last executing test programs: 2m48.085477552s ago: executing program 1 (id=736): pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf93", 0xa1}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) clock_settime(0xfffffff8, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@clear_death={0x400c630f, 0x3}, @request_death={0x400c630e, 0x1}, @request_death={0x400c630e, 0x1}, @acquire_done, @decrefs], 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0x6) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f0000000280)={{0x2, 0x4e20, @rand_addr=0x64010100}, {0x306, @link_local}, 0x3e, {0x2, 0x4e24, @empty}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)={0x20000, 0x0, 0x5}, 0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000180)="0f20d86635080000000f22d80f0139362e3e662e0f3566b9800000c00f326635000400000f30ea73a18f000f2205666dba610066b86e60000066ef24a666b80222f7120f23d00f21f866352000000f0f23f8"}], 0xaaaab9e, 0x43, 0x0, 0xfffffffffffffe87) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x20000004, 0x7f, 0x4233, 0x6305e5a4, 0x81, 0x9c1, 0x8003, 0x1005, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0x2000, 0x80300}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m47.982261623s ago: executing program 1 (id=737): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b, 0x0, 0x200000}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0500002a9000834298"], 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f00000001c0)={0x4, 0x1, 0x7dff, 0x6, "a09fc910bb060bdc0d40cfcd10bf99f7a0f281ca7cbeb8216bef5c543cf861aa"}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000009003940422c021664da010203010902120001000000040904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000000100)={0x14, &(0x7f0000000200)={0x40, 0x24, 0xbb, {0xbb, 0x23, "42c63f12debb879eff9f59d71036a2e1761a00777e1982e2973584545a8c2bb2b9890b93a5db5dbc9c010811ec44ee69a7fab37642099db06d33899914d6223af5ad88c698e3a8d79e8f5b8b77a196076bcad2ca98e381d7b150618887d4ca95d032094e1f91d3f6c7be8959db0852b8a57e60d6893a8f24cbc440ed0522e8c6865e57ba181e4803f143658104e69c8910c2199640cc941aa58e99b01cd342eb54441c0442cc4128277b16ce628f29d300505f1a4c8f489184"}}, &(0x7f0000000080)={0x0, 0x3, 0x11, @string={0x11, 0x3, "f07adcf5806275120a26d691d9a82b"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x0, 0xf, 0x32, "0237135a69381025ca54ae488148e575c506619a42252626848f9447226045c80725a09efae968e25d7d0b915772f0d6dcf9"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x81, 0x3, "9a5640"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, 'c'}, &(0x7f0000000400)={0x20, 0x83, 0x2, "ce0a"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "1ca5db92"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "eba5c1"}}) 2m47.439522423s ago: executing program 1 (id=740): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0501ffffffff0a0000002e00000008000300", @ANYRES32=r2, @ANYBLOB="06003400c5f3000008004a000bec0f001800490004ac0f0009ac0f"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x4004050) 2m47.438405313s ago: executing program 1 (id=741): socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000", @ANYRES16=r2], 0xc4}}, 0x0) 2m47.383551246s ago: executing program 1 (id=742): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, 0x0) 2m46.831120414s ago: executing program 1 (id=745): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r1) (async) tkill(r1, 0x3c) (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x64d3c56c}, @iv={0xd8, 0x117, 0x2, 0xbe, "84baf5aa529a4e20122e68b8a54d084eb0ecb6f48aa04f929c6b2628961518a0397a18ffea227147b1c65807dac99f5bc0518bcdf8ace2aabe97d814dc53acc9c51b6dfb329ab9740a9e867c0dd7f2cb3cfb8f724527b68349a2c955f0a8d83734761f233a57425a1af3eb7417f269e3a2cac686a9ee081af7d645d52e5e4250ab79d2ee620daaa2dd4cfe11519ef15400fcfe302e81c977975adb8b077dc98a83d5b0bafdeb74fbf7359eaddbf11e4afa1a71a8b2129ed4a9297954d5b4"}, @iv={0x58, 0x117, 0x2, 0x3f, "d5509745b590a86e39642847c0c42d6ff3a8f0c601d92fb54e852f1670dfd85d694afe50f0e449419461a3ec6de5fe5c80f61007f5c67cfd0612c3f8e82778"}, @op={0x18, 0x117, 0x3, 0x1}], 0x160, 0x40c0}, {0x0, 0x0, 0x0}], 0x2, 0x48804) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="201500000084b0"], 0x20, 0x4c004}], 0x1, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="df5b35de69a4f26aaa8aade8f0e339dbcfbe34225b5b9916bf5ad629ed8eb553484017e47451cbcfe0b802732b2b65662d56811f47ed34fdd15617888be88b876e61c8e71f347385cbd8298d4a78fa7e2ca1dc6a4b89f55de0d004d6fd400e0610b0e47297ad1a60a1b5c2929418f56bcd0cab3324b199e643f8a778f825ee6a1237843ac95d53b5cb33cde72c77815dd50c58bf38dc84f523f867e6a56635e3ad061cfde7077f1574e6dfd2e550c7e61af4f4413f95380f93456c067a5f10d129f2859761b032b4eb8a8751b6b7de67504b879f73641321cff086de998697bc38888cb277ca671b", @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16=r7, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4088000) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@inode32}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async, rerun: 32) r9 = accept$alg(r8, 0x0, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r9, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795", 0x40}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x3fffe7d, 0x0, 0x0) 2m31.771447941s ago: executing program 32 (id=745): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) (async, rerun: 32) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r1) (async) tkill(r1, 0x3c) (async) ptrace$peeksig(0x4209, r1, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) (async, rerun: 64) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async, rerun: 64) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001480)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@assoc={0x18, 0x117, 0x4, 0x64d3c56c}, @iv={0xd8, 0x117, 0x2, 0xbe, "84baf5aa529a4e20122e68b8a54d084eb0ecb6f48aa04f929c6b2628961518a0397a18ffea227147b1c65807dac99f5bc0518bcdf8ace2aabe97d814dc53acc9c51b6dfb329ab9740a9e867c0dd7f2cb3cfb8f724527b68349a2c955f0a8d83734761f233a57425a1af3eb7417f269e3a2cac686a9ee081af7d645d52e5e4250ab79d2ee620daaa2dd4cfe11519ef15400fcfe302e81c977975adb8b077dc98a83d5b0bafdeb74fbf7359eaddbf11e4afa1a71a8b2129ed4a9297954d5b4"}, @iv={0x58, 0x117, 0x2, 0x3f, "d5509745b590a86e39642847c0c42d6ff3a8f0c601d92fb54e852f1670dfd85d694afe50f0e449419461a3ec6de5fe5c80f61007f5c67cfd0612c3f8e82778"}, @op={0x18, 0x117, 0x3, 0x1}], 0x160, 0x40c0}, {0x0, 0x0, 0x0}], 0x2, 0x48804) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0) (async, rerun: 32) r3 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="201500000084b0"], 0x20, 0x4c004}], 0x1, 