last executing test programs: 3m29.467809412s ago: executing program 3 (id=290): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0xf9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='27', 0x2) getdents(r0, &(0x7f0000000ec0)=""/4114, 0x1012) 3m28.97009849s ago: executing program 3 (id=295): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x2000, 0x8, '9P2000.L'}, 0x15) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14, 0x69, 0x0, {0x80}}, 0x14) 3m27.416019698s ago: executing program 3 (id=303): setreuid(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540), 0x602, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r3, 0xc004510e, &(0x7f0000000580)=0xd0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000280)="6e2d3c9428", 0x5}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x207, &(0x7f0000000380)={0x0, 0x30bd, 0x800, 0x5, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x0, 0x0, &(0x7f00000004c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r6, 0x6da0, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200080c1, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback, 0x1000008}, 0x1c) 3m25.945068042s ago: executing program 3 (id=310): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 3m25.724042997s ago: executing program 3 (id=314): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 3m21.116576327s ago: executing program 3 (id=333): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/kmsg\x00', 0x60000, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000280)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 3m18.359207735s ago: executing program 32 (id=333): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/kmsg\x00', 0x60000, 0x0) socket$nl_route(0x10, 0x3, 0x0) lseek(r0, 0x0, 0x2) pselect6(0x40, &(0x7f0000000280)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 2m22.11058532s ago: executing program 1 (id=565): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000517000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m20.510565433s ago: executing program 1 (id=570): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) write$dsp(r1, &(0x7f00000002c0)='\\', 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2m19.503798555s ago: executing program 1 (id=572): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4754, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x2, 0x4) recvmmsg(r0, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f80)=""/27, 0x1b}, 0x8}], 0x1, 0x45833af96e4b39bf, 0x0) 2m18.903104708s ago: executing program 1 (id=573): syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) r0 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x20000000, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x1, {0x4644}}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x100000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x4, 0xfcd, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0x118}}}, 0x0) 2m18.782456702s ago: executing program 1 (id=574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000640)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0xd, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) 2m15.511908808s ago: executing program 1 (id=587): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc_mnt\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) pread64(r1, &(0x7f00000004c0)=""/203, 0xcb, 0xa1) timer_create(0x0, 0x0, 0x0) 2m14.628708899s ago: executing program 33 (id=587): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0x10}, 0x6}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000380)='Q', 0x1}], 0x1}}], 0x1, 0x4000840) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc_mnt\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) pread64(r1, &(0x7f00000004c0)=""/203, 0xcb, 0xa1) timer_create(0x0, 0x0, 0x0) 8.809090325s ago: executing program 0 (id=1124): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./debug\x00', &(0x7f0000000380)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read(r2, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe8, 0x0, 0x0) 8.301840042s ago: executing program 2 (id=1130): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000080)={'dt2817\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000000, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x13, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) r1 = syz_usb_connect(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xec, 0xe8, 0x16, 0x10, 0x423, 0xa, 0xadd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x2, 0x7, 0x7, 0x40, 0x3, "", [{{0x9, 0x4, 0xc0, 0xa, 0x0, 0x6e, 0x9d, 0xd1, 0x6, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xad}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x100, 0x7, 0x16}}]}}, {{0x9, 0x4, 0x3, 0x1, 0x1, 0x28, 0xfe, 0x19, 0x4, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0xc2, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000ec0)={0x14, 0x0, &(0x7f0000000e80)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x804}}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000001c80)={0x14, 0x0, &(0x7f0000001c40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001f40)={0x14, 0x0, &(0x7f0000001f00)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000780)=""/14, 0x30}], 0x1, 0x2, 0x9) 8.244324769s ago: executing program 0 (id=1132): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000007c0)={0x1c, &(0x7f0000000240)={0x20, 0x8}, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 5.645634738s ago: executing program 2 (id=1145): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.548097143s ago: executing program 6 (id=1147): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 5.175339021s ago: executing program 4 (id=1148): mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./dev\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000019800), 0x42, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000019840), 0x2) r2 = memfd_create(&(0x7f0000019880)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000198c0)={r2, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000019900)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 5.046097776s ago: executing program 5 (id=1149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x40000071, 0x0, 0x3ff}]}) syz_open_dev$loop(0x0, 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x282, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f0000000600)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x29001, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}, @uuid={'CRP-syz', 0x0, '1\x00'}}}) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f00000029c0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x2018, 0x0, 0x80, 'snapshot-merge\x00', {@ram_num={'1:', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'p', 0x20, '32', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) 4.980898253s ago: executing program 4 (id=1150): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xffffffffffffb, 0x9, 0x10001, 0x7, 0x0, 0x0, 0x4002004c4, 0x9, 0x76, 0xc592, 0x1, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2000000000000000, 0x4000000000000b3, 0xffffffffffffff04], 0xeeee0000, 0x201893}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) 4.819409013s ago: executing program 0 (id=1151): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000380)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000400)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="00070800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c"], 0x4a) 4.433096938s ago: executing program 4 (id=1152): socket(0x1d, 0x2, 0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000140)=0x7f) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) read$dsp(r0, &(0x7f00000001c0)=""/79, 0x4f) 4.152863565s ago: executing program 6 (id=1153): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000040)={[0xfffffffffffffffa, 0x0, 0xe, 0x7, 0x1000, 0x7ffd, 0x8000000001002, 0x3, 0x4, 0x80006, 0xfffffffffffffffe, 0x372, 0x8bda, 0x9, 0x100, 0x23], 0x26000, 0x1040}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x10, 0x17, 0x0, 0x2d92119, 0xfc, 0x4, 0x4, 0xff, 0x0, 0x6, 0xff, 0x0, 0x7, 0x7, 0x4, 0x7, 0x6, 0xfa, '\x00', 0x3, 0x1ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, 0x0) munmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000) 4.100027283s ago: executing program 5 (id=1154): prlimit64(0x0, 0xe, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 3.804037506s ago: executing program 0 (id=1155): socket$inet6_udp(0xa, 0x2, 0x0) r0 = io_uring_setup(0x68e7, &(0x7f0000000340)={0x0, 0x48c9, 0x8, 0x0, 0xd1}) mq_open(0x0, 0x8c2, 0x30, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000280)="d7faf398bd72a4f61ce84ee2ae9d", 0xe, 0x20040014, &(0x7f00000002c0)={0x11, 0x7, r2, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 3.08326239s ago: executing program 0 (id=1156): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000003c0)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000440)={0x0, 0x18, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.907253373s ago: executing program 6 (id=1157): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000007c0)={0x1, &(0x7f0000000800)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000840)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1e, 0x3, &(0x7f0000002040)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000002700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000002800)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000002a40)=[{&(0x7f0000002a80)="580000001500add427323b472545b45602117fffffff81000e224e21e0000002925aa80020007b00090080007f000009e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 2.891246327s ago: executing program 4 (id=1158): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2680, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r2, 0xb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000080)="670f01df0f06eaa60000008600f2f30f090f3266baf80cb894146889ef66bafc0cb8575a0000ef0ff7cd0f080fc77d0b0ff508", 0x33}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.80723027s ago: executing program 5 (id=1159): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x5, @loopback, 0x1}, r1}}, 0x30) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f00000003c0)={0xc, {"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", 0x1000}}, 0x1006) 2.735930047s ago: executing program 6 (id=1160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f00000000c0)=0xb, 0x4) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) listen(r1, 0x2) close(0x3) 2.688754395s ago: executing program 6 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000680)={r0, &(0x7f0000000240)="88", &(0x7f0000000640)=@udp=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000840)={&(0x7f0000000100)=@phonet={0x23, 0x5, 0xff, 0x13}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)="88a872a1f721d2d10e81bb0d0000", 0xe}], 0x1}, 0x890) 2.456012257s ago: executing program 4 (id=1162): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={0x0, 0x50000, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x10) 2.44377056s ago: executing program 2 (id=1163): sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f00000003c0)=[@increfs]}) 2.376223872s ago: executing program 6 (id=1164): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000c00)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000cc0)={0x0, 0x7, 0x1, 'h'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.055669517s ago: executing program 2 (id=1165): r0 = memfd_create(&(0x7f00000000c0)=',\xea\xc9t\x8b\xb7\x04\x1d^s^\t5\xa1i\x01\x00\xd4\xd7\x02\x8dmbs\x0f3\x92\'\x94N\b\xe0m\xa4\x01\x00\xe5\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0\x05\x00\xa4\xed\x94 \x15Y\x1f\xccY\xff\xb4\xa2\xa62:\xfa\xf9\xb7\x05q\xa4d\xda0y\xd3\xd6\x98\x9f\x11\n\xf44Q\xff\xff)\xb3|\x04\x00\x00\x80FD\xb8\xc2\x8a\x99Y\xf6:\xfeT\xa1', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) fstatfs(r0, &(0x7f0000000000)=""/131) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x9, 0x0, 0x2004c8, 0xfffffffffffff801, 0x2, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0xdddd0000, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.711013631s ago: executing program 5 (id=1166): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000040)={'fl512\x00', [0x100, 0x6, 0xf3, 0xc, 0x8, 0x5, 0x79, 0x3, 0x3, 0x100, 0x1000, 0x5, 0x6, 0x80000001, 0x0, 0xfd, 0xfffffffc, 0xf3, 0x10, 0x2, 0x8, 0x0, 0x0, 0x20001e58, 0xffffffff, 0x8000003, 0x6, 0x80000008, 0xa6b5, 0x4, 0xffffffff]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000001c0)={[{0x7, 0xc000, 0x6, 0x3, 0x4, 0x9, 0x3, 0x9, 0x8, 0x6, 0xc4, 0xa, 0x4}, {0x64, 0x0, 0x5, 0x27, 0x7, 0x0, 0x4, 0xf7, 0x3, 0x24, 0x6, 0xed, 0x20c}, {0x20000000, 0xea, 0x38, 0x83, 0x84, 0x1, 0x3, 0x4e, 0xc, 0x3, 0x8, 0x4, 0x6}], 0xe0001083}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001280)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000012c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.434273577s ago: executing program 2 (id=1167): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@rand_addr=0x64010100, 0x2, 0x6c}, 0x2, @in6=@local, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200000}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x64040081}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000004000)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r3, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004080)=0x14) sendmsg$nl_route(r2, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004140)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000004180)={0x0, 0xe12, &(0x7f00000041c0)={&(0x7f0000004200)=ANY=[@ANYBLOB="5400000010001ffffdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000804003002c0012800b00010067726574617000001c00028008000700e000000108000100", @ANYRES32=r4, @ANYBLOB="050008000300000008000a00", @ANYRES32=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x804) 1.31138018s ago: executing program 4 (id=1168): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='+p', 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) close(0x3) 299.825885ms ago: executing program 5 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) sendfile(r0, r0, 0x0, 0x7f03) 77.677248ms ago: executing program 2 (id=1170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000100)=0xc000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xf, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0xfffffffe, 0xfffffff8, 0x0, 0xff, 0xff, 0x1, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.861596ms ago: executing program 5 (id=1171): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 0s ago: executing program 0 (id=1172): mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file1\x00', 0x808400, 0x43) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mkdirat(r0, &(0x7f0000000340)='./file0\x00', 0xf3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): T8466] ? rcu_needs_cpu+0xa0/0xb0 [ 266.710792][ T8466] ? rt_spin_trylock+0x13a/0x2b0 [ 266.710826][ T8466] __dev_queue_xmit+0x1776/0x3a70 [ 266.710853][ T8466] ? __dev_queue_xmit+0x2a0/0x3a70 [ 266.710873][ T8466] ? preempt_count_add+0x6a/0x140 [ 266.710918][ T8466] ? __pskb_pull_tail+0xc07/0x1890 [ 266.710951][ T8466] ? __pfx___dev_queue_xmit+0x10/0x10 [ 266.710982][ T8466] ? __pfx___vlan_get_protocol_offset+0x10/0x10 [ 266.711011][ T8466] ? virtio_net_hdr_to_skb+0x97b/0x14f0 [ 266.711046][ T8466] ? packet_parse_headers+0x558/0x790 [ 266.711072][ T8466] ? __pfx_packet_parse_headers+0x10/0x10 [ 266.711102][ T8466] ? packet_xmit+0x68/0x330 [ 266.711132][ T8466] packet_sendmsg+0x3f1b/0x51b0 [ 266.711168][ T8466] ? rcu_is_watching+0x16/0xb0 [ 266.711197][ T8466] ? __pfx___schedule+0x10/0x10 [ 266.711241][ T8466] ? __lock_acquire+0x747/0x2de0 [ 266.711289][ T8466] ? smack_socket_sendmsg+0x1f8/0x5a0 [ 266.711318][ T8466] ? __pfx_packet_sendmsg+0x10/0x10 [ 266.711351][ T8466] ? membarrier_private_expedited+0x5a2/0x7b0 [ 266.711383][ T8466] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 266.711421][ T8466] ? __pfx_packet_sendmsg+0x10/0x10 [ 266.711444][ T8466] sock_sendmsg_nosec+0x14e/0x190 [ 266.711474][ T8466] __sys_sendto+0x41e/0x5d0 [ 266.711511][ T8466] ? __pfx___sys_sendto+0x10/0x10 [ 266.711575][ T8466] ? rcu_is_watching+0x16/0xb0 [ 266.711605][ T8466] __x64_sys_sendto+0xde/0x100 [ 266.711640][ T8466] do_syscall_64+0x166/0x520 [ 266.711661][ T8466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.711682][ T8466] ? clear_bhb_loop+0x70/0xc0 [ 266.711714][ T8466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.711735][ T8466] RIP: 0033:0x7f40af53f559 [ 266.711755][ T8466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.711772][ T8466] RSP: 002b:00007f40ad78e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 266.711793][ T8466] RAX: ffffffffffffffda RBX: 00007f40af7c5fa0 RCX: 00007f40af53f559 [ 266.711808][ T8466] RDX: 00000000000100a6 RSI: 0000200000000200 RDI: 0000000000000004 [ 266.711821][ T8466] RBP: 00007f40af5d6b20 R08: 0000200000000240 R09: 0000000000000014 [ 266.711834][ T8466] R10: 0000000088a8ffff R11: 0000000000000246 R12: 0000000000000000 [ 266.711847][ T8466] R13: 00007f40af7c6038 R14: 00007f40af7c5fa0 R15: 00007ffdd83f6bd8 [ 266.711880][ T8466] [ 267.678201][ T8475] netlink: 'syz.0.757': attribute type 13 has an invalid length. [ 268.920023][ T5773] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.092320][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 269.093199][ T5773] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 269.094692][ T5773] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.094744][ T5773] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.094770][ T5773] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.094799][ T5773] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 269.094824][ T5773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.094857][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.108218][ T5773] usb 5-1: config 0 descriptor?? [ 269.630464][ T5773] logitech-djreceiver 0003:046D:C53A.000A: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.4-1/input0 [ 269.779266][ T35] usb 5-1: USB disconnect, device number 12 [ 269.923231][ T8528] fido_id[8528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 270.697790][ T35] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 270.853241][ T35] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 270.854754][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.854788][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.854825][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.860960][ T35] usb 5-1: config 0 descriptor?? [ 272.386185][ T5915] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 272.653671][ T5915] usb 1-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 272.655858][ T5915] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.655887][ T5915] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.655988][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.730619][ T1008] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 272.791216][ T8570] FAULT_INJECTION: forcing a failure. [ 272.791216][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 272.791256][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.5.787 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 272.791286][ T8570] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 272.791295][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 272.791307][ T8570] Call Trace: [ 272.791316][ T8570] [ 272.791325][ T8570] dump_stack_lvl+0xe8/0x150 [ 272.791361][ T8570] should_fail_ex+0x46b/0x600 [ 272.791398][ T8570] should_failslab+0xa8/0x100 [ 272.791432][ T8570] __kmalloc_noprof+0xf6/0x790 [ 272.791460][ T8570] ? security_sk_alloc+0x52/0x360 [ 272.791489][ T8570] ? security_sk_alloc+0x52/0x360 [ 272.791524][ T8570] security_sk_alloc+0x52/0x360 [ 272.791558][ T8570] sk_prot_alloc+0x101/0x210 [ 272.791587][ T8570] ? sk_alloc+0x27/0x390 [ 272.791618][ T8570] sk_alloc+0x3a/0x390 [ 272.791653][ T8570] bt_sock_alloc+0x3b/0x330 [ 272.791680][ T8570] l2cap_sock_create+0x15a/0x300 [ 272.791699][ T5915] dln2 1-1:1.0: USB write failed: -90 [ 272.791703][ T8570] bt_sock_create+0x163/0x240 [ 272.791727][ T8570] __sock_create+0x4b5/0xac0 [ 272.791757][ T8570] __sys_socket+0xd6/0x1b0 [ 272.791783][ T8570] __x64_sys_socket+0x7a/0x90 [ 272.791808][ T8570] do_syscall_64+0x166/0x520 [ 272.791828][ T8570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.791848][ T8570] ? clear_bhb_loop+0x70/0xc0 [ 272.791871][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.791888][ T8570] RIP: 0033:0x7f9911b3f559 [ 272.791906][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.791923][ T8570] RSP: 002b:00007f990fd95fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 272.791945][ T8570] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f9911b3f559 [ 272.791960][ T8570] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000001f [ 272.791972][ T8570] RBP: 00007f9911bd6b20 R08: 0000000000000000 R09: 0000000000000000 [ 272.791985][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.791997][ T8570] R13: 00007f9911dc6038 R14: 00007f9911dc5fa0 R15: 00007ffd2d843e48 [ 272.792042][ T8570] [ 272.795106][ T5915] dln2 1-1:1.0: failed to initialize hardware [ 272.973102][ C1] dln2 1-1:1.0: short response: 0 [ 273.049681][ T1008] usb 3-1: not running at top speed; connect to a high speed hub [ 273.049722][ T1008] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 273.073286][ T1008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.073452][ T1008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.122801][ T5915] dln2 1-1:1.0: probe with driver dln2 failed with error -90 [ 273.282518][ T1008] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 273.282680][ T1008] uvcvideo 3-1:1.0: No streaming interface found for terminal 32770. [ 273.444106][ T10] usb 3-1: USB disconnect, device number 12 [ 273.740639][ T35] usbhid 5-1:0.0: can't add hid device: -71 [ 273.740848][ T35] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 273.767432][ T35] usb 5-1: USB disconnect, device number 13 [ 274.212418][ T1008] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 274.260321][ T5351] usb 1-1: USB disconnect, device number 20 [ 274.302332][ T5893] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 274.398009][ T1008] usb 6-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 274.399470][ T1008] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.444438][ T35] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 275.422978][ T1008] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.423009][ T1008] usb 6-1: Product: syz [ 275.423022][ T1008] usb 6-1: Manufacturer: syz [ 275.423036][ T1008] usb 6-1: SerialNumber: syz [ 275.480740][ T5893] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 275.482930][ T5893] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.512833][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.512862][ T5893] usb 7-1: Product: syz [ 275.512875][ T5893] usb 7-1: Manufacturer: syz [ 275.512888][ T5893] usb 7-1: SerialNumber: syz [ 275.568120][ T1008] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 275.668500][ T35] usb 5-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 275.670214][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.670467][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 275.707789][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 275.707818][ T35] usb 5-1: Product: syz [ 275.707840][ T35] usb 5-1: Manufacturer: syz [ 275.768403][ T35] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 275.831300][ T8596] netlink: 'syz.0.796': attribute type 4 has an invalid length. [ 276.323562][ T1008] gspca_mr97310a: reg read [21] error -110 [ 276.323717][ T1008] mr97310a 6-1:1.0: probe with driver mr97310a failed with error -110 [ 276.612520][ T5893] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 276.612765][ T5893] cdc_ncm 7-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 276.612786][ T5893] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 277.020509][ T5893] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 277.198470][ T35] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 277.261135][ T5893] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 277.302678][ T35] usb 5-1: USB disconnect, device number 14 [ 277.376010][ T5893] usb 7-1: USB disconnect, device number 4 [ 277.390269][ T5893] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 277.395923][ T35] mos7840 5-1:1.0: device disconnected [ 277.686430][ T35] usb 6-1: USB disconnect, device number 9 [ 277.876225][ T8615] FAULT_INJECTION: forcing a failure. [ 277.876225][ T8615] name failslab, interval 1, probability 0, space 0, times 0 [ 277.876271][ T8615] CPU: 1 UID: 0 PID: 8615 Comm: syz.0.803 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 277.876303][ T8615] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 277.876313][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 277.876326][ T8615] Call Trace: [ 277.876335][ T8615] [ 277.876343][ T8615] dump_stack_lvl+0xe8/0x150 [ 277.876382][ T8615] should_fail_ex+0x46b/0x600 [ 277.876417][ T8615] should_failslab+0xa8/0x100 [ 277.876453][ T8615] __kmalloc_noprof+0xf6/0x790 [ 277.876481][ T8615] ? init_skcipher_req+0x83/0x1c0 [ 277.876510][ T8615] ? init_skcipher_req+0x83/0x1c0 [ 277.876544][ T8615] init_skcipher_req+0x83/0x1c0 [ 277.876573][ T8615] encrypted_read+0x34f/0xe80 [ 277.876613][ T8615] ? __pfx_encrypted_read+0x10/0x10 [ 277.876653][ T8615] ? lock_acquire+0x115/0x350 [ 277.876696][ T8615] ? down_read+0x151/0x200 [ 277.876721][ T8615] ? keyctl_read_key+0x1ae/0x470 [ 277.876746][ T8615] ? __pfx_encrypted_read+0x10/0x10 [ 277.876775][ T8615] keyctl_read_key+0x25a/0x470 [ 277.876799][ T8615] __se_sys_keyctl+0x38f/0xbc0 [ 277.876824][ T8615] ? __pfx___se_sys_keyctl+0x10/0x10 [ 277.876849][ T8615] ? __pfx_do_futex+0x10/0x10 [ 277.876874][ T8615] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 277.876909][ T8615] ? __se_sys_futex+0x3a8/0x450 [ 277.876944][ T8615] ? rcu_is_watching+0x16/0xb0 [ 277.876977][ T8615] ? __x64_sys_keyctl+0x20/0xc0 [ 277.877002][ T8615] do_syscall_64+0x166/0x520 [ 277.877022][ T8615] ? trace_irq_disable+0x3b/0x140 [ 277.877041][ T8615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.877062][ T8615] ? clear_bhb_loop+0x70/0xc0 [ 277.877096][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.877116][ T8615] RIP: 0033:0x7f7dcf81f559 [ 277.877136][ T8615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.877154][ T8615] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 277.877176][ T8615] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 277.877191][ T8615] RDX: 0000200000000240 RSI: 00000000053a3888 RDI: 000000000000000b [ 277.877204][ T8615] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 277.877217][ T8615] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 277.877231][ T8615] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 277.877265][ T8615] [ 278.086447][ T8615] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 280.256009][ T8645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.362314][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 280.368515][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.533433][ T30] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 280.534863][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.534920][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 280.534941][ T30] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 280.534974][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.066254][ T30] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 281.066289][ T30] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 281.066303][ T30] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 281.118394][ T30] cxacru 1-1:1.0: probe with driver cxacru failed with error -71 [ 281.143481][ T30] usb 1-1: USB disconnect, device number 21 [ 281.302080][ T8661] netlink: 12 bytes leftover after parsing attributes in process `syz.6.818'. [ 281.354116][ T8661] l2tp_ppp: sess 2/0: no socket in recv [ 281.469570][ T8664] loop6: detected capacity change from 0 to 4096 [ 281.613962][ T8664] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 281.614006][ T8664] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 281.614069][ T8664] loop6: [ 281.809529][ T30] usb 7-1: new low-speed USB device number 5 using dummy_hcd [ 283.029575][ T8675] FAULT_INJECTION: forcing a failure. [ 283.029575][ T8675] name failslab, interval 1, probability 0, space 0, times 0 [ 283.029616][ T8675] CPU: 1 UID: 0 PID: 8675 Comm: syz.5.823 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 283.029651][ T8675] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 283.029658][ T8675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 283.029671][ T8675] Call Trace: [ 283.029680][ T8675] [ 283.029689][ T8675] dump_stack_lvl+0xe8/0x150 [ 283.029727][ T8675] should_fail_ex+0x46b/0x600 [ 283.029762][ T8675] should_failslab+0xa8/0x100 [ 283.029791][ T8675] ? dst_alloc+0x105/0x170 [ 283.029814][ T8675] kmem_cache_alloc_noprof+0x99/0x680 [ 283.029841][ T8675] ? dst_alloc+0x105/0x170 [ 283.029862][ T8675] ? fib_lookup+0x76/0x440 [ 283.029897][ T8675] dst_alloc+0x105/0x170 [ 283.029925][ T8675] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 283.029965][ T8675] ? ip_route_output_key_hash+0xd8/0x2a0 [ 283.029994][ T8675] ip_route_output_key_hash+0x18d/0x2a0 [ 283.030027][ T8675] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 283.030069][ T8675] ? dst_release+0x72/0x1b0 [ 283.030094][ T8675] __ip4_datagram_connect+0x89a/0x1220 [ 283.030132][ T8675] udp_connect+0x32/0x1e0 [ 283.030158][ T8675] __sys_connect+0x32d/0x470 [ 283.030191][ T8675] ? __pfx___sys_connect+0x10/0x10 [ 283.030232][ T8675] ? rcu_is_watching+0x16/0xb0 [ 283.030273][ T8675] __x64_sys_connect+0x7a/0x90 [ 283.030304][ T8675] do_syscall_64+0x166/0x520 [ 283.030326][ T8675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.030347][ T8675] ? clear_bhb_loop+0x70/0xc0 [ 283.030372][ T8675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.030392][ T8675] RIP: 0033:0x7f9911b3f559 [ 283.030413][ T8675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.030431][ T8675] RSP: 002b:00007f990fd96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 283.030452][ T8675] RAX: ffffffffffffffda RBX: 00007f9911dc5fa0 RCX: 00007f9911b3f559 [ 283.030467][ T8675] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 283.030480][ T8675] RBP: 00007f9911bd6b20 R08: 0000000000000000 R09: 0000000000000000 [ 283.030494][ T8675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.030506][ T8675] R13: 00007f9911dc6038 R14: 00007f9911dc5fa0 R15: 00007ffd2d843e48 [ 283.030540][ T8675] [ 283.332900][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 283.332961][ T30] usb 7-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=7a.0d [ 283.335589][ T30] usb 7-1: config 3 has an invalid interface number: 173 but max is 1 [ 283.335616][ T30] usb 7-1: config 3 has an invalid interface number: 173 but max is 1 [ 283.335634][ T30] usb 7-1: config 3 has 1 interface, different from the descriptor's value: 2 [ 283.335655][ T30] usb 7-1: config 3 has no interface number 0 [ 283.335693][ T30] usb 7-1: config 3 interface 173 has no altsetting 1 [ 283.341482][ T30] usb 7-1: string descriptor 0 read error: -22 [ 283.341620][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.441098][ T30] ttusbir 7-1:3.173: cannot find expected altsetting [ 283.763658][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.831116][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.886213][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 283.950305][ T8656] syz.4.816 (8656): drop_caches: 2 [ 284.006028][ T10] usb 7-1: USB disconnect, device number 5 [ 284.053330][ T35] usb 6-1: New USB device found, idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 284.054889][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 146, changing to 11 [ 284.054923][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 26387, setting to 1024 [ 284.054963][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.127275][ T8684] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 284.416216][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.416733][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.448518][ T35] usb 6-1: USB disconnect, device number 10 [ 284.531643][ T8693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'. [ 284.897228][ T8698] FAULT_INJECTION: forcing a failure. [ 284.897228][ T8698] name failslab, interval 1, probability 0, space 0, times 0 [ 284.897268][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.0.830 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 284.897298][ T8698] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 284.897305][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.897317][ T8698] Call Trace: [ 284.897325][ T8698] [ 284.897334][ T8698] dump_stack_lvl+0xe8/0x150 [ 284.897373][ T8698] should_fail_ex+0x46b/0x600 [ 284.897406][ T8698] should_failslab+0xa8/0x100 [ 284.897440][ T8698] __kmalloc_noprof+0xf6/0x790 [ 284.897467][ T8698] ? jffs2_do_mount_fs+0x112/0x22b0 [ 284.897489][ T8698] ? jffs2_do_mount_fs+0x112/0x22b0 [ 284.897518][ T8698] jffs2_do_mount_fs+0x112/0x22b0 [ 284.897553][ T8698] ? __init_rwsem+0x74/0xa0 [ 284.897581][ T8698] jffs2_do_fill_super+0x555/0xc50 [ 284.897610][ T8698] ? __pfx_jffs2_fill_super+0x10/0x10 [ 284.897634][ T8698] mtd_get_sb+0x18a/0x410 [ 284.897660][ T8698] ? __pfx_jffs2_fill_super+0x10/0x10 [ 284.897684][ T8698] ? __pfx_jffs2_fill_super+0x10/0x10 [ 284.897710][ T8698] get_tree_mtd+0x597/0x7d0 [ 284.897737][ T8698] ? __pfx_jffs2_fill_super+0x10/0x10 [ 284.897760][ T8698] ? __pfx_get_tree_mtd+0x10/0x10 [ 284.897788][ T8698] ? safesetid_security_capable+0xa9/0x1a0 [ 284.897813][ T8698] vfs_get_tree+0x92/0x2a0 [ 284.897845][ T8698] do_new_mount+0x325/0xb00 [ 284.897868][ T8698] ? cap_capable+0x123/0x460 [ 284.897890][ T8698] ? __pfx_do_new_mount+0x10/0x10 [ 284.897915][ T8698] ? ns_capable+0x84/0xe0 [ 284.897940][ T8698] ? path_mount+0x647/0x1050 [ 284.897965][ T8698] ? user_path_at+0xd4/0x160 [ 284.897991][ T8698] __se_sys_mount+0x31d/0x420 [ 284.898018][ T8698] ? __pfx___se_sys_mount+0x10/0x10 [ 284.898045][ T8698] ? __x64_sys_mount+0x20/0xc0 [ 284.898069][ T8698] do_syscall_64+0x166/0x520 [ 284.898089][ T8698] ? trace_irq_disable+0x3b/0x140 [ 284.898116][ T8698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.898136][ T8698] ? clear_bhb_loop+0x70/0xc0 [ 284.898161][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.898180][ T8698] RIP: 0033:0x7f7dcf81f559 [ 284.898199][ T8698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.898215][ T8698] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.898236][ T8698] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 284.898250][ T8698] RDX: 0000200000000380 RSI: 0000200000000340 RDI: 00002000000002c0 [ 284.898265][ T8698] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 284.898277][ T8698] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 284.898289][ T8698] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 284.898321][ T8698] [ 285.531693][ T8716] loop5: detected capacity change from 0 to 7 [ 285.600468][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.600505][ T1391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.640216][ T8716] loop5: [ 285.640245][ T8716] loop5: partition table partially beyond EOD, truncated [ 287.157476][ T8728] FAULT_INJECTION: forcing a failure. [ 287.157476][ T8728] name failslab, interval 1, probability 0, space 0, times 0 [ 287.157515][ T8728] CPU: 0 UID: 0 PID: 8728 Comm: syz.4.837 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 287.157544][ T8728] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 287.157552][ T8728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 287.157563][ T8728] Call Trace: [ 287.157570][ T8728] [ 287.157579][ T8728] dump_stack_lvl+0xe8/0x150 [ 287.157615][ T8728] should_fail_ex+0x46b/0x600 [ 287.157647][ T8728] should_failslab+0xa8/0x100 [ 287.157679][ T8728] __kmalloc_cache_noprof+0x9c/0x670 [ 287.157707][ T8728] ? pkcs8_key_preparse+0x12d/0x3e0 [ 287.157740][ T8728] ? pkcs8_key_preparse+0x12d/0x3e0 [ 287.157778][ T8728] pkcs8_key_preparse+0x12d/0x3e0 [ 287.157809][ T8728] ? kfree+0x1c5/0x6d0 [ 287.157835][ T8728] ? __pfx_pkcs8_key_preparse+0x10/0x10 [ 287.157870][ T8728] ? x509_cert_parse+0x66f/0x7a0 [ 287.157897][ T8728] ? __pfx_down_read+0x10/0x10 [ 287.157922][ T8728] ? x509_key_preparse+0x74/0x6d0 [ 287.157959][ T8728] asymmetric_key_preparse+0xb9/0x1b0 [ 287.157989][ T8728] __key_create_or_update+0x360/0xa90 [ 287.158029][ T8728] ? __pfx___key_create_or_update+0x10/0x10 [ 287.158054][ T8728] ? lookup_user_key+0x1101/0x1230 [ 287.158096][ T8728] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 287.158136][ T8728] key_create_or_update+0x42/0x60 [ 287.158168][ T8728] __se_sys_add_key+0x349/0x420 [ 287.158208][ T8728] ? __pfx___se_sys_add_key+0x10/0x10 [ 287.158250][ T8728] ? __x64_sys_add_key+0x20/0xc0 [ 287.158282][ T8728] do_syscall_64+0x166/0x520 [ 287.158303][ T8728] ? trace_irq_disable+0x3b/0x140 [ 287.158323][ T8728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.158344][ T8728] ? clear_bhb_loop+0x70/0xc0 [ 287.158369][ T8728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.158389][ T8728] RIP: 0033:0x7f7b0fa7f559 [ 287.158416][ T8728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.158434][ T8728] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 287.158457][ T8728] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 287.158472][ T8728] RDX: 0000200000003c00 RSI: 0000000000000000 RDI: 0000200000003bc0 [ 287.158487][ T8728] RBP: 00007f7b0fb16b20 R08: ffffffffffffffff R09: 0000000000000000 [ 287.158502][ T8728] R10: 0000000000000190 R11: 0000000000000246 R12: 0000000000000000 [ 287.158515][ T8728] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 287.158550][ T8728] [ 287.862383][ T1008] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 288.040210][ T1008] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 288.041535][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.041566][ T1008] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.041583][ T1008] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 288.041607][ T1008] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.096997][ T1008] usb 5-1: config 0 descriptor?? [ 288.352086][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 288.352126][ T1391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.604006][ T1008] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 288.783999][ T8763] FAULT_INJECTION: forcing a failure. [ 288.783999][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 288.784042][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.2.850 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 288.784073][ T8763] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 288.784082][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 288.784094][ T8763] Call Trace: [ 288.784102][ T8763] [ 288.784111][ T8763] dump_stack_lvl+0xe8/0x150 [ 288.784162][ T8763] should_fail_ex+0x46b/0x600 [ 288.784198][ T8763] should_failslab+0xa8/0x100 [ 288.784233][ T8763] __kmalloc_cache_noprof+0x9c/0x670 [ 288.784263][ T8763] ? init_srcu_struct_fields+0x83/0xbd0 [ 288.784294][ T8763] ? init_srcu_struct_fields+0x83/0xbd0 [ 288.784333][ T8763] init_srcu_struct_fields+0x83/0xbd0 [ 288.784375][ T8763] dm_create+0x1fc/0xf80 [ 288.784400][ T8763] dev_create+0x1f7/0x400 [ 288.784429][ T8763] ? __pfx_dev_create+0x10/0x10 [ 288.784467][ T8763] dm_ctl_ioctl+0x9ec/0xe10 [ 288.784502][ T8763] ? __pfx_dev_create+0x10/0x10 [ 288.784529][ T8763] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 288.784585][ T8763] ? __fget_files+0x2a/0x420 [ 288.784614][ T8763] ? bpf_lsm_file_ioctl+0x9/0x20 [ 288.784633][ T8763] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 288.784659][ T8763] __se_sys_ioctl+0xff/0x170 [ 288.784691][ T8763] do_syscall_64+0x166/0x520 [ 288.784712][ T8763] ? trace_irq_disable+0x3b/0x140 [ 288.784731][ T8763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.784749][ T8763] ? clear_bhb_loop+0x70/0xc0 [ 288.784773][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.784793][ T8763] RIP: 0033:0x7f40af53f559 [ 288.784812][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.784830][ T8763] RSP: 002b:00007f40ad78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 288.784853][ T8763] RAX: ffffffffffffffda RBX: 00007f40af7c5fa0 RCX: 00007f40af53f559 [ 288.784869][ T8763] RDX: 0000200000000780 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 288.784883][ T8763] RBP: 00007f40af5d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 288.784896][ T8763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.784909][ T8763] R13: 00007f40af7c6038 R14: 00007f40af7c5fa0 R15: 00007ffdd83f6bd8 [ 288.784942][ T8763] [ 289.150728][ T1008] usb 5-1: USB disconnect, device number 15 [ 289.294130][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.294166][ T1391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.454252][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 289.605644][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 289.607386][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.607419][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.607456][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.671243][ T10] usb 1-1: config 0 descriptor?? [ 289.896817][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 289.896861][ T1391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.133445][ T10] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x2 [ 290.152456][ T10] pyra 0003:1E7D:2CF6.