 descriptor?? [ 269.221945][ T44] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 269.255704][ T8049] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.335933][ T1911] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 269.357322][ T1911] usb 3-1: device descriptor read/8, error -71 [ 269.409587][ T8049] usb 2-1: Using ep0 maxpacket: 32 [ 269.424120][ T8049] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 269.424155][ T8049] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.440792][ T8049] usb 2-1: config 0 descriptor?? [ 269.461635][ T8049] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 269.468221][ T1911] usb usb3-port1: unable to enumerate USB device [ 269.854516][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.855161][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.873817][ T8049] gspca_vc032x: reg_w err -71 [ 269.873835][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873847][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873857][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873867][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873876][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873884][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873893][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873901][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873910][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873918][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873927][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873935][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873944][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873953][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873962][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873971][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873980][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873988][ T8049] gspca_vc032x: I2c Bus Busy Wait 00 [ 269.873996][ T8049] gspca_vc032x: Unknown sensor... [ 269.874099][ T8049] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 269.885715][ T8049] usb 2-1: USB disconnect, device number 26 [ 270.019582][ T1911] usb 4-1: USB disconnect, device number 23 [ 270.093723][ T8406] FAULT_INJECTION: forcing a failure. [ 270.093723][ T8406] name failslab, interval 1, probability 0, space 0, times 0 [ 270.093763][ T8406] CPU: 0 UID: 0 PID: 8406 Comm: syz.3.973 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 270.093792][ T8406] Tainted: [L]=SOFTLOCKUP [ 270.093800][ T8406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.093812][ T8406] Call Trace: [ 270.093820][ T8406] [ 270.093829][ T8406] dump_stack_lvl+0xe8/0x150 [ 270.093860][ T8406] should_fail_ex+0x46b/0x600 [ 270.093905][ T8406] should_failslab+0xa8/0x100 [ 270.093931][ T8406] __kmalloc_cache_noprof+0x84/0x690 [ 270.093955][ T8406] ? llc_sap_open+0xf5/0x3f0 [ 270.093984][ T8406] ? llc_sap_open+0x2e/0x3f0 [ 270.094013][ T8406] llc_sap_open+0xf5/0x3f0 [ 270.094049][ T8406] llc_ui_autobind+0x217/0x550 [ 270.094075][ T8406] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.094108][ T8406] llc_ui_sendmsg+0x1ff/0xea0 [ 270.094145][ T8406] ? aa_sk_perm+0x703/0x950 [ 270.094184][ T8406] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 270.094221][ T8406] ? aa_sock_msg_perm+0x122/0x200 [ 270.094242][ T8406] ? __pfx_llc_ui_sendmsg+0x10/0x10 [ 270.094268][ T8406] sock_sendmsg_nosec+0x112/0x150 [ 270.094295][ T8406] ____sys_sendmsg+0x55c/0x870 [ 270.094332][ T8406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.094377][ T8406] ? import_iovec+0x73/0xa0 [ 270.094404][ T8406] ___sys_sendmsg+0x2a5/0x360 [ 270.094430][ T8406] ? __lock_acquire+0x6b5/0x2d10 [ 270.094461][ T8406] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.094495][ T8406] ? kstrtouint+0x6e/0xe0 [ 270.094553][ T8406] ? __fget_files+0x2a/0x420 [ 270.094572][ T8406] ? __fget_files+0x3a6/0x420 [ 270.094604][ T8406] __sys_sendmmsg+0x282/0x4e0 [ 270.094637][ T8406] ? __pfx___sys_sendmmsg+0x10/0x10 [ 270.094676][ T8406] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 270.094715][ T8406] ? ksys_write+0x248/0x270 [ 270.094744][ T8406] ? __pfx_ksys_write+0x10/0x10 [ 270.094778][ T8406] __x64_sys_sendmmsg+0xa0/0xc0 [ 270.094808][ T8406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.094830][ T8406] do_syscall_64+0x15f/0x560 [ 270.094857][ T8406] ? trace_irq_disable+0x3b/0x140 [ 270.094889][ T8406] ? clear_bhb_loop+0x40/0x90 [ 270.094915][ T8406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.094936][ T8406] RIP: 0033:0x7f878d17ce59 [ 270.094957][ T8406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.094974][ T8406] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 270.094996][ T8406] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 270.095009][ T8406] RDX: 3284b164842c97f7 RSI: 0000200000000c40 RDI: 0000000000000004 [ 270.095020][ T8406] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 270.095027][ T8406] R10: 0000000000008014 R11: 0000000000000246 R12: 0000000000000001 [ 270.095035][ T8406] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 270.095055][ T8406] [ 270.466761][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 270.745754][ T9] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 270.886259][ T8423] futex_wake_op: syz.3.981 tries to