0x10) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000040)=""/44, &(0x7f0000000080)=0x2c) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000001}, 0x0) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="df5b35de69a4f26aaa8aade8f0e339dbcfbe34225b5b9916bf5ad629ed8eb553484017e47451cbcfe0b802732b2b65662d56811f47ed34fdd15617888be88b876e61c8e71f347385cbd8298d4a78fa7e2ca1dc6a4b89f55de0d004d6fd400e0610b0e47297ad1a60a1b5c2929418f56bcd0cab3324b199e643f8a778f825ee6a1237843ac95d53b5cb33cde72c77815dd50c58bf38dc84f523f867e6a56635e3ad061cfde7077f1574e6dfd2e550c7e61af4f4413f95380f93456c067a5f10d129f2859761b032b4eb8a8751b6b7de67504b879f73641321cff086de998697bc38888cb277ca671b", @ANYRESOCT=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES16=r7, @ANYRESOCT=r4], 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x4088000) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x3b80ed, &(0x7f0000000180)={[{@inode32}]}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000d80)=ANY=[@ANYBLOB="ddf963efbeb08a", @ANYBLOB="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"]) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async, rerun: 32) r9 = accept$alg(r8, 0x0, 0x0) (rerun: 32) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) (async) sendmmsg$inet(r9, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795", 0x40}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB='@'], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r9, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x3fffe7d, 0x0, 0x0) 7.369377701s ago: executing program 3 (id=1753): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.265797856s ago: executing program 3 (id=1754): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x9e, 0xe8, 0x31, 0x20, 0x10f5, 0x548c, 0x5edd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0x14, 0x80, 0x5, "", [{{0x9, 0x4, 0x4f, 0xec, 0x2, 0xff, 0x47, 0xd0, 0x8, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7f, 0x7, 0xff}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0xff, 0x34, 0x82}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000000)={'wlan1\x00', 0x11}) 5.567574893s ago: executing program 3 (id=1758): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000140)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x3, 0x0, 0x21, 0x0, 'syz0\x00', 0x0, 0x2}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) ioctl$DVB_DVR_DMX_QUERYBUF(0xffffffffffffffff, 0xc0186f3d, &(0x7f00000000c0)={0x3ff, 0xfffffff7, 0x9, 0x6, 0x3, 0x2}) r2 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0x450c02) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc140000001100010000000010000000000900000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_wait(r4, &(0x7f0000000180)=[{}], 0x1, 0xffff3cb9) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f00000002c0)={{0x5, 0x4, 0x400, 0x8, '\x00', 0x6}, 0x0, [0xffffffff, 0x101, 0x100, 0x1, 0x77000000000000, 0x1, 0x68e8bd76, 0x7f, 0x1000, 0x2, 0x7, 0x4, 0x3167, 0x6, 0x400, 0x97, 0x7, 0x6, 0xb5b, 0x1000, 0x3, 0x80, 0x2, 0x1000, 0x81, 0x9, 0x8, 0xfc, 0x4, 0x4, 0x200, 0x8, 0x3, 0x3, 0x7, 0x7, 0x8, 0x0, 0x4, 0x8, 0x69d2, 0x62, 0xfffffffffffffffc, 0x9, 0x6, 0x4, 0x8, 0x64, 0x10000, 0x6, 0x7, 0x0, 0xff, 0xffffffff80000000, 0xfff, 0x3, 0x6, 0xffffffffdd5a965d, 0x274540000000, 0x7f, 0x200, 0xfffffffffffffff9, 0x6cc, 0x6, 0x7ff, 0x3, 0x1, 0x101, 0x2, 0x5, 0xffffffffffffffcb, 0x9caa, 0xe, 0x7f1b247b, 0x7ff, 0xffffffff, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x6, 0x0, 0x7, 0x4, 0x9, 0xffffffffffffff1b, 0x9, 0x5, 0x3, 0x0, 0xffffffff00000000, 0x0, 0xe, 0xf0, 0xe6ad, 0x400, 0x2, 0x9, 0x1, 0xd0, 0xe1, 0x1000, 0x2, 0x6, 0x7, 0xd, 0x3d3b, 0x5, 0x0, 0x3079, 0x9, 0xd, 0x8, 0x2, 0x9a, 0x2, 0x1, 0x6a, 0x7, 0x1ff, 0x6, 0x7, 0x0, 0x3, 0x6, 0x4, 0x4, 0x6]}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) fcntl$F_GET_FILE_RW_HINT(r7, 0x40d, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009000800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) 5.024044201s ago: executing program 3 (id=1762): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4.781044168s ago: executing program 3 (id=1763): socket(0x10, 0x803, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x57f7}}) 4.610170535s ago: executing program 3 (id=1764): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x1, {0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x10) r3 = dup3(r2, r0, 0x80000) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f00000003c0)={0x1, 0x2, 0x1000, 0x100000, 0x0, 0x2, 0x0, &(0x7f0000000000)="0436"}) (fail_nth: 4) 3.357298701s ago: executing program 2 (id=1769): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 4) 3.032362814s ago: executing program 2 (id=1770): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, 0x40, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x84;'}, @typed={0x6, 0x12, 0x0, 0x0, @str='\x84;'}]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f00000000c0)=0xfd) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r5) sendmsg$ETHTOOL_MSG_FEATURES_GET(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000880)={0x14, r6, 0x4f79951a91b7df8f, 0x70bd2c, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000) recvmmsg(r5, &(0x7f00000064c0)=[{{0x0, 0x68c2e5c0e072abef, &(0x7f0000000480)=[{&(0x7f0000000140)=""/56, 0x31}, {&(0x7f00000008c0)=""/229, 0x123}, {&(0x7f0000000300)=""/181, 0xad}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/4088, 0xff8}, {&(0x7f0000000000)=""/137, 0x89}], 0x6}, 0x60}, {{0x0, 0x0, 0x0}, 0x4}], 0x400000000000015, 0x40000000, 0x0) 3.006361686s ago: executing program 4 (id=1771): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0xc000) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030006ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.837266116s ago: executing program 4 (id=1772): sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="90000000051405012cbd7000fbdbdf0100000000000800030000000015fd00012ce379552fc285"], 0x90}, 0x1, 0x0, 0x0, 0x20040081}, 0x40010) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0xf170, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0xfffffffffffffffc], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x5000, 0x60000, 0x0, 0x6, 0x8, 0x5, 0x0, 0x3, 0x0, 0x8, 0x6, 0x3}, {0xffff1000, 0x10000, 0xd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0xeeee0000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfd}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x70, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x200000, 0x6000, 0x8, 0x3, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0xeeee0000, 0xe, 0x2, 