last executing test programs: 21m22.570817559s ago: executing program 2 (id=760): socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x1, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x20080, 0x2, 0x3, 0x10007f, 0x20000006, 0x4f, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0xfffdff4a, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x0, 0x0, 0xfffffdff, 0x4, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000816a, 0x7, 0x0, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000005, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9, 0x9, 0xfffffffc, 0x3, 0x4, 0x0, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x5, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x802, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x1, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x3, 0x1, 0x86, 0x3, 0x303c, 0xfffffffb, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x2, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x0, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000c, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x800, 0x4, 0x7, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x10001, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x1, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10081, 0x1, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff) 21m21.935845384s ago: executing program 2 (id=761): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x20ffd}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, 0x0) 21m21.828420556s ago: executing program 2 (id=762): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x5, 0x20ffd, 0x0, 0x0}) mmap(&(0x7f000002c000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000300)={r1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0xea369000) 21m21.757213205s ago: executing program 2 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d", 0x18}], 0x2) 21m6.137180956s ago: executing program 32 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d", 0x18}], 0x2) 21m4.657076155s ago: executing program 33 (id=765): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0xb, 0x11, 0x7fc0000000000003, 0x20000001, 0x1007, 0x7, 0x1}, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120012000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 11m36.637060633s ago: executing program 34 (id=3078): socket$inet_sctp(0x2, 0x1, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f00000000c0)="30d951f2de", 0x5) 7m0.780944707s ago: executing program 5 (id=4254): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{0x0}, {&(0x7f0000002e00)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/220, 0xdc}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/46, 0x2e}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x40, 0x0) 7m0.730567322s ago: executing program 5 (id=4255): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100"], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000c00)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x3}, 0x3) 7m0.55982897s ago: executing program 5 (id=4256): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x98, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1e}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "2974f2ee440a"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x74, '/Y'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 6m57.276312452s ago: executing program 5 (id=4271): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 6m56.936238115s ago: executing program 5 (id=4273): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) 6m55.596890883s ago: executing program 5 (id=4292): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000002e00)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/220, 0xdc}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/46, 0x2e}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40, 0x0) 6m55.036707862s ago: executing program 35 (id=4292): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000002e00)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/220, 0xdc}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/46, 0x2e}], 0x5}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40, 0x0) 3m22.939879037s ago: executing program 1 (id=4860): r0 = socket(0x10, 0x3, 0x9) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 3m21.840608433s ago: executing program 1 (id=4862): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000200)=ANY=[@ANYBLOB="ff7f23"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m18.951711287s ago: executing program 1 (id=4870): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) socket$inet_icmp(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r3, &(0x7f00000001c0)=[{0x0, 0x3f, 0x0, 0x0, @tick, {}, {}, @result={0x2, 0x1}}], 0x1c) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xfe, {}, {}, @raw32}], 0xffc8) 3m16.821799246s ago: executing program 1 (id=4874): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m12.79000152s ago: executing program 1 (id=4883): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) r1 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 3m11.724166066s ago: executing program 1 (id=4884): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={0x0}) 2m56.646141866s ago: executing program 36 (id=4884): syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={0x0}) 2m53.995110828s ago: executing program 6 (id=4940): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x1fffffffe, 0x8, 0x4000000000000006, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x1, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff80010000, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0xe000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 2m53.355832177s ago: executing program 6 (id=4943): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="003d0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m50.124200984s ago: executing program 6 (id=4950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) 2m49.850220727s ago: executing program 6 (id=4952): mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') read$FUSE(r0, 0x0, 0x0) 2m49.511792205s ago: executing program 6 (id=4954): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, 0x0, 0x0, 0x800, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, &(0x7f0000000180)) 2m49.217351917s ago: executing program 6 (id=4956): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa3, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1e}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "2974f2ee440a"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x74, '/Y'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50, "18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2m43.745752824s ago: executing program 7 (id=4960): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/ext0/baSourceID\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) 2m38.339158884s ago: executing program 7 (id=4969): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}], 0x18}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000001000)={0x1, 0x0, [{0x3a, 0x0, 0x5}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f0000003000)={0xa3, 0x0, &(0x7f0000003010)}) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000002000)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}, {"d07ee51100"}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m37.123679565s ago: executing program 7 (id=4967): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a5002430102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="003d0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m33.941420913s ago: executing program 7 (id=4980): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000240)={&(0x7f0000000140)=[{0x3, 0x1000, 0x0, 0x0}], 0x1}) 2m33.346317917s ago: executing program 37 (id=4956): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa3, &(0x7f0000000640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1025, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x1, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1e}, [@mixer_unit={0xb, 0x24, 0x4, 0x2, 0x6, "2974f2ee440a"}, @processing_unit={0x9, 0x24, 0x7, 0x3, 0x1, 0x74, '/Y'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xd8, 0x1, 0x9, 0x2, 'y`4'}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x1, 0xd, 0xcb, "dc"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x4, 0x7, 0x50, "18"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x7, 0x6, 0x7, {0x7, 0x25, 0x1, 0x4, 0xf7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x3, 0x1, 0x77, {0x7, 0x25, 0x1, 0xc, 0x8, 0x5}}}}}}}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2m31.400872546s ago: executing program 8 (id=4982): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(0xffffffffffffffff, 0x800) read(0xffffffffffffffff, 0x0, 0x0) read$watch_queue(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2m31.183759409s ago: executing program 7 (id=4983): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m31.026680789s ago: executing program 7 (id=4985): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x200, 0x80, 0x7fffffff, 0x14001, 0x44}) 2m29.926118194s ago: executing program 8 (id=4986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000100)={0x40000}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000200)) 2m29.454073869s ago: executing program 8 (id=4987): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='mnt0\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='mnt0\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt0/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='mnt0/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000700)="000000fa", 0x4, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='mnt0/bus/pci/drivers/dwc2-pci/new_id\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1af4 1044\x00', 0xa) 2m29.288941276s ago: executing program 8 (id=4989): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a5002430102030109021200010000000009"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)=ANY=[@ANYBLOB="003d0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m26.112387078s ago: executing program 8 (id=4993): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 2m25.997789609s ago: executing program 8 (id=4994): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(0xffffffffffffffff, 0x800) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 2m15.636857283s ago: executing program 38 (id=4985): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0x200, 0x80, 0x7fffffff, 0x14001, 0x44}) 2m10.394880564s ago: executing program 39 (id=4994): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(0xffffffffffffffff, 0x800) read(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000403512108040000102030109028a000301046008080b0001012430010904000000010120000a2401f5260005000000132403050004030306070000"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 1m39.261070329s ago: executing program 2 (id=5001): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open(&(0x7f00000002c0)='.\x00', 0x101800, 0x1d2) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1m38.783017287s ago: executing program 2 (id=5025): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/my_region\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/my_region/start_block\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='^h\x00', 0x3) 1m22.904540928s ago: executing program 40 (id=5025): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/ocfs2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/cluster/ocfs2/heartbeat/my_region\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/ocfs2/heartbeat/my_region/start_block\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='^h\x00', 0x3) 7.326805872s ago: executing program 4 (id=5442): openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x3000) fallocate(r0, 0x0, 0x80000, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) write(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, 0x0, 0x1000800c) 4.124555615s ago: executing program 4 (id=5458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='-:m', 0x3) 3.759959497s ago: executing program 4 (id=5460): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r0, 0x0, &(0x7f0000000440)) 3.392057454s ago: executing program 9 (id=5463): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500), 0x0) 3.275365481s ago: executing program 4 (id=5465): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) symlink(&(0x7f0000000280)='./config/usb_gadget/g1/functions/gser.usb0\x00', &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='Manufacturer\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r1, &(0x7f00000003c0)='Product\x00', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='Conf 1\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='dummy_udc.0\x00', 0xc) 3.068302322s ago: executing program 9 (id=5467): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/fail_page_alloc/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='1', 0x1) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 2.740283123s ago: executing program 4 (id=5469): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='0\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='auto\x00', 0x5) close(r2) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='on\x00', 0x3) close(r3) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x10, &(0x7f0000000700)='\x00'/16) (async) read$char_usb(r4, &(0x7f0000000600)=""/64, 0x40) close(r4) 2.43344032s ago: executing program 0 (id=5471): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 2.430999412s ago: executing program 9 (id=5472): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000000)={0x40003, 0x0, {[0x4, 0x4, 0x4, 0x1, 0xfffffffffffffffa, 0x2, 0x5, 0xa]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.136037632s ago: executing program 0 (id=5474): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1.961398936s ago: executing program 3 (id=5475): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) 1.912408406s ago: executing program 0 (id=5476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000200, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.636041741s ago: executing program 3 (id=5477): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r1, 0xaea2, 0x400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 1.23458796s ago: executing program 0 (id=5478): openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) socket(0x8, 0x2, 0x8) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x17, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x2) 1.149095163s ago: executing program 3 (id=5479): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001780)={0x1, 0x0, 0x0, &(0x7f0000000700)=""/4096, &(0x7f0000000280)=""/252}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) 1.023623573s ago: executing program 9 (id=5480): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x100000, &(0x7f0000000000/0x100000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000280)={0x0, 0x100000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000200)={0x0, 0x1000}) 863.507679ms ago: executing program 3 (id=5481): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}, 0x3ffffc}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000001a80)=""/4106, 0x100a}, {&(0x7f0000003740)=""/182, 0xb6}, {&(0x7f0000003840)=""/172, 0xac}, {&(0x7f0000003900)=""/148, 0x94}, {&(0x7f0000000280)=""/135, 0x87}], 0x6}, 0x9}], 0x4, 0x40010000, 0x0) 722.201172ms ago: executing program 0 (id=5482): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r0, &(0x7f0000000480), 0x0) 593.597326ms ago: executing program 3 (id=5483): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sysvipc/sem\x00', 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r0, 0x1, &(0x7f0000000440)=[0x0]) 472.067346ms ago: executing program 9 (id=5484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 471.739615ms ago: executing program 0 (id=5485): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 286.842015ms ago: executing program 9 (id=5486): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000600)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0x1, 0x1}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff6, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x6000, 0xb, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 251.746349ms ago: executing program 3 (id=5487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}]}]}, 0x5c}}, 0x1000) 0s ago: executing program 4 (id=5488): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x1, &(0x7f0000000240)}) kernel console output (not intermixed with test programs): ipc: Disabling bearer [ 1554.102092][ T1392] tipc: Left network mode [ 1554.872666][T15824] Bluetooth: hci4: command tx timeout [ 1554.996843][T18003] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 1555.150465][T18003] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 1555.150489][T18003] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.155004][T18003] usb 4-1: config 0 descriptor?? [ 1555.689502][T18003] usbhid 4-1:0.0: can't add hid device: -71 [ 1555.689635][T18003] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1555.759000][T18003] usb 4-1: USB disconnect, device number 110 [ 1555.977023][ T1392] hsr_slave_0: left promiscuous mode [ 1556.016943][ T1392] hsr_slave_1: left promiscuous mode [ 1556.019155][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1556.019178][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1556.059219][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1556.059243][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1556.138626][ T1392] veth1_macvtap: left promiscuous mode [ 1556.138706][ T1392] veth0_macvtap: left promiscuous mode [ 1556.138971][ T1392] veth1_vlan: left promiscuous mode [ 1556.139118][ T1392] veth0_vlan: left promiscuous mode [ 1556.355504][T20564] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 1557.330178][ T1392] team0 (unregistering): Port device team_slave_1 removed [ 1557.387745][ T1392] team0 (unregistering): Port device team_slave_0 removed [ 1557.596889][ T10] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1557.611997][ T5257] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1557.648711][T20442] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1557.705408][T20442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1557.723162][T20442] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1557.746983][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1557.749937][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1557.749965][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1557.749993][ T10] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1557.750011][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.755641][ T10] usb 4-1: config 0 descriptor?? [ 1557.854273][T20442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1557.862469][T20442] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1557.916074][T20442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1557.919512][T20442] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1558.065358][T20442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1558.263987][ T10] ft260 0003:0403:6030.0039: unknown main item tag 0x0 [ 1558.264028][ T10] ft260 0003:0403:6030.0039: unknown main item tag 0x0 [ 1558.452673][ T10] ft260 0003:0403:6030.0039: chip code: 0000 0000 [ 1558.654949][ T10] ft260 0003:0403:6030.0039: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1558.835405][T20442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.954324][ T10] ft260 0003:0403:6030.0039: failed to retrieve status: -32, no wakeup [ 1558.965675][ T10] ft260 0003:0403:6030.0039: failed to retrieve status: -71 [ 1558.966232][ T10] ft260 0003:0403:6030.0039: failed to reset I2C controller: -71 [ 1559.037456][ T10] usb 4-1: USB disconnect, device number 111 [ 1559.072545][T20442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1559.118196][ T1512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.118334][ T1512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1559.173548][ T1512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.173732][ T1512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.996457][ T5257] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1560.097071][ T5753] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1560.252013][ T5753] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1560.252048][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1560.252071][ T5753] usb 4-1: Product: syz [ 1560.252087][ T5753] usb 4-1: Manufacturer: syz [ 1560.252103][ T5753] usb 4-1: SerialNumber: syz [ 1560.286418][ T5753] usb 4-1: config 0 descriptor?? [ 1560.316481][ T5753] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1560.545101][ T5753] gspca_sunplus: reg_r err -32 [ 1560.638240][T20442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1561.112467][T20442] veth0_vlan: entered promiscuous mode [ 1561.132308][ T5257] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1561.150183][T20442] veth1_vlan: entered promiscuous mode [ 1561.295095][T20442] veth0_macvtap: entered promiscuous mode [ 1561.310720][T20442] veth1_macvtap: entered promiscuous mode [ 1561.372497][T20442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1561.418097][T20442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1561.444748][ T1392] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.473387][ T1392] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.474499][ T1392] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.475115][ T1392] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.696636][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1562.696826][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1562.971647][ T5753] usb 4-1: USB disconnect, device number 112 [ 1563.319573][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1563.319597][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1563.443584][ T4911] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.481143][ T4911] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.499155][ T4911] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.560561][ T4911] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.563320][ T4911] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.565127][ T5257] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1563.586820][ T5753] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1563.820480][ T5753] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1563.820512][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1563.869183][ T5753] usb 4-1: config 0 descriptor?? [ 1564.096906][ T5753] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1564.097404][ T5753] [drm:udl_init] *ERROR* Selecting channel failed [ 1564.164961][ T5753] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1564.164989][ T5753] [drm] Initialized udl on minor 2 [ 1564.185692][ T5753] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1564.202523][ T5753] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1564.205471][ T822] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1564.256952][ T5753] usb 4-1: USB disconnect, device number 113 [ 1564.275560][ T822] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1564.275781][ T822] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1564.833255][T20656] no more MTRRs available [ 1565.519411][T12153] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1565.714531][T20675] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1565.760618][T20675] CIFS: Attempting to mount //127.0.0.1/share [ 1565.761980][T12153] usb 4-1: Using ep0 maxpacket: 32 [ 1565.814180][T12153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1565.814218][T12153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1565.814285][T12153] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1565.814326][T12153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.867860][T12153] usb 4-1: config 0 descriptor?? [ 1565.890414][T15824] Bluetooth: hci3: command tx timeout [ 1566.298616][T12153] ft260 0003:0403:6030.003A: unknown main item tag 0x0 [ 1566.298656][T12153] ft260 0003:0403:6030.003A: unknown main item tag 0x0 [ 1566.487631][T12153] ft260 0003:0403:6030.003A: chip code: 0000 0000 [ 1566.687890][T12153] ft260 0003:0403:6030.003A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 1567.001770][T20675] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1567.002275][T20675] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1567.095537][T12153] ft260 0003:0403:6030.003A: failed to retrieve status: -71 [ 1567.117097][T12153] ft260 0003:0403:6030.003A: failed to reset I2C controller: -71 [ 1567.181728][T12153] usb 4-1: USB disconnect, device number 114 [ 1567.222256][T20582] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.466953][ T822] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1567.661845][ T822] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1567.661882][ T822] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.661904][ T822] usb 10-1: Product: syz [ 1567.661918][ T822] usb 10-1: Manufacturer: syz [ 1567.661934][ T822] usb 10-1: SerialNumber: syz [ 1567.720375][ T822] usb 10-1: config 0 descriptor?? [ 1567.744138][ T822] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1567.948725][T15824] Bluetooth: hci3: command tx timeout [ 1567.951546][ T822] gspca_sunplus: reg_r err -32 [ 1568.306973][ T822] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1568.568290][ T822] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1568.568325][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1568.573985][ T822] usb 4-1: config 0 descriptor?? [ 1568.648286][ T4911] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1568.652023][ T4911] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1568.691962][ T4911] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1568.770126][ T4911] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1568.778534][T20582] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.797922][ T4911] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1568.821949][ T822] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1568.822471][ T822] [drm:udl_init] *ERROR* Selecting channel failed [ 1568.843842][ T822] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1568.843921][ T822] [drm] Initialized udl on minor 2 [ 1568.849500][ T822] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1568.850836][ T822] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1568.852537][ T32] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1568.853201][ T32] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1568.853376][ T32] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1568.857171][ T822] usb 4-1: USB disconnect, device number 115 [ 1569.660212][T20582] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1570.029708][T15824] Bluetooth: hci3: command tx timeout [ 1570.212488][ T5922] usb 10-1: USB disconnect, device number 2 [ 1570.477684][T20582] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1571.145058][T20643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.145401][T20643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1571.145709][T20643] bridge_slave_0: entered allmulticast mode [ 1571.189656][T20643] bridge_slave_0: entered promiscuous mode [ 1571.279428][T20643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.279872][T20643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.280220][T20643] bridge_slave_1: entered allmulticast mode [ 1571.284873][T20643] bridge_slave_1: entered promiscuous mode [ 1571.306952][T15824] Bluetooth: hci2: command tx timeout [ 1571.612904][T20643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1571.672540][T20643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1571.739259][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1571.809093][T20643] team0: Port device team_slave_0 added [ 1571.822110][T20643] team0: Port device team_slave_1 added [ 1571.912307][ T9] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1571.912341][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1571.935682][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1571.935716][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.935738][ T9] usb 4-1: Product: syz [ 1571.935754][ T9] usb 4-1: Manufacturer: syz [ 1571.935770][ T9] usb 4-1: SerialNumber: syz [ 1571.985009][ T9] usb 4-1: config 0 descriptor?? [ 1572.011310][ T9] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1572.117861][T15824] Bluetooth: hci3: command tx timeout [ 1572.419140][T20643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.419158][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.419197][T20643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.475941][ T5684] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1572.502273][T20643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.502287][T20643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.502310][T20643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.616086][ T9] gspca_sunplus: reg_r err -32 [ 1572.616184][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1572.657897][ T5684] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1572.657931][ T5684] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1572.657955][ T5684] usb 10-1: Product: syz [ 1572.657971][ T5684] usb 10-1: Manufacturer: syz [ 1572.657987][ T5684] usb 10-1: SerialNumber: syz [ 1572.703507][ T5684] usb 10-1: config 0 descriptor?? [ 1572.727905][ T5684] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1572.928279][ T5684] gspca_sunplus: reg_r err -32 [ 1572.945152][T20582] bridge_slave_1: left allmulticast mode [ 1572.945189][T20582] bridge_slave_1: left promiscuous mode [ 1572.945509][T20582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1573.098626][T20582] bridge_slave_0: left allmulticast mode [ 1573.098661][T20582] bridge_slave_0: left promiscuous mode [ 1573.106456][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1573.386857][T15824] Bluetooth: hci2: command tx timeout [ 1574.127572][T20582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1574.191779][T20582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1574.230481][T20582] bond0 (unregistering): Released all slaves [ 1574.503112][T20643] hsr_slave_0: entered promiscuous mode [ 1574.505850][T20643] hsr_slave_1: entered promiscuous mode [ 1574.522971][T20643] debugfs: 'hsr0' already exists in 'hsr' [ 1574.523000][T20643] Cannot create hsr debugfs directory [ 1574.548207][ T5753] usb 4-1: USB disconnect, device number 116 [ 1574.668900][T20685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1574.669186][T20685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1574.669429][T20685] bridge_slave_0: entered allmulticast mode [ 1574.672442][T20685] bridge_slave_0: entered promiscuous mode [ 1574.683656][T20685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1574.684730][T20685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1574.685941][T20685] bridge_slave_1: entered allmulticast mode [ 1574.711097][T20685] bridge_slave_1: entered promiscuous mode [ 1575.006816][ T5753] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1575.162308][ T5753] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1575.162342][ T5753] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1575.192555][ T5753] usb 4-1: config 0 descriptor?? [ 1575.232814][ T32] usb 10-1: USB disconnect, device number 3 [ 1575.448454][T20685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1575.467013][T15824] Bluetooth: hci2: command tx timeout [ 1575.577597][T20685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1575.620714][ T5753] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1575.621216][ T5753] [drm:udl_init] *ERROR* Selecting channel failed [ 1575.695097][ T5753] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1575.695124][ T5753] [drm] Initialized udl on minor 2 [ 1575.710372][ T5753] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1575.711646][ T5753] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1575.713051][ T32] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1575.713267][ T32] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1575.748138][ T5753] usb 4-1: USB disconnect, device number 117 [ 1576.140169][T20685] team0: Port device team_slave_0 added [ 1576.183831][T20685] team0: Port device team_slave_1 added [ 1576.404927][ T4962] FAULT_INJECTION: forcing a failure. [ 1576.404927][ T4962] name failslab, interval 1, probability 1, space 0, times 10 [ 1576.404976][ T4962] CPU: 1 UID: 0 PID: 4962 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.405006][ T4962] Tainted: [L]=SOFTLOCKUP [ 1576.405015][ T4962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.405029][ T4962] Call Trace: [ 1576.405038][ T4962] [ 1576.405048][ T4962] dump_stack_lvl+0xe8/0x150 [ 1576.405084][ T4962] should_fail_ex+0x467/0x600 [ 1576.405120][ T4962] should_failslab+0xa8/0x100 [ 1576.405143][ T4962] ? do_getname+0x2e/0x250 [ 1576.405176][ T4962] kmem_cache_alloc_noprof+0x9e/0x680 [ 1576.405210][ T4962] ? do_getname+0x2e/0x250 [ 1576.405249][ T4962] do_getname+0x2e/0x250 [ 1576.405282][ T4962] ? getname_flags+0x11/0x20 [ 1576.405321][ T4962] do_readlinkat+0xc8/0x510 [ 1576.405349][ T4962] ? __pfx_do_readlinkat+0x10/0x10 [ 1576.405373][ T4962] ? __pfx_ksys_read+0x10/0x10 [ 1576.405406][ T4962] __x64_sys_readlink+0x7f/0x90 [ 1576.405430][ T4962] do_syscall_64+0x17b/0x530 [ 1576.405454][ T4962] ? irqentry_exit+0x10f/0x8f0 [ 1576.405477][ T4962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.405500][ T4962] ? clear_bhb_loop+0x40/0x90 [ 1576.405528][ T4962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.405551][ T4962] RIP: 0033:0x7fe4076c63a7 [ 1576.405572][ T4962] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 1576.405591][ T4962] RSP: 002b:00007ffe5f096a48 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 1576.405616][ T4962] RAX: ffffffffffffffda RBX: 00007ffe5f096f20 RCX: 00007fe4076c63a7 [ 1576.405634][ T4962] RDX: 0000000000000400 RSI: 00007ffe5f096a50 RDI: 00007ffe5f096f20 [ 1576.405650][ T4962] RBP: 00007ffe5f096a50 R08: 0000000000000075 R09: 0000000000000000 [ 1576.405665][ T4962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 1576.405679][ T4962] R13: 000055deb57e4100 R14: 0000000000000001 R15: 00007ffe5f098820 [ 1576.405713][ T4962] [ 1576.406570][T20753] FAULT_INJECTION: forcing a failure. [ 1576.406570][T20753] name failslab, interval 1, probability 1, space 0, times 10 [ 1576.406606][T20753] CPU: 0 UID: 0 PID: 20753 Comm: sed Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.406639][T20753] Tainted: [L]=SOFTLOCKUP [ 1576.406647][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.406660][T20753] Call Trace: [ 1576.406669][T20753] [ 1576.406678][T20753] dump_stack_lvl+0xe8/0x150 [ 1576.406709][T20753] should_fail_ex+0x467/0x600 [ 1576.406743][T20753] should_failslab+0xa8/0x100 [ 1576.406767][T20753] __kmalloc_noprof+0xfb/0x790 [ 1576.406797][T20753] ? tomoyo_realpath_from_path+0xef/0x640 [ 1576.406831][T20753] ? tomoyo_realpath_from_path+0xef/0x640 [ 1576.406873][T20753] tomoyo_realpath_from_path+0xef/0x640 [ 1576.406920][T20753] tomoyo_check_open_permission+0x229/0x470 [ 1576.406952][T20753] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1576.406980][T20753] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1576.407070][T20753] ? do_raw_spin_lock+0x12b/0x2f0 [ 1576.407362][T20753] ? rt_spin_unlock+0x157/0x200 [ 1576.407448][T20753] ? tomoyo_file_open+0x166/0x220 [ 1576.407559][T20753] security_file_open+0x9c/0x200 [ 1576.407640][T20753] do_dentry_open+0x4be/0x1420 [ 1576.407758][T20753] vfs_open+0x3b/0x350 [ 1576.407833][T20753] ? path_openat+0x2e4d/0x3850 [ 1576.407903][T20753] path_openat+0x2e64/0x3850 [ 1576.407980][T20753] ? __kasan_slab_alloc+0x6c/0x80 [ 1576.408071][T20753] ? do_sys_openat2+0xcc/0x200 [ 1576.408156][T20753] ? __x64_sys_openat+0x138/0x170 [ 1576.408240][T20753] ? do_syscall_64+0x17b/0x530 [ 1576.408361][T20753] do_file_open+0x23e/0x4a0 [ 1576.408435][T20753] ? lockdep_hardirqs_on+0x7a/0x110 [ 1576.408503][T20753] ? __pfx_do_file_open+0x10/0x10 [ 