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 290.278497][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.859'. [ 290.304276][ T8789] syzkaller0: entered promiscuous mode [ 290.304319][ T8789] syzkaller0: entered allmulticast mode [ 290.710505][ T8806] FAULT_INJECTION: forcing a failure. [ 290.710505][ T8806] name failslab, interval 1, probability 0, space 0, times 0 [ 290.710534][ T8806] CPU: 0 UID: 0 PID: 8806 Comm: syz.5.863 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 290.710552][ T8806] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 290.710556][ T8806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 290.710563][ T8806] Call Trace: [ 290.710567][ T8806] [ 290.710573][ T8806] dump_stack_lvl+0xe8/0x150 [ 290.710598][ T8806] should_fail_ex+0x46b/0x600 [ 290.710617][ T8806] should_failslab+0xa8/0x100 [ 290.710635][ T8806] __kmalloc_noprof+0xf6/0x790 [ 290.710650][ T8806] ? iter_file_splice_write+0x1ed/0x1240 [ 290.710663][ T8806] ? iter_file_splice_write+0x1ed/0x1240 [ 290.710683][ T8806] iter_file_splice_write+0x1ed/0x1240 [ 290.710695][ T8806] ? __lock_acquire+0x747/0x2de0 [ 290.710723][ T8806] ? __pfx_iter_file_splice_write+0x10/0x10 [ 290.710736][ T8806] ? lock_acquire+0x115/0x350 [ 290.710759][ T8806] ? __pfx_iter_file_splice_write+0x10/0x10 [ 290.710772][ T8806] direct_splice_actor+0x104/0x160 [ 290.710788][ T8806] splice_direct_to_actor+0x586/0xcc0 [ 290.710811][ T8806] ? __pfx_direct_splice_actor+0x10/0x10 [ 290.710824][ T8806] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 290.710843][ T8806] do_splice_direct+0x19b/0x2a0 [ 290.710860][ T8806] ? __pfx_do_splice_direct+0x10/0x10 [ 290.710885][ T8806] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 290.710918][ T8806] ? rw_verify_area+0x209/0x4d0 [ 290.710941][ T8806] ? fdget+0x1b2/0x250 [ 290.710967][ T8806] do_sendfile+0x540/0x7e0 [ 290.711001][ T8806] ? __pfx_do_sendfile+0x10/0x10 [ 290.711020][ T8806] ? __se_sys_futex+0x3a8/0x450 [ 290.711036][ T8806] __se_sys_sendfile64+0x144/0x1a0 [ 290.711055][ T8806] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 290.711078][ T8806] do_syscall_64+0x166/0x520 [ 290.711089][ T8806] ? trace_irq_disable+0x3b/0x140 [ 290.711099][ T8806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.711110][ T8806] ? clear_bhb_loop+0x70/0xc0 [ 290.711124][ T8806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.711135][ T8806] RIP: 0033:0x7f9911b3f559 [ 290.711147][ T8806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.711157][ T8806] RSP: 002b:00007f990fd96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 290.711177][ T8806] RAX: ffffffffffffffda RBX: 00007f9911dc5fa0 RCX: 00007f9911b3f559 [ 290.711185][ T8806] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 290.711192][ T8806] RBP: 00007f9911bd6b20 R08: 0000000000000000 R09: 0000000000000000 [ 290.711198][ T8806] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000000 [ 290.711205][ T8806] R13: 00007f9911dc6038 R14: 00007f9911dc5fa0 R15: 00007ffd2d843e48 [ 290.711223][ T8806] [ 290.980705][ T10] pyra 0003:1E7D:2CF6.000C: couldn't init struct pyra_device [ 290.980761][ T10] pyra 0003:1E7D:2CF6.000C: couldn't install mouse [ 291.008188][ T10] pyra 0003:1E7D:2CF6.000C: probe with driver pyra failed with error -71 [ 291.017832][ T10] usb 1-1: USB disconnect, device number 22 [ 291.438079][ T8820] netlink: 4 bytes leftover after parsing attributes in process `syz.6.868'. [ 291.662445][ T5893] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 291.815301][ T5893] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 291.821660][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.821688][ T5893] usb 3-1: Product: syz [ 291.821702][ T5893] usb 3-1: Manufacturer: syz [ 291.821717][ T5893] usb 3-1: SerialNumber: syz [ 292.317014][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 292.317219][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 292.632383][ T5351] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 292.804374][ T5351] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 292.810003][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.810037][ T5351] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.810080][ T5351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.873095][ T5351] usb 5-1: config 0 descriptor?? [ 293.326609][ T8842] input: syz1 as /devices/virtual/input/input15 [ 293.369125][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 293.369183][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.535211][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535250][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535280][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535308][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535334][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535360][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.535385][ T5351] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 293.644969][ T5893] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.672368][ T5893] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 293.674291][ T5351] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 293.677409][ T5351] cp2112 0003:10C4:EA90.000D: Part Number: 0x00 Device Version: 0x00 [ 294.451545][ T5893] usb 3-1: USB disconnect, device number 13 [ 295.049409][ T5351] cp2112 0003:10C4:EA90.000D: error reading lock byte: -71 [ 295.127107][ T5351] usb 5-1: USB disconnect, device number 16 [ 295.140835][ T1391] bridge_slave_1: left allmulticast mode [ 295.140871][ T1391] bridge_slave_1: left promiscuous mode [ 295.141281][ T1391] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.329375][ T8877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.885'. [ 295.459912][ T1391] bridge_slave_0: left allmulticast mode [ 295.459949][ T1391] bridge_slave_0: left promiscuous mode [ 295.460203][ T1391] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.853801][ T8896] syz.6.888 uses obsolete (PF_INET,SOCK_PACKET) [ 297.515292][ T1391] team0: Port device bridge0 removed [ 297.554744][ T8916] FAULT_INJECTION: forcing a failure. [ 297.554744][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 297.554772][ T8916] CPU: 1 UID: 0 PID: 8916 Comm: syz.4.894 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 297.554789][ T8916] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 297.554794][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 297.554813][ T8916] Call Trace: [ 297.554818][ T8916] [ 297.554823][ T8916] dump_stack_lvl+0xe8/0x150 [ 297.554846][ T8916] should_fail_ex+0x46b/0x600 [ 297.554865][ T8916] should_failslab+0xa8/0x100 [ 297.554884][ T8916] __kmalloc_noprof+0xf6/0x790 [ 297.554898][ T8916] ? bpf_prepare_filter+0x6fb/0x12d0 [ 297.554911][ T8916] ? bpf_prepare_filter+0x6fb/0x12d0 [ 297.554928][ T8916] bpf_prepare_filter+0x6fb/0x12d0 [ 297.554940][ T8916] ? __kmalloc_node_track_caller_noprof+0x587/0x7b0 [ 297.554959][ T8916] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 297.554972][ T8916] ? kmemdup_noprof+0x55/0x70 [ 297.554994][ T8916] ? __get_filter+0x2d5/0x420 [ 297.555010][ T8916] sk_attach_filter+0x24/0x140 [ 297.555025][ T8916] sk_setsockopt+0x2440/0x2ce0 [ 297.555043][ T8916] ? __pfx_sk_setsockopt+0x10/0x10 [ 297.555058][ T8916] ? do_futex+0x3e7/0x4e0 [ 297.555070][ T8916] ? __asan_memcpy+0x40/0x70 [ 297.555085][ T8916] ? lock_acquire+0x115/0x350 [ 297.555104][ T8916] ? __fget_files+0x2a/0x420 [ 297.555119][ T8916] ? __fget_files+0x3a8/0x420 [ 297.555130][ T8916] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 297.555147][ T8916] do_sock_setsockopt+0x11b/0x1b0 [ 297.555165][ T8916] __x64_sys_setsockopt+0x143/0x1b0 [ 297.555183][ T8916] do_syscall_64+0x166/0x520 [ 297.555194][ T8916] ? trace_irq_disable+0x3b/0x140 [ 297.555203][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.555214][ T8916] ? clear_bhb_loop+0x70/0xc0 [ 297.555227][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.555238][ T8916] RIP: 0033:0x7f7b0fa7f559 [ 297.555249][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 297.555259][ T8916] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.555271][ T8916] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 297.555278][ T8916] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 297.555284][ T8916] RBP: 00007f7b0fb16b20 R08: 0000000000000010 R09: 0000000000000000 [ 297.555291][ T8916] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 297.555298][ T8916] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 297.555314][ T8916] [ 297.993204][ T1391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.082872][ T1391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.104543][ T1391] bond0 (unregistering): Released all slaves [ 298.158982][ T8878] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.304067][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 298.308268][ T8907] FAULT_INJECTION: forcing a failure. [ 298.308268][ T8907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.308311][ T8907] CPU: 1 UID: 0 PID: 8907 Comm: syz.0.891 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 298.308344][ T8907] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 298.308353][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 298.308365][ T8907] Call Trace: [ 298.308374][ T8907] [ 298.308383][ T8907] dump_stack_lvl+0xe8/0x150 [ 298.308421][ T8907] should_fail_ex+0x46b/0x600 [ 298.308456][ T8907] _copy_from_user+0x2d/0xb0 [ 298.308486][ T8907] ip_tunnel_parm_from_user+0xbd/0x3a0 [ 298.308516][ T8907] ? __lock_acquire+0x747/0x2de0 [ 298.308548][ T8907] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 298.308595][ T8907] ip_tunnel_siocdevprivate+0xc1/0x1e0 [ 298.308636][ T8907] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 298.308677][ T8907] ? rcu_is_watching+0x16/0xb0 [ 298.308706][ T8907] ipip6_tunnel_siocdevprivate+0x2b6/0x15c0 [ 298.308743][ T8907] ? __pfx_ipip6_tunnel_siocdevprivate+0x10/0x10 [ 298.308778][ T8907] ? rt_mutex_slowlock+0x424/0x780 [ 298.308809][ T8907] ? rt_mutex_slowlock+0x1f2/0x780 [ 298.308837][ T8907] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 298.308877][ T8907] ? full_name_hash+0x92/0xe0 [ 298.308907][ T8907] dev_ifsioc+0xb56/0x1360 [ 298.308946][ T8907] dev_ioctl+0x84c/0x1150 [ 298.308980][ T8907] sock_ioctl+0x756/0x7f0 [ 298.309008][ T8907] ? __pfx_sock_ioctl+0x10/0x10 [ 298.309035][ T8907] ? __fget_files+0x2a/0x420 [ 298.309064][ T8907] ? bpf_lsm_file_ioctl+0x9/0x20 [ 298.309085][ T8907] ? __pfx_sock_ioctl+0x10/0x10 [ 298.309107][ T8907] __se_sys_ioctl+0xff/0x170 [ 298.309140][ T8907] do_syscall_64+0x166/0x520 [ 298.309160][ T8907] ? trace_irq_disable+0x3b/0x140 [ 298.309179][ T8907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.309199][ T8907] ? clear_bhb_loop+0x70/0xc0 [ 298.309224][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.309244][ T8907] RIP: 0033:0x7f7dcf81f559 [ 298.309264][ T8907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.309282][ T8907] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.309304][ T8907] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 298.309320][ T8907] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000004 [ 298.309334][ T8907] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 298.309347][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.309360][ T8907] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 298.309394][ T8907] [ 298.332422][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 298.558138][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.565637][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 298.566945][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.566968][ T9] usb 5-1: SerialNumber: syz [ 298.634611][ T5893] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 299.018875][ T5893] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 299.020557][ T5893] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.034651][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.034734][ T5893] usb 3-1: Product: syz [ 299.034748][ T5893] usb 3-1: Manufacturer: syz [ 299.034762][ T5893] usb 3-1: SerialNumber: syz [ 299.127914][ T5893] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 299.361900][ T8942] FAULT_INJECTION: forcing a failure. [ 299.361900][ T8942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 299.361946][ T8942] CPU: 1 UID: 0 PID: 8942 Comm: syz.0.904 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 299.361978][ T8942] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 299.361986][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 299.362045][ T8942] Call Trace: [ 299.362053][ T8942] [ 299.362063][ T8942] dump_stack_lvl+0xe8/0x150 [ 299.362099][ T8942] should_fail_ex+0x46b/0x600 [ 299.362134][ T8942] prepare_alloc_pages+0x21e/0x650 [ 299.362172][ T8942] __alloc_frozen_pages_noprof+0x19f/0x440 [ 299.362204][ T8942] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 299.362250][ T8942] __alloc_pages_noprof+0x10/0x100 [ 299.362281][ T8942] alloc_pages_node_noprof+0xe2/0x140 [ 299.362310][ T8942] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 299.362340][ T8942] ? __kmalloc_node_noprof+0x589/0x7b0 [ 299.362378][ T8942] ? __rb_allocate_pages+0x570/0x16c0 [ 299.362411][ T8942] __rb_allocate_pages+0xce8/0x16c0 [ 299.362460][ T8942] rb_allocate_cpu_buffer+0x117d/0x3070 [ 299.362506][ T8942] ? trace_kmalloc+0x2a/0xf0 [ 299.362535][ T8942] ? __pfx_rb_allocate_cpu_buffer+0x10/0x10 [ 299.362566][ T8942] ? alloc_buffer+0x27b/0x1d70 [ 299.362596][ T8942] alloc_buffer+0x17f7/0x1d70 [ 299.362648][ T8942] __ring_buffer_alloc+0x2c/0x40 [ 299.362673][ T8942] allocate_trace_buffer+0x1d2/0x950 [ 299.362705][ T8942] ? __kmalloc_node_track_caller_noprof+0x587/0x7b0 [ 299.362736][ T8942] ? trace_array_create_systems+0x75/0xe60 [ 299.362767][ T8942] ? __pfx_allocate_trace_buffer+0x10/0x10 [ 299.362802][ T8942] ? __raw_spin_lock_init+0x45/0x100 [ 299.362831][ T8942] trace_array_create_systems+0x590/0xe60 [ 299.362861][ T8942] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 299.362883][ T8942] ? mutex_lock_nested+0x14d/0x1d0 [ 299.362915][ T8942] instance_mkdir+0xd5/0x140 [ 299.362946][ T8942] tracefs_syscall_mkdir+0x11a/0x190 [ 299.362968][ T8942] ? __pfx_tracefs_syscall_mkdir+0x10/0x10 [ 299.362988][ T8942] ? generic_permission+0x2ba/0x660 [ 299.363015][ T8942] ? __pfx_tracefs_permission+0x10/0x10 [ 299.363037][ T8942] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 299.363064][ T8942] ? security_inode_mkdir+0xc3/0x340 [ 299.363094][ T8942] vfs_mkdir+0x414/0x630 [ 299.363131][ T8942] filename_mkdirat+0x289/0x520 [ 299.363166][ T8942] ? __pfx_filename_mkdirat+0x10/0x10 [ 299.363198][ T8942] ? do_getname+0x151/0x250 [ 299.363222][ T8942] __se_sys_mkdirat+0x35/0x150 [ 299.363251][ T8942] do_syscall_64+0x166/0x520 [ 299.363270][ T8942] ? trace_irq_disable+0x3b/0x140 [ 299.363288][ T8942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.363306][ T8942] ? clear_bhb_loop+0x70/0xc0 [ 299.363330][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.363356][ T8942] RIP: 0033:0x7f7dcf81f559 [ 299.363376][ T8942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.363392][ T8942] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 299.363413][ T8942] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 299.363428][ T8942] RDX: 00000000000001ff RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 299.363441][ T8942] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 299.363453][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.363463][ T8942] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 299.363490][ T8942] [ 299.838582][ T5893] gspca_mr97310a: reg read [21] error -71 [ 299.838661][ T5893] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -71 [ 299.903879][ T5893] usb 3-1: USB disconnect, device number 14 [ 300.045559][ T9] cdc_ether 5-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.4-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 300.496667][ T8960] netlink: 'syz.0.907': attribute type 1 has an invalid length. [ 300.949316][ T35] usb 5-1: USB disconnect, device number 17 [ 300.984218][ T35] cdc_ether 5-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.4-1, CDC Ethernet Device [ 301.127011][ T8960] bond1: entered promiscuous mode [ 301.138682][ T8960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.397938][ T8984] FAULT_INJECTION: forcing a failure. [ 301.397938][ T8984] name failslab, interval 1, probability 0, space 0, times 0 [ 301.397976][ T8984] CPU: 1 UID: 0 PID: 8984 Comm: syz.2.912 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 301.398009][ T8984] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 301.398018][ T8984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.398030][ T8984] Call Trace: [ 301.398037][ T8984] [ 301.398046][ T8984] dump_stack_lvl+0xe8/0x150 [ 301.398083][ T8984] should_fail_ex+0x46b/0x600 [ 301.398117][ T8984] should_failslab+0xa8/0x100 [ 301.398150][ T8984] __kmalloc_noprof+0xf6/0x790 [ 301.398180][ T8984] ? tomoyo_encode+0x2ad/0x570 [ 301.398204][ T8984] ? tomoyo_encode+0x2ad/0x570 [ 301.398236][ T8984] tomoyo_encode+0x2ad/0x570 [ 301.398265][ T8984] tomoyo_realpath_from_path+0x5fa/0x640 [ 301.398303][ T8984] tomoyo_check_open_permission+0x229/0x470 [ 301.398323][ T8984] ? tomoyo_check_open_permission+0x1d3/0x470 [ 301.398341][ T8984] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 301.398362][ T8984] ? __asan_memset+0x22/0x50 [ 301.398424][ T8984] ? mnt_get_write_access+0x66/0x2d0 [ 301.398465][ T8984] security_file_open+0xa9/0x240 [ 301.398489][ T8984] do_dentry_open+0x4b3/0x1410 [ 301.398521][ T8984] vfs_open_consume+0x4a/0x360 [ 301.398539][ T8984] ? path_openat+0x16e6/0x2100 [ 301.398571][ T8984] path_openat+0x1701/0x2100 [ 301.398615][ T8984] do_file_open+0x23e/0x4a0 [ 301.398639][ T8984] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 301.398666][ T8984] ? __pfx_do_file_open+0x10/0x10 [ 301.398714][ T8984] ? alloc_fd+0x6b2/0x760 [ 301.398747][ T8984] do_sys_openat2+0x115/0x200 [ 301.398766][ T8984] ? __se_sys_futex+0x3a8/0x450 [ 301.398790][ T8984] ? __pfx_do_sys_openat2+0x10/0x10 [ 301.398817][ T8984] ? rcu_is_watching+0x16/0xb0 [ 301.398845][ T8984] __x64_sys_openat+0x138/0x170 [ 301.398871][ T8984] do_syscall_64+0x166/0x520 [ 301.398891][ T8984] ? trace_irq_disable+0x3b/0x140 [ 301.398912][ T8984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.398933][ T8984] ? clear_bhb_loop+0x70/0xc0 [ 301.398959][ T8984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.398979][ T8984] RIP: 0033:0x7f40af53f559 [ 301.398998][ T8984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.399015][ T8984] RSP: 002b:00007f40ad78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 301.399037][ T8984] RAX: ffffffffffffffda RBX: 00007f40af7c5fa0 RCX: 00007f40af53f559 [ 301.399052][ T8984] RDX: 0000000000101042 RSI: 0000200000000880 RDI: ffffffffffffff9c [ 301.399066][ T8984] RBP: 00007f40af5d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 301.399078][ T8984] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000 [ 301.399089][ T8984] R13: 00007f40af7c6038 R14: 00007f40af7c5fa0 R15: 00007ffdd83f6bd8 [ 301.399123][ T8984] [ 301.399259][ T8984] ERROR: Out of memory at tomoyo_realpath_from_path. [ 301.420078][ T8964] veth3: entered promiscuous mode [ 301.446453][ T8964] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 302.178140][ T8994] FAULT_INJECTION: forcing a failure. [ 302.178140][ T8994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.178182][ T8994] CPU: 1 UID: 0 PID: 8994 Comm: syz.2.914 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 302.178212][ T8994] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 302.178220][ T8994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 302.178231][ T8994] Call Trace: [ 302.178239][ T8994] [ 302.178248][ T8994] dump_stack_lvl+0xe8/0x150 [ 302.178299][ T8994] should_fail_ex+0x46b/0x600 [ 302.178333][ T8994] _copy_from_iter+0x1d3/0x1660 [ 302.178367][ T8994] ? proc_sys_call_handler+0x3cc/0x830 [ 302.178392][ T8994] ? proc_sys_call_handler+0x3cc/0x830 [ 302.178414][ T8994] ? __pfx__copy_from_iter+0x10/0x10 [ 302.178439][ T8994] ? proc_sys_call_handler+0x3cc/0x830 [ 302.178459][ T8994] ? __kvmalloc_node_noprof+0x5cf/0x880 [ 302.178493][ T8994] ? proc_sys_call_handler+0x3cc/0x830 [ 302.178513][ T8994] ? proc_sys_call_handler+0x3cc/0x830 [ 302.178542][ T8994] proc_sys_call_handler+0x420/0x830 [ 302.178571][ T8994] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 302.178604][ T8994] vfs_write+0x61e/0xbb0 [ 302.178636][ T8994] ? __pfx_vfs_write+0x10/0x10 [ 302.178664][ T8994] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 302.178713][ T8994] ? mutex_lock_nested+0x14d/0x1d0 [ 302.178739][ T8994] ? fdget_pos+0x11e/0x160 [ 302.178772][ T8994] ksys_write+0x156/0x270 [ 302.178799][ T8994] ? __pfx_ksys_write+0x10/0x10 [ 302.178835][ T8994] do_syscall_64+0x166/0x520 [ 302.178853][ T8994] ? trace_irq_disable+0x3b/0x140 [ 302.178869][ T8994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.178889][ T8994] ? clear_bhb_loop+0x70/0xc0 [ 302.178912][ T8994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.178932][ T8994] RIP: 0033:0x7f40af53f559 [ 302.178953][ T8994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.178971][ T8994] RSP: 002b:00007f40ad78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 302.178994][ T8994] RAX: ffffffffffffffda RBX: 00007f40af7c5fa0 RCX: 00007f40af53f559 [ 302.179009][ T8994] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000005 [ 302.179023][ T8994] RBP: 00007f40af5d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 302.179036][ T8994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.179049][ T8994] R13: 00007f40af7c6038 R14: 00007f40af7c5fa0 R15: 00007ffdd83f6bd8 [ 302.179085][ T8994] [ 302.549858][ T9003] netlink: 'syz.6.920': attribute type 1 has an invalid length. [ 303.152462][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 303.319653][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 303.330207][ T9] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.330240][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.345753][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 303.345924][ T9] usb 3-1: Product: syz [ 303.345938][ T9] usb 3-1: Manufacturer: syz [ 303.345952][ T9] usb 3-1: SerialNumber: syz [ 303.489558][ T9] usb 3-1: config 0 descriptor?? [ 303.618604][ T9] usb 3-1: selecting invalid altsetting 0 [ 303.799468][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 303.804061][ T9003] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 304.123207][ T35] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 305.001927][ T9] usb 3-1: USB disconnect, device number 15 [ 306.893061][ T35] usb 5-1: unable to get BOS descriptor or descriptor too short [ 306.893121][ T35] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 306.894160][ T35] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 306.894193][ T35] usb 5-1: can't read configurations, error -71 [ 307.067897][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 307.173945][ T6838] udevd[6838]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.232301][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 307.232983][ T5908] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 307.235668][ T5908] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 307.235694][ T5908] usb 1-1: config 0 has no interface number 0 [ 307.235736][ T5908] usb 1-1: config 0 interface 184 has no altsetting 0 [ 307.283378][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.283406][ T5908] usb 1-1: Product: syz [ 307.283417][ T5908] usb 1-1: Manufacturer: syz [ 307.283429][ T5908] usb 1-1: SerialNumber: syz [ 307.290996][ T5908] usb 1-1: config 0 descriptor?? [ 307.475107][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 307.643202][ T9] usb 3-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 307.645648][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.645699][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.649751][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.649767][ T9] usb 3-1: Product: syz [ 307.649775][ T9] usb 3-1: Manufacturer: syz [ 307.649782][ T9] usb 3-1: SerialNumber: syz [ 307.940953][ T9] ums-jumpshot 3-1:1.0: USB Mass Storage device detected [ 308.148686][ T5908] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 308.148717][ T5908] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 309.147950][ T9] ums-jumpshot 3-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 309.776159][ T9] usb 3-1: USB disconnect, device number 16 [ 309.924160][ T5908] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 309.924203][ T5908] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 309.924223][ T5908] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 309.924526][ T5908] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 310.015867][ T9089] FAULT_INJECTION: forcing a failure. [ 310.015867][ T9089] name fail_futex, interval 1, probability 0, space 0, times 0 [ 310.015907][ T9089] CPU: 1 UID: 0 PID: 9089 Comm: syz.6.942 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 310.015942][ T9089] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 310.015949][ T9089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 310.015962][ T9089] Call Trace: [ 310.015969][ T9089] [ 310.015978][ T9089] dump_stack_lvl+0xe8/0x150 [ 310.016013][ T9089] should_fail_ex+0x46b/0x600 [ 310.016053][ T9089] get_futex_key+0x1ab/0x1410 [ 310.016084][ T9089] ? __pfx_get_futex_key+0x10/0x10 [ 310.016109][ T9089] ? update_se+0x90/0xf90 [ 310.016127][ T9089] futex_wait_setup+0x4a/0x590 [ 310.016146][ T9089] ? __futex_wait+0xdd/0x480 [ 310.016163][ T9089] __futex_wait+0x177/0x480 [ 310.016177][ T9089] ? update_protect_slice+0x45/0x320 [ 310.016196][ T9089] ? __pfx___futex_wait+0x10/0x10 [ 310.016219][ T9089] ? __pfx_futex_wake_mark+0x10/0x10 [ 310.016236][ T9089] ? try_to_wake_up+0x854/0x1430 [ 310.016256][ T9089] futex_wait+0x121/0x390 [ 310.016273][ T9089] ? __pfx_futex_wait+0x10/0x10 [ 310.016294][ T9089] ? __pfx___sys_bpf+0x10/0x10 [ 310.016309][ T9089] do_futex+0x3e7/0x4e0 [ 310.016324][ T9089] ? __pfx_do_futex+0x10/0x10 [ 310.016341][ T9089] __se_sys_futex+0x3a8/0x450 [ 310.016357][ T9089] ? __pfx___se_sys_futex+0x10/0x10 [ 310.016369][ T9089] ? rcu_is_watching+0x16/0xb0 [ 310.016384][ T9089] ? __x64_sys_futex+0x21/0xf0 [ 310.016398][ T9089] do_syscall_64+0x166/0x520 [ 310.016409][ T9089] ? trace_irq_disable+0x3b/0x140 [ 310.016419][ T9089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.016430][ T9089] ? clear_bhb_loop+0x70/0xc0 [ 310.016443][ T9089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.016454][ T9089] RIP: 0033:0x7f7f2e0df559 [ 310.016466][ T9089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.016481][ T9089] RSP: 002b:00007f7f2c3360e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 310.016494][ T9089] RAX: ffffffffffffffda RBX: 00007f7f2e365fa8 RCX: 00007f7f2e0df559 [ 310.016502][ T9089] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7f2e365fa8 [ 310.016510][ T9089] RBP: 00007f7f2e365fa0 R08: 0000000000000000 R09: 0000000000000000 [ 310.016518][ T9089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.016524][ T9089] R13: 00007f7f2e366038 R14: 00007fff36a3dee0 R15: 00007fff36a3dfc8 [ 310.016541][ T9089] [ 310.158558][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.943'. [ 310.292345][ T5908] usb 1-1: USB disconnect, device number 23 [ 310.738368][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 311.091726][ T35] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.115998][ T9122] FAULT_INJECTION: forcing a failure. [ 311.115998][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 311.116033][ T9122] CPU: 1 UID: 0 PID: 9122 Comm: syz.5.952 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 311.116058][ T9122] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 311.116065][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 311.116075][ T9122] Call Trace: [ 311.116081][ T9122] [ 311.116093][ T9122] dump_stack_lvl+0xe8/0x150 [ 311.116125][ T9122] should_fail_ex+0x46b/0x600 [ 311.116155][ T9122] should_failslab+0xa8/0x100 [ 311.116183][ T9122] __kmalloc_noprof+0xf6/0x790 [ 311.116216][ T9122] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 311.116235][ T9122] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 311.116259][ T9122] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 311.116285][ T9122] genl_family_rcv_msg_doit+0xda/0x340 [ 311.116308][ T9122] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 311.116329][ T9122] ? rcu_is_watching+0x16/0xb0 [ 311.116349][ T9122] ? cap_capable+0x123/0x460 [ 311.116366][ T9122] ? safesetid_security_capable+0xa9/0x1a0 [ 311.116386][ T9122] ? bpf_lsm_capable+0x9/0x20 [ 311.116405][ T9122] ? security_capable+0x7e/0x2c0 [ 311.116432][ T9122] genl_rcv_msg+0x614/0x7a0 [ 311.116457][ T9122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.116472][ T9122] ? __pfx_ovs_meter_cmd_del+0x10/0x10 [ 311.116499][ T9122] ? __copy_skb_header+0xa3/0x4a0 [ 311.116517][ T9122] ? __asan_memcpy+0x40/0x70 [ 311.116544][ T9122] netlink_rcv_skb+0x226/0x4a0 [ 311.116567][ T9122] ? __pfx_genl_rcv_msg+0x10/0x10 [ 311.116584][ T9122] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.116617][ T9122] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.116639][ T9122] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.116662][ T9122] genl_rcv+0x28/0x40 [ 311.116676][ T9122] netlink_unicast+0x90c/0xac0 [ 311.116712][ T9122] netlink_sendmsg+0x7f0/0xb20 [ 311.116741][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.116761][ T9122] ? __lock_acquire+0x747/0x2de0 [ 311.116790][ T9122] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 311.116822][ T9122] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.116844][ T9122] sock_sendmsg_nosec+0x14e/0x190 [ 311.116867][ T9122] ____sys_sendmsg+0x565/0x870 [ 311.116893][ T9122] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.116918][ T9122] ? import_iovec+0x73/0xa0 [ 311.116945][ T9122] ___sys_sendmsg+0x2a5/0x360 [ 311.116959][ T9122] ? __lock_acquire+0x747/0x2de0 [ 311.116987][ T9122] ? __pfx____sys_sendmsg+0x10/0x10 [ 311.117008][ T9122] ? futex_wait+0x2a2/0x390 [ 311.117056][ T9122] ? __fget_files+0x3a8/0x420 [ 311.117077][ T9122] ? __fget_files+0x2a/0x420 [ 311.117105][ T9122] __x64_sys_sendmsg+0x1b7/0x290 [ 311.117125][ T9122] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 311.117161][ T9122] do_syscall_64+0x166/0x520 [ 311.117179][ T9122] ? trace_irq_disable+0x3b/0x140 [ 311.117208][ T9122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.117233][ T9122] ? clear_bhb_loop+0x70/0xc0 [ 311.117255][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.117275][ T9122] RIP: 0033:0x7f9911b3f559 [ 311.117293][ T9122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.117309][ T9122] RSP: 002b:00007f990fd96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.117330][ T9122] RAX: ffffffffffffffda RBX: 00007f9911dc5fa0 RCX: 00007f9911b3f559 [ 311.117343][ T9122] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 311.117356][ T9122] RBP: 00007f9911bd6b20 R08: 0000000000000000 R09: 0000000000000000 [ 311.117368][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.117380][ T9122] R13: 00007f9911dc6038 R14: 00007f9911dc5fa0 R15: 00007ffd2d843e48 [ 311.117411][ T9122] [ 312.136851][ T35] usb 1-1: Using ep0 maxpacket: 16 [ 312.169315][ T35] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 312.183534][ T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 312.186702][ T35] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.186727][ T35] usb 1-1: Product: syz [ 312.186740][ T35] usb 1-1: Manufacturer: syz [ 312.186758][ T35] usb 1-1: SerialNumber: syz [ 312.206122][ T35] usb 1-1: config 0 descriptor?? [ 312.245684][ T35] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 312.245720][ T35] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 312.790067][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 312.896562][ T35] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 313.137355][ T1391] hsr_slave_0: left promiscuous mode [ 313.152501][ T1391] hsr_slave_1: left promiscuous mode [ 313.153752][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.153778][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.276397][ T1391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.276483][ T1391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.539456][ T1391] veth1_macvtap: left promiscuous mode [ 313.539681][ T1391] veth0_macvtap: left promiscuous mode [ 313.553382][ T1391] veth1_vlan: left promiscuous mode [ 313.556127][ T1391] veth0_vlan: left promiscuous mode [ 313.595786][ T35] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 313.595830][ T35] em28xx 1-1:0.0: board has no eeprom [ 313.704937][ T35] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 313.704971][ T35] em28xx 1-1:0.0: dvb set to bulk mode. [ 313.706942][ T5351] em28xx 1-1:0.0: Binding DVB extension [ 313.747527][ T35] usb 1-1: USB disconnect, device number 24 [ 313.756494][ T35] em28xx 1-1:0.0: Disconnecting em28xx [ 314.018707][ T9141] FAULT_INJECTION: forcing a failure. [ 314.018707][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 314.018782][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.6.959 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 314.018955][ T9141] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 314.018992][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 314.019035][ T9141] Call Trace: [ 314.019042][ T9141] [ 314.019050][ T9141] dump_stack_lvl+0xe8/0x150 [ 314.019145][ T9141] should_fail_ex+0x46b/0x600 [ 314.019209][ T9141] should_failslab+0xa8/0x100 [ 314.019257][ T9141] __kmalloc_cache_noprof+0x9c/0x670 [ 314.019286][ T9141] ? getname_long+0x50/0x130 [ 314.019305][ T9141] ? getname_long+0x50/0x130 [ 314.019332][ T9141] getname_long+0x50/0x130 [ 314.019352][ T9141] do_getname+0x181/0x250 [ 314.019374][ T9141] __se_sys_symlink+0x2b/0x2b0 [ 314.019397][ T9141] do_syscall_64+0x166/0x520 [ 314.019417][ T9141] ? trace_irq_disable+0x3b/0x140 [ 314.019436][ T9141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.019462][ T9141] ? clear_bhb_loop+0x70/0xc0 [ 314.019485][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.019505][ T9141] RIP: 0033:0x7f7f2e0df559 [ 314.019522][ T9141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.019540][ T9141] RSP: 002b:00007f7f2c336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 314.019560][ T9141] RAX: ffffffffffffffda RBX: 00007f7f2e365fa0 RCX: 00007f7f2e0df559 [ 314.019575][ T9141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000700 [ 314.019588][ T9141] RBP: 00007f7f2e176b20 R08: 0000000000000000 R09: 0000000000000000 [ 314.019601][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.019613][ T9141] R13: 00007f7f2e366038 R14: 00007f7f2e365fa0 R15: 00007fff36a3dfc8 [ 314.019646][ T9141] [ 314.766359][ T5351] em28xx 1-1:0.0: Registering input extension [ 314.766817][ T35] em28xx 1-1:0.0: Closing input extension [ 316.886561][ T35] em28xx: Freeing device [ 317.269190][ T9182] FAULT_INJECTION: forcing a failure. [ 317.269190][ T9182] name fail_futex, interval 1, probability 0, space 0, times 0 [ 317.269228][ T9182] CPU: 1 UID: 0 PID: 9182 Comm: syz.5.972 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 317.269254][ T9182] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 317.269267][ T9182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.269279][ T9182] Call Trace: [ 317.269286][ T9182] [ 317.269294][ T9182] dump_stack_lvl+0xe8/0x150 [ 317.269329][ T9182] should_fail_ex+0x46b/0x600 [ 317.269358][ T9182] get_futex_key+0x1ab/0x1410 [ 317.269387][ T9182] ? __pfx_get_futex_key+0x10/0x10 [ 317.269409][ T9182] ? __cgroup_account_cputime+0xe8/0x120 [ 317.269438][ T9182] futex_wait_setup+0x4a/0x590 [ 317.269472][ T9182] ? __futex_wait+0xdd/0x480 [ 317.269505][ T9182] __futex_wait+0x177/0x480 [ 317.269541][ T9182] ? __pfx___futex_wait+0x10/0x10 [ 317.269573][ T9182] ? __pfx_futex_wake_mark+0x10/0x10 [ 317.269606][ T9182] ? try_to_wake_up+0x854/0x1430 [ 317.269643][ T9182] futex_wait+0x121/0x390 [ 317.269674][ T9182] ? __pfx_futex_wait+0x10/0x10 [ 317.269710][ T9182] ? security_file_alloc+0x34/0x310 [ 317.269741][ T9182] do_futex+0x3e7/0x4e0 [ 317.269766][ T9182] ? __asan_memcpy+0x40/0x70 [ 317.269795][ T9182] ? __pfx_do_futex+0x10/0x10 [ 317.269825][ T9182] __se_sys_futex+0x3a8/0x450 [ 317.269851][ T9182] ? fd_install+0x3a4/0x4e0 [ 317.269873][ T9182] ? __pfx___se_sys_futex+0x10/0x10 [ 317.269895][ T9182] ? fd_install+0x98/0x4e0 [ 317.269924][ T9182] ? __x64_sys_futex+0x21/0xf0 [ 317.269962][ T9182] do_syscall_64+0x166/0x520 [ 317.269983][ T9182] ? trace_irq_disable+0x3b/0x140 [ 317.270001][ T9182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.270021][ T9182] ? clear_bhb_loop+0x70/0xc0 [ 317.270043][ T9182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.270063][ T9182] RIP: 0033:0x7f9911b3f559 [ 317.270082][ T9182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.270102][ T9182] RSP: 002b:00007f990fd960e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 317.270124][ T9182] RAX: ffffffffffffffda RBX: 00007f9911dc5fa8 RCX: 00007f9911b3f559 [ 317.270139][ T9182] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9911dc5fa8 [ 317.270153][ T9182] RBP: 00007f9911dc5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 317.270166][ T9182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.270190][ T9182] R13: 00007f9911dc6038 R14: 00007ffd2d843d60 R15: 00007ffd2d843e48 [ 317.270228][ T9182] [ 317.385113][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.409040][ T9186] FAULT_INJECTION: forcing a failure. [ 317.409040][ T9186] name failslab, interval 1, probability 0, space 0, times 0 [ 317.409080][ T9186] CPU: 0 UID: 0 PID: 9186 Comm: syz.6.973 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 317.409110][ T9186] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 317.409119][ T9186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.409130][ T9186] Call Trace: [ 317.409138][ T9186] [ 317.409146][ T9186] dump_stack_lvl+0xe8/0x150 [ 317.409184][ T9186] should_fail_ex+0x46b/0x600 [ 317.409219][ T9186] should_failslab+0xa8/0x100 [ 317.409253][ T9186] __kmalloc_noprof+0xf6/0x790 [ 317.409279][ T9186] ? __list_lru_init+0x118/0x6b0 [ 317.409308][ T9186] ? __list_lru_init+0x118/0x6b0 [ 317.409344][ T9186] __list_lru_init+0x118/0x6b0 [ 317.409381][ T9186] sget_fc+0xfa1/0x1a70 [ 317.409415][ T9186] ? __pfx_set_anon_super_fc+0x10/0x10 [ 317.409442][ T9186] ? __pfx_sget_fc+0x10/0x10 [ 317.409463][ T9186] ? __kmalloc_cache_noprof+0x3d0/0x670 [ 317.409489][ T9186] ? vfs_parse_monolithic_sep+0xd0/0x360 [ 317.409520][ T9186] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 317.409550][ T9186] ? rcu_is_watching+0x16/0xb0 [ 317.409572][ T9186] ? cap_capable+0x123/0x460 [ 317.409591][ T9186] ? __pfx_proc_fill_super+0x10/0x10 [ 317.409623][ T9186] get_tree_nodev+0x2a/0x150 [ 317.409651][ T9186] vfs_get_tree+0x92/0x2a0 [ 317.409681][ T9186] do_new_mount+0x325/0xb00 [ 317.409703][ T9186] ? cap_capable+0x123/0x460 [ 317.409726][ T9186] ? __pfx_do_new_mount+0x10/0x10 [ 317.409751][ T9186] ? ns_capable+0x84/0xe0 [ 317.409779][ T9186] ? path_mount+0x647/0x1050 [ 317.409804][ T9186] ? user_path_at+0xd4/0x160 [ 317.409831][ T9186] __se_sys_mount+0x31d/0x420 [ 317.409860][ T9186] ? __pfx___se_sys_mount+0x10/0x10 [ 317.409889][ T9186] ? __x64_sys_mount+0x20/0xc0 [ 317.409915][ T9186] do_syscall_64+0x166/0x520 [ 317.409935][ T9186] ? trace_irq_disable+0x3b/0x140 [ 317.409954][ T9186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.409973][ T9186] ? clear_bhb_loop+0x70/0xc0 [ 317.409996][ T9186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.410015][ T9186] RIP: 0033:0x7f7f2e0df559 [ 317.410035][ T9186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.410053][ T9186] RSP: 002b:00007f7f2c336028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 317.410074][ T9186] RAX: ffffffffffffffda RBX: 00007f7f2e365fa0 RCX: 00007f7f2e0df559 [ 317.410089][ T9186] RDX: 0000200000000180 RSI: 0000200000000100 RDI: 0000000000000000 [ 317.410102][ T9186] RBP: 00007f7f2e176b20 R08: 0000000000000000 R09: 0000000000000000 [ 317.410114][ T9186] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000000 [ 317.410126][ T9186] R13: 00007f7f2e366038 R14: 00007f7f2e365fa0 R15: 00007fff36a3dfc8 [ 317.410161][ T9186] [ 317.982307][ T9190] FAULT_INJECTION: forcing a failure. [ 317.982307][ T9190] name failslab, interval 1, probability 0, space 0, times 0 [ 317.982351][ T9190] CPU: 1 UID: 0 PID: 9190 Comm: syz.6.974 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 317.982381][ T9190] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 317.982389][ T9190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 317.982401][ T9190] Call Trace: [ 317.982408][ T9190] [ 317.982417][ T9190] dump_stack_lvl+0xe8/0x150 [ 317.982455][ T9190] should_fail_ex+0x46b/0x600 [ 317.982487][ T9190] should_failslab+0xa8/0x100 [ 317.982520][ T9190] __kmalloc_noprof+0xf6/0x790 [ 317.982549][ T9190] ? vmci_handle_arr_create+0x71/0x140 [ 317.982576][ T9190] ? vmci_handle_arr_create+0x71/0x140 [ 317.982609][ T9190] vmci_handle_arr_create+0x71/0x140 [ 317.982639][ T9190] vmci_ctx_put+0x11f/0xc00 [ 317.982666][ T9190] ? __pfx_vmci_ctx_put+0x10/0x10 [ 317.982705][ T9190] vmci_host_close+0x91/0x140 [ 317.982734][ T9190] ? __pfx_vmci_host_close+0x10/0x10 [ 317.982760][ T9190] __fput+0x41a/0xa70 [ 317.982788][ T9190] fput_close_sync+0x11f/0x240 [ 317.982808][ T9190] ? __pfx_fput_close_sync+0x10/0x10 [ 317.982843][ T9190] __se_sys_close+0xa2/0x160 [ 317.982868][ T9190] do_syscall_64+0x166/0x520 [ 317.982890][ T9190] ? trace_irq_disable+0x3b/0x140 [ 317.982908][ T9190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.982928][ T9190] ? clear_bhb_loop+0x70/0xc0 [ 317.982953][ T9190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.982972][ T9190] RIP: 0033:0x7f7f2e0df559 [ 317.982991][ T9190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.983009][ T9190] RSP: 002b:00007f7f2c336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 317.983030][ T9190] RAX: ffffffffffffffda RBX: 00007f7f2e365fa0 RCX: 00007f7f2e0df559 [ 317.983045][ T9190] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 317.983056][ T9190] RBP: 00007f7f2e176b20 R08: 0000000000000000 R09: 0000000000000000 [ 317.983068][ T9190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.983081][ T9190] R13: 00007f7f2e366038 R14: 00007f7f2e365fa0 R15: 00007fff36a3dfc8 [ 317.983112][ T9190] [ 318.528252][ T1391] team0 (unregistering): Port device team_slave_1 removed [ 318.626648][ T1391] team0 (unregistering): Port device team_slave_0 removed [ 319.082650][ T5351] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 319.252315][ T5351] usb 3-1: Using ep0 maxpacket: 32 [ 319.253182][ T5351] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 319.254556][ T5351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.254586][ T5351] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.254621][ T5351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.261391][ T5351] usb 3-1: config 0 descriptor?? [ 319.437938][ T9218] FAULT_INJECTION: forcing a failure. [ 319.437938][ T9218] name failslab, interval 1, probability 0, space 0, times 0 [ 319.437977][ T9218] CPU: 1 UID: 0 PID: 9218 Comm: syz.4.984 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 319.438005][ T9218] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 319.438012][ T9218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 319.438023][ T9218] Call Trace: [ 319.438030][ T9218] [ 319.438038][ T9218] dump_stack_lvl+0xe8/0x150 [ 319.438071][ T9218] should_fail_ex+0x46b/0x600 [ 319.438103][ T9218] should_failslab+0xa8/0x100 [ 319.438135][ T9218] __kmalloc_cache_noprof+0x9c/0x670 [ 319.438163][ T9218] ? blk_alloc_queue_stats+0x4c/0x110 [ 319.438189][ T9218] ? blk_alloc_queue_stats+0x4c/0x110 [ 319.438222][ T9218] blk_alloc_queue_stats+0x4c/0x110 [ 319.438248][ T9218] blk_alloc_queue+0xcc/0x690 [ 319.438279][ T9218] __blk_alloc_disk+0xe3/0x1d0 [ 319.438305][ T9218] ? __pfx___blk_alloc_disk+0x10/0x10 [ 319.438357][ T9218] dm_create+0x486/0xf80 [ 319.438381][ T9218] dev_create+0x1f7/0x400 [ 319.438419][ T9218] ? __pfx_dev_create+0x10/0x10 [ 319.438453][ T9218] dm_ctl_ioctl+0x9ec/0xe10 [ 319.438486][ T9218] ? __pfx_dev_create+0x10/0x10 [ 319.438511][ T9218] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 319.438566][ T9218] ? __fget_files+0x2a/0x420 [ 319.438594][ T9218] ? bpf_lsm_file_ioctl+0x9/0x20 [ 319.438614][ T9218] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 319.438639][ T9218] __se_sys_ioctl+0xff/0x170 [ 319.438670][ T9218] do_syscall_64+0x166/0x520 [ 319.438690][ T9218] ? trace_irq_disable+0x3b/0x140 [ 319.438707][ T9218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.438728][ T9218] ? clear_bhb_loop+0x70/0xc0 [ 319.438752][ T9218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.438770][ T9218] RIP: 0033:0x7f7b0fa7f559 [ 319.438789][ T9218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.438808][ T9218] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.438827][ T9218] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 319.438842][ T9218] RDX: 0000200000000780 RSI: 00000000c138fd03 RDI: 0000000000000004 [ 319.438855][ T9218] RBP: 00007f7b0fb16b20 R08: 0000000000000000 R09: 0000000000000000 [ 319.438867][ T9218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.438879][ T9218] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 319.438910][ T9218] [ 319.902861][ T5351] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 319.902899][ T5351] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 320.012310][ T35] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 320.084627][ T5351] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 320.172352][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 320.188605][ T35] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 320.189656][ T35] usb 6-1: config 0 has no interfaces? [ 320.189766][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.272357][ T35] usb 6-1: config 0 descriptor?? [ 320.288695][ T5351] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 320.432093][ T9237] vcan0: tx drop: invalid da for name 0x0102030405060708 [ 320.527607][ T5351] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 320.639023][ T9222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.639659][ T9222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.692387][ T5893] usb 6-1: USB disconnect, device number 11 [ 320.851016][ T9206] i2c i2c-1: adapter quirk: too many messages (addr 0x0081, size 0, write) [ 320.858651][ T5827] usb 3-1: USB disconnect, device number 17 [ 321.008440][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 321.389400][ T9259] netlink: 24 bytes leftover after parsing attributes in process `syz.0.992'. [ 321.593885][ T9269] loop4: detected capacity change from 0 to 7 [ 321.739679][ T9269] loop4: [ 321.740369][ T9269] loop4: partition table partially beyond EOD, truncated [ 322.112331][ T5351] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 322.263400][ T5351] usb 3-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 322.295890][ T5351] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 768 [ 322.298519][ T5351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.298547][ T5351] usb 3-1: Product: syz [ 322.298559][ T5351] usb 3-1: Manufacturer: syz [ 322.298573][ T5351] usb 3-1: SerialNumber: syz [ 322.334984][ T9280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 322.767640][ T5351] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 323.082355][ T9] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 323.252396][ T10] usb 3-1: USB disconnect, device number 18 [ 323.322942][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 323.324269][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 323.324294][ T9] usb 6-1: config 0 has no interface number 0 [ 323.326754][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.326780][ T9] usb 6-1: Product: syz [ 323.326791][ T9] usb 6-1: Manufacturer: syz [ 323.326799][ T9] usb 6-1: SerialNumber: syz [ 323.336810][ T9] usb 6-1: config 0 descriptor?? [ 324.239983][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 324.240017][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 324.240282][ T9] asix 6-1:0.251: probe with driver asix failed with error -71 [ 324.260593][ T9] usb 6-1: USB disconnect, device number 12 [ 324.882374][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 325.033117][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 325.033918][ T9] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 325.038428][ T9] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 325.038456][ T9] usb 1-1: config 2 has no interface number 0 [ 325.038493][ T9] usb 1-1: config 2 interface 31 has no altsetting 0 [ 325.040860][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.040886][ T9] usb 1-1: Product: syz [ 325.040900][ T9] usb 1-1: Manufacturer: syz [ 325.040914][ T9] usb 1-1: SerialNumber: syz [ 325.753998][ T35] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 325.911314][ T9342] FAULT_INJECTION: forcing a failure. [ 325.911314][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 325.911357][ T9342] CPU: 1 UID: 0 PID: 9342 Comm: syz.4.1018 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 325.911387][ T9342] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 325.911396][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 325.911407][ T9342] Call Trace: [ 325.911414][ T9342] [ 325.911423][ T9342] dump_stack_lvl+0xe8/0x150 [ 325.911460][ T9342] should_fail_ex+0x46b/0x600 [ 325.911491][ T9342] should_failslab+0xa8/0x100 [ 325.911522][ T9342] __kmalloc_noprof+0xf6/0x790 [ 325.911550][ T9342] ? prepare_creds+0x30/0x820 [ 325.911574][ T9342] ? security_prepare_creds+0x52/0x360 [ 325.911595][ T9342] ? security_prepare_creds+0x52/0x360 [ 325.911625][ T9342] security_prepare_creds+0x52/0x360 [ 325.911651][ T9342] prepare_creds+0x57d/0x820 [ 325.911675][ T9342] __sys_setregid+0xf5/0x650 [ 325.911702][ T9342] do_syscall_64+0x166/0x520 [ 325.911724][ T9342] ? trace_irq_disable+0x3b/0x140 [ 325.911742][ T9342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.911767][ T9342] ? clear_bhb_loop+0x70/0xc0 [ 325.911792][ T9342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.911812][ T9342] RIP: 0033:0x7f7b0fa7f559 [ 325.911830][ T9342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.911848][ T9342] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 325.911870][ T9342] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 325.911885][ T9342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 325.911899][ T9342] RBP: 00007f7b0fb16b20 R08: 0000000000000000 R09: 0000000000000000 [ 325.911911][ T9342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.911923][ T9342] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 325.911965][ T9342] [ 326.116763][ T35] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 326.118585][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.118619][ T35] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.118656][ T35] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.167663][ T35] usb 3-1: config 0 descriptor?? [ 326.619076][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619127][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619155][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619182][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619209][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619234][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.619260][ T35] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 326.674954][ T35] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 326.793603][ T9] ch9200 1-1:2.31: probe with driver ch9200 failed with error -71 [ 326.811663][ T35] cp2112 0003:10C4:EA90.000F: Part Number: 0x00 Device Version: 0x00 [ 326.908341][ T9] usb 1-1: USB disconnect, device number 25 [ 327.431490][ T35] cp2112 0003:10C4:EA90.000F: error reading lock byte: -71 [ 327.491241][ T35] usb 3-1: USB disconnect, device number 19 [ 328.020905][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1026'. [ 328.182893][ T5627] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 328.367164][ T5627] usb 1-1: Using ep0 maxpacket: 8 [ 328.368013][ T5627] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 328.369488][ T5627] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.369512][ T5627] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.383019][ T5627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.383046][ T5627] usb 1-1: Product: syz [ 328.383060][ T5627] usb 1-1: Manufacturer: syz [ 328.383072][ T5627] usb 1-1: SerialNumber: syz [ 328.692571][ T5627] usb 1-1: unit 4 not found! [ 328.892712][ T5627] usb 1-1: USB disconnect, device number 26 [ 329.142643][ T7406] udevd[7406]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.406898][ T5908] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 329.552007][ T36] audit: type=1800 audit(1792883154.374:6): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1031" name="(" dev="sda1" ino=2054 res=0 errno=-22 [ 329.563257][ T5908] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 329.572111][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.572138][ T5908] usb 5-1: Product: syz [ 329.572152][ T5908] usb 5-1: Manufacturer: syz [ 329.572285][ T5908] usb 5-1: SerialNumber: syz [ 329.716124][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 330.021951][ T5908] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 330.022012][ T5908] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 330.366151][ T9400] FAULT_INJECTION: forcing a failure. [ 330.366151][ T9400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.366200][ T9400] CPU: 1 UID: 0 PID: 9400 Comm: syz.0.1040 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 330.366227][ T9400] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 330.366235][ T9400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 330.366245][ T9400] Call Trace: [ 330.366254][ T9400] [ 330.366262][ T9400] dump_stack_lvl+0xe8/0x150 [ 330.366297][ T9400] should_fail_ex+0x46b/0x600 [ 330.366329][ T9400] _copy_from_iter+0x1d3/0x1660 [ 330.366350][ T9400] ? lockdep_hardirqs_on+0x7b/0x110 [ 330.366373][ T9400] ? rcu_is_watching+0x16/0xb0 [ 330.366395][ T9400] ? trace_sched_exit_tp+0x3a/0x130 [ 330.366425][ T9400] ? __pfx__copy_from_iter+0x10/0x10 [ 330.366447][ T9400] ? __lock_acquire+0x747/0x2de0 [ 330.366474][ T9400] ? smack_socket_sendmsg+0x1a9/0x5a0 [ 330.366504][ T9400] bcm_sendmsg+0x157/0x7a0 [ 330.366535][ T9400] ? __pfx_bcm_sendmsg+0x10/0x10 [ 330.366560][ T9400] ? __lock_acquire+0x747/0x2de0 [ 330.366592][ T9400] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 330.366626][ T9400] ? __pfx_bcm_sendmsg+0x10/0x10 [ 330.366652][ T9400] sock_sendmsg_nosec+0x14e/0x190 [ 330.366679][ T9400] ____sys_sendmsg+0x565/0x870 [ 330.366709][ T9400] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.366737][ T9400] ? import_iovec+0x73/0xa0 [ 330.366767][ T9400] ___sys_sendmsg+0x2a5/0x360 [ 330.366783][ T9400] ? __lock_acquire+0x747/0x2de0 [ 330.366816][ T9400] ? __pfx____sys_sendmsg+0x10/0x10 [ 330.366838][ T9400] ? futex_wait+0x2a2/0x390 [ 330.366896][ T9400] ? __fget_files+0x3a8/0x420 [ 330.366919][ T9400] ? __fget_files+0x2a/0x420 [ 330.366951][ T9400] __x64_sys_sendmsg+0x1b7/0x290 [ 330.366973][ T9400] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 330.367013][ T9400] do_syscall_64+0x166/0x520 [ 330.367032][ T9400] ? trace_irq_disable+0x3b/0x140 [ 330.367050][ T9400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.367070][ T9400] ? clear_bhb_loop+0x70/0xc0 [ 330.367095][ T9400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.367115][ T9400] RIP: 0033:0x7f7dcf81f559 [ 330.367133][ T9400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.367151][ T9400] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.367183][ T9400] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 330.367198][ T9400] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 330.367211][ T9400] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 330.367224][ T9400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.367237][ T9400] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 330.367271][ T9400] [ 330.803804][ T9406] FAULT_INJECTION: forcing a failure. [ 