0xa, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x2000, 0xa000, 0xa, 0x4, 0x8, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8, 0x40}, {0x7000, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x5, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0x8, 0x0, 0x54000, 0x110, 0xc, 0xf800, 0x0, [0x8000000000000001, 0x10000000000, 0xffffffffffffffff, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 2.657750109s ago: executing program 4 (id=1773): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000680)={0x1c, &(0x7f0000000580)={0x0, 0xd}, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x40, 0x31, 0x9f, {0x9f, 0x23, "656935cfec818d9e20f6f1dc7a1246612d31694d13cadaff1e9579b7ab994a6187a5489ea25d299068c47fb96bca7fc8ed8535ab7ef5921e78e42f9e45c24756554df4dade7a0a06bfec8b08e1a66c1911e3fb87d4ab14e7c80ff69ec79c27ee60b0788fa71a5a8790cc14f8550a6d2dbb4676e7ffc6c7bee966b26bb386e859a11feefbf1ed09ad08271dc98c419ac181c223a3c811632100252e2a9c"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2009}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0xe, 0x91, "d5b543c40320707e8393cc82d117435a1a5b339c78244ee32c58f70ebb446e6050834ec8a4d0edd0fd8201114738c0c6e402b6d761cf3367d438e4633843afd8d298cedee76c3cd3416642c52b9a497e508ac13996c6e9b62a5a20a61849bdb5ebdfb646f4ee452d9f82a6462f4689dfb4cf70ae45bb3507ca9774dfac35c52f80c1ff8cb67bb253e8c1a518bd5be5d8a4"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0x20, 0x0, 0xe8, {0xe6, "04faf1e73a503cab713537c46cedd80c80b94e455084127ef73500ca4e8695337887295bb5593978e2edb0ab40a29f0bc5b7b877a5585480cb367c61b5baa18ac3c26ba49e10ca6eedcecd975a80cf714920c8e42f1b9f3313c5d845ae91ffea166f1843102afb976cc0c4da098145301c533c03f335472825d298464e8f1dbae30ed8baded436268287621e8246e1c2dae9728c783d80ea3597edf6fdb57d358ac16398a6a5c58b274f4783961bc90422f5eed7777313240e2716bd0aa6e003a54ee7a71022f78ccfe41c123ae9daf10073cfff49d538ade45476645ccd581f7cb1b14ed545"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0x81}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x8}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.353438857s ago: executing program 0 (id=1774): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff004) 2.05317811s ago: executing program 2 (id=1775): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="f3aebd6969fa0000000f01d9660f78c4020a1bf7b805008300b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f06", 0x47}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 1.665733802s ago: executing program 2 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000200a01020000000000000000010000000900010073797a3000000000090002", @ANYRES64=0x0], 0xe4}, 0x1, 0x0, 0x0, 0x4004}, 0x800) 1.630250054s ago: executing program 0 (id=1777): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@nfs_export_on}]}) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) chdir(&(0x7f0000000000)='./bus\x00') link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.596306544s ago: executing program 2 (id=1778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000002280)={0x0, 0x0, 0x200000, 0x0, 0x0, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mlockall(0x2) brk(0x200000ffc000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x13, r2, 0x0) read(r2, &(0x7f0000000040)=""/67, 0x43) r3 = gettid() process_vm_readv(r3, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) syz_usb_connect(0x5, 0x57, &(0x7f00000005c0)={{0x12, 0x1, 0x46a3b9239e888422, 0xd8, 0x6d, 0xcf, 0x40, 0xbb4, 0xa5b, 0x29cd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x45, 0x1, 0xd4, 0xfa, 0xb0, 0x7f, "", [{{0x9, 0x4, 0x86, 0x0, 0x0, 0x22, 0x29, 0xcf, 0x1, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x6, 0x6}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x7, 0x6, 0x1}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x24, 0x1, 0x4, 0xab, "c8", '0fm'}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x2, 0x4, 0x4, "c0f4"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0xd1d, 0x7, 0x7}]}]}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x5, [{0xb7, &(0x7f0000000740)=ANY=[@ANYBLOB="b703794746e318f35ca095d5183213cf8618c15accab99b029c6bc7e0a15988a7c2e986bcb9893c824593158f065f3e63b259d090000920ac0034eadfd790d4fd4e0f8ded9a4316797134bca8aeb32fb2c53888c0c2ef68a2f12b697f59f3432c5c433fcf5addf45aaaa6fb2fc12c529d83062627c4ec6ddeacd9e23bbda4387ffc4311e7cb1a02d8b0953ab1715a79708a60ed658bf68442acdecf06f0522b815037ffc5ed35a51ff15fb3bcbb21c30b0ebba957d2357df181a"]}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x55, &(0x7f0000000480)=@string={0x55, 0x3, "a90c64249ea2c6eff4ea9eef3b5bbb7a7c32ff6f453ad225baf3e01e09b01f2acb82991824ec5973d3d1384b90cea5a29dca733b161c19cd1fef9e47ed9fec23f6e0d119ea01a6fc8a3b6f30b9d88323270dc1"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x408}}]}) 1.205605139s ago: executing program 0 (id=1779): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"2ac78e02ff04856afe13be00", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x40004, 0x1}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0", 0x1b}, {&(0x7f0000000240)="d29edb52e9bc960d8858f5476408b13775dd38ec094a", 0x16}, {&(0x7f0000000480)="d91197e00f747fc820", 0x9}], 0x3) ppoll(&(0x7f00000004c0)=[{r1, 0x129}], 0x1, &(0x7f0000000500), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x50, r1, 0x0) futex(0x0, 0x7, 0x0, 0x0, &(0x7f0000000080)=0x1, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xa) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000040)) 1.07375663s ago: executing program 0 (id=1780): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="c744240033000000c744240209000000c7442406000000000f011c24b9a00d00000f3266baa000b800900000ef2664d666b8df008ed00fc7bab100000066ba210066edc4e3096a59000067f33e66f2f08269a1fab8020000000f23d00f21f835000000080f23f8", 0x67}], 0x1, 0x4246a8fc1b1cc1cd, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 1.04299923s ago: executing program 0 (id=1781): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x5608, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000a508d00000006"], 0x78}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) dup(r2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000880)={0x0, 0xc, 0x3, 0x8, 0x8, 0xfffffffc}, &(0x7f00000008c0)=0x14) 691.278081ms ago: executing program 0 (id=1782): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000240), 0x10001, &(0x7f0000000500)=ANY=[]) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0x24ff871999e0dde7, 0xdcf, 0x6, 0xb, 0x800, 0x0, 0x0, 0x2, 