1576.408652][T20753] ? alloc_fd+0x654/0x6d0 [ 1576.408683][T20753] do_sys_openat2+0x115/0x200 [ 1576.408792][T20753] ? __pfx_do_sys_openat2+0x10/0x10 [ 1576.408895][T20753] ? exc_page_fault+0x6a/0xc0 [ 1576.408962][T20753] __x64_sys_openat+0x138/0x170 [ 1576.409067][T20753] do_syscall_64+0x17b/0x530 [ 1576.409129][T20753] ? irqentry_exit+0x10f/0x8f0 [ 1576.409207][T20753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.409282][T20753] ? clear_bhb_loop+0x40/0x90 [ 1576.409356][T20753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.409437][T20753] RIP: 0033:0x7f7b70b860ba [ 1576.409484][T20753] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 1576.409538][T20753] RSP: 002b:00007ffc969372d8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1576.409602][T20753] RAX: ffffffffffffffda RBX: 00007ffc96937350 RCX: 00007f7b70b860ba [ 1576.409646][T20753] RDX: 0000000000080000 RSI: 00007ffc96937350 RDI: 00000000ffffff9c [ 1576.409690][T20753] RBP: 00007ffc96937340 R08: 00007ffc96937547 R09: 0000000000000000 [ 1576.409734][T20753] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000016 [ 1576.409769][T20753] R13: 00007f7b70b5a000 R14: 00007ffc96937560 R15: 0000000000000000 [ 1576.409856][T20753] [ 1576.425390][T20753] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1576.435619][ T4951] FAULT_INJECTION: forcing a failure. [ 1576.435619][ T4951] name failslab, interval 1, probability 1, space 0, times 9 [ 1576.435656][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: klogd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.435686][ T4951] Tainted: [L]=SOFTLOCKUP [ 1576.435698][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.435712][ T4951] Call Trace: [ 1576.435720][ T4951] [ 1576.435729][ T4951] dump_stack_lvl+0xe8/0x150 [ 1576.435763][ T4951] should_fail_ex+0x467/0x600 [ 1576.435795][ T4951] should_failslab+0xa8/0x100 [ 1576.435818][ T4951] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1576.435848][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1576.435875][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1576.435908][ T4951] __alloc_skb+0x1d7/0x7a0 [ 1576.435939][ T4951] alloc_skb_with_frags+0xc6/0x760 [ 1576.435968][ T4951] ? __lock_acquire+0x6df/0x2e40 [ 1576.435997][ T4951] sock_alloc_send_pskb+0x884/0x9a0 [ 1576.436035][ T4951] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1576.436060][ T4951] ? sock_def_readable+0xae/0x550 [ 1576.436089][ T4951] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1576.436125][ T4951] unix_dgram_sendmsg+0x4da/0x17b0 [ 1576.436176][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1576.436221][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1576.436248][ T4951] sock_sendmsg_nosec+0x13a/0x180 [ 1576.436276][ T4951] __sys_sendto+0x41e/0x5d0 [ 1576.436312][ T4951] ? __pfx___sys_sendto+0x10/0x10 [ 1576.436367][ T4951] ? rcu_is_watching+0x15/0xb0 [ 1576.436400][ T4951] __x64_sys_sendto+0xde/0x100 [ 1576.436443][ T4951] do_syscall_64+0x17b/0x530 [ 1576.436466][ T4951] ? irqentry_exit+0x10f/0x8f0 [ 1576.436486][ T4951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.436541][ T4951] ? clear_bhb_loop+0x40/0x90 [ 1576.436567][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.436638][ T4951] RIP: 0033:0x7fa56b87e407 [ 1576.436657][ T4951] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1576.436675][ T4951] RSP: 002b:00007fff3330ca00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1576.436698][ T4951] RAX: ffffffffffffffda RBX: 00007fa56b72ec80 RCX: 00007fa56b87e407 [ 1576.436715][ T4951] RDX: 000000000000004e RSI: 00007fff3330cb40 RDI: 0000000000000003 [ 1576.436728][ T4951] RBP: 00007fff3330cf70 R08: 0000000000000000 R09: 0000000000000000 [ 1576.436741][ T4951] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff3330cf88 [ 1576.436756][ T4951] R13: 00007fff3330cb40 R14: 0000000000000033 R15: 00007fff3330cb40 [ 1576.436786][ T4951] [ 1576.449322][ T1026] FAULT_INJECTION: forcing a failure. [ 1576.449322][ T1026] name failslab, interval 1, probability 1, space 0, times 8 [ 1576.449446][ T1026] CPU: 0 UID: 0 PID: 1026 Comm: kworker/u8:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.449529][ T1026] Tainted: [L]=SOFTLOCKUP [ 1576.449551][ T1026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.449593][ T1026] Workqueue: events_unbound nsim_dev_trap_report_work [ 1576.449711][ T1026] Call Trace: [ 1576.449733][ T1026] [ 1576.449764][ T1026] dump_stack_lvl+0xe8/0x150 [ 1576.449859][ T1026] should_fail_ex+0x467/0x600 [ 1576.449915][ T1026] should_failslab+0xa8/0x100 [ 1576.449985][ T1026] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1576.450082][ T1026] ? __alloc_skb+0x1d7/0x7a0 [ 1576.450131][ T1026] ? __alloc_skb+0x1d7/0x7a0 [ 1576.450212][ T1026] __alloc_skb+0x1d7/0x7a0 [ 1576.450328][ T1026] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1576.450462][ T1026] ? process_one_work+0x7fd/0x1480 [ 1576.450527][ T1026] process_one_work+0xaaf/0x1480 [ 1576.450655][ T1026] ? __pfx_process_one_work+0x10/0x10 [ 1576.450718][ T1026] ? do_raw_spin_lock+0x12b/0x2f0 [ 1576.450824][ T1026] ? assign_work+0x3cf/0x5d0 [ 1576.450907][ T1026] worker_thread+0xb05/0x10d0 [ 1576.450995][ T1026] ? __kthread_parkme+0x71/0x1f0 [ 1576.451107][ T1026] kthread+0x388/0x470 [ 1576.451186][ T1026] ? __pfx_worker_thread+0x10/0x10 [ 1576.451248][ T1026] ? __pfx_kthread+0x10/0x10 [ 1576.451332][ T1026] ret_from_fork+0x514/0xb70 [ 1576.451432][ T1026] ? __pfx_ret_from_fork+0x10/0x10 [ 1576.451478][ T1026] ? __switch_to+0xc89/0x1420 [ 1576.451544][ T1026] ? __pfx_kthread+0x10/0x10 [ 1576.451650][ T1026] ret_from_fork_asm+0x1a/0x30 [ 1576.451813][ T1026] [ 1576.507686][ C1] FAULT_INJECTION: forcing a failure. [ 1576.507686][ C1] name failslab, interval 1, probability 1, space 0, times 4 [ 1576.507722][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.507749][ C1] Tainted: [L]=SOFTLOCKUP [ 1576.507756][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.507769][ C1] Call Trace: [ 1576.507776][ C1] [ 1576.507785][ C1] dump_stack_lvl+0xe8/0x150 [ 1576.507819][ C1] should_fail_ex+0x467/0x600 [ 1576.507855][ C1] should_failslab+0xa8/0x100 [ 1576.507890][ C1] ? skb_clone+0x212/0x3a0 [ 1576.507932][ C1] kmem_cache_alloc_noprof+0x9e/0x680 [ 1576.507960][ C1] ? skb_clone+0x212/0x3a0 [ 1576.507997][ C1] skb_clone+0x212/0x3a0 [ 1576.508031][ C1] hsr_forward_skb+0xfbe/0x28c0 [ 1576.508074][ C1] ? hsr_forward_skb+0xb3/0x28c0 [ 1576.508106][ C1] ? rcu_is_watching+0x15/0xb0 [ 1576.508129][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1576.508156][ C1] ? rt_spin_lock+0x20e/0x400 [ 1576.508190][ C1] ? __asan_memset+0x22/0x50 [ 1576.508217][ C1] ? __skb_pad+0x3f8/0x600 [ 1576.508243][ C1] send_hsr_supervision_frame+0x761/0xd60 [ 1576.508283][ C1] ? send_hsr_supervision_frame+0x3c9/0xd60 [ 1576.508316][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1576.508345][ C1] hsr_announce+0x1db/0x370 [ 1576.508370][ C1] ? hsr_announce+0x89/0x370 [ 1576.508395][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1576.508422][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1576.508462][ C1] call_timer_fn+0x192/0x5e0 [ 1576.508485][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1576.508511][ C1] ? call_timer_fn+0xd4/0x5e0 [ 1576.508532][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1576.508566][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1576.508588][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1576.508615][ C1] __run_timer_base+0x67b/0x9b0 [ 1576.508651][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1576.508682][ C1] ? lock_acquire+0x115/0x350 [ 1576.508730][ C1] run_timer_softirq+0xb7/0x170 [ 1576.508756][ C1] handle_softirqs+0x1d9/0x6c0 [ 1576.508795][ C1] run_ktimerd+0x69/0x100 [ 1576.508825][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1576.508859][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1576.508899][ C1] kthread+0x388/0x470 [ 1576.508942][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1576.508968][ C1] ? __pfx_kthread+0x10/0x10 [ 1576.509000][ C1] ret_from_fork+0x514/0xb70 [ 1576.509037][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1576.509069][ C1] ? __switch_to+0xc89/0x1420 [ 1576.509100][ C1] ? __pfx_kthread+0x10/0x10 [ 1576.509133][ C1] ret_from_fork_asm+0x1a/0x30 [ 1576.509184][ C1] [ 1576.516815][T20753] FAULT_INJECTION: forcing a failure. [ 1576.516815][T20753] name failslab, interval 1, probability 1, space 0, times 3 [ 1576.516913][T20753] CPU: 0 UID: 0 PID: 20753 Comm: sed Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.516984][T20753] Tainted: [L]=SOFTLOCKUP [ 1576.517004][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.517043][T20753] Call Trace: [ 1576.517072][T20753] [ 1576.517094][T20753] dump_stack_lvl+0xe8/0x150 [ 1576.517186][T20753] should_fail_ex+0x467/0x600 [ 1576.517292][T20753] should_failslab+0xa8/0x100 [ 1576.517357][T20753] ? vm_area_dup+0x28/0x670 [ 1576.517453][T20753] kmem_cache_alloc_noprof+0x9e/0x680 [ 1576.517545][T20753] ? vm_area_dup+0x28/0x670 [ 1576.517651][T20753] vm_area_dup+0x28/0x670 [ 1576.517744][T20753] ? __split_vma+0x1df/0xbd0 [ 1576.517821][T20753] __split_vma+0x1f3/0xbd0 [ 1576.517960][T20753] ? __pfx___split_vma+0x10/0x10 [ 1576.518099][T20753] vms_gather_munmap_vmas+0x322/0x1370 [ 1576.518175][T20753] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1576.518236][T20753] ? mas_walk+0x372/0x480 [ 1576.518365][T20753] mmap_region+0x91a/0x2230 [ 1576.518469][T20753] ? __lock_acquire+0x6df/0x2e40 [ 1576.518522][T20753] ? __pfx_mmap_region+0x10/0x10 [ 1576.518617][T20753] ? __lock_acquire+0x6df/0x2e40 [ 1576.518858][T20753] ? __pfx_process_measurement+0x10/0x10 [ 1576.518988][T20753] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1576.519092][T20753] ? __lock_acquire+0x6df/0x2e40 [ 1576.519155][T20753] ? cap_mmap_addr+0xaf/0x100 [ 1576.519227][T20753] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1576.519324][T20753] ? security_mmap_addr+0x64/0x200 [ 1576.519394][T20753] ? shmem_mapping+0xd/0x50 [ 1576.519467][T20753] ? memfd_check_seals_mmap+0xcb/0x210 [ 1576.519546][T20753] do_mmap+0xc1e/0x10b0 [ 1576.519608][T20753] ? __pfx_do_mmap+0x10/0x10 [ 1576.519652][T20753] ? rwbase_write_lock+0x550/0x720 [ 1576.519709][T20753] vm_mmap_pgoff+0x275/0x4e0 [ 1576.519836][T20753] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1576.519905][T20753] ? __fget_files+0x2a/0x420 [ 1576.519988][T20753] ? __fget_files+0x3a8/0x420 [ 1576.520064][T20753] ? __fget_files+0x2a/0x420 [ 1576.520129][T20753] ksys_mmap_pgoff+0x4a6/0x720 [ 1576.520214][T20753] ? __x64_sys_mmap+0x7f/0x140 [ 1576.520307][T20753] do_syscall_64+0x17b/0x530 [ 1576.520371][T20753] ? irqentry_exit+0x10f/0x8f0 [ 1576.520435][T20753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.520505][T20753] ? clear_bhb_loop+0x40/0x90 [ 1576.520581][T20753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.520646][T20753] RIP: 0033:0x7f7b70b86242 [ 1576.520703][T20753] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 1576.520757][T20753] RSP: 002b:00007ffc96937108 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1576.520820][T20753] RAX: ffffffffffffffda RBX: 00007f7b707f4000 RCX: 00007f7b70b86242 [ 1576.520865][T20753] RDX: 0000000000000005 RSI: 0000000000037000 RDI: 00007f7b707f4000 [ 1576.520905][T20753] RBP: 0000000000000812 R08: 0000000000000003 R09: 0000000000003000 [ 1576.520942][T20753] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffc96937158 [ 1576.520983][T20753] R13: 00007f7b7085d6b0 R14: 00007ffc96937540 R15: 00000fff92d26e24 [ 1576.521075][T20753] [ 1576.537482][ T4951] FAULT_INJECTION: forcing a failure. [ 1576.537482][ T4951] name failslab, interval 1, probability 1, space 0, times 1 [ 1576.537521][ T4951] CPU: 0 UID: 0 PID: 4951 Comm: klogd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1576.537549][ T4951] Tainted: [L]=SOFTLOCKUP [ 1576.537557][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1576.537571][ T4951] Call Trace: [ 1576.537580][ T4951] [ 1576.537589][ T4951] dump_stack_lvl+0xe8/0x150 [ 1576.537624][ T4951] should_fail_ex+0x467/0x600 [ 1576.537658][ T4951] should_failslab+0xa8/0x100 [ 1576.537682][ T4951] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1576.537716][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1576.537743][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1576.537780][ T4951] __alloc_skb+0x1d7/0x7a0 [ 1576.537815][ T4951] alloc_skb_with_frags+0xc6/0x760 [ 1576.537847][ T4951] ? __lock_acquire+0x6df/0x2e40 [ 1576.537880][ T4951] sock_alloc_send_pskb+0x884/0x9a0 [ 1576.537921][ T4951] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1576.537948][ T4951] ? sock_def_readable+0xae/0x550 [ 1576.537978][ T4951] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1576.538015][ T4951] unix_dgram_sendmsg+0x4da/0x17b0 [ 1576.538067][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1576.538114][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1576.538143][ T4951] sock_sendmsg_nosec+0x13a/0x180 [ 1576.538173][ T4951] __sys_sendto+0x41e/0x5d0 [ 1576.538209][ T4951] ? __pfx___sys_sendto+0x10/0x10 [ 1576.538256][ T4951] ? kvm_sched_clock_read+0x11/0x20 [ 1576.538302][ T4951] ? rcu_is_watching+0x15/0xb0 [ 1576.538334][ T4951] __x64_sys_sendto+0xde/0x100 [ 1576.538367][ T4951] do_syscall_64+0x17b/0x530 [ 1576.538389][ T4951] ? irqentry_exit+0x10f/0x8f0 [ 1576.538408][ T4951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.538438][ T4951] ? clear_bhb_loop+0x40/0x90 [ 1576.538467][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1576.538490][ T4951] RIP: 0033:0x7fa56b87e407 [ 1576.538511][ T4951] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1576.538533][ T4951] RSP: 002b:00007fff3330ca00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1576.538556][ T4951] RAX: ffffffffffffffda RBX: 00007fa56b72ec80 RCX: 00007fa56b87e407 [ 1576.538573][ T4951] RDX: 000000000000005b RSI: 00007fff3330cb40 RDI: 0000000000000003 [ 1576.538588][ T4951] RBP: 00007fff3330cf70 R08: 0000000000000000 R09: 0000000000000000 [ 1576.538602][ T4951] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff3330cf88 [ 1576.538617][ T4951] R13: 00007fff3330cb40 R14: 0000000000000040 R15: 00007fff3330cb40 [ 1576.538651][ T4951] [ 1577.546833][T15824] Bluetooth: hci2: command tx timeout [ 1578.438264][T20582] hsr_slave_0: left promiscuous mode [ 1578.477416][T20582] hsr_slave_1: left promiscuous mode [ 1578.484619][T20582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1578.484650][T20582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1578.517750][T20582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1578.517771][T20582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1578.684556][T20582] veth1_macvtap: left promiscuous mode [ 1578.684670][T20582] veth0_macvtap: left promiscuous mode [ 1578.684986][T20582] veth1_vlan: left promiscuous mode [ 1578.685195][T20582] veth0_vlan: left promiscuous mode [ 1579.529044][T20582] team0 (unregistering): Port device team_slave_1 removed [ 1579.597658][T20582] team0 (unregistering): Port device team_slave_0 removed [ 1579.829988][T20685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.830001][T20685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.830040][T20685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1579.903049][ T5257] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1579.951054][T20685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1579.951073][T20685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1579.951105][T20685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1580.135264][T20685] hsr_slave_0: entered promiscuous mode [ 1580.137984][T20685] hsr_slave_1: entered promiscuous mode [ 1580.139819][T20685] debugfs: 'hsr0' already exists in 'hsr' [ 1580.139843][T20685] Cannot create hsr debugfs directory [ 1581.331222][ T5257] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1582.832808][ T5257] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1583.262501][T20582] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1583.749475][T20582] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1584.616233][T20582] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.436041][T20582] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1586.878015][T20582] bridge_slave_1: left allmulticast mode [ 1586.878055][T20582] bridge_slave_1: left promiscuous mode [ 1586.886202][T20582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.048143][T20582] bridge_slave_0: left allmulticast mode [ 1587.048172][T20582] bridge_slave_0: left promiscuous mode [ 1587.048385][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.967635][T20582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.049409][T20582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.089490][T20582] bond0 (unregistering): Released all slaves [ 1588.135496][ T5257] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1589.342192][T20643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1589.384172][T20643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1589.385914][T20643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1589.436414][T20643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1589.698564][T20643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1589.760847][T20643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1589.807039][T20643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1589.911286][T20643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1590.336848][T20582] hsr_slave_0: left promiscuous mode [ 1590.378399][T20582] hsr_slave_1: left promiscuous mode [ 1590.379740][T20582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1590.379762][T20582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1590.418313][T20582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1590.418345][T20582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1590.502723][T20582] veth1_macvtap: left promiscuous mode [ 1590.504104][T20582] veth0_macvtap: left promiscuous mode [ 1590.504339][T20582] veth1_vlan: left promiscuous mode [ 1590.504484][T20582] veth0_vlan: left promiscuous mode [ 1591.397509][T20582] team0 (unregistering): Port device team_slave_1 removed [ 1591.462890][T20582] team0 (unregistering): Port device team_slave_0 removed [ 1591.920898][T20685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1591.964238][T20685] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1591.976815][T20685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1592.175060][T20685] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1592.194897][T20685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1592.242476][T20685] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1592.246558][T20685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1592.292679][T20685] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1593.027932][T20643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.344845][T20643] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.378574][ T1392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.378743][ T1392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.540938][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.541117][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.582348][T20685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.784924][T20685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.841834][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.842071][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.901166][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.901407][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1595.214248][T20643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.605332][T20685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.644297][T20643] veth0_vlan: entered promiscuous mode [ 1595.700747][T20643] veth1_vlan: entered promiscuous mode [ 1595.956524][T20685] veth0_vlan: entered promiscuous mode [ 1595.975595][T20643] veth0_macvtap: entered promiscuous mode [ 1596.039291][T20643] veth1_macvtap: entered promiscuous mode [ 1596.069457][T20685] veth1_vlan: entered promiscuous mode [ 1596.148102][T20643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1596.204824][T20643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1596.288921][ T1512] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.292438][ T1512] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.292720][ T1512] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.292986][ T1512] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.394168][T20685] veth0_macvtap: entered promiscuous mode [ 1596.481158][T20685] veth1_macvtap: entered promiscuous mode [ 1597.323401][T20685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1597.584120][T20685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1597.843023][ T1392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1597.843046][ T1392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1598.020587][ T8844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.052127][ T8844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.069071][ T8844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.114686][ T8844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1598.149304][T15131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1598.149333][T15131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.398958][T21019] gadgetfs: bound to dummy_udc driver [ 1599.446269][T20643] do_umount: task=syz-executor[20643] propagate_mount_busy()!=0 [ 1599.448672][T20643] do_umount: task=syz-executor[20643] propagate_mount_busy()!=0 [ 1599.517002][T12153] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 1599.677845][T15131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1599.677876][T15131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1599.704412][T12153] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1599.705954][T12153] usb 10-1: not running at top speed; connect to a high speed hub [ 1599.728512][T12153] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1599.761198][T12153] usb 10-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1599.761229][T12153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.761250][T12153] usb 10-1: Product: syz [ 1599.761265][T12153] usb 10-1: Manufacturer: syz [ 1599.761280][T12153] usb 10-1: SerialNumber: syz [ 1599.896869][ T5689] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1599.897130][ C1] gadgetfs: connected [ 1599.901058][ T5689] gadgetfs: disconnected [ 1600.211171][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1600.211201][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1600.631697][T12153] usb 10-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1600.631729][T12153] usb 10-1: found format II with max.bitrate = 512, frame size=4095 [ 1600.631952][T12153] usb 10-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1600.633632][T12153] usb 10-1: found format II with max.bitrate = 512, frame size=4095 [ 1600.801167][T12153] usb 10-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1600.979456][T20685] Flush: task=syz-executor[20685] dev=loop0 state=2 [ 1600.996928][ T32] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1601.193759][ T32] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1601.193792][ T32] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1601.197110][ T32] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1601.197209][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.197269][ T32] usb 4-1: Product: syz [ 1601.197314][ T32] usb 4-1: Manufacturer: syz [ 1601.197351][ T32] usb 4-1: SerialNumber: syz [ 1601.330254][ T32] usb 4-1: config 0 descriptor?? [ 1601.357351][T20685] Teardown: task=syz-executor[20685] dev=loop0 state=2 [ 1601.380691][ T32] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1601.487676][T12153] usb 10-1: USB disconnect, device number 4 [ 1602.056788][T12153] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1602.207038][ T32] gspca_sunplus: reg_r err -32 [ 1602.207141][ T32] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1602.255952][ T32] usb 4-1: USB disconnect, device number 118 [ 1602.259392][T12153] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1602.259421][T12153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.259443][T12153] usb 10-1: Product: syz [ 1602.259458][T12153] usb 10-1: Manufacturer: syz [ 1602.259474][T12153] usb 10-1: SerialNumber: syz [ 1602.332777][T21052] udevd[21052]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1602.382241][T12153] usb 10-1: config 0 descriptor?? [ 1602.418805][T12153] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1602.635364][T12153] gspca_sunplus: reg_r err -32 [ 1603.427569][ T198] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1603.556848][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1603.611694][ T198] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1603.611727][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.640112][ T198] usb 1-1: config 0 descriptor?? [ 1603.735547][ T10] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice= 1.00 [ 1603.735637][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.735660][ T10] usb 4-1: Product: syz [ 1603.735675][ T10] usb 4-1: Manufacturer: syz [ 1603.735691][ T10] usb 4-1: SerialNumber: syz [ 1603.804961][ T10] gspca_main: conex-2.14.0 probing 0572:0041 [ 1604.050730][ T198] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1604.052370][ T198] [drm:udl_init] *ERROR* Selecting channel failed [ 1604.140988][ T198] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1604.141317][ T198] [drm] Initialized udl on minor 2 [ 1604.304709][ T198] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1604.306188][ T198] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.325705][T17207] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1604.348342][ T198] usb 1-1: USB disconnect, device number 37 [ 1604.355836][T17207] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1604.753777][ T5753] usb 10-1: USB disconnect, device number 5 [ 1605.366748][ T5753] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1605.534744][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 1605.545783][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1605.545821][ T5753] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1605.545862][ T5753] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1605.545888][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1605.588490][ T5753] usb 1-1: config 0 descriptor?? [ 1605.752514][T21093] gspca_main: conex-2.14.0 probing 0572:0041 [ 1606.009184][ T5753] ft260 0003:0403:6030.003B: unknown main item tag 0x0 [ 1606.009222][ T5753] ft260 0003:0403:6030.003B: unknown main item tag 0x0 [ 1606.162406][T21093] FAULT_INJECTION: forcing a failure. [ 1606.162406][T21093] name failslab, interval 1, probability 1, space 0, times 10 [ 1606.162452][T21093] CPU: 0 UID: 0 PID: 21093 Comm: syz.3.5033 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.162485][T21093] Tainted: [L]=SOFTLOCKUP [ 1606.162494][T21093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.162508][T21093] Call Trace: [ 1606.162518][T21093] [ 1606.162528][T21093] dump_stack_lvl+0xe8/0x150 [ 1606.162566][T21093] should_fail_ex+0x467/0x600 [ 1606.162604][T21093] should_failslab+0xa8/0x100 [ 1606.162630][T21093] __kmalloc_cache_noprof+0xa1/0x670 [ 1606.162666][T21093] ? usb_control_msg+0x73/0x3e0 [ 1606.162691][T21093] ? usb_control_msg+0x73/0x3e0 [ 1606.162724][T21093] usb_control_msg+0x73/0x3e0 [ 1606.162757][T21093] reg_w+0x12b/0x1e0 [ 1606.162796][T21093] cx_sensor+0x520/0x990 [ 1606.162834][T21093] sd_init+0xe33/0x1930 [ 1606.162871][T21093] gspca_dev_probe2+0x84b/0x1420 [ 1606.162905][T21093] usb_probe_interface+0x788/0xe50 [ 1606.162950][T21093] ? __pfx_usb_probe_interface+0x10/0x10 [ 1606.162989][T21093] ? sysfs_do_create_link_sd+0xe0/0x110 [ 1606.163016][T21093] ? driver_sysfs_add+0x1fe/0x210 [ 1606.163047][T21093] ? __pfx_usb_probe_interface+0x10/0x10 [ 1606.163079][T21093] really_probe+0x254/0xae0 [ 1606.163114][T21093] __driver_probe_device+0x1e8/0x360 [ 1606.163147][T21093] device_driver_attach+0xe0/0x1d0 [ 1606.163180][T21093] bind_store+0x1d3/0x220 [ 1606.163210][T21093] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1606.163245][T21093] kernfs_fop_write_iter+0x3a5/0x540 [ 1606.163295][T21093] vfs_write+0x61e/0xbb0 [ 1606.163333][T21093] ? __pfx_vfs_write+0x10/0x10 [ 1606.163365][T21093] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1606.163391][T21093] ? lockdep_hardirqs_on+0x7a/0x110 [ 1606.163417][T21093] ? mutex_lock_nested+0x152/0x1d0 [ 1606.163447][T21093] ? fdget_pos+0x252/0x320 [ 1606.163482][T21093] ksys_write+0x156/0x270 [ 1606.163518][T21093] ? __pfx_ksys_write+0x10/0x10 [ 1606.163560][T21093] do_syscall_64+0x17b/0x530 [ 1606.163584][T21093] ? irqentry_exit+0x10f/0x8f0 [ 1606.163606][T21093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.163631][T21093] ? clear_bhb_loop+0x40/0x90 [ 1606.163661][T21093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.163686][T21093] RIP: 0033:0x7f5f7e67df99 [ 1606.163709][T21093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.163730][T21093] RSP: 002b:00007f5f7c894028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1606.163755][T21093] RAX: ffffffffffffffda RBX: 00007f5f7e906180 RCX: 00007f5f7e67df99 [ 1606.163773][T21093] RDX: 0000000000000007 RSI: 0000200000000c00 RDI: 0000000000000004 [ 1606.163789][T21093] RBP: 00007f5f7e714ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1606.163803][T21093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1606.163817][T21093] R13: 00007f5f7e906218 R14: 00007f5f7e906180 R15: 00007ffd5b1cc268 [ 1606.163855][T21093] [ 1606.164963][ C1] FAULT_INJECTION: forcing a failure. [ 1606.164963][ C1] name failslab, interval 1, probability 1, space 0, times 9 [ 1606.165005][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.165039][ C1] Tainted: [L]=SOFTLOCKUP [ 1606.165047][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.165063][ C1] Call Trace: [ 1606.165073][ C1] [ 1606.165084][ C1] dump_stack_lvl+0xe8/0x150 [ 1606.165124][ C1] should_fail_ex+0x467/0x600 [ 1606.165162][ C1] should_failslab+0xa8/0x100 [ 1606.165190][ C1] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1606.165226][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1606.165257][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1606.165297][ C1] __alloc_skb+0x1d7/0x7a0 [ 1606.165334][ C1] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1606.165376][ C1] tcp_write_xmit+0x134e/0x6400 [ 1606.165463][ C1] __tcp_push_pending_frames+0x96/0x380 [ 1606.165499][ C1] tcp_rcv_established+0xecb/0x2910 [ 1606.165557][ C1] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1606.165590][ C1] ? rcu_is_watching+0x15/0xb0 [ 1606.165620][ C1] ? rt_spin_lock_nested+0x20c/0x3f0 [ 1606.165663][ C1] tcp_v4_do_rcv+0x959/0x13f0 [ 1606.165696][ C1] tcp_v4_rcv+0x27d2/0x3160 [ 1606.165770][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1606.165794][ C1] ? raw_local_deliver+0x345/0x1010 [ 1606.165834][ C1] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1606.165861][ C1] ip_protocol_deliver_rcu+0x21d/0x440 [ 1606.165888][ C1] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 1606.165915][ C1] ip_local_deliver_finish+0x3bb/0x6f0 [ 1606.165950][ C1] NF_HOOK+0x336/0x3c0 [ 1606.165976][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1606.166002][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1606.166024][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1606.166051][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1606.166085][ C1] ? ip_local_deliver+0x113/0x190 [ 1606.166113][ C1] NF_HOOK+0x336/0x3c0 [ 1606.166140][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1606.166164][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1606.166187][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1606.166213][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1606.166244][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1606.166267][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1606.166291][ C1] ? process_backlog+0x261/0xc50 [ 1606.166320][ C1] process_backlog+0x564/0xc50 [ 1606.166373][ C1] __napi_poll+0xae/0x550 [ 1606.166406][ C1] net_rx_action+0x621/0xd70 [ 1606.166452][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1606.166506][ C1] ? rt_spin_unlock+0x157/0x200 [ 1606.166551][ C1] handle_softirqs+0x1d9/0x6c0 [ 1606.166590][ C1] run_ktimerd+0x69/0x100 [ 1606.166623][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1606.166655][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1606.166691][ C1] kthread+0x388/0x470 [ 1606.166723][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1606.166760][ C1] ? __pfx_kthread+0x10/0x10 [ 1606.166794][ C1] ret_from_fork+0x514/0xb70 [ 1606.166829][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1606.166863][ C1] ? __switch_to+0xc89/0x1420 [ 1606.166986][ C1] ? __pfx_kthread+0x10/0x10 [ 1606.167149][ C1] ret_from_fork_asm+0x1a/0x30 [ 1606.167270][ C1] [ 1606.311375][T12836] FAULT_INJECTION: forcing a failure. [ 1606.311375][T12836] name failslab, interval 1, probability 1, space 0, times 5 [ 1606.311648][T12836] CPU: 1 UID: 0 PID: 12836 Comm: kworker/u8:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.311753][T12836] Tainted: [L]=SOFTLOCKUP [ 1606.311775][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.311816][T12836] Workqueue: events_unbound nsim_dev_trap_report_work [ 1606.311929][T12836] Call Trace: [ 1606.311953][T12836] [ 1606.311991][T12836] dump_stack_lvl+0xe8/0x150 [ 1606.312097][T12836] should_fail_ex+0x467/0x600 [ 1606.312192][T12836] should_failslab+0xa8/0x100 [ 1606.312262][T12836] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1606.312355][T12836] ? __alloc_skb+0x1d7/0x7a0 [ 1606.312429][T12836] ? __alloc_skb+0x1d7/0x7a0 [ 1606.312532][T12836] __alloc_skb+0x1d7/0x7a0 [ 1606.312622][T12836] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1606.312773][T12836] ? process_one_work+0x7fd/0x1480 [ 1606.312845][T12836] process_one_work+0xaaf/0x1480 [ 1606.312971][T12836] ? __pfx_process_one_work+0x10/0x10 [ 1606.313017][T12836] ? do_raw_spin_lock+0x12b/0x2f0 [ 1606.313056][T12836] ? assign_work+0x3cf/0x5d0 [ 1606.313156][T12836] worker_thread+0xb05/0x10d0 [ 1606.313261][T12836] ? __kthread_parkme+0x71/0x1f0 [ 1606.313367][T12836] kthread+0x388/0x470 [ 1606.313445][T12836] ? __pfx_worker_thread+0x10/0x10 [ 1606.313507][T12836] ? __pfx_kthread+0x10/0x10 [ 1606.313591][T12836] ret_from_fork+0x514/0xb70 [ 1606.313683][T12836] ? __pfx_ret_from_fork+0x10/0x10 [ 1606.313786][T12836] ? __switch_to+0xc89/0x1420 [ 1606.313870][T12836] ? __pfx_kthread+0x10/0x10 [ 1606.313957][T12836] ret_from_fork_asm+0x1a/0x30 [ 1606.314096][T12836] [ 1606.336383][ C0] FAULT_INJECTION: forcing a failure. [ 1606.336383][ C0] name failslab, interval 1, probability 1, space 0, times 4 [ 1606.336418][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.336444][ C0] Tainted: [L]=SOFTLOCKUP [ 1606.336451][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.336463][ C0] Call Trace: [ 1606.336470][ C0] [ 1606.336480][ C0] dump_stack_lvl+0xe8/0x150 [ 1606.336511][ C0] should_fail_ex+0x467/0x600 [ 1606.336542][ C0] should_failslab+0xa8/0x100 [ 1606.336563][ C0] __kmalloc_noprof+0xfb/0x790 [ 1606.336589][ C0] ? ret_from_fork+0x514/0xb70 [ 1606.336614][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1606.336643][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1606.336667][ C0] ? ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1606.336699][ C0] ieee802_11_parse_elems_full+0x14b/0x2db0 [ 1606.336734][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1606.336767][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1606.336810][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 1606.336836][ C0] ? cfg80211_update_known_bss+0xa51/0x1430 [ 1606.336869][ C0] ieee80211_inform_bss+0x163/0x10d0 [ 1606.336895][ C0] ? __cfg80211_bss_update+0x125c/0x2010 [ 1606.336919][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1606.336936][ C0] ? rt_spin_lock+0x20e/0x400 [ 1606.336968][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 1606.336990][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 1606.337010][ C0] cfg80211_inform_single_bss_data+0xd98/0x1bf0 [ 1606.337032][ C0] ? cfg80211_inform_single_bss_data+0xc06/0x1bf0 [ 1606.337062][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 1606.337104][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1606.337137][ C0] ? cfg80211_inform_bss_data+0x248/0x3d50 [ 1606.337164][ C0] cfg80211_inform_bss_data+0x25b/0x3d50 [ 1606.337214][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 1606.337237][ C0] ? ieee80211_rx_handlers+0x106/0xc8d0 [ 1606.337270][ C0] ? __pfx_ieee80211_rx_handlers+0x10/0x10 [ 1606.337298][ C0] ? lock_acquire+0x115/0x350 [ 1606.337344][ C0] ? try_to_take_rt_mutex+0x842/0xb00 [ 1606.337374][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1606.337392][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1606.337422][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1606.337450][ C0] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 1606.337480][ C0] ? ieee80211_bss_info_update+0x30f/0xa50 [ 1606.337505][ C0] ieee80211_bss_info_update+0x791/0xa50 [ 1606.337531][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 1606.337565][ C0] ? rt_spin_unlock+0x157/0x200 [ 1606.337590][ C0] ? ieee80211_get_channel_khz+0x15b/0x8a0 [ 1606.337615][ C0] ieee80211_scan_rx+0x552/0xa40 [ 1606.337644][ C0] ieee80211_rx_list+0x2d23/0x3b40 [ 1606.337666][ C0] ? __lock_acquire+0x6df/0x2e40 [ 1606.337708][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 1606.337730][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1606.337773][ C0] ? lock_acquire+0x115/0x350 [ 1606.337808][ C0] ? reacquire_held_locks+0x117/0x1a0 [ 1606.337829][ C0] ? rt_spin_lock+0x1e0/0x400 [ 1606.337857][ C0] ? ieee80211_rx_napi+0xd1/0x3d0 [ 1606.337876][ C0] ieee80211_rx_napi+0x1ad/0x3d0 [ 1606.337900][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 1606.337921][ C0] ? rt_spin_unlock+0x163/0x200 [ 1606.337948][ C0] ? skb_dequeue+0x11a/0x150 [ 1606.337972][ C0] ieee80211_handle_queued_frames+0xe4/0x1d0 [ 1606.338007][ C0] tasklet_action_common+0x31c/0x600 [ 1606.338038][ C0] handle_softirqs+0x1d9/0x6c0 [ 1606.338067][ C0] run_ktimerd+0x69/0x100 [ 1606.338090][ C0] smpboot_thread_fn+0x57c/0xa80 [ 1606.338116][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 1606.338147][ C0] kthread+0x388/0x470 [ 1606.338173][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1606.338193][ C0] ? __pfx_kthread+0x10/0x10 [ 1606.338219][ C0] ret_from_fork+0x514/0xb70 [ 1606.338261][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1606.338287][ C0] ? __switch_to+0xc89/0x1420 [ 1606.338312][ C0] ? __pfx_kthread+0x10/0x10 [ 1606.338341][ C0] ret_from_fork_asm+0x1a/0x30 [ 1606.338386][ C0] [ 1606.339140][ C1] FAULT_INJECTION: forcing a failure. [ 1606.339140][ C1] name failslab, interval 1, probability 1, space 0, times 3 [ 1606.339244][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.339324][ C1] Tainted: [L]=SOFTLOCKUP [ 1606.339353][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.339394][ C1] Call Trace: [ 1606.339415][ C1] [ 1606.339446][ C1] dump_stack_lvl+0xe8/0x150 [ 1606.339539][ C1] should_fail_ex+0x467/0x600 [ 1606.339639][ C1] should_failslab+0xa8/0x100 [ 1606.339729][ C1] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1606.339835][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1606.339916][ C1] ? __alloc_skb+0x1d7/0x7a0 [ 1606.340020][ C1] __alloc_skb+0x1d7/0x7a0 [ 1606.340114][ C1] skb_copy+0x19d/0x870 [ 1606.340218][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1606.340327][ C1] mac80211_hwsim_tx_frame_no_nl+0xfab/0x1760 [ 1606.340374][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 1606.340527][ C1] ? __pfx_mac80211_hwsim_tx_frame_no_nl+0x10/0x10 [ 1606.340626][ C1] ? __ieee80211_beacon_get+0x34/0x1820 [ 1606.340748][ C1] ? ieee80211_beacon_get_tim+0x218/0x2c0 [ 1606.340883][ C1] mac80211_hwsim_tx_frame+0x199/0x1f0 [ 1606.340973][ C1] mac80211_hwsim_beacon_tx+0x396/0x820 [ 1606.341087][ C1] __iterate_interfaces+0x2af/0x5a0 [ 1606.341186][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1606.341267][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1606.341362][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 1606.341459][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1606.341574][ C1] mac80211_hwsim_beacon+0xb2/0x2b0 [ 1606.341650][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1606.341744][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 1606.341885][ C1] hrtimer_run_softirq+0x18f/0x260 [ 1606.341947][ C1] handle_softirqs+0x1d9/0x6c0 [ 1606.342077][ C1] run_ktimerd+0x69/0x100 [ 1606.342149][ C1] smpboot_thread_fn+0x57c/0xa80 [ 1606.342233][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 1606.342340][ C1] kthread+0x388/0x470 [ 1606.342425][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1606.342490][ C1] ? __pfx_kthread+0x10/0x10 [ 1606.342581][ C1] ret_from_fork+0x514/0xb70 [ 1606.342674][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1606.342760][ C1] ? __switch_to+0xc89/0x1420 [ 1606.342865][ C1] ? __pfx_kthread+0x10/0x10 [ 1606.342967][ C1] ret_from_fork_asm+0x1a/0x30 [ 1606.343101][ C1] [ 1606.423816][T21120] FAULT_INJECTION: forcing a failure. [ 1606.423816][T21120] name failslab, interval 1, probability 1, space 0, times 1 [ 1606.423938][T21120] CPU: 1 UID: 0 PID: 21120 Comm: syz.9.5037 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1606.424016][T21120] Tainted: [L]=SOFTLOCKUP [ 1606.424044][T21120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.424086][T21120] Call Trace: [ 1606.424108][T21120] [ 1606.424136][T21120] dump_stack_lvl+0xe8/0x150 [ 1606.424233][T21120] should_fail_ex+0x467/0x600 [ 1606.424322][T21120] should_failslab+0xa8/0x100 [ 1606.424395][T21120] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1606.424490][T21120] ? __alloc_skb+0x1d7/0x7a0 [ 1606.424571][T21120] ? __alloc_skb+0x1d7/0x7a0 [ 1606.424668][T21120] __alloc_skb+0x1d7/0x7a0 [ 1606.424770][T21120] tcp_stream_alloc_skb+0x3f/0x5c0 [ 1606.424872][T21120] tcp_write_xmit+0x134e/0x6400 [ 1606.425087][T21120] __tcp_push_pending_frames+0x96/0x380 [ 1606.425201][T21120] tcp_sendmsg_locked+0x2095/0x55c0 [ 1606.425444][T21120] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1606.425565][T21120] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 1606.425631][T21120] ? lockdep_hardirqs_on+0x7a/0x110 [ 1606.425707][T21120] tcp_sendmsg+0x2f/0x50 [ 1606.425795][T21120] ? __pfx_inet_sendmsg+0x10/0x10 [ 1606.425878][T21120] sock_sendmsg_nosec+0x10e/0x180 [ 1606.425953][T21120] __sys_sendto+0x41e/0x5d0 [ 1606.426058][T21120] ? __pfx___sys_sendto+0x10/0x10 [ 1606.426210][T21120] ? rcu_is_watching+0x15/0xb0 [ 1606.426296][T21120] __x64_sys_sendto+0xde/0x100 [ 1606.426391][T21120] do_syscall_64+0x17b/0x530 [ 1606.426449][T21120] ? irqentry_exit+0x10f/0x8f0 [ 1606.426511][T21120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.426555][T21120] ? clear_bhb_loop+0x40/0x90 [ 1606.426588][T21120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.426629][T21120] RIP: 0033:0x7f5cedccdf99 [ 1606.426651][T21120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.426672][T21120] RSP: 002b:00007f5cebf26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1606.426696][T21120] RAX: ffffffffffffffda RBX: 00007f5cedf55fa0 RCX: 00007f5cedccdf99 [ 1606.426714][T21120] RDX: 00000000000109e8 RSI: 00002000000004c0 RDI: 0000000000000004 [ 1606.426729][T21120] RBP: 00007f5cedd64ec4 R08: 0000000000000000 R09: 0000000000000006 [ 1606.426752][T21120] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000000 [ 1606.426766][T21120] R13: 00007f5cedf56038 R14: 00007f5cedf55fa0 R15: 00007fffb30c1508 [ 1606.426877][T21120] [ 1606.487490][ T5753] ft260 0003:0403:6030.003B: chip code: 0000 0000 [ 1606.928915][ T5753] ft260 0003:0403:6030.003B: failed to retrieve system status [ 1607.028857][ T5753] ft260 0003:0403:6030.003B: probe with driver ft260 failed with error -32 [ 1607.554994][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.555095][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.425203][ T32] usb 4-1: USB disconnect, device number 119 [ 1608.602845][ T10] usb 1-1: USB disconnect, device number 38 [ 1609.026820][ T32] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 1609.107121][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1609.179427][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1609.180162][ T32] usb 4-1: not running at top speed; connect to a high speed hub [ 1609.186310][ T32] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 1609.218433][ T32] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 1609.218480][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.218502][ T32] usb 4-1: Product: syz [ 1609.218518][ T32] usb 4-1: Manufacturer: syz [ 1609.218535][ T32] usb 4-1: SerialNumber: syz [ 1609.300216][ T10] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1609.300248][ T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1609.325969][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1609.326005][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.326028][ T10] usb 1-1: Product: syz [ 1609.326044][ T10] usb 1-1: Manufacturer: syz [ 1609.326060][ T10] usb 1-1: SerialNumber: syz [ 1609.364823][ T10] usb 1-1: config 0 descriptor?? [ 1609.390306][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1610.057709][ T32] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1610.057741][ T32] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1610.057881][ T32] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 1610.057904][ T32] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 1610.060872][ T32] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1610.252785][ T10] gspca_sunplus: reg_r err -32 [ 1610.252885][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 1610.276152][ T10] usb 1-1: USB disconnect, device number 39 [ 1610.478561][ T32] usb 4-1: USB disconnect, device number 120 [ 1610.634475][T21030] udevd[21030]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1610.867793][T13981] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1611.026894][ T32] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1611.061686][T13981] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1611.061721][T13981] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1611.061743][T13981] usb 10-1: Product: syz [ 1611.061759][T13981] usb 10-1: Manufacturer: syz [ 1611.061774][T13981] usb 10-1: SerialNumber: syz [ 1611.107846][T13981] usb 10-1: config 0 descriptor?? [ 1611.144683][T13981] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1611.228230][ T32] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1611.228320][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.294457][ T32] usb 4-1: config 0 descriptor?? [ 1611.382226][T13981] gspca_sunplus: reg_r err -32 [ 1611.730675][ T32] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1611.731199][ T32] [drm:udl_init] *ERROR* Selecting channel failed [ 1611.814372][ T32] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1611.814402][ T32] [drm] Initialized udl on minor 2 [ 1611.890234][ T32] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1611.890755][ T32] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1611.892020][T13981] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1611.894108][T13981] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1611.894358][T13981] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1611.951438][ T32] usb 4-1: USB disconnect, device number 121 [ 1612.128662][T21002] FAULT_INJECTION: forcing a failure. [ 1612.128662][T21002] name failslab, interval 1, probability 1, space 0, times 10 [ 1612.128706][T21002] CPU: 1 UID: 0 PID: 21002 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.128737][T21002] Tainted: [L]=SOFTLOCKUP [ 1612.128745][T21002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.128760][T21002] Call Trace: [ 1612.128769][T21002] [ 1612.128779][T21002] dump_stack_lvl+0xe8/0x150 [ 1612.128814][T21002] should_fail_ex+0x467/0x600 [ 1612.128851][T21002] should_failslab+0xa8/0x100 [ 1612.128875][T21002] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1612.128910][T21002] ? __alloc_skb+0x1d7/0x7a0 [ 1612.128939][T21002] ? __alloc_skb+0x1d7/0x7a0 [ 1612.128975][T21002] __alloc_skb+0x1d7/0x7a0 [ 1612.129009][T21002] alloc_skb_with_frags+0xc6/0x760 [ 1612.129042][T21002] ? lockdep_hardirqs_on+0x7a/0x110 [ 1612.129070][T21002] ? netlink_unicast+0x7fd/0x990 [ 1612.129104][T21002] sock_alloc_send_pskb+0x884/0x9a0 [ 1612.129145][T21002] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1612.129175][T21002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.129212][T21002] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1612.129250][T21002] unix_dgram_sendmsg+0x4da/0x17b0 [ 1612.129285][T21002] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.129326][T21002] ? rcu_is_watching+0x15/0xb0 [ 1612.129353][T21002] ? sock_sendmsg_nosec+0xc2/0x180 [ 1612.129382][T21002] ? ____sys_sendmsg+0x69c/0x870 [ 1612.129424][T21002] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1612.129463][T21002] ? import_iovec+0x73/0xa0 [ 1612.129500][T21002] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1612.129529][T21002] sock_sendmsg_nosec+0x13a/0x180 [ 1612.129558][T21002] sock_write_iter+0x2e4/0x3f0 [ 1612.129585][T21002] ? __pfx_sock_write_iter+0x10/0x10 [ 1612.129616][T21002] ? bpf_lsm_file_permission+0x9/0x20 [ 1612.129649][T21002] ? security_file_permission+0x68/0x220 [ 1612.129685][T21002] vfs_write+0x61e/0xbb0 [ 1612.129721][T21002] ? __pfx_vfs_write+0x10/0x10 [ 1612.129771][T21002] ksys_write+0x156/0x270 [ 1612.129801][T21002] ? __pfx_ksys_write+0x10/0x10 [ 1612.129840][T21002] do_syscall_64+0x17b/0x530 [ 1612.129863][T21002] ? irqentry_exit+0x10f/0x8f0 [ 1612.129885][T21002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.129909][T21002] ? clear_bhb_loop+0x40/0x90 [ 1612.129938][T21002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.129961][T21002] RIP: 0033:0x7fe407658407 [ 1612.129983][T21002] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1612.130003][T21002] RSP: 002b:00007ffe5f0983f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000001 [ 1612.130027][T21002] RAX: ffffffffffffffda RBX: 00007fe40756a880 RCX: 00007fe407658407 [ 1612.130044][T21002] RDX: 0000000000000000 RSI: 00007ffe5f098497 RDI: 000000000000000a [ 1612.130059][T21002] RBP: 000000000000000a R08: 0000000000000000 R09: 0000000000000000 [ 1612.130072][T21002] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fe40756a6e8 [ 1612.130087][T21002] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1612.130119][T21002] [ 1612.130554][T21197] FAULT_INJECTION: forcing a failure. [ 1612.130554][T21197] name failslab, interval 1, probability 1, space 0, times 10 [ 1612.130590][T21197] CPU: 0 UID: 0 PID: 21197 Comm: cmp Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.130618][T21197] Tainted: [L]=SOFTLOCKUP [ 1612.130626][T21197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.130638][T21197] Call Trace: [ 1612.130645][T21197] [ 1612.130654][T21197] dump_stack_lvl+0xe8/0x150 [ 1612.130686][T21197] should_fail_ex+0x467/0x600 [ 1612.130719][T21197] should_failslab+0xa8/0x100 [ 1612.130743][T21197] __kmalloc_noprof+0xfb/0x790 [ 1612.130774][T21197] ? tomoyo_realpath_from_path+0xef/0x640 [ 1612.130818][T21197] ? tomoyo_realpath_from_path+0xef/0x640 [ 1612.130857][T21197] tomoyo_realpath_from_path+0xef/0x640 [ 1612.130903][T21197] tomoyo_check_open_permission+0x229/0x470 [ 1612.130932][T21197] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1612.130964][T21197] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1612.130992][T21197] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.131058][T21197] ? rt_spin_unlock+0x157/0x200 [ 1612.131086][T21197] ? tomoyo_file_open+0x166/0x220 [ 1612.131126][T21197] security_file_open+0x9c/0x200 [ 1612.131155][T21197] do_dentry_open+0x4be/0x1420 [ 1612.131202][T21197] vfs_open+0x3b/0x350 [ 1612.131231][T21197] ? path_openat+0x2e4d/0x3850 [ 1612.131261][T21197] path_openat+0x2e64/0x3850 [ 1612.131297][T21197] ? __kasan_slab_alloc+0x6c/0x80 [ 1612.131331][T21197] ? do_sys_openat2+0xcc/0x200 [ 1612.131364][T21197] ? __x64_sys_openat+0x138/0x170 [ 1612.131396][T21197] ? do_syscall_64+0x17b/0x530 [ 1612.131441][T21197] do_file_open+0x23e/0x4a0 [ 1612.131467][T21197] ? lockdep_hardirqs_on+0x7a/0x110 [ 1612.131494][T21197] ? __pfx_do_file_open+0x10/0x10 [ 1612.131546][T21197] ? alloc_fd+0x654/0x6d0 [ 1612.131580][T21197] do_sys_openat2+0x115/0x200 [ 1612.131618][T21197] ? __pfx_do_sys_openat2+0x10/0x10 [ 1612.131658][T21197] ? fput_close_sync+0x1f8/0x240 [ 1612.131680][T21197] ? __pfx_fput_close_sync+0x10/0x10 [ 1612.131709][T21197] __x64_sys_openat+0x138/0x170 [ 1612.131750][T21197] do_syscall_64+0x17b/0x530 [ 1612.131773][T21197] ? irqentry_exit+0x10f/0x8f0 [ 1612.131794][T21197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.131828][T21197] ? clear_bhb_loop+0x40/0x90 [ 1612.131856][T21197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.131878][T21197] RIP: 0033:0x7f923051c0ba [ 1612.131899][T21197] Code: 41 89 f2 48 89 54 24 e0 41 83 e2 40 75 2a 89 f0 f7 d0 a9 00 00 41 00 74 1f 89 f2 b8 01 01 00 00 48 89 fe bf 9c ff ff ff 0f 05 <48> 3d 00 f0 ff ff 77 2e c3 0f 1f 44 00 00 48 8d 44 24 08 c7 44 24 [ 1612.131920][T21197] RSP: 002b:00007fff43624ab8 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1612.131943][T21197] RAX: ffffffffffffffda RBX: 00007fff43624b30 RCX: 00007f923051c0ba [ 1612.131960][T21197] RDX: 0000000000080000 RSI: 00007fff43624b30 RDI: 00000000ffffff9c [ 1612.131975][T21197] RBP: 00007fff43624b20 R08: 00007fff43624d27 R09: 0000000000000000 [ 1612.131990][T21197] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000011 [ 1612.132015][T21197] R13: 00007f92304f0000 R14: 00007fff43624d40 R15: 0000000000000000 [ 1612.132048][T21197] [ 1612.132719][T21197] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1612.141980][T21002] udevd[21002]: failed to send result of seq 45206 to main daemon: No buffer space available [ 1612.223171][T20583] FAULT_INJECTION: forcing a failure. [ 