330.803804][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.803887][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.0.1041 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 330.803915][ T9406] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 330.803923][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 330.803935][ T9406] Call Trace: [ 330.803942][ T9406] [ 330.803950][ T9406] dump_stack_lvl+0xe8/0x150 [ 330.803987][ T9406] should_fail_ex+0x46b/0x600 [ 330.804018][ T9406] _copy_to_user+0x31/0xb0 [ 330.804046][ T9406] bpf_verifier_vlog+0x496/0x900 [ 330.804079][ T9406] __btf_verifier_log+0xe2/0x140 [ 330.804102][ T9406] ? unwind_get_return_address+0x4d/0x90 [ 330.804132][ T9406] ? __pfx___btf_verifier_log+0x10/0x10 [ 330.804153][ T9406] ? __sort_r+0x2c3f/0x3530 [ 330.804186][ T9406] __btf_verifier_log_type+0x4fd/0x6a0 [ 330.804222][ T9406] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 330.804259][ T9406] btf_datasec_check_meta+0x40e/0xad0 [ 330.804279][ T9406] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 330.804305][ T9406] ? sort+0xb0/0x100 [ 330.804334][ T9406] btf_check_all_metas+0x344/0xa30 [ 330.804366][ T9406] btf_parse_type_sec+0xf9/0x1a60 [ 330.804387][ T9406] ? __pfx_btf_check_sec_info+0x10/0x10 [ 330.804415][ T9406] ? btf_parse_hdr+0x5f2/0x810 [ 330.804434][ T9406] ? btf_parse_str_sec+0x244/0x2f0 [ 330.804459][ T9406] btf_new_fd+0x3e0/0x8f0 [ 330.804481][ T9406] __sys_bpf+0xda7/0xe00 [ 330.804506][ T9406] ? __pfx___sys_bpf+0x10/0x10 [ 330.804529][ T9406] ? do_futex+0x3e7/0x4e0 [ 330.804577][ T9406] ? rcu_is_watching+0x16/0xb0 [ 330.804602][ T9406] __x64_sys_bpf+0xba/0xd0 [ 330.804624][ T9406] do_syscall_64+0x166/0x520 [ 330.804644][ T9406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.804661][ T9406] ? clear_bhb_loop+0x70/0xc0 [ 330.804686][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.804705][ T9406] RIP: 0033:0x7f7dcf81f559 [ 330.804732][ T9406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.804750][ T9406] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.804771][ T9406] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 330.804785][ T9406] RDX: 0000000000000028 RSI: 0000200000001380 RDI: 0000000000000012 [ 330.804797][ T9406] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 330.804810][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.804821][ T9406] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 330.804848][ T9406] [ 331.283897][ T5908] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 331.283956][ T5908] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 331.351450][ T5908] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 331.379823][ T5908] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 331.427982][ T5908] usb 5-1: USB disconnect, device number 20 [ 331.452734][ T9417] process 'syz.0.1043' launched './file0' with NULL argv: empty string added [ 332.462642][ T9459] netlink: 'syz.2.1053': attribute type 4 has an invalid length. [ 333.089190][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 334.266771][ T5908] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 334.413887][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 334.418608][ T5908] usb 7-1: unable to get BOS descriptor or descriptor too short [ 334.418666][ T5908] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=8d.0a [ 334.420887][ T5908] usb 7-1: config 5 has an invalid interface number: 14 but max is 0 [ 334.420914][ T5908] usb 7-1: config 5 has no interface number 0 [ 334.420959][ T5908] usb 7-1: config 5 interface 14 altsetting 120 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 334.420989][ T5908] usb 7-1: config 5 interface 14 has no altsetting 0 [ 334.449308][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.449336][ T5908] usb 7-1: Product: syz [ 334.449351][ T5908] usb 7-1: Manufacturer: syz [ 334.449365][ T5908] usb 7-1: SerialNumber: syz [ 334.740476][ T5908] iguanair 7-1:5.14: probe with driver iguanair failed with error -12 [ 334.816640][ T5908] usb 7-1: USB disconnect, device number 6 [ 334.832347][ T5632] Bluetooth: hci0: command 0x0406 tx timeout [ 335.330433][ T9531] FAULT_INJECTION: forcing a failure. [ 335.330433][ T9531] name failslab, interval 1, probability 0, space 0, times 0 [ 335.330478][ T9531] CPU: 1 UID: 0 PID: 9531 Comm: syz.0.1069 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 335.330511][ T9531] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 335.330519][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.330531][ T9531] Call Trace: [ 335.330539][ T9531] [ 335.330548][ T9531] dump_stack_lvl+0xe8/0x150 [ 335.330585][ T9531] should_fail_ex+0x46b/0x600 [ 335.330621][ T9531] should_failslab+0xa8/0x100 [ 335.330654][ T9531] ? security_inode_alloc+0x39/0x310 [ 335.330682][ T9531] kmem_cache_alloc_noprof+0x99/0x680 [ 335.330711][ T9531] ? security_inode_alloc+0x39/0x310 [ 335.330745][ T9531] security_inode_alloc+0x39/0x310 [ 335.330772][ T9531] inode_init_always_gfp+0x983/0xd40 [ 335.330802][ T9531] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 335.330827][ T9531] alloc_inode+0x82/0x1b0 [ 335.330850][ T9531] new_inode+0x1f/0x170 [ 335.330876][ T9531] debugfs_create_dir+0x68/0x350 [ 335.330898][ T9531] hci_register_dev+0x34b/0x880 [ 335.330925][ T9531] vhci_create_device+0x409/0x6f0 [ 335.330960][ T9531] vhci_write+0x3ab/0x480 [ 335.330994][ T9531] vfs_write+0x61e/0xbb0 [ 335.331030][ T9531] ? __pfx_vfs_write+0x10/0x10 [ 335.331060][ T9531] ? __fget_files+0x3a8/0x420 [ 335.331082][ T9531] ? __fget_files+0x2a/0x420 [ 335.331111][ T9531] ? fdget+0x1b2/0x250 [ 335.331142][ T9531] ksys_write+0x156/0x270 [ 335.331171][ T9531] ? __pfx_ksys_write+0x10/0x10 [ 335.331209][ T9531] do_syscall_64+0x166/0x520 [ 335.331231][ T9531] ? trace_irq_disable+0x3b/0x140 [ 335.331250][ T9531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.331278][ T9531] ? clear_bhb_loop+0x70/0xc0 [ 335.331305][ T9531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.331324][ T9531] RIP: 0033:0x7f7dcf81f559 [ 335.331345][ T9531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.331362][ T9531] RSP: 002b:00007f7dcda76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 335.331384][ T9531] RAX: ffffffffffffffda RBX: 00007f7dcfaa5fa0 RCX: 00007f7dcf81f559 [ 335.331399][ T9531] RDX: 0000000000000002 RSI: 0000200000005b40 RDI: 0000000000000004 [ 335.331413][ T9531] RBP: 00007f7dcf8b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 335.331426][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.331439][ T9531] R13: 00007f7dcfaa6038 R14: 00007f7dcfaa5fa0 R15: 00007ffca9410c88 [ 335.331474][ T9531] [ 335.409097][ T9531] debugfs: out of free dentries, can not create directory 'hci5' [ 335.757723][ T9540] FAULT_INJECTION: forcing a failure. [ 335.757723][ T9540] name failslab, interval 1, probability 0, space 0, times 0 [ 335.757751][ T9540] CPU: 0 UID: 0 PID: 9540 Comm: syz.6.1072 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 335.757771][ T9540] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 335.757775][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 335.757782][ T9540] Call Trace: [ 335.757786][ T9540] [ 335.757791][ T9540] dump_stack_lvl+0xe8/0x150 [ 335.757815][ T9540] should_fail_ex+0x46b/0x600 [ 335.757833][ T9540] should_failslab+0xa8/0x100 [ 335.757852][ T9540] __kmalloc_noprof+0xf6/0x790 [ 335.757867][ T9540] ? security_sk_alloc+0x52/0x360 [ 335.757881][ T9540] ? security_sk_alloc+0x52/0x360 [ 335.757900][ T9540] security_sk_alloc+0x52/0x360 [ 335.757916][ T9540] sk_prot_alloc+0x101/0x210 [ 335.757931][ T9540] ? sk_alloc+0x27/0x390 [ 335.757947][ T9540] sk_alloc+0x3a/0x390 [ 335.757963][ T9540] __netlink_create+0x62/0x260 [ 335.757978][ T9540] netlink_create+0x3c6/0x5b0 [ 335.757993][ T9540] ? __pfx_rtnetlink_bind+0x10/0x10 [ 335.758010][ T9540] __sock_create+0x4b5/0xac0 [ 335.758028][ T9540] __sys_socket+0xd6/0x1b0 [ 335.758043][ T9540] __x64_sys_socket+0x7a/0x90 [ 335.758057][ T9540] do_syscall_64+0x166/0x520 [ 335.758068][ T9540] ? trace_irq_disable+0x3b/0x140 [ 335.758078][ T9540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.758089][ T9540] ? clear_bhb_loop+0x70/0xc0 [ 335.758101][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.758111][ T9540] RIP: 0033:0x7f7f2e0df559 [ 335.758123][ T9540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.758132][ T9540] RSP: 002b:00007f7f2c336028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 335.758145][ T9540] RAX: ffffffffffffffda RBX: 00007f7f2e365fa0 RCX: 00007f7f2e0df559 [ 335.758152][ T9540] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 335.758158][ T9540] RBP: 00007f7f2e176b20 R08: 0000000000000000 R09: 0000000000000000 [ 335.758167][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.758175][ T9540] R13: 00007f7f2e366038 R14: 00007f7f2e365fa0 R15: 00007fff36a3dfc8 [ 335.758191][ T9540] [ 336.653294][ T9573] FAULT_INJECTION: forcing a failure. [ 336.653294][ T9573] name failslab, interval 1, probability 0, space 0, times 0 [ 336.654451][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: syz.4.1079 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 336.654488][ T9573] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 336.654496][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 336.654509][ T9573] Call Trace: [ 336.654516][ T9573] [ 336.654525][ T9573] dump_stack_lvl+0xe8/0x150 [ 336.654565][ T9573] should_fail_ex+0x46b/0x600 [ 336.654598][ T9573] should_failslab+0xa8/0x100 [ 336.654630][ T9573] __kmalloc_cache_noprof+0x9c/0x670 [ 336.654659][ T9573] ? fuse_chan_new+0x4e/0x2f0 [ 336.654684][ T9573] ? fuse_chan_new+0x4e/0x2f0 [ 336.654721][ T9573] fuse_chan_new+0x4e/0x2f0 [ 336.654750][ T9573] fuse_dev_chan_new+0x1c/0x4c0 [ 336.654776][ T9573] ? rcu_is_watching+0x16/0xb0 [ 336.654797][ T9573] ? cap_capable+0x123/0x460 [ 336.654820][ T9573] fuse_get_tree+0x44/0x3b0 [ 336.654847][ T9573] vfs_get_tree+0x92/0x2a0 [ 336.654873][ T9573] do_new_mount+0x325/0xb00 [ 336.654895][ T9573] ? cap_capable+0x123/0x460 [ 336.654918][ T9573] ? __pfx_do_new_mount+0x10/0x10 [ 336.654943][ T9573] ? ns_capable+0x84/0xe0 [ 336.654969][ T9573] ? path_mount+0x647/0x1050 [ 336.654994][ T9573] ? user_path_at+0xd4/0x160 [ 336.655021][ T9573] __se_sys_mount+0x31d/0x420 [ 336.655049][ T9573] ? __pfx___se_sys_mount+0x10/0x10 [ 336.655079][ T9573] ? __x64_sys_mount+0x20/0xc0 [ 336.655103][ T9573] do_syscall_64+0x166/0x520 [ 336.655124][ T9573] ? trace_irq_disable+0x3b/0x140 [ 336.655142][ T9573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.655162][ T9573] ? clear_bhb_loop+0x70/0xc0 [ 336.655194][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.655214][ T9573] RIP: 0033:0x7f7b0fa7f559 [ 336.655232][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.655249][ T9573] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 336.655271][ T9573] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 336.655287][ T9573] RDX: 0000200000002100 RSI: 00002000000020c0 RDI: 0000000000000000 [ 336.655301][ T9573] RBP: 00007f7b0fb16b20 R08: 0000200000004400 R09: 0000000000000000 [ 336.655315][ T9573] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000000 [ 336.655328][ T9573] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 336.655359][ T9573] [ 337.113386][ T36] audit: type=1800 audit(1792883161.934:7): pid=9579 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.1081" name=0F01CB650F7410262E66F36D0F330F09660F3A0CB9 dev="sda1" ino=2055 res=0 errno=-22 [ 337.462357][ T5630] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 340.903721][ T9613] FAULT_INJECTION: forcing a failure. [ 340.903721][ T9613] name failslab, interval 1, probability 0, space 0, times 0 [ 340.905487][ T9613] CPU: 0 UID: 0 PID: 9613 Comm: syz.2.1091 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 340.905527][ T9613] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 340.905536][ T9613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 340.905547][ T9613] Call Trace: [ 340.905555][ T9613] [ 340.905564][ T9613] dump_stack_lvl+0xe8/0x150 [ 340.905603][ T9613] should_fail_ex+0x46b/0x600 [ 340.905636][ T9613] should_failslab+0xa8/0x100 [ 340.905666][ T9613] ? security_file_alloc+0x34/0x310 [ 340.905687][ T9613] kmem_cache_alloc_noprof+0x99/0x680 [ 340.905716][ T9613] ? rcu_is_watching+0x16/0xb0 [ 340.905738][ T9613] ? security_file_alloc+0x34/0x310 [ 340.905758][ T9613] ? alloc_empty_file+0x5b/0x1d0 [ 340.905782][ T9613] security_file_alloc+0x34/0x310 [ 340.905806][ T9613] init_file+0x96/0x2d0 [ 340.905828][ T9613] alloc_empty_file+0x74/0x1d0 [ 340.905850][ T9613] alloc_file_pseudo+0x110/0x1e0 [ 340.905875][ T9613] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 340.905908][ T9613] sock_alloc_file+0xb8/0x2f0 [ 340.905939][ T9613] ? sctp_getsockopt_peeloff_common+0x38d/0x5f0 [ 340.905969][ T9613] sctp_getsockopt_peeloff_common+0x39e/0x5f0 [ 340.905997][ T9613] ? __pfx_sctp_getsockopt_peeloff_common+0x10/0x10 [ 340.906033][ T9613] sctp_getsockopt_peeloff_flags+0x14b/0x240 [ 340.906063][ T9613] ? __local_bh_enable+0x1e3/0x2f0 [ 340.906091][ T9613] ? __pfx_sctp_getsockopt_peeloff_flags+0x10/0x10 [ 340.906125][ T9613] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 340.906152][ T9613] ? lockdep_hardirqs_on+0x7b/0x110 [ 340.906179][ T9613] sctp_getsockopt+0x3a5/0xb90 [ 340.906208][ T9613] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 340.906244][ T9613] do_sock_getsockopt+0x4aa/0x640 [ 340.906284][ T9613] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 340.906332][ T9613] ? __fget_files+0x3a8/0x420 [ 340.906356][ T9613] ? __fget_files+0x2a/0x420 [ 340.906388][ T9613] __x64_sys_getsockopt+0x1aa/0x250 [ 340.906424][ T9613] do_syscall_64+0x166/0x520 [ 340.906443][ T9613] ? trace_irq_disable+0x3b/0x140 [ 340.906460][ T9613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.906481][ T9613] ? clear_bhb_loop+0x70/0xc0 [ 340.906507][ T9613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.906526][ T9613] RIP: 0033:0x7f40af53f559 [ 340.906545][ T9613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 340.906563][ T9613] RSP: 002b:00007f40ad78e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 340.906584][ T9613] RAX: ffffffffffffffda RBX: 00007f40af7c5fa0 RCX: 00007f40af53f559 [ 340.906599][ T9613] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 340.906612][ T9613] RBP: 00007f40af5d6b20 R08: 0000200000000640 R09: 0000000000000000 [ 340.906626][ T9613] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 340.906649][ T9613] R13: 00007f40af7c6038 R14: 00007f40af7c5fa0 R15: 00007ffdd83f6bd8 [ 340.906685][ T9613] [ 341.372929][ T9623] FAULT_INJECTION: forcing a failure. [ 341.372929][ T9623] name failslab, interval 1, probability 0, space 0, times 0 [ 341.372971][ T9623] CPU: 1 UID: 0 PID: 9623 Comm: syz.4.1094 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 341.373002][ T9623] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 341.373011][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 341.373023][ T9623] Call Trace: [ 341.373031][ T9623] [ 341.373040][ T9623] dump_stack_lvl+0xe8/0x150 [ 341.373077][ T9623] should_fail_ex+0x46b/0x600 [ 341.373111][ T9623] should_failslab+0xa8/0x100 [ 341.373145][ T9623] ? security_file_alloc+0x34/0x310 [ 341.373165][ T9623] kmem_cache_alloc_noprof+0x99/0x680 [ 341.373191][ T9623] ? rcu_is_watching+0x16/0xb0 [ 341.373213][ T9623] ? security_file_alloc+0x34/0x310 [ 341.373234][ T9623] ? alloc_empty_file+0x5b/0x1d0 [ 341.373258][ T9623] security_file_alloc+0x34/0x310 [ 341.373281][ T9623] init_file+0x96/0x2d0 [ 341.373301][ T9623] alloc_empty_file+0x74/0x1d0 [ 341.373323][ T9623] alloc_file_pseudo+0x110/0x1e0 [ 341.373347][ T9623] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 341.373369][ T9623] ? security_inode_alloc+0xd5/0x310 [ 341.373399][ T9623] ? inode_init_always_gfp+0x999/0xd40 [ 341.373426][ T9623] sock_alloc_file+0xb8/0x2f0 [ 341.373454][ T9623] do_accept+0x38b/0x740 [ 341.373487][ T9623] ? __pfx_do_accept+0x10/0x10 [ 341.373537][ T9623] __sys_accept4+0x135/0x230 [ 341.373566][ T9623] ? __pfx___sys_accept4+0x10/0x10 [ 341.373605][ T9623] __x64_sys_accept+0x7d/0x90 [ 341.373634][ T9623] do_syscall_64+0x166/0x520 [ 341.373653][ T9623] ? trace_irq_disable+0x3b/0x140 [ 341.373671][ T9623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.373692][ T9623] ? clear_bhb_loop+0x70/0xc0 [ 341.373718][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.373738][ T9623] RIP: 0033:0x7f7b0fa7f559 [ 341.373757][ T9623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.373774][ T9623] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 341.373805][ T9623] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 341.373820][ T9623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 341.373833][ T9623] RBP: 00007f7b0fb16b20 R08: 0000000000000000 R09: 0000000000000000 [ 341.373846][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.373857][ T9623] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 341.373887][ T9623] [ 341.887803][ T36] audit: type=1326 audit(1792883166.634:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9633 comm="syz.5.1100" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9911b3f559 code=0x0 [ 345.025033][ T5630] Bluetooth: hci2: unexpected event for opcode 0x0c7c [ 346.097747][ T9659] evm: overlay not supported [ 346.732327][ T5915] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 346.811299][ T9687] netlink: 'syz.4.1113': attribute type 1 has an invalid length. [ 346.811327][ T9687] netlink: 'syz.4.1113': attribute type 2 has an invalid length. [ 346.882449][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 346.883485][ T5915] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 346.885562][ T5915] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.885587][ T5915] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.885623][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.938425][ T5915] usb 3-1: config 0 descriptor?? [ 347.295345][ T5915] usb 3-1: USB disconnect, device number 20 [ 349.078300][ T9718] VFS: file-max limit 0 reached [ 349.192022][ T9723] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 349.192082][ T9723] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 349.212782][ T9723] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 349.613426][ T35] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 349.742692][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 349.762350][ T35] usb 3-1: Using ep0 maxpacket: 16 [ 349.766401][ T35] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=ad.d0 [ 349.768899][ T35] usb 3-1: config 7 has an invalid interface number: 192 but max is 1 [ 349.768928][ T35] usb 3-1: config 7 has an invalid interface number: 3 but max is 1 [ 349.768947][ T35] usb 3-1: config 7 has no interface number 0 [ 349.768963][ T35] usb 3-1: config 7 has no interface number 1 [ 349.769140][ T35] usb 3-1: config 7 interface 3 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 349.769195][ T35] usb 3-1: config 7 interface 192 has no altsetting 0 [ 349.769214][ T35] usb 3-1: config 7 interface 3 has no altsetting 0 [ 349.845843][ T35] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.845871][ T35] usb 3-1: Product: syz [ 349.845884][ T35] usb 3-1: Manufacturer: syz [ 349.845897][ T35] usb 3-1: SerialNumber: syz [ 350.028251][ T9743] sd 0:0:1:0: PR command failed: 1026 [ 350.028392][ T9743] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 350.028662][ T9743] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 350.038631][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 350.049558][ T10] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 350.062427][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.062453][ T10] usb 