0xd56}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x800) syz_fuse_handle_req(r0, &(0x7f0000007b40)="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", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0xfffffffe, {0x8001, 0x77, 0x0, {0x2, 0x7fffffffffffffff, 0x103, 0xfff, 0x2, 0x207, 0x8, 0xffffffe9, 0x81, 0x1000, 0x5, 0x0, 0x0, 0x9, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 623.219797ms ago: executing program 4 (id=1783): r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000000)={0xb0, r0, 0x1, 0x70b9ad, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x68, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb334}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ba1a484}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5647}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24811346}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65cd}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4437b8a5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6e5c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1e246126}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x16ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62a7f1d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x218c1a08}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x400c015}, 0x0) 453.824174ms ago: executing program 4 (id=1784): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f3209083667dbd20f300f0826f30fc7b205000000660fc775022e0ffa600c980f320f3566b85700", 0x54}], 0x1, 0x17, 0x0, 0x0) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r1, 0x4068aea3, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8001000000) 311.815737ms ago: executing program 4 (id=1785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x8008, 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 0s ago: executing program 2 (id=1786): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'ipvlan0\x00', {0x2, 0x0, @remote}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x7, 0x70bd2b, 0x25dfdc01, {{0x8}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x91}, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x0) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffa}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x20, r3, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40014}, 0x40805) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0x53e5, 0x3, 0x4, 0x9d1}, {0x1000, 0x8, 0xa, 0xff}, {0x9, 0x8, 0x8, 0x8}, {0x400, 0x3, 0x10, 0x101}, {0xc413, 0x5, 0x2, 0x200}, {0x2, 0x3, 0xf8, 0x8}]}) kernel console output (not intermixed with test programs): Manufacturer: 《 [ 530.697591][ T5982] usb 1-1: config 3 has no interface number 0 [ 530.702167][ T5934] usb 3-1: SerialNumber: ࠊ [ 530.710298][ T5982] usb 1-1: config 3 has no interface number 1 [ 530.725237][ T5982] usb 1-1: config 3 interface 68 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 32 [ 530.750305][ T5982] usb 1-1: config 3 interface 68 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 530.764092][ T5982] usb 1-1: config 3 interface 68 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 530.768243][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 530.798779][ T5982] usb 1-1: config 3 interface 68 altsetting 9 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 530.810978][ T5982] usb 1-1: config 3 interface 68 altsetting 9 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 530.822107][ T5982] usb 1-1: config 3 interface 68 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 530.833838][ T5982] usb 1-1: config 3 interface 68 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 530.844624][ T5982] usb 1-1: config 3 interface 68 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 530.852939][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 530.865259][ T5982] usb 1-1: config 3 interface 35 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 530.895975][ T5982] usb 1-1: config 3 interface 68 has no altsetting 0 [ 530.902775][ T5982] usb 1-1: config 3 interface 35 has no altsetting 0 [ 530.912209][ T5982] usb 1-1: New USB device found, idVendor=1199, idProduct=901e, bcdDevice=e1.74 [ 530.921687][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.929823][ T5982] usb 1-1: Product: К [ 530.934972][ T5982] usb 1-1: Manufacturer: Ј [ 530.943213][ T5982] usb 1-1: SerialNumber: syz [ 530.972465][T10228] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 531.023440][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 531.058777][ T5934] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 531.075809][ T5934] usb 3-1: USB disconnect, device number 84 [ 531.356997][ T5982] usb 1-1: USB disconnect, device number 3 [ 531.510114][ T5828] usb 4-1: USB disconnect, device number 79 [ 531.834793][T10252] FAULT_INJECTION: forcing a failure. [ 531.834793][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 531.848308][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.2.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 531.848343][T10252] Tainted: [L]=SOFTLOCKUP [ 531.848351][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.848363][T10252] Call Trace: [ 531.848371][T10252] [ 531.848379][T10252] dump_stack_lvl+0xe8/0x150 [ 531.848416][T10252] should_fail_ex+0x412/0x560 [ 531.848446][T10252] should_failslab+0xa8/0x100 [ 531.848471][T10252] __kmalloc_cache_noprof+0x88/0x660 [ 531.848504][T10252] ? vhost_task_create+0x123/0x380 [ 531.848534][T10252] vhost_task_create+0x123/0x380 [ 531.848560][T10252] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 531.848583][T10252] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 531.848609][T10252] ? __pfx_vhost_task_create+0x10/0x10 [ 531.848642][T10252] ? __pfx_vhost_task_fn+0x10/0x10 [ 531.848675][T10252] ? __lock_acquire+0x6b5/0x2cf0 [ 531.848714][T10252] kvm_mmu_post_init_vm+0x14c/0x300 [ 531.848743][T10252] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 531.848778][T10252] ? __mutex_trylock_common+0x158/0x260 [ 531.848803][T10252] ? __pfx___mutex_trylock_common+0x10/0x10 [ 531.848827][T10252] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 531.848852][T10252] ? register_lock_class+0x31/0x2e0 [ 531.848885][T10252] ? __lock_acquire+0x6b5/0x2cf0 [ 531.848923][T10252] ? kasan_quarantine_put+0xbb/0x1f0 [ 531.848955][T10252] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 531.848986][T10252] ? do_raw_write_lock+0x11d/0x260 [ 531.849028][T10252] kvm_vcpu_ioctl+0xa62/0xfd0 [ 531.849058][T10252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.849078][T10252] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 531.849127][T10252] ? __fget_files+0x2a/0x420 [ 531.849157][T10252] ? __fget_files+0x2a/0x420 [ 