shift op by 32; fix this program [ 270.905790][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 270.912607][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 270.912638][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.912660][ T9] usb 3-1: Product: syz [ 270.912674][ T9] usb 3-1: Manufacturer: syz [ 270.912689][ T9] usb 3-1: SerialNumber: syz [ 271.664744][ T8439] FAULT_INJECTION: forcing a failure. [ 271.664744][ T8439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 271.664780][ T8439] CPU: 1 UID: 0 PID: 8439 Comm: syz.3.986 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 271.664803][ T8439] Tainted: [L]=SOFTLOCKUP [ 271.664809][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 271.664818][ T8439] Call Trace: [ 271.664825][ T8439] [ 271.664832][ T8439] dump_stack_lvl+0xe8/0x150 [ 271.664859][ T8439] should_fail_ex+0x46b/0x600 [ 271.664886][ T8439] _copy_from_user+0x2d/0xb0 [ 271.664905][ T8439] binder_ioctl_write_read+0x167/0xa490 [ 271.664929][ T8439] ? is_bpf_text_address+0x26/0x2b0 [ 271.664962][ T8439] ? try_to_take_rt_mutex+0x840/0xb00 [ 271.664982][ T8439] ? __kernel_text_address+0xd/0x30 [ 271.665012][ T8439] ? __lock_acquire+0x6b5/0x2d10 [ 271.665038][ T8439] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 271.665063][ T8439] ? stack_depot_save_flags+0x33/0x810 [ 271.665094][ T8439] ? do_raw_spin_lock+0x12b/0x2f0 [ 271.665133][ T8439] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 271.665160][ T8439] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.665181][ T8439] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 271.665201][ T8439] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 271.665219][ T8439] ? reacquire_held_locks+0x104/0x190 [ 271.665240][ T8439] ? rt_spin_lock+0x1e0/0x400 [ 271.665259][ T8439] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 271.665280][ T8439] ? rt_spin_unlock+0x14f/0x200 [ 271.665306][ T8439] ? binder_get_thread+0x177/0x6d0 [ 271.665331][ T8439] binder_ioctl+0x426/0x1b10 [ 271.665352][ T8439] ? tomoyo_path_number_perm+0x219/0x630 [ 271.665376][ T8439] ? tomoyo_path_number_perm+0x219/0x630 [ 271.665401][ T8439] ? do_vfs_ioctl+0x117b/0x1540 [ 271.665422][ T8439] ? __pfx_binder_ioctl+0x10/0x10 [ 271.665444][ T8439] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 271.665497][ T8439] ? __fget_files+0x2a/0x420 [ 271.665516][ T8439] ? __fget_files+0x2a/0x420 [ 271.665531][ T8439] ? __fget_files+0x3a6/0x420 [ 271.665547][ T8439] ? __fget_files+0x2a/0x420 [ 271.665565][ T8439] ? bpf_lsm_file_ioctl+0x9/0x20 [ 271.665586][ T8439] ? __pfx_binder_ioctl+0x10/0x10 [ 271.665607][ T8439] __se_sys_ioctl+0xff/0x170 [ 271.665631][ T8439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.665649][ T8439] do_syscall_64+0x15f/0x560 [ 271.665669][ T8439] ? trace_irq_disable+0x3b/0x140 [ 271.665687][ T8439] ? clear_bhb_loop+0x40/0x90 [ 271.665706][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.665722][ T8439] RIP: 0033:0x7f878d17ce59 [ 271.665738][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.665753][ T8439] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.665773][ T8439] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 271.665785][ T8439] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 271.665796][ T8439] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 271.665807][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.665817][ T8439] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 271.665845][ T8439] [ 271.705813][ T8439] binder: 8438:8439 ioctl c0306201 2000000001c0 returned -14 [ 272.847515][ T5785] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 273.017735][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 273.020799][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.020833][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.020872][ T5785] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.020896][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.078191][ T5785] usb 1-1: config 0 descriptor?? [ 273.090947][ T5785] hub 1-1:0.0: USB hub found [ 273.302787][ T8451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.319643][ T8451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.552212][ T8464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.567605][ T8464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.680798][ T9] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 273.680832][ T9] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 273.694181][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 273.797422][ T8472] FAULT_INJECTION: forcing a failure. [ 273.797422][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 273.797466][ T8472] CPU: 1 UID: 0 PID: 8472 Comm: syz.2.998 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 273.797496][ T8472] Tainted: [L]=SOFTLOCKUP [ 273.797503][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 273.797515][ T8472] Call Trace: [ 273.797523][ T8472] [ 273.797532][ T8472] dump_stack_lvl+0xe8/0x150 [ 273.797565][ T8472] should_fail_ex+0x46b/0x600 [ 273.797599][ T8472] should_failslab+0xa8/0x100 [ 273.797633][ T8472] kmem_cache_alloc_noprof+0x87/0x680 [ 273.797656][ T8472] ? alloc_empty_file+0x5b/0x1d0 [ 273.797691][ T8472] alloc_empty_file+0x5b/0x1d0 [ 273.797721][ T8472] path_openat+0x11b/0x3960 [ 273.797754][ T8472] ? try_to_take_rt_mutex+0x840/0xb00 [ 273.797777][ T8472] ? arch_stack_walk+0xfb/0x150 [ 273.797816][ T8472] ? __lock_acquire+0x6b5/0x2d10 [ 273.797846][ T8472] ? __pfx_path_openat+0x10/0x10 [ 273.797874][ T8472] ? kasan_save_track+0x4f/0x80 [ 273.797894][ T8472] ? kasan_save_track+0x3e/0x80 [ 273.797911][ T8472] ? __kasan_slab_alloc+0x6c/0x80 [ 273.797940][ T8472] ? do_raw_spin_lock+0x12b/0x2f0 [ 273.797971][ T8472] do_file_open+0x23e/0x4a0 [ 273.797992][ T8472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 273.798024][ T8472] ? __pfx_do_file_open+0x10/0x10 [ 273.798044][ T8472] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 273.798097][ T8472] ? alloc_fd+0x679/0x6f0 [ 273.798139][ T8472] do_sys_openat2+0x115/0x200 [ 273.798162][ T8472] ? __pfx_do_sys_openat2+0x10/0x10 [ 273.798195][ T8472] ? ksys_write+0x248/0x270 [ 273.798222][ T8472] ? __pfx_ksys_write+0x10/0x10 [ 273.798250][ T8472] __x64_sys_openat+0x138/0x170 [ 273.798273][ T8472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.798296][ T8472] do_syscall_64+0x15f/0x560 [ 273.798323][ T8472] ? trace_irq_disable+0x3b/0x140 [ 273.798347][ T8472] ? clear_bhb_loop+0x40/0x90 [ 273.798372][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.798392][ T8472] RIP: 0033:0x7fb2c97cce59 [ 273.798411][ T8472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.798429][ T8472] RSP: 002b:00007fb2c79fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 273.798451][ T8472] RAX: ffffffffffffffda RBX: 00007fb2c9a46090 RCX: 00007fb2c97cce59 [ 273.798466][ T8472] RDX: 000000000300000d RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 273.798481][ T8472] RBP: 00007fb2c79fd090 R08: 0000000000000000 R09: 0000000000000000 [ 273.798495][ T8472] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 273.798508][ T8472] R13: 00007fb2c9a46128 R14: 00007fb2c9a46090 R15: 00007ffdda06b768 [ 273.798541][ T8472] [ 273.951702][ T5785] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 274.132504][ T5785] usbhid 1-1:0.0: can't add hid device: -71 [ 274.132633][ T5785] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 274.184351][ T5785] usb 1-1: USB disconnect, device number 32 [ 274.195928][ T9] usb 3-1: USB disconnect, device number 41 [ 274.905851][ T5785] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.030034][ T8492] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 275.079318][ T5785] usb 1-1: Using ep0 maxpacket: 32 [ 275.081776][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.081817][ T5785] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.081866][ T5785] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 275.081890][ T5785] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.133848][ T5785] usb 1-1: config 0 descriptor?? [ 275.158029][ T5785] hub 1-1:0.0: USB hub found [ 275.351334][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.351889][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.401329][ T8498] FAULT_INJECTION: forcing a failure. [ 275.401329][ T8498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.401434][ T8498] CPU: 1 UID: 0 PID: 8498 Comm: syz.3.1006 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.401466][ T8498] Tainted: [L]=SOFTLOCKUP [ 275.401474][ T8498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.401486][ T8498] Call Trace: [ 275.401495][ T8498] [ 275.401504][ T8498] dump_stack_lvl+0xe8/0x150 [ 275.401542][ T8498] should_fail_ex+0x46b/0x600 [ 275.401577][ T8498] _copy_from_iter+0x1d3/0x1670 [ 275.401617][ T8498] ? trace_kmem_cache_alloc+0x29/0xe0 [ 275.401639][ T8498] ? __alloc_skb+0x27d/0x7d0 [ 275.401665][ T8498] ? __pfx__copy_from_iter+0x10/0x10 [ 275.401693][ T8498] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 275.401715][ T8498] ? __alloc_skb+0x27d/0x7d0 [ 275.401746][ T8498] ? netlink_sendmsg+0x650/0xb40 [ 275.401775][ T8498] ? skb_put+0x11b/0x210 [ 275.401805][ T8498] netlink_sendmsg+0x6c0/0xb40 [ 275.401843][ T8498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.401875][ T8498] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 275.401905][ T8498] ? aa_sock_msg_perm+0x122/0x200 [ 275.401926][ T8498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.401955][ T8498] sock_sendmsg_nosec+0x112/0x150 [ 275.401981][ T8498] ____sys_sendmsg+0x55c/0x870 [ 275.402016][ T8498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.402055][ T8498] ? import_iovec+0x73/0xa0 [ 275.402087][ T8498] ___sys_sendmsg+0x2a5/0x360 [ 275.402113][ T8498] ? __lock_acquire+0x6b5/0x2d10 [ 275.402140][ T8498] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.402203][ T8498] ? __fget_files+0x2a/0x420 [ 275.402223][ T8498] ? __fget_files+0x3a6/0x420 [ 275.402252][ T8498] __x64_sys_sendmsg+0x1c3/0x2a0 [ 275.402285][ T8498] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.402324][ T8498] ? __pfx_ksys_write+0x10/0x10 [ 275.402359][ T8498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.402382][ T8498] do_syscall_64+0x15f/0x560 [ 275.402409][ T8498] ? trace_irq_disable+0x3b/0x140 [ 275.402431][ T8498] ? clear_bhb_loop+0x40/0x90 [ 275.402457][ T8498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.402477][ T8498] RIP: 0033:0x7f878d17ce59 [ 275.402497][ T8498] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.402516][ T8498] RSP: 002b:00007f878b3ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.402539][ T8498] RAX: ffffffffffffffda RBX: 00007f878d3f5fa0 RCX: 00007f878d17ce59 [ 275.402555][ T8498] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 275.402569][ T8498] RBP: 00007f878b3ce090 R08: 0000000000000000 R09: 0000000000000000 [ 275.402583][ T8498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.402596][ T8498] R13: 00007f878d3f6038 R14: 00007f878d3f5fa0 R15: 00007ffef6b5ba58 [ 275.402630][ T8498] [ 275.658209][ T8483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.662114][ T8483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.944383][ T8506] FAULT_INJECTION: forcing a failure. [ 275.944383][ T8506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.944452][ T8506] CPU: 1 UID: 0 PID: 8506 Comm: syz.1.1009 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 275.944471][ T8506] Tainted: [L]=SOFTLOCKUP [ 275.944476][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.944482][ T8506] Call Trace: [ 275.944488][ T8506] [ 275.944493][ T8506] dump_stack_lvl+0xe8/0x150 [ 275.944511][ T8506] should_fail_ex+0x46b/0x600 [ 275.944530][ T8506] _copy_from_user+0x2d/0xb0 [ 275.944544][ T8506] autofs_dev_ioctl+0x172/0xad0 [ 275.944565][ T8506] ? __fget_files+0x2a/0x420 [ 275.944579][ T8506] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 275.944591][ T8506] ? __fget_files+0x2a/0x420 [ 275.944609][ T8506] ? __fget_files+0x2a/0x420 [ 275.944622][ T8506] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.944638][ T8506] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 275.944651][ T8506] __se_sys_ioctl+0xff/0x170 [ 275.944665][ T8506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.944678][ T8506] do_syscall_64+0x15f/0x560 [ 275.944693][ T8506] ? trace_irq_disable+0x3b/0x140 [ 275.944706][ T8506] ? clear_bhb_loop+0x40/0x90 [ 275.944720][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.944731][ T8506] RIP: 0033:0x7ff53c09ce59 [ 275.944744][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.944754][ T8506] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.944768][ T8506] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 275.944777][ T8506] RDX: 0000200000000040 RSI: 00000000c018937a RDI: 0000000000000003 [ 275.944785][ T8506] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 275.944792][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.944799][ T8506] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 275.944820][ T8506] [ 276.260262][ T5785] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 276.277255][ T5785] usbhid 1-1:0.0: can't add hid device: -71 [ 276.277381][ T5785] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 276.292897][ T32] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 276.358005][ T5785] usb 1-1: USB disconnect, device number 33 [ 276.411277][ T8513] autofs4:pid:8513:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 276.450852][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 276.488165][ T32] usb 3-1: too many configurations: 89, using maximum allowed: 8 [ 276.491295][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.492586][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.493862][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.506025][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.538769][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.569863][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.572665][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.604376][ T32] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 276.620745][ T32] usb 3-1: New USB device found, idVendor=0763, idProduct=1031, bcdDevice= 0.40 [ 276.620778][ T32] usb 3-1: New USB device strings: Mfr=204, Product=186, SerialNumber=206 [ 276.620800][ T32] usb 3-1: Product: syz [ 276.620815][ T32] usb 3-1: Manufacturer: syz [ 276.620829][ T32] usb 3-1: SerialNumber: syz [ 276.681317][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 276.702359][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 276.921194][ T8523] FAULT_INJECTION: forcing a failure. [ 276.921194][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.921235][ T8523] CPU: 1 UID: 0 PID: 8523 Comm: syz.1.1016 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 276.921265][ T8523] Tainted: [L]=SOFTLOCKUP [ 276.921272][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 276.921283][ T8523] Call Trace: [ 276.921291][ T8523] [ 276.921299][ T8523] dump_stack_lvl+0xe8/0x150 [ 276.921329][ T8523] should_fail_ex+0x46b/0x600 [ 276.921363][ T8523] _copy_from_user+0x2d/0xb0 [ 276.921386][ T8523] copy_from_sockptr_offset+0x66/0xa0 [ 276.921412][ T8523] do_tcp_getsockopt+0xda4/0x2940 [ 276.921442][ T8523] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 276.921461][ T8523] ? sock_recv_errqueue+0x580/0x590 [ 276.921486][ T8523] ? aa_file_perm+0x192/0x15f0 [ 276.921514][ T8523] ? aa_label_sk_perm+0x532/0x6e0 [ 276.921554][ T8523] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 276.921587][ T8523] ? _parse_integer_limit+0x192/0x1e0 [ 276.921624][ T8523] ? __lock_acquire+0x6b5/0x2d10 [ 276.921665][ T8523] ? __lock_acquire+0x6b5/0x2d10 [ 276.921709][ T8523] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 276.921734][ T8523] tcp_getsockopt+0x83/0x130 [ 276.921754][ T8523] ? sock_recv_errqueue+0x580/0x590 [ 276.921775][ T8523] ? sock_recv_errqueue+0x580/0x590 [ 276.921798][ T8523] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 276.921829][ T8523] do_sock_getsockopt+0x51d/0x7e0 [ 276.921864][ T8523] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 276.921908][ T8523] ? __fget_files+0x3a6/0x420 [ 276.921928][ T8523] ? __fget_files+0x2a/0x420 [ 276.921955][ T8523] __x64_sys_getsockopt+0x1aa/0x250 [ 276.921987][ T8523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.922007][ T8523] do_syscall_64+0x15f/0x560 [ 276.922030][ T8523] ? trace_irq_disable+0x3b/0x140 [ 276.922051][ T8523] ? clear_bhb_loop+0x40/0x90 [ 276.922073][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.922092][ T8523] RIP: 0033:0x7ff53c09ce59 [ 276.922112][ T8523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.922128][ T8523] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 276.922150][ T8523] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 276.922165][ T8523] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 276.922177][ T8523] RBP: 00007ff53a2ee090 R08: 0000200000000180 R09: 0000000000000000 [ 276.922190][ T8523] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 276.922202][ T8523] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 276.922232][ T8523] [ 277.121950][ T8530] FAULT_INJECTION: forcing a failure. [ 277.121950][ T8530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.121985][ T8530] CPU: 0 UID: 0 PID: 8530 Comm: syz.0.1018 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.122011][ T8530] Tainted: [L]=SOFTLOCKUP [ 277.122018][ T8530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.122028][ T8530] Call Trace: [ 277.122036][ T8530] [ 277.122043][ T8530] dump_stack_lvl+0xe8/0x150 [ 277.122070][ T8530] should_fail_ex+0x46b/0x600 [ 277.122100][ T8530] _copy_from_user+0x2d/0xb0 [ 277.122121][ T8530] comedi_unlocked_ioctl+0xbcb/0x1b00 [ 277.122163][ T8530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 277.122192][ T8530] ? tomoyo_path_number_perm+0x219/0x630 [ 277.122221][ T8530] ? tomoyo_path_number_perm+0x219/0x630 [ 277.122249][ T8530] ? do_vfs_ioctl+0x117b/0x1540 [ 277.122275][ T8530] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 277.122333][ T8530] ? __fget_files+0x2a/0x420 [ 277.122354][ T8530] ? __fget_files+0x2a/0x420 [ 277.122370][ T8530] ? __fget_files+0x3a6/0x420 [ 277.122386][ T8530] ? __fget_files+0x2a/0x420 [ 277.122407][ T8530] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.122432][ T8530] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 277.122455][ T8530] __se_sys_ioctl+0xff/0x170 [ 277.122476][ T8530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.122496][ T8530] do_syscall_64+0x15f/0x560 [ 277.122519][ T8530] ? trace_irq_disable+0x3b/0x140 [ 277.122539][ T8530] ? clear_bhb_loop+0x40/0x90 [ 277.122561][ T8530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.122579][ T8530] RIP: 0033:0x7f22f7f4ce59 [ 277.122596][ T8530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.122611][ T8530] RSP: 002b:00007f22f619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.122632][ T8530] RAX: ffffffffffffffda RBX: 00007f22f81c5fa0 RCX: 00007f22f7f4ce59 [ 277.122645][ T8530] RDX: 0000200000016380 RSI: 000000008050640a RDI: 0000000000000003 [ 277.122657][ T8530] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.122668][ T8530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.122678][ T8530] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 277.122708][ T8530] [ 277.448708][ T32] usb 3-1: USB disconnect, device number 42 [ 277.738930][ T37] audit: type=1326 audit(1779479871.526:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740763][ T37] audit: type=1326 audit(1779479871.526:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740819][ T37] audit: type=1326 audit(1779479871.526:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740856][ T37] audit: type=1326 audit(1779479871.526:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740893][ T37] audit: type=1326 audit(1779479871.526:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740931][ T37] audit: type=1326 audit(1779479871.526:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.740969][ T37] audit: type=1326 audit(1779479871.526:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.741007][ T37] audit: type=1326 audit(1779479871.526:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.829952][ T37] audit: type=1326 audit(1779479871.616:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8520 comm="syz.3.1015" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f878d17ce59 code=0x7fc00000 [ 277.993462][ T8548] FAULT_INJECTION: forcing a failure. [ 277.993462][ T8548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.993503][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.0.1024 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 277.993532][ T8548] Tainted: [L]=SOFTLOCKUP [ 277.993540][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.993551][ T8548] Call Trace: [ 277.993559][ T8548] [ 277.993568][ T8548] dump_stack_lvl+0xe8/0x150 [ 277.993606][ T8548] should_fail_ex+0x46b/0x600 [ 277.993641][ T8548] _copy_from_user+0x2d/0xb0 [ 277.993664][ T8548] lo_ioctl+0x773/0x1fc0 [ 277.993695][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993724][ T8548] ? __pfx_lo_ioctl+0x10/0x10 [ 277.993748][ T8548] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.993781][ T8548] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.993822][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993850][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993881][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993909][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993940][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.993968][ T8548] ? __lock_acquire+0x6b5/0x2d10 [ 277.994002][ T8548] ? unwind_next_frame+0xa6/0x2550 [ 277.994038][ T8548] ? unwind_next_frame+0xa6/0x2550 [ 277.994067][ T8548] ? is_bpf_text_address+0x26/0x2b0 [ 277.994105][ T8548] ? is_bpf_text_address+0x26/0x2b0 [ 277.994135][ T8548] ? is_bpf_text_address+0x292/0x2b0 [ 277.994159][ T8548] ? is_bpf_text_address+0x26/0x2b0 [ 277.994188][ T8548] ? kernel_text_address+0xa5/0xe0 [ 277.994215][ T8548] ? __kernel_text_address+0xd/0x30 [ 277.994239][ T8548] ? unwind_get_return_address+0x4d/0x90 [ 277.994267][ T8548] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 277.994289][ T8548] ? arch_stack_walk+0xfb/0x150 [ 277.994330][ T8548] ? stack_trace_save+0xa9/0x100 [ 277.994350][ T8548] ? __pfx_stack_trace_save+0x10/0x10 [ 277.994369][ T8548] ? kasan_save_free_info+0x46/0x50 [ 277.994401][ T8548] ? stack_depot_save_flags+0x33/0x810 [ 277.994436][ T8548] ? kasan_save_track+0x4f/0x80 [ 277.994455][ T8548] ? kasan_save_track+0x3e/0x80 [ 277.994474][ T8548] ? kasan_save_free_info+0x46/0x50 [ 277.994499][ T8548] ? __kasan_slab_free+0x5c/0x80 [ 277.994520][ T8548] ? kfree+0x1c5/0x6c0 [ 277.994538][ T8548] ? tomoyo_path_number_perm+0x501/0x630 [ 277.994566][ T8548] ? security_file_ioctl+0xc3/0x2a0 [ 277.994589][ T8548] ? __se_sys_ioctl+0x47/0x170 [ 277.994614][ T8548] ? do_syscall_64+0x15f/0x560 [ 277.994640][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.994667][ T8548] ? __asan_memset+0x22/0x50 [ 277.994698][ T8548] ? blk_get_meta_cap+0x16d/0x7a0 [ 277.994730][ T8548] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 277.994766][ T8548] ? blkdev_common_ioctl+0x14b7/0x3240 [ 277.994813][ T8548] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 277.994845][ T8548] ? kasan_quarantine_put+0xbb/0x1f0 [ 277.994876][ T8548] ? tomoyo_path_number_perm+0x219/0x630 [ 277.994907][ T8548] ? tomoyo_path_number_perm+0x219/0x630 [ 277.994940][ T8548] ? do_vfs_ioctl+0x117b/0x1540 [ 277.995007][ T8548] ? __pfx_lo_ioctl+0x10/0x10 [ 277.995035][ T8548] blkdev_ioctl+0x5e6/0x750 [ 277.995067][ T8548] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.995092][ T8548] ? __fget_files+0x2a/0x420 [ 277.995115][ T8548] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.995141][ T8548] ? __pfx_blkdev_ioctl+0x10/0x10 [ 277.995169][ T8548] __se_sys_ioctl+0xff/0x170 [ 277.995194][ T8548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.995217][ T8548] do_syscall_64+0x15f/0x560 [ 277.995243][ T8548] ? trace_irq_disable+0x3b/0x140 [ 277.995265][ T8548] ? clear_bhb_loop+0x40/0x90 [ 277.995291][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.995310][ T8548] RIP: 0033:0x7f22f7f4ce59 [ 277.995330][ T8548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.995348][ T8548] RSP: 002b:00007f22f619e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.995370][ T8548] RAX: ffffffffffffffda RBX: 00007f22f81c5fa0 RCX: 00007f22f7f4ce59 [ 277.995384][ T8548] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 277.995398][ T8548] RBP: 00007f22f619e090 R08: 0000000000000000 R09: 0000000000000000 [ 277.995411][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.995423][ T8548] R13: 00007f22f81c6038 R14: 00007f22f81c5fa0 R15: 00007ffdde76a848 [ 277.995456][ T8548] [ 278.602834][ T8544] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 278.897849][ T8569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1033'. [ 278.997702][ T8575] loop2: detected capacity change from 0 to 7 [ 279.020645][ T8572] 9p: Could not find request transport: fdDrf|aU@õM`dno=0x000000000000000b [ 279.112678][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.112785][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.112854][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.112939][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.113019][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.113094][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.113229][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.113274][ T8575] ldm_validate_partition_table(): Disk read failed. [ 279.113312][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.140579][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.140713][ T8575] Buffer I/O error on dev loop2, logical block 0, async page read [ 279.140906][ T8575] Dev loop2: unable to read RDB block 0 [ 279.142421][ T8575] loop2: unable to read partition table [ 279.144027][ T8575] loop2: partition table beyond EOD, truncated [ 279.144064][ T8575] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 279.343713][ T8583] FAULT_INJECTION: forcing a failure. [ 279.343713][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.343754][ T8583] CPU: 1 UID: 0 PID: 8583 Comm: syz.1.1039 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 279.343783][ T8583] Tainted: [L]=SOFTLOCKUP [ 279.343800][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.343813][ T8583] Call Trace: [ 