1612.223171][T20583] name failslab, interval 1, probability 1, space 0, times 7 [ 1612.223210][T20583] CPU: 1 UID: 0 PID: 20583 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.223241][T20583] Tainted: [L]=SOFTLOCKUP [ 1612.223249][T20583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.223264][T20583] Workqueue: events_unbound nsim_dev_trap_report_work [ 1612.223314][T20583] Call Trace: [ 1612.223323][T20583] [ 1612.223333][T20583] dump_stack_lvl+0xe8/0x150 [ 1612.223366][T20583] should_fail_ex+0x467/0x600 [ 1612.223408][T20583] should_failslab+0xa8/0x100 [ 1612.223433][T20583] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1612.223467][T20583] ? __alloc_skb+0x1d7/0x7a0 [ 1612.223495][T20583] ? __alloc_skb+0x1d7/0x7a0 [ 1612.223544][T20583] __alloc_skb+0x1d7/0x7a0 [ 1612.223578][T20583] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1612.223625][T20583] ? process_one_work+0x7fd/0x1480 [ 1612.223650][T20583] process_one_work+0xaaf/0x1480 [ 1612.223696][T20583] ? __pfx_process_one_work+0x10/0x10 [ 1612.223717][T20583] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.223758][T20583] ? assign_work+0x3cf/0x5d0 [ 1612.223786][T20583] worker_thread+0xb05/0x10d0 [ 1612.223841][T20583] ? __kthread_parkme+0x71/0x1f0 [ 1612.223879][T20583] kthread+0x388/0x470 [ 1612.223950][T20583] ? __pfx_worker_thread+0x10/0x10 [ 1612.224021][T20583] ? __pfx_kthread+0x10/0x10 [ 1612.224062][T20583] ret_from_fork+0x514/0xb70 [ 1612.224097][T20583] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.224127][T20583] ? __switch_to+0xc89/0x1420 [ 1612.224156][T20583] ? __pfx_kthread+0x10/0x10 [ 1612.224246][T20583] ret_from_fork_asm+0x1a/0x30 [ 1612.224381][T20583] [ 1612.345168][ T4951] FAULT_INJECTION: forcing a failure. [ 1612.345168][ T4951] name failslab, interval 1, probability 1, space 0, times 5 [ 1612.345275][ T4951] CPU: 1 UID: 0 PID: 4951 Comm: klogd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.345381][ T4951] Tainted: [L]=SOFTLOCKUP [ 1612.345402][ T4951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.345435][ T4951] Call Trace: [ 1612.345465][ T4951] [ 1612.345487][ T4951] dump_stack_lvl+0xe8/0x150 [ 1612.345593][ T4951] should_fail_ex+0x467/0x600 [ 1612.345712][ T4951] should_failslab+0xa8/0x100 [ 1612.345774][ T4951] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1612.345853][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1612.345926][ T4951] ? __alloc_skb+0x1d7/0x7a0 [ 1612.346017][ T4951] __alloc_skb+0x1d7/0x7a0 [ 1612.346100][ T4951] alloc_skb_with_frags+0xc6/0x760 [ 1612.346180][ T4951] ? __lock_acquire+0x6df/0x2e40 [ 1612.346263][ T4951] sock_alloc_send_pskb+0x884/0x9a0 [ 1612.346390][ T4951] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1612.346453][ T4951] ? sock_def_readable+0xae/0x550 [ 1612.346532][ T4951] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1612.346619][ T4951] unix_dgram_sendmsg+0x4da/0x17b0 [ 1612.346668][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1612.346764][ T4951] ? finish_task_switch+0x412/0xc60 [ 1612.346850][ T4951] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1612.346920][ T4951] sock_sendmsg_nosec+0x13a/0x180 [ 1612.347027][ T4951] __sys_sendto+0x41e/0x5d0 [ 1612.347137][ T4951] ? __pfx___sys_sendto+0x10/0x10 [ 1612.347250][ T4951] ? kvm_sched_clock_read+0x11/0x20 [ 1612.347372][ T4951] ? rcu_is_watching+0x15/0xb0 [ 1612.347461][ T4951] __x64_sys_sendto+0xde/0x100 [ 1612.347550][ T4951] do_syscall_64+0x17b/0x530 [ 1612.347604][ T4951] ? irqentry_exit+0x10f/0x8f0 [ 1612.347665][ T4951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.347728][ T4951] ? clear_bhb_loop+0x40/0x90 [ 1612.347791][ T4951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.347845][ T4951] RIP: 0033:0x7fa56b87e407 [ 1612.347905][ T4951] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1612.347955][ T4951] RSP: 002b:00007fff3330ca00 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 1612.348022][ T4951] RAX: ffffffffffffffda RBX: 00007fa56b72ec80 RCX: 00007fa56b87e407 [ 1612.348065][ T4951] RDX: 000000000000005b RSI: 00007fff3330cb40 RDI: 0000000000000003 [ 1612.348093][ T4951] RBP: 00007fff3330cf70 R08: 0000000000000000 R09: 0000000000000000 [ 1612.348108][ T4951] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fff3330cf88 [ 1612.348154][ T4951] R13: 00007fff3330cb40 R14: 0000000000000040 R15: 00007fff3330cb40 [ 1612.348223][ T4951] [ 1612.364650][ T1392] FAULT_INJECTION: forcing a failure. [ 1612.364650][ T1392] name failslab, interval 1, probability 1, space 0, times 5 [ 1612.364759][ T1392] CPU: 1 UID: 0 PID: 1392 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1612.364849][ T1392] Tainted: [L]=SOFTLOCKUP [ 1612.364858][ T1392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1612.364875][ T1392] Workqueue: events_unbound nsim_dev_trap_report_work [ 1612.364979][ T1392] Call Trace: [ 1612.365008][ T1392] [ 1612.365040][ T1392] dump_stack_lvl+0xe8/0x150 [ 1612.365149][ T1392] should_fail_ex+0x467/0x600 [ 1612.365235][ T1392] should_failslab+0xa8/0x100 [ 1612.365312][ T1392] kmem_cache_alloc_node_noprof+0xac/0x660 [ 1612.365391][ T1392] ? __alloc_skb+0x1d7/0x7a0 [ 1612.365466][ T1392] ? __alloc_skb+0x1d7/0x7a0 [ 1612.365567][ T1392] __alloc_skb+0x1d7/0x7a0 [ 1612.365661][ T1392] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 1612.365795][ T1392] ? process_one_work+0x7fd/0x1480 [ 1612.365866][ T1392] process_one_work+0xaaf/0x1480 [ 1612.366053][ T1392] ? __pfx_process_one_work+0x10/0x10 [ 1612.366119][ T1392] ? do_raw_spin_lock+0x12b/0x2f0 [ 1612.366219][ T1392] ? assign_work+0x3cf/0x5d0 [ 1612.366297][ T1392] worker_thread+0xb05/0x10d0 [ 1612.366404][ T1392] kthread+0x388/0x470 [ 1612.366508][ T1392] ? __pfx_worker_thread+0x10/0x10 [ 1612.366574][ T1392] ? __pfx_kthread+0x10/0x10 [ 1612.366632][ T1392] ret_from_fork+0x514/0xb70 [ 1612.366702][ T1392] ? __pfx_ret_from_fork+0x10/0x10 [ 1612.366795][ T1392] ? __switch_to+0xc89/0x1420 [ 1612.366870][ T1392] ? __pfx_kthread+0x10/0x10 [ 1612.366964][ T1392] ret_from_fork_asm+0x1a/0x30 [ 1612.367130][ T1392] [ 1613.639753][ T198] usb 10-1: USB disconnect, device number 6 [ 1613.853636][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1615.856010][ T4911] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1615.960813][ T4911] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1615.978681][ T4911] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1615.999883][ T4911] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1616.019072][ T4911] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1617.159293][ T198] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1617.442645][ T198] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1617.442694][ T198] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1617.442717][ T198] usb 10-1: Product: syz [ 1617.442734][ T198] usb 10-1: Manufacturer: syz [ 1617.442751][ T198] usb 10-1: SerialNumber: syz [ 1617.486819][ T198] usb 10-1: config 0 descriptor?? [ 1617.521929][ T198] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1617.753003][ T198] gspca_sunplus: reg_r err -32 [ 1617.945809][T21287] fuse: Bad value for 'fd' [ 1618.354402][T15824] Bluetooth: hci0: command tx timeout [ 1619.209067][ T1392] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1619.294638][T21322] fuse: Bad value for 'fd' [ 1619.686971][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1619.891008][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1619.891039][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.954093][ T10] usb 4-1: config 0 descriptor?? [ 1620.011005][ T5689] usb 10-1: USB disconnect, device number 7 [ 1620.384726][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1620.400111][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1620.471712][T15824] Bluetooth: hci0: command tx timeout [ 1620.475340][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1620.475365][ T10] [drm] Initialized udl on minor 2 [ 1620.501509][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1620.502002][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1620.520582][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1620.521416][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1620.521641][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1620.557394][ T10] usb 4-1: USB disconnect, device number 122 [ 1620.790224][T21351] fuse: Bad value for 'fd' [ 1620.835709][ T1392] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1621.606135][ T32] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1621.832446][ T32] usb 10-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1621.832483][ T32] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.832505][ T32] usb 10-1: Product: syz [ 1621.832521][ T32] usb 10-1: Manufacturer: syz [ 1621.832537][ T32] usb 10-1: SerialNumber: syz [ 1621.908359][ T32] usb 10-1: config 0 descriptor?? [ 1621.937554][ T32] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1621.968937][T13981] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1622.125767][T13981] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1622.125801][T13981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.167366][T13981] usb 1-1: config 0 descriptor?? [ 1622.172218][ T1392] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1622.507025][T15824] Bluetooth: hci0: command tx timeout [ 1622.585661][T13981] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1622.586525][T13981] [drm:udl_init] *ERROR* Selecting channel failed [ 1622.660217][T13981] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1622.660244][T13981] [drm] Initialized udl on minor 2 [ 1622.663697][T13981] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1622.664175][T13981] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1622.678930][ T32] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1622.683458][ T32] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1622.684141][ T32] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1622.729264][T13981] usb 1-1: USB disconnect, device number 40 [ 1623.166250][ T1392] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1623.736865][ T5922] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1623.891923][ T5922] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1623.891947][ T5922] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1623.895211][ T5922] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1623.895246][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.895261][ T5922] usb 4-1: Product: syz [ 1623.895272][ T5922] usb 4-1: Manufacturer: syz [ 1623.895284][ T5922] usb 4-1: SerialNumber: syz [ 1623.962753][ T5922] usb 4-1: config 0 descriptor?? [ 1623.981517][ T5922] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1624.400379][ T10] usb 10-1: USB disconnect, device number 8 [ 1624.591590][T15824] Bluetooth: hci0: command tx timeout [ 1624.813793][ T5922] gspca_sunplus: reg_r err -32 [ 1624.813937][ T5922] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1624.869792][ T5922] usb 4-1: USB disconnect, device number 123 [ 1625.770090][T21247] bridge0: port 1(bridge_slave_0) entered blocking state [ 1625.770391][T21247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1625.770663][T21247] bridge_slave_0: entered allmulticast mode [ 1625.777669][ T32] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1625.819439][T21247] bridge_slave_0: entered promiscuous mode [ 1625.835608][T21247] bridge0: port 2(bridge_slave_1) entered blocking state [ 1625.835981][T21247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1625.836329][T21247] bridge_slave_1: entered allmulticast mode [ 1625.869090][T21247] bridge_slave_1: entered promiscuous mode [ 1625.928480][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 1625.933168][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1625.933204][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.933255][ T32] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1625.933280][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.022743][ T32] usb 1-1: config 0 descriptor?? [ 1626.209416][ T5753] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1626.362465][ T5753] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1626.362489][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.362547][ T5753] usb 4-1: Product: syz [ 1626.362559][ T5753] usb 4-1: Manufacturer: syz [ 1626.362571][ T5753] usb 4-1: SerialNumber: syz [ 1626.415645][ T5753] usb 4-1: config 0 descriptor?? [ 1626.445007][T21247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1626.470224][T21247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1626.476583][ T5753] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1626.498662][ T32] ft260 0003:0403:6030.003C: unknown main item tag 0x0 [ 1626.498929][ T32] ft260 0003:0403:6030.003C: unknown main item tag 0x0 [ 1626.598437][ T1392] bridge_slave_1: left allmulticast mode [ 1626.598592][ T1392] bridge_slave_1: left promiscuous mode [ 1626.598908][ T1392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.672719][ T32] ft260 0003:0403:6030.003C: chip code: 0000 0000 [ 1626.738562][ T1392] bridge_slave_0: left allmulticast mode [ 1626.738604][ T1392] bridge_slave_0: left promiscuous mode [ 1626.738899][ T1392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.874031][ T32] ft260 0003:0403:6030.003C: failed to retrieve system status [ 1626.874453][ T32] ft260 0003:0403:6030.003C: probe with driver ft260 failed with error -32 [ 1627.847796][ T1392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1627.927551][ T1392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1627.959214][ T1392] bond0 (unregistering): Released all slaves [ 1628.640282][ T5753] usb 1-1: USB disconnect, device number 41 [ 1628.750589][T21247] team0: Port device team_slave_0 added [ 1628.923183][ T32] usb 4-1: USB disconnect, device number 124 [ 1629.146911][T17207] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1629.150254][T21247] team0: Port device team_slave_1 added [ 1629.382956][T17207] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1629.382999][T17207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.430319][T17207] usb 1-1: config 0 descriptor?? [ 1629.505339][T21247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.505360][T21247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.505451][T21247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.839396][T17207] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1629.839892][T17207] [drm:udl_init] *ERROR* Selecting channel failed [ 1629.888897][T17207] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 1629.888926][T17207] [drm] Initialized udl on minor 2 [ 1629.923275][T17207] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1629.923779][T17207] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1629.924936][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1629.925766][ T10] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1629.926009][ T10] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 1629.982661][T17207] usb 1-1: USB disconnect, device number 42 [ 1630.021991][T21247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.022010][T21247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1630.022043][T21247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1630.689044][ T1392] hsr_slave_0: left promiscuous mode [ 1630.731044][ T1392] hsr_slave_1: left promiscuous mode [ 1630.738832][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.738916][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.892721][ T1392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1630.892747][ T1392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.124249][ T1392] veth1_macvtap: left promiscuous mode [ 1631.124363][ T1392] veth0_macvtap: left promiscuous mode [ 1631.124685][ T1392] veth1_vlan: left promiscuous mode [ 1631.124901][ T1392] veth0_vlan: left promiscuous mode [ 1631.757732][T17207] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1631.935652][T17207] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1631.935688][T17207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.983072][T17207] usb 4-1: config 0 descriptor?? [ 1632.413123][T17207] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1632.413621][T17207] [drm:udl_init] *ERROR* Selecting channel failed [ 1632.523538][T17207] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1632.523566][T17207] [drm] Initialized udl on minor 2 [ 1632.525915][T17207] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1632.526340][T17207] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1632.564766][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1632.568929][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1632.569560][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1632.587508][T17207] usb 4-1: USB disconnect, device number 125 [ 1633.168474][ T1392] team0 (unregistering): Port device team_slave_1 removed [ 1633.297380][ T1392] team0 (unregistering): Port device team_slave_0 removed [ 1633.578515][T21247] hsr_slave_0: entered promiscuous mode [ 1633.581127][T21247] hsr_slave_1: entered promiscuous mode [ 1633.583330][T21247] debugfs: 'hsr0' already exists in 'hsr' [ 1633.583358][T21247] Cannot create hsr debugfs directory [ 1633.626152][ T5257] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1633.721346][T21557] syzkaller1: entered promiscuous mode [ 1633.721373][T21557] syzkaller1: entered allmulticast mode [ 1634.321522][T21571] svc: failed to register lockdv1 RPC service (errno 111). [ 1634.322233][T21571] lockd_up: makesock failed, error=-111 [ 1636.409793][T21571] svc: failed to register nfsdv3 RPC service (errno 512). [ 1636.410130][T21571] svc: failed to register nfsaclv3 RPC service (errno 512). [ 1636.410150][T21571] failed to unregister udp with rpcbind [ 1636.446249][T21571] svc: failed to register nfsdv3 RPC service (errno 97). [ 1636.446280][T21571] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1636.446297][T21571] failed to unregister udp with rpcbind [ 1637.116070][ T5257] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1637.155186][T21606] syzkaller1: entered