531.849191][T10252] ? __fget_files+0x3a0/0x420 [ 531.849216][T10252] ? __fget_files+0x2a/0x420 [ 531.849246][T10252] ? bpf_lsm_file_ioctl+0x9/0x20 [ 531.849267][T10252] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 531.849290][T10252] __se_sys_ioctl+0xfc/0x170 [ 531.849313][T10252] do_syscall_64+0x14d/0xf80 [ 531.849333][T10252] ? trace_irq_disable+0x3b/0x150 [ 531.849357][T10252] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.849377][T10252] ? clear_bhb_loop+0x40/0x90 [ 531.849403][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.849423][T10252] RIP: 0033:0x7f231559c799 [ 531.849442][T10252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.849460][T10252] RSP: 002b:00007f23164f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.849482][T10252] RAX: ffffffffffffffda RBX: 00007f2315815fa0 RCX: 00007f231559c799 [ 531.849496][T10252] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 531.849509][T10252] RBP: 00007f23164f0090 R08: 0000000000000000 R09: 0000000000000000 [ 531.849521][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.849533][T10252] R13: 00007f2315816038 R14: 00007f2315815fa0 R15: 00007ffd5d4a34b8 [ 531.849566][T10252] [ 532.594292][ T5934] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 532.776478][ T5934] usb 1-1: Using ep0 maxpacket: 32 [ 532.791505][ T5934] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.809302][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.841587][ T5934] usb 1-1: config 0 has no interface number 0 [ 532.855370][ T5934] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 532.882719][ T5934] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 532.893077][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.905234][ T51] Bluetooth: hci3: command 0x2016 tx timeout [ 532.913566][ T5934] usb 1-1: Product: syz [ 532.926070][ T5934] usb 1-1: Manufacturer: syz [ 532.933969][ T5934] usb 1-1: SerialNumber: syz [ 532.944936][ T5934] usb 1-1: config 0 descriptor?? [ 532.962104][ T5934] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 532.973866][ T5934] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 532.993457][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 533.075734][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 533.084988][T10279] FAULT_INJECTION: forcing a failure. [ 533.084988][T10279] name failslab, interval 1, probability 0, space 0, times 0 [ 533.098018][T10279] CPU: 0 UID: 0 PID: 10279 Comm: syz.3.1580 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.098050][T10279] Tainted: [L]=SOFTLOCKUP [ 533.098058][T10279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 533.098071][T10279] Call Trace: [ 533.098079][T10279] [ 533.098087][T10279] dump_stack_lvl+0xe8/0x150 [ 533.098123][T10279] should_fail_ex+0x412/0x560 [ 533.098152][T10279] should_failslab+0xa8/0x100 [ 533.098176][T10279] __kmalloc_cache_noprof+0x88/0x660 [ 533.098209][T10279] ? vhost_task_create+0x123/0x380 [ 533.098239][T10279] vhost_task_create+0x123/0x380 [ 533.098263][T10279] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 533.098287][T10279] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 533.098311][T10279] ? __pfx_vhost_task_create+0x10/0x10 [ 533.098344][T10279] ? __pfx_vhost_task_fn+0x10/0x10 [ 533.098378][T10279] ? __lock_acquire+0x6b5/0x2cf0 [ 533.098415][T10279] kvm_mmu_post_init_vm+0x14c/0x300 [ 533.098442][T10279] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 533.098477][T10279] ? __mutex_trylock_common+0x158/0x260 [ 533.098503][T10279] ? __pfx___mutex_trylock_common+0x10/0x10 [ 533.098544][T10279] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 533.098570][T10279] ? register_lock_class+0x31/0x2e0 [ 533.098604][T10279] ? __lock_acquire+0x6b5/0x2cf0 [ 533.098648][T10279] ? kasan_quarantine_put+0xbb/0x1f0 [ 533.098680][T10279] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 533.098712][T10279] ? do_raw_write_lock+0x11d/0x260 [ 533.098753][T10279] kvm_vcpu_ioctl+0xa62/0xfd0 [ 533.098788][T10279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 533.098808][T10279] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 533.098852][T10279] ? __fget_files+0x2a/0x420 [ 533.098881][T10279] ? __fget_files+0x2a/0x420 [ 533.098907][T10279] ? __fget_files+0x3a0/0x420 [ 533.098932][T10279] ? __fget_files+0x2a/0x420 [ 533.098961][T10279] ? bpf_lsm_file_ioctl+0x9/0x20 [ 533.098982][T10279] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 533.099005][T10279] __se_sys_ioctl+0xfc/0x170 [ 533.099028][T10279] do_syscall_64+0x14d/0xf80 [ 533.099048][T10279] ? trace_irq_disable+0x3b/0x150 [ 533.099072][T10279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.099093][T10279] ? clear_bhb_loop+0x40/0x90 [ 533.099118][T10279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.099138][T10279] RIP: 0033:0x7f50c9d9c799 [ 533.099158][T10279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.099178][T10279] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 533.099199][T10279] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 533.099213][T10279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 533.099225][T10279] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 533.099237][T10279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.099248][T10279] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 533.099281][T10279] [ 533.769680][ T5828] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 533.951209][ T5828] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 533.962980][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.971091][ T5828] usb 5-1: Product: syz [ 533.976187][ T5828] usb 5-1: Manufacturer: syz [ 533.980863][ T5828] usb 5-1: SerialNumber: syz [ 533.995156][ T5828] usb 5-1: config 0 descriptor?? [ 534.174147][T10298] FAULT_INJECTION: forcing a failure. [ 534.174147][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 534.187397][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.3.