279.343821][ T8583] [ 279.343830][ T8583] dump_stack_lvl+0xe8/0x150 [ 279.343860][ T8583] should_fail_ex+0x46b/0x600 [ 279.343894][ T8583] _copy_from_user+0x2d/0xb0 [ 279.343919][ T8583] video_usercopy+0x36f/0x1450 [ 279.343950][ T8583] ? __pfx___video_do_ioctl+0x10/0x10 [ 279.343975][ T8583] ? __pfx_video_usercopy+0x10/0x10 [ 279.344015][ T8583] ? __fget_files+0x2a/0x420 [ 279.344037][ T8583] ? __fget_files+0x2a/0x420 [ 279.344054][ T8583] ? __fget_files+0x3a6/0x420 [ 279.344078][ T8583] v4l2_ioctl+0x190/0x1e0 [ 279.344101][ T8583] ? __pfx_v4l2_ioctl+0x10/0x10 [ 279.344121][ T8583] __se_sys_ioctl+0xff/0x170 [ 279.344146][ T8583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.344168][ T8583] do_syscall_64+0x15f/0x560 [ 279.344193][ T8583] ? trace_irq_disable+0x3b/0x140 [ 279.344215][ T8583] ? clear_bhb_loop+0x40/0x90 [ 279.344239][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.344259][ T8583] RIP: 0033:0x7ff53c09ce59 [ 279.344278][ T8583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.344295][ T8583] RSP: 002b:00007ff53a2ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.344317][ T8583] RAX: ffffffffffffffda RBX: 00007ff53c315fa0 RCX: 00007ff53c09ce59 [ 279.344333][ T8583] RDX: 0000200000000240 RSI: 00000000402c5639 RDI: 0000000000000003 [ 279.344346][ T8583] RBP: 00007ff53a2ee090 R08: 0000000000000000 R09: 0000000000000000 [ 279.344359][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.344371][ T8583] R13: 00007ff53c316038 R14: 00007ff53c315fa0 R15: 00007ffddd29a358 [ 279.344404][ T8583] [ 279.481555][ T8586] dns_resolver: Unsupported content type (152) [ 279.878598][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 280.019307][ T8599] binder: 8598:8599 ioctl c0306201 0 returned -14 [ 280.073962][ T8602] binder: 8598:8602 ioctl c0306201 0 returned -14 [ 280.174428][ T8604] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1046'. [ 280.224769][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1047'. [ 280.437623][ T8614] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1051'. [ 280.475857][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 280.525011][ T8616] loop5: detected capacity change from 0 to 1 [ 280.592482][ T67] [ 280.592496][ T67] ====================================================== [ 280.592505][ T67] WARNING: possible circular locking dependency detected [ 280.592518][ T67] syzkaller #0 Tainted: G L [ 280.592530][ T67] ------------------------------------------------------ [ 280.592538][ T67] kworker/u8:4/67 is trying to acquire lock: [ 280.592550][ T67] ffff88805a538c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 280.592609][ T67] [ 280.592609][ T67] but task is already holding lock: [ 280.592615][ T67] ffff88802c8fa2c0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 280.592685][ T67] [ 280.592685][ T67] which lock already depends on the new lock. [ 280.592685][ T67] [ 280.592693][ T67] [ 280.592693][ T67] the existing dependency chain (in reverse order) is: [ 280.592700][ T67] [ 280.592700][ T67] -> #5 (&p->lock){+.+.}-{4:4}: [ 280.592724][ T67] mutex_lock_nested+0x5a/0x1d0 [ 280.592743][ T67] seq_read_iter+0xb8/0xe20 [ 280.592765][ T67] lo_rw_aio+0xc80/0xf00 [ 280.592786][ T67] loop_process_work+0x92a/0x11b0 [ 280.592807][ T67] process_one_work+0x98b/0x1630 [ 280.592832][ T67] worker_thread+0xb49/0x1140 [ 280.592858][ T67] kthread+0x388/0x470 [ 280.592876][ T67] ret_from_fork+0x514/0xb70 [ 280.592896][ T67] ret_from_fork_asm+0x1a/0x30 [ 280.592919][ T67] [ 280.592919][ T67] -> #4 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 280.592947][ T67] process_one_work+0x8d7/0x1630 [ 280.592970][ T67] worker_thread+0xb49/0x1140 [ 280.592994][ T67] kthread+0x388/0x470 [ 280.593011][ T67] ret_from_fork+0x514/0xb70 [ 280.593039][ T67] ret_from_fork_asm+0x1a/0x30 [ 280.593062][ T67] [ 280.593062][ T67] -> #3 ((wq_completion)loop5){+.+.}-{0:0}: [ 280.593089][ T67] touch_wq_lockdep_map+0xcb/0x180 [ 280.593106][ T67] __flush_workqueue+0x14b/0x14f0 [ 280.593123][ T67] drain_workqueue+0xd3/0x390 [ 280.593140][ T67] lo_release+0x287/0x8f0 [ 280.593160][ T67] bdev_release+0x541/0x660 [ 280.593182][ T67] blkdev_release+0x15/0x20 [ 280.593206][ T67] __fput+0x461/0xa70 [ 280.593222][ T67] task_work_run+0x1d9/0x270 [ 280.593242][ T67] exit_to_user_mode_loop+0xf3/0x4d0 [ 280.593262][ T67] do_syscall_64+0x33e/0x560 [ 280.593286][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.593304][ T67] [ 280.593304][ T67] -> #2 (&disk->open_mutex){+.+.}-{4:4}: [ 280.593331][ T67] mutex_lock_nested+0x5a/0x1d0 [ 280.593349][ T67] bdev_open+0xe0/0xcc0 [ 280.593371][ T67] bdev_file_open_by_dev+0x1be/0x240 [ 280.593395][ T67] swsusp_check+0x56/0x490 [ 280.593415][ T67] software_resume+0x51/0x4c0 [ 280.593441][ T67] resume_store+0x333/0x4f0 [ 280.593457][ T67] kernfs_fop_write_iter+0x3b0/0x540 [ 280.593482][ T67] vfs_write+0x629/0xba0 [ 280.593502][ T67] ksys_write+0x156/0x270 [ 280.593521][ T67] do_syscall_64+0x15f/0x560 [ 280.593543][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.593562][ T67] [ 280.593562][ T67] -> #1 (system_transition_mutex){+.+.