promiscuous mode [ 1637.155212][T21606] syzkaller1: entered allmulticast mode [ 1638.632444][ T5257] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1640.924819][T21247] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1640.980944][T21247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1640.981657][T21672] syzkaller1: entered promiscuous mode [ 1640.981683][T21672] syzkaller1: entered allmulticast mode [ 1640.985839][T21247] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1641.048572][T21247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1641.266887][ T32] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1641.377611][T21247] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1641.416892][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 1641.419389][ T32] usb 1-1: config 0 has no interfaces? [ 1641.419428][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1641.419454][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.425107][ T32] usb 1-1: config 0 descriptor?? [ 1641.475397][T21247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1641.534974][ T5257] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1641.545161][T21247] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1641.614751][T21247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1642.240570][T21247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1642.428480][T21247] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.463480][ T8844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.464466][ T8844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1642.492765][ T8844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.493024][ T8844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.744006][T21713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1642.744040][T21713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1642.744060][T21713] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5167'. [ 1643.233116][ T5257] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1643.752163][ T5684] usb 1-1: USB disconnect, device number 43 [ 1643.855864][T21247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1644.176366][ T5257] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1644.651115][T21247] veth0_vlan: entered promiscuous mode [ 1644.705552][T21247] veth1_vlan: entered promiscuous mode [ 1644.944765][T21247] veth0_macvtap: entered promiscuous mode [ 1644.964353][T21247] veth1_macvtap: entered promiscuous mode [ 1645.008032][T21247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.106974][T21247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.135897][ T1524] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.150337][ T1524] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.164229][ T1524] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.244002][ T1524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.476672][T15824] Bluetooth: hci1: command 0x0406 tx timeout [ 1645.795143][ T5257] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1646.399897][ T8844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.399919][ T8844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1646.585774][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1646.585795][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1647.259027][T21777] syzkaller1: entered promiscuous mode [ 1647.259056][T21777] syzkaller1: entered allmulticast mode [ 1648.028860][ T5684] IPVS: starting estimator thread 0... [ 1648.130457][T21804] IPVS: using max 11 ests per chain, 26400 per kthread [ 1649.053863][T21805] NFSD: Failed to start, no listeners configured. [ 1649.226946][ T5763] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1649.451675][ T5763] usb 10-1: Using ep0 maxpacket: 8 [ 1649.455835][ T5763] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.491923][ T5763] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1649.491956][ T5763] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1649.491978][ T5763] usb 10-1: Product: syz [ 1649.491993][ T5763] usb 10-1: Manufacturer: syz [ 1649.492009][ T5763] usb 10-1: SerialNumber: syz [ 1649.558382][ T5763] usb-storage 10-1:1.0: USB Mass Storage device detected [ 1649.662802][ T5763] usb-storage 10-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1649.854904][ T5763] usb 10-1: USB disconnect, device number 9 [ 1651.128256][ T4911] Bluetooth: hci4: hardware error 0x00 [ 1651.832852][ T38] audit: type=1800 audit(1785407172.396:25): pid=21898 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.5211" name="p_volume_present" dev="configfs" ino=68263 res=0 errno=0 [ 1652.933228][ T5689] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1653.076869][ T5689] usb 1-1: Using ep0 maxpacket: 32 [ 1653.081666][ T5689] usb 1-1: config 0 has no interfaces? [ 1653.098754][ T5689] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1653.098788][ T5689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1653.098820][ T5689] usb 1-1: Product: syz [ 1653.098837][ T5689] usb 1-1: Manufacturer: syz [ 1653.098855][ T5689] usb 1-1: SerialNumber: syz [ 1653.144772][ T5689] usb 1-1: config 0 descriptor?? [ 1653.418114][T15824] Bluetooth: hci2: status 0x09 [ 1653.467529][ T4911] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1654.429306][T21983] scsi_nl_rcv_msg: Msgtype 1 failed - err -3 [ 1654.705049][T21988] CIFS: bad ip= option (1) [ 1654.753555][T21988] CIFS: Attempting to mount (null) [ 1654.867202][T21988] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1654.867259][T21988] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1655.651051][T21937] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1655.727387][T18509] usb 1-1: USB disconnect, device number 44 [ 1655.876968][ T5763] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1656.046889][ T5763] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1656.046931][ T5763] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1656.052150][ T5763] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1656.052181][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1656.052202][ T5763] usb 5-1: Product: syz [ 1656.052216][ T5763] usb 5-1: Manufacturer: syz [ 1656.052231][ T5763] usb 5-1: SerialNumber: syz [ 1656.112039][ T5763] usb 5-1: config 0 descriptor?? [ 1656.164934][ T5763] usb 5-1: selecting invalid altsetting 0 [ 1656.579509][T18509] usb 5-1: USB disconnect, device number 40 [ 1656.879783][ T4911] Bluetooth: Unexpected continuation frame (len 16) [ 1657.734500][ T822] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1657.861424][T22063] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1657.861454][T22063] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1657.922451][ T822] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1657.922485][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.922508][ T822] usb 4-1: Product: syz [ 1657.922524][ T822] usb 4-1: Manufacturer: syz [ 1657.922540][ T822] usb 4-1: SerialNumber: syz [ 1657.981495][ T822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1658.099513][T22063] vhci_hcd vhci_hcd.0: Device attached [ 1658.210003][ T822] gspca_spca501: reg write: error -71 [ 1658.210023][ T822] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1658.210120][ T822] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 1658.238279][T22070] vhci_hcd: connection closed [ 1658.311723][T21126] vhci_hcd vhci_hcd.0: stop threads [ 1658.333209][T21126] vhci_hcd vhci_hcd.0: release socket [ 1658.480232][T21126] vhci_hcd vhci_hcd.0: disconnect device [ 1658.481980][ T822] usb 4-1: USB disconnect, device number 126 [ 1659.184261][ T5689] usb usb34-port1: attempt power cycle [ 1659.302202][ T38] audit: type=1326 audit(1785407179.846:26): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.344595][ T38] audit: type=1326 audit(1785407179.856:27): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.344651][ T38] audit: type=1326 audit(1785407179.896:28): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.344697][ T38] audit: type=1326 audit(1785407179.896:29): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.344757][ T38] audit: type=1326 audit(1785407179.896:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.362139][ T38] audit: type=1326 audit(1785407179.916:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.370146][ T38] audit: type=1326 audit(1785407179.916:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.371566][ T38] audit: type=1326 audit(1785407179.926:33): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.372259][ T38] audit: type=1326 audit(1785407179.926:34): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.435047][ T38] audit: type=1326 audit(1785407179.986:35): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22104 comm="syz.3.5268" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f7e67df99 code=0x7ffc0000 [ 1659.736827][ T5684] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1659.845846][T22117] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5270'. [ 1659.896819][ T5684] usb 10-1: Using ep0 maxpacket: 8 [ 1659.904820][ T5684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1659.904857][ T5684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1659.904881][ T5684] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1659.904905][ T5684] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1659.904928][ T5684] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1659.904968][ T5684] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1659.904993][ T5684] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.990532][ T5689] usb usb34-port1: unable to enumerate USB device [ 1660.125112][ T5684] usb 10-1: config 0 descriptor?? [ 1660.825800][ T4911] Bluetooth: hci3: urb ffff8880272b5a00 submission failed (90) [ 1660.949610][ T5684] usb 10-1: USB disconnect, device number 10 [ 1664.327736][ T822] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1664.495611][ T822] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 1664.516789][ T822] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.00 [ 1664.516824][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.516847][ T822] usb 4-1: Product: syz [ 1664.516863][ T822] usb 4-1: Manufacturer: syz [ 1664.516879][ T822] usb 4-1: SerialNumber: syz [ 1664.564224][T22201] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1664.995023][ T5763] usb 4-1: USB disconnect, device number 127 [ 1665.639324][T22231] tipc: Started in network mode [ 1665.639361][T22231] tipc: Node identity 0000000000003a000000000000000001, cluster identity 4711 [ 1665.639421][T22231] tipc: Enabling of bearer rejected, failed to enable media [ 1666.491233][ T5257] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1666.627058][T12153] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1666.699259][ T5763] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1666.776863][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1666.786925][T12153] usb 1-1: Using ep0 maxpacket: 8 [ 1666.798093][T12153] usb 1-1: config 0 has no interfaces? [ 1666.808448][T12153] usb 1-1: New USB device found, idVendor=2799, idProduct=500a, bcdDevice=e7.b7 [ 1666.808480][T12153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1666.808502][T12153] usb 1-1: Product: syz [ 1666.808519][T12153] usb 1-1: Manufacturer: syz [ 1666.808535][T12153] usb 1-1: SerialNumber: syz [ 1666.817946][T12153] usb 1-1: config 0 descriptor?? [ 1666.886910][ T5763] usb 5-1: Using ep0 maxpacket: 16 [ 1666.914002][ T5763] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.914029][ T5763] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1666.914061][ T5763] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1666.914078][ T5763] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.962999][ T5763] usb 5-1: config 0 descriptor?? [ 1666.975042][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1666.975117][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=6001, bcdDevice= 1.00 [ 1666.975147][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.019530][ T10] usb 4-1: config 0 descriptor?? [ 1667.057397][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6001 [ 1667.119631][ T9] usb 1-1: USB disconnect, device number 45 [ 1667.258653][ T10] sonixb 4-1:0.0: Error reading register 00: -71 [ 1667.301756][ T10] usb 4-1: USB disconnect, device number 2 [ 1667.312341][ T4911] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1667.350623][ T5763] usbhid 5-1:0.0: can't add hid device: -71 [ 1667.350752][ T5763] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1667.453009][ T5763] usb 5-1: USB disconnect, device number 41 [ 1668.994529][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.994644][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.986245][ T4911] Bluetooth: hci1: unexpected event for opcode 0x080c [ 1670.628129][ T5689] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1670.779131][ T5689] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.809761][ T5689] usb 10-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1670.809795][ T5689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.809816][ T5689] usb 10-1: Product: syz [ 1670.809833][ T5689] usb 10-1: Manufacturer: syz [ 1670.809849][ T5689] usb 10-1: SerialNumber: syz [ 1670.864384][ T5689] keyspan 10-1:1.0: Keyspan 2 port adapter converter detected [ 1670.864627][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 87 [ 1670.864796][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 7 [ 1670.893478][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 81 [ 1670.893561][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 82 [ 1670.893630][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 1 [ 1670.893713][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 2 [ 1670.893782][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 85 [ 1670.893851][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 5 [ 1670.896173][ T5689] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1670.900673][ T5684] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1670.980437][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 83 [ 1670.980614][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 84 [ 1670.980716][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 3 [ 1670.980795][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 4 [ 1670.980881][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 86 [ 1670.980965][ T5689] keyspan 10-1:1.0: found no endpoint descriptor for endpoint 6 [ 1670.983384][ T5689] usb 10-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1671.026799][T13981] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1671.150695][ T5684] usb 4-1: config 1 interface 0 has no altsetting 2 [ 1671.150740][ T5684] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1671.150766][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.212283][T13981] usb 5-1: config 0 has no interfaces? [ 1671.212324][T13981] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 1671.212349][T13981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.251003][T13981] usb 5-1: config 0 descriptor?? [ 1671.379472][T13981] usb 10-1: USB disconnect, device number 11 [ 1671.404319][T13981] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1671.423398][T13981] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1671.424889][T13981] keyspan 10-1:1.0: device disconnected [ 1671.586321][ T5684] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1671.753839][ T5684] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1672.477934][ T5684] ttusb_dec_send_command: command bulk message failed: error -71 [ 1672.564797][ T5684] usb 4-1: USB disconnect, device number 3 [ 1673.273243][T22367] NFSD: Failed to start, no listeners configured. [ 1674.316905][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1674.466750][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1674.476684][ T9] usb 1-1: config 0 has no interfaces? [ 1674.484272][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1674.484305][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.484328][ T9] usb 1-1: Product: syz [ 1674.484344][ T9] usb 1-1: Manufacturer: syz [ 1674.484360][ T9] usb 1-1: SerialNumber: syz [ 1674.560554][ T9] usb 1-1: config 0 descriptor?? [ 1675.445794][T13981] usb 5-1: USB disconnect, device number 42 [ 1675.666852][ T5922] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1675.819891][ T5922] usb 10-1: Using ep0 maxpacket: 32 [ 1675.894905][ T5922] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1675.957706][ T5922] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1675.957748][ T5922] usb 10-1: can't read configurations, error -71 [ 1675.998779][ T5684] usb 1-1: USB disconnect, device number 46 [ 1676.043624][T22446] gadgetfs: bound to dummy_udc driver [ 1676.092489][T13981] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1676.149441][T18509] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1676.259966][T13981] usb 5-1: config 1 interface 0 has no altsetting 2 [ 1676.260013][T13981] usb 5-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice= 1.00 [ 1676.260040][T13981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.309287][T18509] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 1676.309321][T18509] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.351132][T18509] i2c-tiny-usb 4-1:1.0: version 1.00 found at bus 004 address 004 [ 1676.730660][T13981] dvbdev: DVB: registering new adapter (DEC2000-t) [ 1676.750636][T18509] (null): failure reading functionality [ 1676.818393][T13981] usb 5-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 1677.115936][T18509] i2c i2c-1: failure reading functionality [ 1677.160888][T18509] i2c i2c-1: connected i2c-tiny-usb device [ 1677.450410][T22478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1677.975656][T13981] ttusb_dec_send_command: command bulk message failed: error -71 [ 1678.029909][T13981] usb 5-1: USB disconnect, device number 43 [ 1679.361412][ T5684] usb 4-1: USB disconnect, device number 4 [ 1679.404568][T22508] configfs-gadget.g1 gadget.0: Hardware params: access 3, format 