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.187428][T10298] Tainted: [L]=SOFTLOCKUP [ 534.187436][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.187456][T10298] Call Trace: [ 534.187464][T10298] [ 534.187472][T10298] dump_stack_lvl+0xe8/0x150 [ 534.187505][T10298] should_fail_ex+0x412/0x560 [ 534.187535][T10298] should_failslab+0xa8/0x100 [ 534.187551][T10298] __kmalloc_cache_noprof+0x88/0x660 [ 534.187599][T10298] ? vhost_task_create+0x123/0x380 [ 534.187630][T10298] vhost_task_create+0x123/0x380 [ 534.187653][T10298] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 534.187676][T10298] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 534.187699][T10298] ? __pfx_vhost_task_create+0x10/0x10 [ 534.187722][T10298] ? __pfx_vhost_task_fn+0x10/0x10 [ 534.187762][T10298] ? __lock_acquire+0x6b5/0x2cf0 [ 534.187799][T10298] kvm_mmu_post_init_vm+0x14c/0x300 [ 534.187848][T10298] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 534.187874][T10298] ? __mutex_trylock_common+0x158/0x260 [ 534.187892][T10298] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.187929][T10298] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 534.187955][T10298] ? register_lock_class+0x31/0x2e0 [ 534.187988][T10298] ? __lock_acquire+0x6b5/0x2cf0 [ 534.188023][T10298] ? kasan_quarantine_put+0xbb/0x1f0 [ 534.188046][T10298] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 534.188090][T10298] ? do_raw_write_lock+0x11d/0x260 [ 534.188131][T10298] kvm_vcpu_ioctl+0xa62/0xfd0 [ 534.188162][T10298] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.188177][T10298] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 534.188208][T10298] ? __fget_files+0x2a/0x420 [ 534.188253][T10298] ? __fget_files+0x2a/0x420 [ 534.188277][T10298] ? __fget_files+0x3a0/0x420 [ 534.188318][T10298] ? __fget_files+0x2a/0x420 [ 534.188340][T10298] ? bpf_lsm_file_ioctl+0x9/0x20 [ 534.188354][T10298] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.188371][T10298] __se_sys_ioctl+0xfc/0x170 [ 534.188407][T10298] do_syscall_64+0x14d/0xf80 [ 534.188426][T10298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.188451][T10298] ? clear_bhb_loop+0x40/0x90 [ 534.188479][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.188493][T10298] RIP: 0033:0x7f50c9d9c799 [ 534.188507][T10298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.188519][T10298] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.188552][T10298] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 534.188566][T10298] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 534.188578][T10298] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 534.188589][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.188600][T10298] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 534.188634][T10298] [ 534.235743][ T5828] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 534.671803][T10302] FAULT_INJECTION: forcing a failure. [ 534.671803][T10302] name failslab, interval 1, probability 0, space 0, times 0 [ 534.686323][T10302] CPU: 0 UID: 0 PID: 10302 Comm: syz.3.1590 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.686357][T10302] Tainted: [L]=SOFTLOCKUP [ 534.686365][T10302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.686377][T10302] Call Trace: [ 534.686385][T10302] [ 534.686393][T10302] dump_stack_lvl+0xe8/0x150 [ 534.686440][T10302] should_fail_ex+0x412/0x560 [ 534.686470][T10302] should_failslab+0xa8/0x100 [ 534.686495][T10302] __kmalloc_cache_noprof+0x88/0x660 [ 534.686528][T10302] ? vhost_task_create+0x123/0x380 [ 534.686560][T10302] vhost_task_create+0x123/0x380 [ 534.686585][T10302] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 534.686608][T10302] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 534.686634][T10302] ? __pfx_vhost_task_create+0x10/0x10 [ 534.686667][T10302] ? __pfx_vhost_task_fn+0x10/0x10 [ 534.686701][T10302] ? __lock_acquire+0x6b5/0x2cf0 [ 534.686740][T10302] kvm_mmu_post_init_vm+0x14c/0x300 [ 534.686769][T10302] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 534.686805][T10302] ? __mutex_trylock_common+0x158/0x260 [ 534.686831][T10302] ? __pfx___mutex_trylock_common+0x10/0x10 [ 534.686856][T10302] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 534.686882][T10302] ? register_lock_class+0x31/0x2e0 [ 534.686916][T10302] ? __lock_acquire+0x6b5/0x2cf0 [ 534.686955][T10302] ? kasan_quarantine_put+0xbb/0x1f0 [ 534.686987][T10302] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 534.687018][T10302] ? do_raw_write_lock+0x11d/0x260 [ 534.687061][T10302] kvm_vcpu_ioctl+0xa62/0xfd0 [ 534.687091][T10302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.687111][T10302] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 534.687155][T10302] ? __fget_files+0x2a/0x420 [ 534.687186][T10302] ? __fget_files+0x2a/0x420 [ 534.687211][T10302] ? __fget_files+0x3a0/0x420 [ 534.687237][T10302] ? __fget_files+0x2a/0x420 [ 534.687267][T10302] ? bpf_lsm_file_ioctl+0x9/0x20 [ 534.687288][T10302] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 534.687315][T10302] __se_sys_ioctl+0xfc/0x170 [ 534.687339][T10302] do_syscall_64+0x14d/0xf80 [ 534.687360][T10302] ? trace_irq_disable+0x3b/0x150 [ 534.687383][T10302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.687411][T10302] ? clear_bhb_loop+0x40/0x90 [ 534.687437][T10302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.687458][T10302] RIP: 0033:0x7f50c9d9c799 [ 534.687478][T10302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.687495][T10302] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 534.687516][T10302] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 534.687530][T10302] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 534.687542][T10302] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 534.687565][T10302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.687576][T10302] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 534.687610][T10302] [ 535.297653][ T51] Bluetooth: hci5: command 0x0c1a tx timeout [ 535.361807][T10313] Invalid logical block size (258) [ 535.529981][T10320] syzkaller1: entered allmulticast mode [ 535.606498][ T5982] usb 1-1: USB disconnect, device number 4 [ 535.973656][T10333] openvswitch: netlink: Missing key (keys=40, expected=80) [ 535.982424][ T5934] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 536.007657][T10333] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1603'. [ 536.074780][ T5828] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 536.113694][ T5828] usb 5-1: USB disconnect, device number 33 [ 536.125487][T10335] FAULT_INJECTION: forcing a failure. [ 536.125487][T10335] name failslab, interval 1, probability 0, space 0, times 0 [ 536.147309][T10335] CPU: 0 UID: 0 PID: 10335 Comm: syz.0.