1-1: Product: syz [ 350.062467][ T10] usb 1-1: Manufacturer: syz [ 350.062481][ T10] usb 1-1: SerialNumber: syz [ 350.137243][ T10] usb 1-1: config 0 descriptor?? [ 350.182838][ T5630] Bluetooth: hci4: command 0x0406 tx timeout [ 350.237657][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 350.357889][ T35] usb 3-1: selecting invalid altsetting 1 [ 350.357915][ T35] catc 3-1:7.192: Can't set altsetting 1. [ 350.357973][ T35] catc 3-1:7.192: probe with driver catc failed with error -5 [ 350.771338][ T35] catc 3-1:7.3: Missing or invalid endpoints [ 350.833084][ T9749] FAULT_INJECTION: forcing a failure. [ 350.833084][ T9749] name failslab, interval 1, probability 0, space 0, times 0 [ 350.833126][ T9749] CPU: 1 UID: 0 PID: 9749 Comm: syz.4.1138 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 350.833157][ T9749] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 350.833166][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 350.833178][ T9749] Call Trace: [ 350.833267][ T9749] [ 350.833286][ T9749] dump_stack_lvl+0xe8/0x150 [ 350.833452][ T9749] should_fail_ex+0x46b/0x600 [ 350.833576][ T9749] should_failslab+0xa8/0x100 [ 350.833634][ T9749] __kmalloc_cache_noprof+0x9c/0x670 [ 350.833672][ T9749] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 350.833837][ T9749] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 350.833876][ T9749] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 350.833914][ T9749] tcp_sendmsg_locked+0x4a41/0x5320 [ 350.833934][ T9749] ? __lock_acquire+0x747/0x2de0 [ 350.833995][ T9749] ? tcp_sendmsg_locked+0x2c1/0x5320 [ 350.834019][ T9749] ? __lock_acquire+0x747/0x2de0 [ 350.834056][ T9749] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 350.834144][ T9749] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 350.834165][ T9749] ? rt_mutex_slowunlock+0x4ee/0xa30 [ 350.834230][ T9749] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 350.834260][ T9749] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 350.834305][ T9749] ? lockdep_hardirqs_on+0x7b/0x110 [ 350.834359][ T9749] tcp_sendmsg+0x2f/0x50 [ 350.834379][ T9749] ? __pfx_inet6_sendmsg+0x10/0x10 [ 350.834469][ T9749] sock_sendmsg_nosec+0x90/0x190 [ 350.834578][ T9749] __sys_sendto+0x41e/0x5d0 [ 350.834614][ T9749] ? __pfx___sys_sendto+0x10/0x10 [ 350.834672][ T9749] ? rcu_is_watching+0x16/0xb0 [ 350.834708][ T9749] __x64_sys_sendto+0xde/0x100 [ 350.834742][ T9749] do_syscall_64+0x166/0x520 [ 350.834772][ T9749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.834810][ T9749] ? clear_bhb_loop+0x70/0xc0 [ 350.834834][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.834855][ T9749] RIP: 0033:0x7f7b0fa7f559 [ 350.834908][ T9749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.834924][ T9749] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 350.834975][ T9749] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 350.834987][ T9749] RDX: 0000000000000091 RSI: 0000000000000000 RDI: 0000000000000003 [ 350.834997][ T9749] RBP: 00007f7b0fb16b20 R08: 00002000000001c0 R09: 000000000000001c [ 350.835008][ T9749] R10: 0000000024000045 R11: 0000000000000246 R12: 0000000000000000 [ 350.835019][ T9749] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 350.835046][ T9749] [ 351.143727][ T5908] usb 3-1: USB disconnect, device number 21 [ 352.081569][ T9774] FAULT_INJECTION: forcing a failure. [ 352.081569][ T9774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.081624][ T9774] CPU: 1 UID: 0 PID: 9774 Comm: syz.4.1146 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 352.081656][ T9774] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 352.081663][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 352.081674][ T9774] Call Trace: [ 352.081682][ T9774] [ 352.081691][ T9774] dump_stack_lvl+0xe8/0x150 [ 352.081754][ T9774] should_fail_ex+0x46b/0x600 [ 352.081790][ T9774] _copy_from_user+0x2d/0xb0 [ 352.081854][ T9774] do_ip_vs_set_ctl+0x35d/0xaf0 [ 352.081965][ T9774] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 352.082018][ T9774] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 352.082052][ T9774] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 352.082087][ T9774] ? nf_setsockopt+0x221/0x290 [ 352.082167][ T9774] nf_setsockopt+0x26f/0x290 [ 352.082190][ T9774] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 352.082257][ T9774] smc_setsockopt+0x232/0xb40 [ 352.082373][ T9774] ? __pfx_smc_setsockopt+0x10/0x10 [ 352.082407][ T9774] ? __fget_files+0x3a8/0x420 [ 352.082438][ T9774] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 352.082480][ T9774] ? __pfx_smc_setsockopt+0x10/0x10 [ 352.082508][ T9774] do_sock_setsockopt+0x17c/0x1b0 [ 352.082541][ T9774] __x64_sys_setsockopt+0x143/0x1b0 [ 352.082578][ T9774] do_syscall_64+0x166/0x520 [ 352.082604][ T9774] ? trace_irq_disable+0x3b/0x140 [ 352.082635][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.082656][ T9774] ? clear_bhb_loop+0x70/0xc0 [ 352.082680][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.082705][ T9774] RIP: 0033:0x7f7b0fa7f559 [ 352.082725][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.082743][ T9774] RSP: 002b:00007f7b0dcce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 352.082766][ T9774] RAX: ffffffffffffffda RBX: 00007f7b0fd05fa0 RCX: 00007f7b0fa7f559 [ 352.082781][ T9774] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000003 [ 352.082794][ T9774] RBP: 00007f7b0fb16b20 R08: 0000000000000018 R09: 0000000000000000 [ 352.082806][ T9774] R10: 0000200000001f40 R11: 0000000000000246 R12: 0000000000000000 [ 352.082819][ T9774] R13: 00007f7b0fd06038 R14: 00007f7b0fd05fa0 R15: 00007ffc305018a8 [ 352.082851][ T9774] [ 352.142726][ T10] gspca_ov534_9: reg_r err -71 [ 352.362313][ T5915] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 352.402327][ T10] gspca_ov534_9: Unknown sensor 0000 [ 352.402539][ T10] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 352.424195][ T10] usb 1-1: USB disconnect, device number 27 [ 352.512367][ T5915] usb 3-1: Using ep0 maxpacket: 32 [ 352.515500][ T5915] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 352.521918][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.521946][ T5915] usb 3-1: Product: syz [ 352.521961][ T5915] usb 3-1: Manufacturer: syz [ 352.521975][ T5915] usb 3-1: SerialNumber: syz [ 352.569093][ T5915] usb 3-1: config 0 descriptor?? [ 352.585995][ T5915] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 353.250347][ T9781] device-mapper: table: 248:3: snapshot-merge: Cannot get COW device (-ENOENT) [ 353.250506][ T9781] device-mapper: ioctl: error adding target to table [ 354.476052][ T5915] gspca_stk1135: reg_w 0x200 err -71 [ 354.477228][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477246][ T5915] gspca_stk1135: Sensor write failed [ 354.477271][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477281][ T5915] gspca_stk1135: Sensor write failed [ 354.477334][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477345][ T5915] gspca_stk1135: Sensor read failed [ 354.477370][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477380][ T5915] gspca_stk1135: Sensor read failed [ 354.477387][ T5915] gspca_stk1135: Detected sensor type unknown (0x0) [ 354.477419][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477428][ T5915] gspca_stk1135: Sensor read failed [ 354.477454][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477463][ T5915] gspca_stk1135: Sensor read failed [ 354.477493][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477503][ T5915] gspca_stk1135: Sensor write failed [ 354.477528][ T5915] gspca_stk1135: serial bus timeout: status=0x00 [ 354.477537][ T5915] gspca_stk1135: Sensor write failed [ 354.477685][ T5915] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 354.627323][ T5915] usb 3-1: USB disconnect, device number 22 [ 354.872339][ T5893] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 355.028026][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 355.035389][ T5893] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 355.038284][ T5893] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 355.038311][ T5893] usb 1-1: config 0 has no interface number 0 [ 355.040952][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.040978][ T5893] usb 1-1: Product: syz [ 355.040992][ T5893] usb 1-1: Manufacturer: syz [ 355.041005][ T5893] usb 1-1: SerialNumber: syz [ 355.184097][ T5893] usb 1-1: config 0 descriptor?? [ 355.654516][ T5893] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 355.654537][ T5893] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 355.762341][ T35] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 355.920007][ T35] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 355.929891][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 355.929924][ T35] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.969893][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 355.969922][ T35] usb 7-1: Product: syz [ 355.969935][ T35] usb 7-1: Manufacturer: syz [ 356.023927][ T35] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 356.378318][ T9835] netlink: 'syz.2.1167': attribute type 1 has an invalid length. [ 356.625710][ T9835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.749915][ T5908] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.888952][ T5893] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 356.889256][ T5893] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 356.950334][ T5893] usb 1-1: USB disconnect, device number 28 [ 356.977848][ T5908] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 356.979263][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.979315][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.076650][ T5908] as10x_usb: device has been detected [ 357.079801][ T5908] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 357.095304][ T9838] bond1: (slave gretap1): making interface the new active one [ 357.369279][ T9838] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 357.389040][ T5908] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 357.418536][ T36] audit: type=1800 audit(1792883182.244:9): pid=9843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1169" name="file0" dev="overlay" ino=924 res=0 errno=-22 [ 357.701069][ T9846] INFO: trying to register non-static key. [ 357.706994][ T9846] The code is fine but needs lockdep annotation, or maybe [ 357.707452][ T5908] async_waiting @ 5908 [ 357.707472][ T5908] async_continuing @ 5908 after 1 usec [ 357.723881][ T9846] you didn't initialize this object before use? [ 357.730370][ T9846] turning off the locking correctness validator. [ 357.736701][ T9846] CPU: 1 UID: 0 PID: 9846 Comm: syz.4.1168 Tainted: G L Y syzkaller #0 PREEMPT_{RT,(full)} [ 357.748174][ T9846] Tainted: [L]=SOFTLOCKUP, [Y]=FORCED_BIND [ 357.753978][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 357.764497][ T9846] Call Trace: [ 357.767786][ T9846] [ 357.770808][ T9846] dump_stack_lvl+0xe8/0x150 [ 357.775438][ T9846] assign_lock_key+0x133/0x150 [ 357.780312][ T9846] register_lock_class+0xcc/0x2e0 [ 357.785348][ T9846] ? __schedule+0x1733/0x56e0 [ 357.790040][ T9846] __lock_acquire+0x10c/0x2de0 [ 357.794821][ T9846] ? __lock_acquire+0x747/0x2de0 [ 357.800365][ T9846] ? __pfx___schedule+0x10/0x10 [ 357.805348][ T9846] lock_acquire+0x115/0x350 [ 357.809965][ T9846] ? as102_stream_ctrl+0x27/0xc0 [ 357.815061][ T9846] ? as102_stream_ctrl+0x27/0xc0 [ 357.820045][ T9846] ? as102_stream_ctrl+0x27/0xc0 [ 357.825093][ T9846] mutex_lock_interruptible_nested+0x55/0x1c0 [ 357.831171][ T9846] ? as102_stream_ctrl+0x27/0xc0 [ 357.836122][ T9846] as102_stream_ctrl+0x27/0xc0 [ 357.840892][ T9846] __dvb_frontend_open+0x2ef/0xcb0 [ 357.846120][ T9846] ? dvb_frontend_open+0x1d4/0x880 [ 357.851248][ T9846] ? __pfx_dvb_frontend_open+0x10/0x10 [ 357.856731][ T9846] dvb_device_open+0x258/0x350 [ 357.861495][ T9846] chrdev_open+0x4dc/0x600 [ 357.866114][ T9846] ? __pfx_chrdev_open+0x10/0x10 [ 357.871062][ T9846] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 357.877429][ T9846] ? __pfx_chrdev_open+0x10/0x10 [ 357.882375][ T9846] do_dentry_open+0x841/0x1410 [ 357.887138][ T9846] vfs_open_consume+0x4a/0x360 [ 357.891899][ T9846] ? path_openat+0x16e6/0x2100 [ 357.896678][ T9846] path_openat+0x1701/0x2100 [ 357.901315][ T9846] do_file_open+0x23e/0x4a0 [ 357.905835][ T9846] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 357.911730][ T9846] ? __pfx_do_file_open+0x10/0x10 [ 357.916765][ T9846] ? alloc_fd+0x6b2/0x760 [ 357.921098][ T9846] do_sys_openat2+0x115/0x200 [ 357.925776][ T9846] ? __pfx_do_sys_openat2+0x10/0x10 [ 357.930987][ T9846] ? rcu_is_watching+0x16/0xb0 [ 357.935763][ T9846] __x64_sys_openat+0x138/0x170 [ 357.940620][ T9846] do_syscall_64+0x166/0x520 [ 357.945218][ T9846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.951301][ T9846] ? clear_bhb_loop+0x70/0xc0 [ 357.956219][ T9846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.962223][ T9846] RIP: 0033:0x7f7b0fa3fd8e [ 357.966643][ T9846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 357.986780][ T9846] RSP: 002b:00007f7b0dc8bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 357.995309][ T9846] RAX: ffffffffffffffda RBX: 00007f7b0dc8c6c0 RCX: 00007f7b0fa3fd8e [ 358.003383][ T9846] RDX: 0000000000000802 RSI: 00007f7b0dc8bc00 RDI: ffffffffffffff9c [ 358.011829][ T9846] RBP: 00007f7b0dc8bc00 R08: 0000000000000000 R09: 0000000000000000 [ 358.019820][ T9846] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 358.027828][ T9846] R13: 00007f7b0fd06218 R14: 00007f7b0fd06180 R15: 00007ffc305018a8 [ 358.035869][ T9846] [ 358.051266][ T35] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 358.057875][ T35] usb 7-1: USB disconnect, device number 7 [ 358.062355][ T35] mos7840 7-1:1.0: device disconnected [ 358.103009][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.103112][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.103156][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 17 [ 358.109428][ T5908] as10x_usb: error during firmware upload part1 [ 358.109805][ T5908] Registered device Abilis Systems DVB-Titan [ 358.142359][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.142390][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.142425][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 17 [ 358.182030][ T5908] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc90014f18000 136329 [ 358.182395][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.182422][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.182455][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 17 [ 358.186105][ T9858] kcov: kcov_start: t = ffff88801ef11f40, size = 524288, area = ffffc9001cf2f000 [ 358.198547][ T9859] async_waiting @ 9859 [ 358.198569][ T9859] async_continuing @ 9859 after 1 usec [ 358.222335][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.222368][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.222404][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 17 [ 358.222480][ T35] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc9001c72e000 52743 [ 358.222609][ T35] kcov: kcov_remote_start: handle = 100000000000007, context: task [ 358.222627][ T35] kcov: kcov_start: t = ffff88801ea93e80, size = 1048576, area = ffffc9001c72e000 [ 358.222731][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.222749][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.222780][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 17 [ 358.222873][ T35] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc9001c72e000 461 [ 358.223093][ C1] kcov: kcov_remote_start: handle = 100000000000007, context: softirq [ 358.223114][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 358.223141][ C1] kcov: kcov_move_area: ffffc90013311000 1048576 <= ffffc900032f7000 3 [ 358.250501][ T9860] kcov: kcov_start: t = ffff88802aba5dc0, size = 524288, area = ffffc9001d330000 [ 358.269487][ T9860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.294067][ T9861] async_waiting @ 9861 [ 358.294089][ T9861] async_continuing @ 9861 after 1 usec [ 358.329895][ T9862] kcov: kcov_start: t = ffff888021f31f40, size = 524288, area = ffffc9001d731000 [ 358.338321][ T9862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.378024][ T5908] kcov: kcov_remote_start: handle = 100000000000005, context: task [ 358.378049][ T5908] kcov: kcov_start: t = ffff8880283f1f40, size = 1048576, area = ffffc90014f18000 [ 358.378250][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 358.378275][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 358.378335][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 98 [ 358.378378][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 358.378397][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 358.378430][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 19 [ 358.387199][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 358.387226][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 358.387261][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 17 [ 358.393764][ T9858] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.394034][ T5908] usb 5-1: USB disconnect, device number 21 [ 358.394178][ T5908] kernfs power: removing [ 358.394219][ T5908] kernfs uevent: removing [ 358.394255][ T5908] kernfs bInterfaceNumber: removing [ 358.394291][ T5908] kernfs bAlternateSetting: removing [ 358.394326][ T5908] kernfs bNumEndpoints: removing [ 358.394362][ T5908] kernfs bInterfaceClass: removing [ 358.394397][ T5908] kernfs bInterfaceSubClass: removing [ 358.394430][ T5908] kernfs bInterfaceProtocol: removing [ 358.394461][ T5908] kernfs modalias: removing [ 358.394495][ T5908] kernfs supports_autosuspend: removing [ 358.394529][ T5908] kernfs authorized: removing [ 358.394611][ T5908] kernfs subsystem: removing [ 358.394647][ T5908] kernfs 5-1:1.0: removing [ 358.394691][ T5908] kernfs 5-1:1.0: removing [ 358.394732][ T5908] kernfs driver: removing [ 358.394906][ T5908] kernfs runtime_status: removing [ 358.394946][ T5908] kernfs control: removing [ 358.394992][ T5908] kernfs runtime_suspended_time: removing [ 358.395037][ T5908] kernfs runtime_active_time: removing [ 358.395077][ T5908] kernfs autosuspend_delay_ms: removing [ 358.395143][ T5908] kernfs power: removing [ 358.493413][ T5908] kernfs 212:67: removing [ 358.493472][ T5908] kernfs dev: removing [ 358.501449][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 358.501507][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 358.501523][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 358.509572][ T5908] kernfs device: removing [ 358.509634][ T5908] kernfs subsystem: removing [ 358.509683][ T5908] kernfs dvb1.frontend0: removing [ 358.509743][ T5908] kernfs uevent: removing [ 358.509775][ T5908] PM: Removing info for No Bus:dvb1.frontend0 [ 358.510044][ T5908] kernfs dvb1.frontend0: removing [ 358.510078][ T5908] device: 'dvb1.frontend0': device_create_release [ 358.510175][ T5908] device: 'dvb1.demux0': device_unregister [ 358.510210][ T5908] kernfs runtime_status: removing [ 358.510259][ T5908] kernfs control: removing [ 358.510298][ T5908] kernfs runtime_suspended_time: removing [ 358.510336][ T5908] kernfs runtime_active_time: removing [ 358.510375][ T5908] kernfs autosuspend_delay_ms: removing [ 358.510441][ T5908] kernfs power: removing [ 358.510558][ T5893] Added buffer head 0 to ffff88801bbd9400 [ 358.565281][ T9824] kcov: kcov_task_exit: t = ffff888031340000, kcov->t = ffff888031340000 [ 358.572060][ T9847] kcov: kcov_task_exit: t = ffff888038a43e80, kcov->t = ffff888038a43e80 [ 358.572262][ T9849] kcov: kcov_task_exit: t = ffff8880418a5dc0, kcov->t = ffff8880418a5dc0 [ 358.572336][ T9851] kcov: kcov_task_exit: t = ffff888032ba5dc0, kcov->t = ffff888032ba5dc0 [ 358.572712][ T9853] kcov: kcov_task_exit: t = ffff88802df5ddc0, kcov->t = ffff88802df5ddc0 [ 358.575824][ T9855] kcov: kcov_task_exit: t = ffff888022378000, kcov->t = ffff888022378000 [ 358.595524][ T5908] kernfs 212:68: removing [ 358.595588][ T5908] kernfs dev: removing [ 358.595637][ T5908] kernfs device: removing [ 358.595679][ T5908] kernfs subsystem: removing [ 358.595719][ T5908] kernfs dvb1.demux0: removing [ 358.595763][ T5908] kernfs uevent: removing [ 358.595797][ T5908] PM: Removing info for No Bus:dvb1.demux0 [ 358.638666][ T5908] kernfs dvb1.demux0: removing [ 358.638711][ T5908] device: 'dvb1.demux0': device_create_release [ 358.638781][ T5908] device: 'dvb1.dvr0': device_unregister [ 358.638815][ T5908] kernfs runtime_status: removing [ 358.638856][ T5908] kernfs control: removing [ 358.638895][ T5908] kernfs runtime_suspended_time: removing [ 358.638931][ T5908] kernfs runtime_active_time: removing [ 358.638969][ T5908] kernfs autosuspend_delay_ms: removing [ 358.639035][ T5908] kernfs power: removing [ 358.695201][ T5908] kernfs 212:69: removing [ 358.695264][ T5908] kernfs dev: removing [ 358.695313][ T5908] kernfs device: removing [ 358.695354][ T5908] kernfs subsystem: removing [ 358.695393][ T5908] kernfs dvb1.dvr0: removing [ 358.695449][ T5908] kernfs uevent: removing [ 358.695485][ T5908] PM: Removing info for No Bus:dvb1.dvr0 [ 358.695727][ T5908] kernfs dvb1.dvr0: removing [ 358.695757][ T5908] kernfs dvb: removing [ 358.695789][ T5908] device: 'dvb1.dvr0': device_create_release [ 358.822259][ C1] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0) [ 358.897320][ T9858] kcov: kcov_task_exit: t = ffff88801ef11f40, kcov->t = ffff88801ef11f40 [ 358.897488][ T9860] kcov: kcov_task_exit: t = ffff88802aba5dc0, kcov->t = ffff88802aba5dc0 [ 358.897646][ T9862] kcov: kcov_task_exit: t = ffff888021f31f40, kcov->t = ffff888021f31f40 [ 358.953423][ T5908] Unregistered device Abilis Systems DVB-Titan [ 358.953796][ T5908] Abilis Systems as10x usb driver 5-1:1.0: removing 0 minor [ 358.953836][ T5908] device: 'aton2-0': device_unregister [ 358.960831][ T5908] kernfs runtime_status: removing [ 358.960914][ T5908] kernfs control: removing [ 358.960962][ T5908] kernfs runtime_suspended_time: removing [ 358.961006][ T5908] kernfs runtime_active_time: removing [ 358.961054][ T5908] kernfs autosuspend_delay_ms: removing [ 358.961128][ T5908] kernfs power: removing [ 358.982222][ C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 358.982325][ C0] wireguard: wg1: Sending keepalive packet to peer 40 (127.0.0.1:20003) [ 358.982333][ T58] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 358.984211][ T58] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 359.040990][ T5908] kernfs 180:0: removing [ 359.041092][ T5908] kernfs dev: removing [ 359.041153][ T5908] kernfs device: removing [ 359.041192][ T5908] kernfs subsystem: removing [ 359.041247][ T5908] kernfs aton2-0: removing [ 359.041296][ T5908] kernfs uevent: removing [ 359.041330][ T5908] PM: Removing info for No Bus:aton2-0 [ 359.041661][ T5908] kernfs aton2-0: removing [ 359.041692][ T5908] kernfs usbmisc: removing [ 359.041723][ T5908] device: 'aton2-0': device_create_release [ 359.041774][ T5908] as10x_usb: device has been disconnected [ 359.062329][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 359.062405][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 359.110511][ T5908] PM: Removing info for usb:5-1:1.0 [ 359.110739][ T5908] kernfs 5-1:1.0: removing [ 359.110797][ T5908] usb 5-1: usb_disable_device nuking all URBs [ 359.110825][ T5908] kernfs port: removing [ 359.110864][ T5908] kernfs device: removing [ 359.110896][ T5908] device: 'ep_00': device_unregister [ 359.110942][ T5908] kernfs runtime_status: removing [ 359.110979][ T5908] kernfs control: removing [ 359.111017][ T5908] kernfs runtime_suspended_time: removing [ 359.111057][ T5908] kernfs runtime_active_time: removing [ 359.111087][ T5908] kernfs autosuspend_delay_ms: removing [ 359.111147][ T5908] kernfs power: removing [ 359.111184][ T5908] kernfs uevent: removing [ 359.111229][ T5908] kernfs bLength: removing [ 359.111261][ T5908] kernfs bEndpointAddress: removing [ 359.111295][ T5908] kernfs bmAttributes: removing [ 359.111328][ T5908] kernfs bInterval: removing [ 359.111361][ T5908] kernfs wMaxPacketSize: removing [ 359.111393][ T5908] kernfs interval: removing [ 359.111431][ T5908] kernfs type: removing [ 359.111476][ T5908] kernfs direction: removing [ 359.111510][ T5908] PM: Removing info for No Bus:ep_00 [ 359.111538][ T5908] kernfs ep_00: removing [ 359.111670][ T5908] kernfs autosuspend: removing [ 359.111711][ T5908] kernfs level: removing [ 359.111754][ T5908] kernfs connected_duration: removing [ 359.111797][ T5908] kernfs active_duration: removing [ 359.111843][ T5908] kernfs persist: removing [ 359.111902][ T5908] kernfs runtime_status: removing [ 359.111938][ T5908] kernfs control: removing [ 359.222247][ C0] wireguard: wg0: Sending keepalive packet to peer 32 ([::1]:20003/0%0) [ 359.246305][ T5908] kernfs runtime_suspended_time: removing [ 359.246364][ T5908] kernfs runtime_active_time: removing [ 359.246408][ T5908] kernfs autosuspend_delay_ms: removing [ 359.246499][ T5908] kernfs power: removing [ 359.300180][ T5908] kernfs 189:532: removing [ 359.300247][ T5908] kernfs dev: removing [ 359.300285][ T5908] kernfs uevent: removing [ 359.300309][ T5908] kernfs removable: removing [ 359.300349][ T5908] kernfs configuration: removing [ 359.300373][ T5908] kernfs bNumInterfaces: removing [ 359.300391][ T5908] kernfs bConfigurationValue: removing [ 359.300410][ T5908] kernfs bmAttributes: removing [ 359.300429][ T5908] kernfs bMaxPower: removing [ 359.300455][ T5908] kernfs urbnum: removing [ 359.300490][ T5908] kernfs idVendor: removing [ 359.300516][ T5908] kernfs idProduct: removing [ 359.300540][ T5908] kernfs bcdDevice: removing [ 359.300564][ T5908] kernfs bDeviceClass: removing [ 359.300598][ T5908] kernfs bDeviceSubClass: removing [ 359.300632][ T5908] kernfs bDeviceProtocol: removing [ 359.300666][ T5908] kernfs bNumConfigurations: removing [ 359.300700][ T5908] kernfs bMaxPacketSize0: removing [ 359.300735][ T5908] kernfs speed: removing [ 359.300768][ T5908] kernfs rx_lanes: removing [ 359.300802][ T5908] kernfs tx_lanes: removing [ 359.300836][ T5908] kernfs busnum: removing [ 359.300870][ T5908] kernfs devnum: removing [ 359.300903][ T5908] kernfs devpath: removing [ 359.300937][ T5908] kernfs version: removing [ 359.300970][ T5908] kernfs maxchild: removing [ 359.301016][ T5908] kernfs quirks: removing [ 359.301051][ T5908] kernfs avoid_reset_quirk: removing [ 359.301086][ T5908] kernfs authorized: removing [ 359.301121][ T5908] kernfs remove: removing [ 359.301155][ T5908] kernfs ltm_capable: removing [ 359.301208][ T5908] kernfs devspec: removing [ 359.301253][ T5908] kernfs descriptors: removing [ 359.301314][ T5908] kernfs subsystem: removing [ 359.301342][ T5908] kernfs 5-1: removing [ 359.301378][ T5908] bus: 'usb': remove device 5-1 [ 359.301401][ T5908] kernfs 5-1: removing [ 359.301436][ T5908] kernfs driver: removing [ 359.301481][ T5908] firmware_class: fw_name_devm_release: fw_name-as102_data1_st.hex devm-ffff888025ca1ab8 released [ 359.301523][ T5908] kobject: '5-1' (ffff888064a040b0): kobject_uevent_env [ 359.301807][ T5908] kobject: '5-1' (ffff888064a040b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 359.301997][ T5908] PM: Removing info for usb:5-1 [ 359.302040][ T5908] kobject: '5-1' (ffff888064a040b0): kobject_uevent_env [ 359.302078][ T5908] kobject: '5-1' (ffff888064a040b0): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 359.302244][ C0] wireguard: wg0: Sending keepalive packet to peer 2 ([::1]:20003/0%0) [ 359.332879][ T4948] sd 0:0:1:0: cmd ffff8880324ea9d0 CDB: 0x2a [ 359.332914][ T4948] Added buffer head 221 to ffff888026ce7000 [ 359.334278][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 359.334308][ T1048] sd 0:0:1:0: cmd ffff8880324ea9d0 response 0 status 0x0 sense_len 0 [ 359.334330][ T1048] No more buffers in queue [ 359.334830][ T69] sd 0:0:1:0: cmd ffff888027c45910 CDB: 0x35 [ 359.334854][ T69] Added buffer head 221 to ffff888026ce7000 [ 359.334938][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 359.334958][ T1048] sd 0:0:1:0: cmd ffff888027c45910 response 0 status 0x0 sense_len 0 [ 359.334977][ T1048] No more buffers in queue [ 359.335057][ T69] sd 0:0:1:0: cmd ffff8880324ead90 CDB: 0x2a [ 359.335077][ T69] Added buffer head 221 to ffff888026ce7000 [ 359.336343][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 359.336368][ T1048] sd 0:0:1:0: cmd ffff8880324ead90 response 0 status 0x0 sense_len 0 [ 359.336389][ T1048] No more buffers in queue [ 359.345760][ T9837] sock ffff888062f35800, sk ffff888051200000 [ 359.345789][ T9837] sk ffff888051200000 state 2 socket ffff888062f35800 [ 359.345809][ T9837] sk ffff888051200000 state 2 [ 359.345827][ T9837] sk ffff888051200000 [ 359.417955][ T5908] kernfs 5-1: removing [ 359.417994][ T5908] kobject: '5-1' (ffff888064a040b0): kobject_cleanup, parent 0000000000000000 [ 359.418014][ T5908] kobject: '5-1' (ffff888064a040b0): calling ktype release [ 359.418069][ T5908] kobject: '5-1': free name [ 359.418197][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.418223][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.418252][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.422460][ T58] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 359.445339][ T9] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 359.445530][ T9] wireguard: wg1: No route to 127.0.0.1:20003, error -101 [ 359.498766][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.498788][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.498805][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.501310][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 359.501346][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 359.501354][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 359.543768][ T9] Added buffer head 0 to ffff88801bbd9400 [ 359.593798][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.593830][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.593862][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.633774][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.633798][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.633816][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.673808][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.673827][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.673844][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.678229][ T5908] usb usb5-port1: debounce total 100ms stable 100ms status 0x100 [ 359.678260][ T5908] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc90014f18000 138625 [ 359.678479][ T5908] kcov: kcov_remote_start: handle = 100000000000005, context: task [ 359.678491][ T5908] kcov: kcov_start: t = ffff8880283f1f40, size = 1048576, area = ffffc90014f18000 [ 359.678504][ T5908] hub 5-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 359.678586][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.678598][ C0] kcov: kcov_start: t = ffff88801de91f40, size = 262144, area = ffffc900032f7000 [ 359.678614][ C0] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 2 [ 359.711966][ T5908] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc90014f18000 1103 [ 359.712024][ T164] hub 5-0:1.0: hub_suspend [ 359.712101][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 359.712123][ C1] kcov: kcov_start: t = ffff88801e69be80, size = 262144, area = ffffc900032f7000 [ 359.712237][ C1] kcov: kcov_move_area: ffffc90019f29000 1048576 <= ffffc900032f7000 54 [ 359.713010][ T164] usb usb5: bus auto-suspend, wakeup 1 [ 359.713030][ T164] usb usb5: dummy_bus_suspend [ 359.857396][ T9841] kcov: kcov_task_exit: t = ffff888037e7be80, kcov->t = ffff888037e7be80 [ 359.858280][ T9840] kcov: kcov_task_exit: t = ffff888031ca3e80, kcov->t = ffff888031ca3e80 [ 359.858441][ T9846] kcov: kcov_task_exit: t = ffff88802e285dc0, kcov->t = ffff88802e285dc0 [ 359.858587][ T9856] kcov: kcov_task_exit: t = ffff88802f3e1f40, kcov->t = ffff88802f3e1f40 [ 360.502260][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 360.502308][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 360.502316][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 360.503282][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 360.532298][ T164] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 361.466844][ T1398] sd 0:0:1:0: cmd ffff8880324eb150 CDB: 0x2a [ 361.466880][ T1398] Added buffer head 221 to ffff888026ce7000 [ 361.466906][ T1398] sd 0:0:1:0: cmd ffff8880324eb510 CDB: 0x2a [ 361.466925][ T1398] Added buffer head 313 to ffff888026ce7000 [ 361.469230][ T1398] sd 0:0:1:0: cmd ffff8880324eb8d0 CDB: 0x2a [ 361.469257][ T1398] Added buffer head 273 to ffff888026ce7000 [ 361.469280][ T1398] sd 0:0:1:0: cmd ffff8880324ebc90 CDB: 0x2a [ 361.469298][ T1398] Added buffer head 320 to ffff888026ce7000 [ 361.469357][ T1398] sd 0:0:1:0: cmd ffff8880324ec050 CDB: 0x2a [ 361.469380][ T1398] Added buffer head 332 to ffff888026ce7000 [ 361.471056][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 361.471078][ T1048] sd 0:0:1:0: cmd ffff8880324eb510 response 0 status 0x0 sense_len 0 [ 361.471093][ T1048] sd 0:0:1:0: cmd ffff8880324ebc90 response 0 status 0x0 sense_len 0 [ 361.471104][ T1048] No more buffers in queue [ 361.471959][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 361.471980][ T1048] sd 0:0:1:0: cmd ffff8880324eb150 response 0 status 0x0 sense_len 0 [ 361.471995][ T1048] No more buffers in queue [ 361.483788][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 361.483823][ T1048] sd 0:0:1:0: cmd ffff8880324eb8d0 response 0 status 0x0 sense_len 0 [ 361.483845][ T1048] No more buffers in queue [ 361.501602][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 361.501651][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 361.501659][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 361.502453][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 361.502491][ T1048] sd 0:0:1:0: cmd ffff8880324ec050 response 0 status 0x0 sense_len 0 [ 361.502506][ T1048] No more buffers in queue [ 361.504469][ T5893] Added buffer head 0 to ffff88801bbd9400 [ 361.542207][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 5) [ 361.632324][ T1867] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 362.102444][ C0] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3) [ 362.501506][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 362.501552][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 362.501560][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 362.501716][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 362.782450][ T1399] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 362.836665][ T1198] virtqueue callback for ffff88802929f000 (ffffffff863d49b0) [ 362.836696][ C0] No more buffers in queue [ 362.836863][ C0] Receiving skb proto 0x0806 len 28 type 1 [ 362.836878][ C0] No more buffers in queue [ 362.836963][ C0] eth0: xmit ffff8880635e1a00 42:01:0a:80:00:01 [ 362.836980][ C0] Added buffer head 24 to ffff88802929ee00 [ 362.837025][ T1199] virtqueue callback for ffff88802929ee00 (ffffffff863d4af0) [ 362.837038][ C0] Sent skb ffff8880635e1a00 [ 362.837056][ C0] No more buffers in queue [ 363.463167][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 363.464552][ C1] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 363.501904][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 363.501953][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 363.501961][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 363.502145][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 363.862253][ C0] net_ratelimit: 104 callbacks suppressed [ 363.862335][ C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0) [ 363.913074][ T164] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 364.102424][ C0] wireguard: wg1: Sending keepalive packet to peer 46 (127.0.0.1:20003) [ 364.102747][ T8111] wireguard: wg2: Receiving keepalive packet from peer 48 (127.0.0.1:20002) [ 364.262262][ C1] wireguard: wg0: Sending keepalive packet to peer 1 ([::1]:20002/0%0) [ 364.422267][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 364.422567][ T7240] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 364.501921][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 364.501975][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 364.501983][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 364.513003][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 364.582445][ C1] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0) [ 364.587408][ T5893] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 364.742249][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3) [ 364.742360][ T1400] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 364.742360][ C1] wireguard: wg0: Sending keepalive packet to peer 37 ([::1]:20002/0%0) [ 365.013545][ T1867] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 365.383523][ T4948] sd 0:0:1:0: cmd ffff8880324904d0 CDB: 0x2a [ 365.383580][ T4948] Added buffer head 332 to ffff888026ce7000 [ 365.384975][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 365.384997][ T1048] sd 0:0:1:0: cmd ffff8880324904d0 response 0 status 0x0 sense_len 0 [ 365.385017][ T1048] No more buffers in queue [ 365.385686][ T57] sd 0:0:1:0: cmd ffff888027c45910 CDB: 0x35 [ 365.385711][ T57] Added buffer head 332 to ffff888026ce7000 [ 365.385806][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 365.385820][ T1048] sd 0:0:1:0: cmd ffff888027c45910 response 0 status 0x0 sense_len 0 [ 365.385835][ T1048] No more buffers in queue [ 365.385928][ T69] sd 0:0:1:0: cmd ffff888032490890 CDB: 0x2a [ 365.385945][ T69] Added buffer head 332 to ffff888026ce7000 [ 365.386894][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 365.386909][ T1048] sd 0:0:1:0: cmd ffff888032490890 response 0 status 0x0 sense_len 0 [ 365.386921][ T1048] No more buffers in queue [ 365.501869][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 365.501918][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 365.501926][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 365.502152][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 366.123187][ T1867] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 366.501853][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 366.501900][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 366.501908][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 366.502071][ T5908] Added buffer head 0 to ffff88801bbd9400 [ 366.503831][ T1867] sd 0:0:1:0: cmd ffff8880324ec410 CDB: 0x2a [ 366.503886][ T1867] Added buffer head 332 to ffff888026ce7000 [ 366.505733][ T1048] virtqueue callback for ffff888026ce7000 (ffffffff85eb8460) [ 366.505762][ T1048] sd 0:0:1:0: cmd ffff8880324ec410 response 0 status 0x0 sense_len 0 [ 366.505785][ T1048] No more buffers in queue [ 366.662215][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 6) [ 367.233197][ T164] bond1: (slave gretap1): Send learning packet: mac 8e:04:78:cb:c2:d7 vlan 0 [ 367.302233][ C1] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 367.501688][ T214] virtqueue callback for ffff88801bbd9400 (ffffffff8557e030) [ 367.501736][ T214] virtqueue interrupt with no work for ffff88801bbd9600 [ 367.501744][ T214] virtqueue interrupt with no work for ffff88801bbd9800 [ 367.501862][ T5908] Added buffer head 0 to ffff88801bbd9400