2, channels 2, rate 48000 [ 1679.584963][T22508] udc dummy_udc.0: failed to start g1: -19 [ 1679.703587][T22508] UDC core: g1: couldn't find an available UDC or it's busy [ 1679.757504][T12153] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1679.933738][T12153] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.933808][T12153] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.936252][T12153] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1679.936285][T12153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.936301][T12153] usb 10-1: Product: syz [ 1679.936312][T12153] usb 10-1: Manufacturer: syz [ 1679.936323][T12153] usb 10-1: SerialNumber: syz [ 1680.059436][T12153] usb 10-1: selecting invalid altsetting 1 [ 1680.096812][ T5684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1680.257594][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 1680.264808][ T5684] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 1680.265676][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1680.265709][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1680.265732][ T5684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 1680.266005][ T5684] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 1680.266033][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.372590][ T5684] usb 4-1: config 0 descriptor?? [ 1680.584569][T12153] cdc_mbim 10-1:1.0: failed GET_NTB_PARAMETERS [ 1680.584726][T12153] cdc_mbim 10-1:1.0: bind() failure [ 1680.739459][T12153] usb 10-1: USB disconnect, device number 14 [ 1680.940316][ T5684] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.003D/input/input153 [ 1681.074717][ T5684] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.003D/input/input154 [ 1681.412979][ T5684] kye 0003:0458:5013.003D: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 1681.572354][ T5684] usb 4-1: USB disconnect, device number 5 [ 1682.677027][ T5684] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1682.853381][ T5684] usb 1-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1682.853417][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1682.853441][ T5684] usb 1-1: Product: syz [ 1682.853458][ T5684] usb 1-1: Manufacturer: syz [ 1682.853475][ T5684] usb 1-1: SerialNumber: syz [ 1682.906082][T22591] ======================================================= [ 1682.906082][T22591] WARNING: The mand mount option has been deprecated and [ 1682.906082][T22591] and is ignored by this kernel. Remove the mand [ 1682.906082][T22591] option from the mount to silence this warning. [ 1682.906082][T22591] ======================================================= [ 1683.250746][T22587] option changes via remount are deprecated (pid=22586 comm=syz.4.5399) [ 1683.252692][ T5922] usb 1-1: USB disconnect, device number 47 [ 1683.465636][T22608] block2mtd: error: cannot open device [ 1683.905962][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1683.929081][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1683.999868][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5407'. [ 1684.303618][T22635] zero sized request [ 1684.326996][T22638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5412'. [ 1685.186892][T13981] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1685.338677][T13981] usb 10-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1685.338712][T13981] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.610276][T13981] qmi_wwan 10-1:1.0: cdc-wdm0: USB WDM device [ 1685.680300][T22675] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1685.838448][T13981] wwan wwan0: port wwan0qmi0 attached [ 1685.968676][T22676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5421'. [ 1685.968710][T22676] nbd: nbd64 already in use [ 1686.215219][T21027] udevd[21027]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1687.765690][T13981] qmi_wwan 10-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.9-1, WWAN/QMI device, ce:1d:57:51:80:23 [ 1687.984312][T13981] usb 10-1: USB disconnect, device number 15 [ 1688.943855][T13981] qmi_wwan 10-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.9-1, WWAN/QMI device [ 1689.320083][T22703] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1690.213979][T13981] wwan wwan0: port wwan0qmi0 disconnected [ 1691.568244][T22746] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 1691.803788][T22737] smpboot: CPU 1 is now offline [ 1691.923205][T22752] openvswitch: netlink: Actions may not be safe on all matching packets [ 1692.458648][T22760] Line length is too long: Should be less than 4094 [ 1693.358806][T22785] netlink: 'syz.0.5455': attribute type 2 has an invalid length. [ 1695.986787][T12153] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1696.150453][T12153] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1696.150478][T12153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1696.150494][T12153] usb 5-1: Product: syz [ 1696.150506][T12153] usb 5-1: Manufacturer: syz [ 1696.150517][T12153] usb 5-1: SerialNumber: syz [ 1696.811623][T22859] kvm: user requested TSC rate below hardware speed [ 1696.851547][T22859] kvm: user requested TSC rate below hardware speed [ 1697.463585][ T6062] usb 5-1: USB disconnect, device number 44 [ 1697.870855][T22887] Mass Storage Function, version: 2009/09/11 [ 1697.870883][T22887] LUN: removable file: (no medium) [ 1698.200665][T22887] ================================================================== [ 1698.200680][T22887] BUG: KASAN: slab-use-after-free in filp_flush+0x31/0x190 [ 1698.200703][T22887] Read of size 8 at addr ffff8880591e8d90 by task syz.0.5485/22887 [ 1698.200718][T22887] [ 1698.200731][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.0.5485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1698.200754][T22887] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1698.200761][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.200772][T22887] Call Trace: [ 1698.200778][T22887] [ 1698.200785][T22887] dump_stack_lvl+0xe8/0x150 [ 1698.200808][T22887] print_address_description+0x55/0x1e0 [ 1698.200834][T22887] ? filp_flush+0x31/0x190 [ 1698.200848][T22887] print_report+0x58/0x70 [ 1698.200872][T22887] kasan_report+0x117/0x150 [ 1698.200889][T22887] ? filp_flush+0x31/0x190 [ 1698.200907][T22887] kasan_check_range+0x264/0x2c0 [ 1698.200923][T22887] filp_flush+0x31/0x190 [ 1698.200939][T22887] filp_close+0x1d/0x40 [ 1698.200954][T22887] gaudio_cleanup+0x54/0xf0 [ 1698.200980][T22887] f_audio_bind+0x4a0/0x630 [ 1698.201005][T22887] ? __pfx_f_audio_bind+0x10/0x10 [ 1698.201029][T22887] ? acm_bi[ 1698.201029][T22887] ? acm_bind+0x434/0x650 [ 1698.201048][T22887] usb_add_function+0x290/0x930 [ 1698.201071][T22887] configfs_composite_bind+0xde0/0x1410 [ 1698.201097][T22887] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1698.201119][T22887] gadget_bind_driver+0x2ca/0x9e0 [ 1698.201139][T22887] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1698.201154][T22887] really_probe+0x254/0xae0 [ 1698.201177][T22887] __driver_probe_device+0x1e8/0x360 [ 1698.201198][T22887] driver_probe_device+0x4f/0x240 [ 1698.201220][T22887] __driver_attach+0x339/0x600 [ 1698.201240][T22887] bus_for_each_dev+0x23e/0x2c0 [ 1698.201281][T22887] ? __pfx___driver_attach+0x10/0x10 [ 1698.201300][T22887] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1698.201326][T22887] ? rt_spin_unlock+0x163/0x200 [ 1698.201349][T22887] bus_add_driver+0x348/0x670 [ 1698.201376][T22887] driver_register+0x23a/0x320 [ 1698.201398][T22887] usb_gadget_register_driver_owner+0xf9/0x270 [ 1698.201426][T22887] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1698.201443][T22887] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1698.201460][T22887] configfs_write_iter+0x33a/0x430 [ 1698.201480][T22887] vfs_write+0x61e/0xbb0 [ 1698.201501][T22887] ? __pfx_vfs_write+0x10/0x10 [ 1698.201528][T22887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1698.201544][T22887] ? lockdep_hardirqs_on+0x7a/0x110 [ 1698.201560][T22887] ? mutex_lock_nested+0x152/0x1d0 [ 1698.201580][T22887] ? fdget_pos+0x252/0x320 [ 1698.201600][T22887] ksys_write+0x156/0x270 [ 1698.201619][T22887] ? __pfx_ksys_write+0x10/0x10 [ 1698.201641][T22887] do_syscall_64+0x17b/0x530 [ 1698.201656][T22887] ? irqentry_exit+0x10f/0x8f0 [ 1698.201672][T22887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.201688][T22887] ? clear_bhb_loop+0x40/0x90 [ 1698.201706][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.201722][T22887] RIP: 0033:0x7fa54475df99 [ 1698.201736][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.201750][T22887] RSP: 002b:00007fa5429b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.201768][T22887] RAX: ffffffffffffffda RBX: 00007fa5449e5fa0 RCX: 00007fa54475df99 [ 1698.201780][T22887] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 1698.201791][T22887] RBP: 00007fa5447f4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1698.201801][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.201811][T22887] R13: 00007fa5449e6038 R14: 00007fa5449e5fa0 R15: 00007ffe5d487928 [ 1698.201829][T22887] [ 1698.201835][T22887] [ 1698.201843][T22887] Allocated by task 21247: [ 1698.201851][T22887] kasan_save_track+0x3e/0x80 [ 1698.201873][T22887] __kasan_slab_alloc+0x6c/0x80 [ 1698.201895][T22887] kmem_cache_alloc_noprof+0x358/0x680 [ 1698.201915][T22887] alloc_empty_file+0x5b/0x1d0 [ 1698.201937][T22887] path_openat+0x8f/0x3850 [ 1698.201955][T22887] do_file_open+0x23e/0x4a0 [ 1698.201972][T22887] do_sys_openat2+0x115/0x200 [ 1698.201994][T22887] __x64_sys_openat+0x138/0x170 [ 1698.202018][T22887] do_syscall_64+0x17b/0x530 [ 1698.202031][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.202046][T22887] [ 1698.202049][T22887] Freed by task 21: [ 1698.202056][T22887] kasan_save_track+0x3e/0x80 [ 1698.202076][T22887] kasan_save_free_info+0x40/0x50 [ 1698.202093][T22887] __kasan_slab_free+0x5c/0x80 [ 1698.202114][T22887] slab_free_after_rcu_debug+0x12a/0x220 [ 1698.202130][T22887] rcu_cpu_kthread+0x950/0x1480 [ 1698.202145][T22887] smpboot_thread_fn+0x57c/0xa80 [ 1698.202163][T22887] kthread+0x388/0x470 [ 1698.202181][T22887] ret_from_fork+0x514/0xb70 [ 1698.202201][T22887] ret_from_fork_asm+0x1a/0x30 [ 1698.202221][T22887] [ 1698.202225][T22887] Last potentially related work creation: [ 1698.202231][T22887] kasan_save_stack+0x3e/0x60 [ 1698.202251][T22887] kasan_record_aux_stack+0xbd/0xd0 [ 1698.202268][T22887] kmem_cache_free+0x513/0x6c0 [ 1698.202290][T22887] fput_close_sync+0x11f/0x240 [ 1698.202302][T22887] __x64_sys_close+0x7e/0x110 [ 1698.202315][T22887] do_syscall_64+0x17b/0x530 [ 1698.202329][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.202343][T22887] [ 1698.202347][T22887] The buggy address belongs to the object at ffff8880591e8c00 [ 1698.202347][T22887] which belongs to the cache filp of size 408 [ 1698.202359][T22887] The buggy address is located 400 bytes inside of [ 1698.202359][T22887] freed 408-byte region [ffff8880591e8c00, ffff8880591e8d98) [ 1698.202375][T22887] [ 1698.202379][T22887] The buggy address belongs to the physical page: [ 1698.202391][T22887] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x591e8 [ 1698.202406][T22887] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1698.202418][T22887] memcg:ffff8880591e81b9 [ 1698.202425][T22887] flags: 0x80000000000040(head|node=0|zone=1) [ 1698.202442][T22887] page_type: f5(slab) [ 1698.202457][T22887] raw: 0080000000000040 ffff88801c6af780 dead000000000100 dead000000000122 [ 1698.202472][T22887] raw: 0000000000000000 0000020000100010 00000000f5000000 ffff8880591e81b9 [ 1698.202488][T22887] head: 0080000000000040 ffff88801c6af780 dead000000000100 dead000000000122 [ 1698.202502][T22887] head: 0000000000000000 0000020000100010 00000000f5000000 ffff8880591e81b9 [ 1698.202521][T22887] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1698.202535][T22887] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 1698.202543][T22887] page dumped because: kasan: bad access detected [ 1698.202556][T22887] page_owner tracks the page as allocated [ 1698.202562][T22887] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 21027, tgid 21027 (udevd), ts 1646913737252 [ 1698.202587][T22887] post_alloc_hook+0x1f9/0x250 [ 1698.202608][T22887] get_page_from_freelist+0x264c/0x26c0 [ 1698.202633][T22887] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 1698.202657][T22887] allocate_slab+0x7c/0x5e0 [ 1698.202672][T22887] refill_objects+0x2d8/0x350 [ 1698.202689][T22887] __pcs_replace_empty_main+0x330/0x690 [ 1698.202705][T22887] kmem_cache_alloc_noprof+0x455/0x680 [ 1698.202725][T22887] alloc_empty_file+0x5b/0x1d0 [ 1698.202747][T22887] path_openat+0x8f/0x3850 [ 1698.202764][T22887] do_file_open+0x23e/0x4a0 [ 1698.202781][T22887] do_sys_openat2+0x115/0x200 [ 1698.202803][T22887] __x64_sys_openat+0x138/0x170 [ 1698.202826][T22887] do_syscall_64+0x17b/0x530 [ 1698.202840][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.202854][T22887] page last free pid 21512 tgid 21512 ts 1631345643446 stack trace: [ 1698.202865][T22887] __free_frozen_pages+0x1185/0x1270 [ 1698.202887][T22887] __slab_free+0x252/0x2a0 [ 1698.202908][T22887] qlist_free_all+0x99/0x100 [ 1698.202927][T22887] kasan_quarantine_reduce+0x148/0x160 [ 1698.202948][T22887] __kasan_slab_alloc+0x22/0x80 [ 1698.202970][T22887] kmem_cache_alloc_noprof+0x358/0x680 [ 1698.202990][T22887] do_getname+0x2e/0x250 [ 1698.203011][T22887] vfs_fstatat+0x45/0x170 [ 1698.203032][T22887] __x64_sys_newfstatat+0x151/0x200 [ 1698.203056][T22887] do_syscall_64+0x17b/0x530 [ 1698.203070][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.203084][T22887] [ 1698.203088][T22887] Memory state around the buggy address: [ 1698.203096][T22887] ffff8880591e8c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1698.203107][T22887] ffff8880591e8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1698.203118][T22887] >ffff8880591e8d80: fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1698.203126][T22887] ^ [ 1698.203134][T22887] ffff8880591e8e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1698.203145][T22887] ffff8880591e8e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1698.203153][T22887] ================================================================== [ 1698.335022][T22887] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1698.335043][T22887] CPU: 0 UID: 0 PID: 22887 Comm: syz.0.5485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1698.335067][T22887] Tainted: [L]=SOFTLOCKUP [ 1698.335074][T22887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1698.335085][T22887] Call Trace: [ 1698.335092][T22887] [ 1698.335100][T22887] vpanic+0x56c/0xa60 [ 1698.335123][T22887] ? __pfx_vpanic+0x10/0x10 [ 1698.335143][T22887] panic+0xc5/0xd0 [ 1698.335158][T22887] ? __pfx_panic+0x10/0x10 [ 1698.335174][T22887] ? preempt_schedule_thunk+0x16/0x40 [ 1698.335192][T22887] ? filp_flush+0x31/0x190 [ 1698.335208][T22887] ? preempt_schedule_thunk+0x16/0x40 [ 1698.335224][T22887] ? filp_flush+0x31/0x190 [ 1698.335239][T22887] check_panic_on_warn+0x89/0xb0 [ 1698.335263][T22887] ? filp_flush+0x31/0x190 [ 1698.335277][T22887] end_report+0x73/0x170 [ 1698.335292][T22887] ? filp_flush+0x31/0x190 [ 1698.335306][T22887] kasan_report+0x128/0x150 [ 1698.335322][T22887] ? filp_flush+0x31/0x190 [ 1698.335340][T22887] kasan_check_range+0x264/0x2c0 [ 1698.335357][T22887] filp_flush+0x31/0x190 [ 1698.335372][T22887] filp_close+0x1d/0x40 [ 1698.335387][T22887] gaudio_cleanup+0x54/0xf0 [ 1698.335414][T22887] f_audio_bind+0x4a0/0x630 [ 1698.335439][T22887] ? __pfx_f_audio_bind+0x10/0x10 [ 1698.335462][T22887] ? acm_bind+0x434/0x650 [ 1698.335482][T22887] usb_add_function+0x290/0x930 [ 1698.335505][T22887] configfs_composite_bind+0xde0/0x1410 [ 1698.335531][T22887] ? __pfx_configfs_composite_bind+0x10/0x10 [ 1698.335552][T22887] gadget_bind_driver+0x2ca/0x9e0 [ 1698.335573][T22887] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1698.335588][T22887] really_probe+0x254/0xae0 [ 1698.335611][T22887] __driver_probe_device+0x1e8/0x360 [ 1698.335632][T22887] driver_probe_device+0x4f/0x240 [ 1698.335654][T22887] __driver_attach+0x339/0x600 [ 1698.335674][T22887] bus_for_each_dev+0x23e/0x2c0 [ 1698.335700][T22887] ? __pfx___driver_attach+0x10/0x10 [ 1698.335719][T22887] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1698.335746][T22887] ? rt_spin_unlock+0x163/0x200 [ 1698.335769][T22887] bus_add_driver+0x348/0x670 [ 1698.335798][T22887] driver_register+0x23a/0x320 [ 1698.335821][T22887] usb_gadget_register_driver_owner+0xf9/0x270 [ 1698.335849][T22887] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 1698.335867][T22887] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 1698.335886][T22887] configfs_write_iter+0x33a/0x430 [ 1698.335907][T22887] vfs_write+0x61e/0xbb0 [ 1698.335929][T22887] ? __pfx_vfs_write+0x10/0x10 [ 1698.335948][T22887] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1698.335964][T22887] ? lockdep_hardirqs_on+0x7a/0x110 [ 1698.335980][T22887] ? mutex_lock_nested+0x152/0x1d0 [ 1698.336001][T22887] ? fdget_pos+0x252/0x320 [ 1698.336027][T22887] ksys_write+0x156/0x270 [ 1698.336047][T22887] ? __pfx_ksys_write+0x10/0x10 [ 1698.336069][T22887] do_syscall_64+0x17b/0x530 [ 1698.336086][T22887] ? irqentry_exit+0x10f/0x8f0 [ 1698.336101][T22887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.336118][T22887] ? clear_bhb_loop+0x40/0x90 [ 1698.336137][T22887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1698.336154][T22887] RIP: 0033:0x7fa54475df99 [ 1698.336168][T22887] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1698.336183][T22887] RSP: 002b:00007fa5429b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1698.336200][T22887] RAX: ffffffffffffffda RBX: 00007fa5449e5fa0 RCX: 00007fa54475df99 [ 1698.336213][T22887] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 1698.336224][T22887] RBP: 00007fa5447f4ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1698.336234][T22887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1698.336245][T22887] R13: 00007fa5449e6038 R14: 00007fa5449e5fa0 R15: 00007ffe5d487928 [ 1698.336264][T22887] [ 1698.336330][T22887] Kernel Offset: disabled