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.147343][T10335] Tainted: [L]=SOFTLOCKUP [ 536.147350][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.147363][T10335] Call Trace: [ 536.147371][T10335] [ 536.147379][T10335] dump_stack_lvl+0xe8/0x150 [ 536.147414][T10335] should_fail_ex+0x412/0x560 [ 536.147444][T10335] should_failslab+0xa8/0x100 [ 536.147468][T10335] __kmalloc_cache_noprof+0x88/0x660 [ 536.147501][T10335] ? vhost_task_create+0x123/0x380 [ 536.147532][T10335] vhost_task_create+0x123/0x380 [ 536.147557][T10335] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 536.147580][T10335] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 536.147604][T10335] ? __pfx_vhost_task_create+0x10/0x10 [ 536.147638][T10335] ? __pfx_vhost_task_fn+0x10/0x10 [ 536.147673][T10335] ? __lock_acquire+0x6b5/0x2cf0 [ 536.147710][T10335] kvm_mmu_post_init_vm+0x14c/0x300 [ 536.147743][T10335] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 536.147778][T10335] ? __mutex_trylock_common+0x158/0x260 [ 536.147804][T10335] ? __pfx___mutex_trylock_common+0x10/0x10 [ 536.147835][T10335] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 536.147861][T10335] ? register_lock_class+0x31/0x2e0 [ 536.147895][T10335] ? __lock_acquire+0x6b5/0x2cf0 [ 536.147933][T10335] ? kasan_quarantine_put+0xbb/0x1f0 [ 536.147965][T10335] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 536.147996][T10335] ? do_raw_write_lock+0x11d/0x260 [ 536.148039][T10335] kvm_vcpu_ioctl+0xa62/0xfd0 [ 536.148066][T10335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 536.148086][T10335] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 536.148130][T10335] ? __fget_files+0x2a/0x420 [ 536.148159][T10335] ? __fget_files+0x2a/0x420 [ 536.148185][T10335] ? __fget_files+0x3a0/0x420 [ 536.148209][T10335] ? __fget_files+0x2a/0x420 [ 536.148240][T10335] ? bpf_lsm_file_ioctl+0x9/0x20 [ 536.148260][T10335] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 536.148283][T10335] __se_sys_ioctl+0xfc/0x170 [ 536.148306][T10335] do_syscall_64+0x14d/0xf80 [ 536.148325][T10335] ? trace_irq_disable+0x3b/0x150 [ 536.148348][T10335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.148369][T10335] ? clear_bhb_loop+0x40/0x90 [ 536.148395][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.148415][T10335] RIP: 0033:0x7f9a7519c799 [ 536.148433][T10335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.148451][T10335] RSP: 002b:00007f9a76129028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 536.148472][T10335] RAX: ffffffffffffffda RBX: 00007f9a75415fa0 RCX: 00007f9a7519c799 [ 536.148487][T10335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 536.148498][T10335] RBP: 00007f9a76129090 R08: 0000000000000000 R09: 0000000000000000 [ 536.148510][T10335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 536.148521][T10335] R13: 00007f9a75416038 R14: 00007f9a75415fa0 R15: 00007ffec1171a98 [ 536.148555][T10335] [ 536.470891][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 536.502082][ T5934] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 536.512434][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.547124][ T5934] usb 4-1: Product: syz [ 536.552910][ T5934] usb 4-1: Manufacturer: syz [ 536.557604][ T5934] usb 4-1: SerialNumber: syz [ 536.566608][ T5934] usb 4-1: config 0 descriptor?? [ 536.577375][ T5934] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 536.590039][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 536.599230][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.609635][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 536.618771][ T5934] usb 4-1: media controller created [ 536.637187][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.796210][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 536.844709][ T5934] DVB: Unable to find symbol mt352_attach() [ 536.850768][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 536.935221][ T5982] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 536.986376][ T5934] rc_core: IR keymap rc-dvico-portable not found [ 536.996177][ T5934] Registered IR keymap rc-empty [ 537.003812][ T5934] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 537.029372][ T5934] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input32 [ 537.043463][ T5934] dvb-usb: schedule remote query interval to 100 msecs. [ 537.051531][ T5934] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 537.069014][ T5934] usb 4-1: USB disconnect, device number 80 [ 537.114284][ T5982] usb 1-1: Using ep0 maxpacket: 32 [ 537.138502][ T5982] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 537.149239][ T5982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.164695][ T5982] usb 1-1: config 0 has no interface number 0 [ 537.171999][ T5982] usb 1-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.188682][ T5982] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 537.199240][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.207431][ T5828] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 537.215249][ T5982] usb 1-1: Product: syz [ 537.219471][ T5982] usb 1-1: Manufacturer: syz [ 537.224398][ T5982] usb 1-1: SerialNumber: syz [ 537.237523][ T5982] usb 1-1: config 0 descriptor?? [ 537.251888][ T5982] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 537.280358][ T5982] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 537.291994][ T5934] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 537.384584][ T5828] usb 3-1: unable to get BOS descriptor or descriptor too short [ 537.397524][ T5828] usb 3-1: config 212 has an invalid interface number: 134 but max is 0 [ 537.408186][ T5828] usb 3-1: config 212 has no interface number 0 [ 537.417321][ T5828] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 537.426559][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.434610][ T5828] usb 3-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 537.448985][ T5828] usb 3-1: Manufacturer: 㐉 [ 537.454633][ T5828] usb 3-1: SerialNumber: Ы [ 537.690471][ T5828] usb 3-1: USB disconnect, device number 85 [ 538.065347][ T5828] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 538.140360][ T29] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 538.247162][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 538.256772][ T5828] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 538.266957][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.277486][ T5828] usb 4-1: config 0 descriptor?? [ 538.288626][ T5828] gspca_main: sunplus-2.14.0 probing 041e:400b [ 538.302436][ T29] usb 5-1: config 0 has an invalid interface number: 33 but max is 0 [ 538.321932][ T29] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.344682][ T29] usb 5-1: config 0 has no interface number 0 [ 538.351086][ T29] usb 5-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 538.363645][ T29] usb 5-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 538.381714][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 538.391678][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.400211][ T29] usb 5-1: Product: syz [ 538.404588][ T29] usb 5-1: Manufacturer: syz [ 538.410117][ T29] usb 5-1: SerialNumber: syz [ 538.419751][ T29] usb 5-1: config 0 descriptor?? [ 538.425916][T10367] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 538.442132][ T29] hdpvr 5-1:0.33: Could not find bulk-in endpoint [ 538.448829][ T29] hdpvr 5-1:0.33: probe with driver hdpvr failed with error -12 [ 538.667212][T10367] FAULT_INJECTION: forcing a failure. [ 538.667212][T10367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.680444][T10367] CPU: 0 UID: 0 PID: 10367 Comm: syz.4.