}-{4:4}: [ 280.593589][ T67] mutex_lock_nested+0x5a/0x1d0 [ 280.593605][ T67] lock_system_sleep+0x49/0x70 [ 280.593624][ T67] resume_store+0x2ff/0x4f0 [ 280.593639][ T67] kernfs_fop_write_iter+0x3b0/0x540 [ 280.593662][ T67] vfs_write+0x629/0xba0 [ 280.593680][ T67] ksys_write+0x156/0x270 [ 280.593699][ T67] do_syscall_64+0x15f/0x560 [ 280.593721][ T67] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.593738][ T67] [ 280.593738][ T67] -> #0 (&of->mutex){+.+.}-{4:4}: [ 280.593762][ T67] __lock_acquire+0x15a5/0x2d10 [ 280.593782][ T67] lock_acquire+0x106/0x350 [ 280.593800][ T67] mutex_lock_nested+0x5a/0x1d0 [ 280.593816][ T67] kernfs_seq_start+0x5c/0x420 [ 280.593839][ T67] traverse+0x164/0x580 [ 280.593860][ T67] seq_read_iter+0xd09/0xe20 [ 280.593880][ T67] lo_rw_aio+0xc80/0xf00 [ 280.593901][ T67] loop_process_work+0x92a/0x11b0 [ 280.593920][ T67] process_one_work+0x98b/0x1630 [ 280.593944][ T67] worker_thread+0xb49/0x1140 [ 280.593969][ T67] kthread+0x388/0x470 [ 280.593987][ T67] ret_from_fork+0x514/0xb70 [ 280.594007][ T67] ret_from_fork_asm+0x1a/0x30 [ 280.594039][ T67] [ 280.594039][ T67] other info that might help us debug this: [ 280.594039][ T67] [ 280.594046][ T67] Chain exists of: [ 280.594046][ T67] &of->mutex --> (work_completion)(&worker->work) --> &p->lock [ 280.594046][ T67] [ 280.594079][ T67] Possible unsafe locking scenario: [ 280.594079][ T67] [ 280.594085][ T67] CPU0 CPU1 [ 280.594092][ T67] ---- ---- [ 280.594098][ T67] lock(&p->lock); [ 280.594111][ T67] lock((work_completion)(&worker->work)); [ 280.594127][ T67] lock(&p->lock); [ 280.594142][ T67] lock(&of->mutex); [ 280.594155][ T67] [ 280.594155][ T67] *** DEADLOCK *** [ 280.594155][ T67] [ 280.594161][ T67] 3 locks held by kworker/u8:4/67: [ 280.594172][ T67] #0: ffff888032619138 ((wq_completion)loop5){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 280.594226][ T67] #1: ffffc9000152fc40 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 280.594282][ T67] #2: ffff88802c8fa2c0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe20 [ 280.594330][ T67] [ 280.594330][ T67] stack backtrace: [ 280.594344][ T67] CPU: 1 UID: 0 PID: 67 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 280.594371][ T67] Tainted: [L]=SOFTLOCKUP [ 280.594378][ T67] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.594391][ T67] Workqueue: loop5 loop_workfn [ 280.594414][ T67] Call Trace: [ 280.594422][ T67] [ 280.594430][ T67] dump_stack_lvl+0xe8/0x150 [ 280.594453][ T67] print_circular_bug+0x2e1/0x300 [ 280.594481][ T67] check_noncircular+0x12e/0x150 [ 280.594510][ T67] __lock_acquire+0x15a5/0x2d10 [ 280.594539][ T67] ? kernfs_seq_start+0x5c/0x420 [ 280.594563][ T67] lock_acquire+0x106/0x350 [ 280.594584][ T67] ? kernfs_seq_start+0x5c/0x420 [ 280.594613][ T67] ? kernfs_seq_start+0x5c/0x420 [ 280.594640][ T67] ? kernfs_seq_start+0x5c/0x420 [ 280.594664][ T67] mutex_lock_nested+0x5a/0x1d0 [ 280.594683][ T67] ? kernfs_seq_start+0x5c/0x420 [ 280.594709][ T67] kernfs_seq_start+0x5c/0x420 [ 280.594737][ T67] traverse+0x164/0x580 [ 280.594762][ T67] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 280.594789][ T67] seq_read_iter+0xd09/0xe20 [ 280.594811][ T67] ? __lock_acquire+0x6b5/0x2d10 [ 280.594835][ T67] ? __asan_memset+0x22/0x50 [ 280.594863][ T67] lo_rw_aio+0xc80/0xf00 [ 280.594891][ T67] ? __pfx_lo_rw_aio+0x10/0x10 [ 280.594917][ T67] ? kthread_associate_blkcg+0x490/0x600 [ 280.594940][ T67] ? rt_spin_unlock+0x160/0x200 [ 280.594961][ T67] loop_process_work+0x92a/0x11b0 [ 280.594991][ T67] ? __pfx_loop_process_work+0x10/0x10 [ 280.595017][ T67] ? __pfx___schedule+0x10/0x10 [ 280.595048][ T67] ? add_lock_to_list+0xc7/0x100 [ 280.595075][ T67] ? lockdep_unlock+0x5d/0xd0 [ 280.595094][ T67] ? __lock_acquire+0x146e/0x2d10 [ 280.595119][ T67] ? irqentry_exit+0x218/0x760 [ 280.595145][ T67] ? lockdep_hardirqs_on+0x7a/0x110 [ 280.595167][ T67] ? irqentry_exit+0x218/0x760 [ 280.595192][ T67] ? trace_irq_disable+0x3b/0x140 [ 280.595214][ T67] ? process_one_work+0x8be/0x1630 [ 280.595241][ T67] ? lock_acquire+0x221/0x350 [ 280.595261][ T67] ? process_one_work+0x8be/0x1630 [ 280.595287][ T67] process_one_work+0x98b/0x1630 [ 280.595322][ T67] ? __pfx_process_one_work+0x10/0x10 [ 280.595345][ T67] ? do_raw_spin_lock+0x12b/0x2f0 [ 280.595366][ T67] worker_thread+0xb49/0x1140 [ 280.595400][ T67] kthread+0x388/0x470 [ 280.595419][ T67] ? __pfx_worker_thread+0x10/0x10 [ 280.595446][ T67] ? __pfx_kthread+0x10/0x10 [ 280.595467][ T67] ret_from_fork+0x514/0xb70 [ 280.595492][ T67] ? __pfx_ret_from_fork+0x10/0x10 [ 280.595514][ T67] ? __switch_to+0xc79/0x1410 [ 280.595532][ T67] ? __pfx_kthread+0x10/0x10 [ 280.595552][ T67] ret_from_fork_asm+0x1a/0x30 [ 280.595581][ T67] [ 280.636656][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 280.653022][ C1] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 280.681376][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.681411][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 280.681450][ T9] usb 2-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 280.681473][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.833357][ T9] usb 2-1: config 0 descriptor?? [ 281.471124][ T9] hid-rmi 0003:06CB:81A7.0007: collection stack underflow [ 281.471157][ T9] hid-rmi 0003:06CB:81A7.0007: item 0 4 0 12 parsing failed [ 281.471593][ T9] hid-rmi 0003:06CB:81A7.0007: parse failed [ 281.471676][ T9] hid-rmi 0003:06CB:81A7.0007: probe with driver hid-rmi failed with error -22 [ 283.180076][ T5722] usb 2-1: USB disconnect, device number 27