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.680477][T10367] Tainted: [L]=SOFTLOCKUP [ 538.680484][T10367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 538.680496][T10367] Call Trace: [ 538.680506][T10367] [ 538.680521][T10367] dump_stack_lvl+0xe8/0x150 [ 538.680555][T10367] should_fail_ex+0x412/0x560 [ 538.680595][T10367] __kvm_write_guest_page+0x1a6/0x2d0 [ 538.680627][T10367] kvm_vcpu_write_guest+0xa6/0x1b0 [ 538.680655][T10367] emulator_write_guest+0x2f/0x80 [ 538.680687][T10367] emulator_read_write_onepage+0x639/0xa40 [ 538.680712][T10367] emulator_read_write+0x2e8/0x730 [ 538.680750][T10367] writeback+0x8a2/0xd10 [ 538.680782][T10367] x86_emulate_insn+0x23da/0x43d0 [ 538.680823][T10367] ? __pfx_x86_emulate_insn+0x10/0x10 [ 538.680849][T10367] ? __pfx_vmx_vcpu_pi_load+0x10/0x10 [ 538.680872][T10367] ? __kernel_text_address+0xd/0x30 [ 538.680897][T10367] ? unwind_get_return_address+0x4d/0x90 [ 538.680923][T10367] x86_emulate_instruction+0xef0/0x2100 [ 538.680965][T10367] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 538.680992][T10367] ? fpu_swap_kvm_fpstate+0xc1/0x4f0 [ 538.681017][T10367] ? rcu_is_watching+0x15/0xb0 [ 538.681032][T10367] ? __pfx_complete_emulated_pio+0x10/0x10 [ 538.681067][T10367] kvm_arch_vcpu_ioctl_run+0x17f7/0x20d0 [ 538.681109][T10367] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 538.681134][T10367] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 538.681163][T10367] ? rcu_is_watching+0x15/0xb0 [ 538.681177][T10367] ? trace_contention_end+0x3d/0x150 [ 538.681196][T10367] ? __mutex_lock+0x320/0x1420 [ 538.681237][T10367] ? kasan_quarantine_put+0xbb/0x1f0 [ 538.681271][T10367] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 538.681296][T10367] ? __pfx___mutex_lock+0x10/0x10 [ 538.681321][T10367] ? tomoyo_path_number_perm+0x219/0x630 [ 538.681343][T10367] ? do_vfs_ioctl+0x1166/0x1530 [ 538.681361][T10367] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 538.681399][T10367] kvm_vcpu_ioctl+0xa62/0xfd0 [ 538.681428][T10367] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 538.681447][T10367] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 538.681487][T10367] ? __fget_files+0x2a/0x420 [ 538.681509][T10367] ? __fget_files+0x2a/0x420 [ 538.681550][T10367] ? __fget_files+0x3a0/0x420 [ 538.681576][T10367] ? __fget_files+0x2a/0x420 [ 538.681604][T10367] ? bpf_lsm_file_ioctl+0x9/0x20 [ 538.681630][T10367] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 538.681646][T10367] __se_sys_ioctl+0xfc/0x170 [ 538.681663][T10367] do_syscall_64+0x14d/0xf80 [ 538.681677][T10367] ? trace_irq_disable+0x3b/0x150 [ 538.681715][T10367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.681736][T10367] ? clear_bhb_loop+0x40/0x90 [ 538.681760][T10367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.681786][T10367] RIP: 0033:0x7f481d19c799 [ 538.681801][T10367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.681813][T10367] RSP: 002b:00007f481df9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 538.681829][T10367] RAX: ffffffffffffffda RBX: 00007f481d415fa0 RCX: 00007f481d19c799 [ 538.681855][T10367] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 538.681867][T10367] RBP: 00007f481df9a090 R08: 0000000000000000 R09: 0000000000000000 [ 538.681879][T10367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.681890][T10367] R13: 00007f481d416038 R14: 00007f481d415fa0 R15: 00007ffef8033928 [ 538.681920][T10367] [ 539.082774][ T5982] usb 5-1: USB disconnect, device number 34 [ 539.176686][ T5884] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 539.270607][ T5828] gspca_sunplus: reg_r err -32 [ 539.282367][ T5828] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 539.296923][ T5828] usb 4-1: USB disconnect, device number 81 [ 539.340182][ T5884] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 539.348456][ T5884] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 539.358829][ T5884] usb 3-1: config 0 interface 0 has no altsetting 0 [ 539.368146][ T5884] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 539.377419][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 539.385780][ T5884] usb 3-1: Product: syz [ 539.390002][ T5884] usb 3-1: Manufacturer: syz [ 539.394839][ T5884] usb 3-1: SerialNumber: syz [ 539.404558][ T5884] usb 3-1: config 0 descriptor?? [ 539.412434][ T5884] hub 3-1:0.0: bad descriptor, ignoring hub [ 539.418555][ T5884] hub 3-1:0.0: probe with driver hub failed with error -5 [ 539.430952][ T5884] usb 3-1: selecting invalid altsetting 0 [ 539.627333][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.649124][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.658216][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.669184][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.912617][ T5828] usb 1-1: USB disconnect, device number 5 [ 540.015913][T10381] comedi comedi0: pcl724: I/O port conflict (0x9,4) [ 540.064733][ T5982] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 540.211507][T10390] FAULT_INJECTION: forcing a failure. [ 540.211507][T10390] name failslab, interval 1, probability 0, space 0, times 0 [ 540.227053][T10390] CPU: 1 UID: 0 PID: 10390 Comm: syz.3.1626 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.227076][T10390] Tainted: [L]=SOFTLOCKUP [ 540.227109][T10390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.227121][T10390] Call Trace: [ 540.227128][T10390] [ 540.227137][T10390] dump_stack_lvl+0xe8/0x150 [ 540.227172][T10390] should_fail_ex+0x412/0x560 [ 540.227203][T10390] should_failslab+0xa8/0x100 [ 540.227220][T10390] __kmalloc_noprof+0xe8/0x760 [ 540.227242][T10390] ? tomoyo_encode+0x28b/0x550 [ 540.227268][T10390] tomoyo_encode+0x28b/0x550 [ 540.227293][T10390] tomoyo_realpath_from_path+0x58d/0x5d0 [ 540.227342][T10390] ? tomoyo_path_number_perm+0x219/0x630 [ 540.227362][T10390] tomoyo_path_number_perm+0x246/0x630 [ 540.227383][T10390] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 540.227405][T10390] ? __lock_acquire+0x6b5/0x2cf0 [ 540.227441][T10390] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 540.227471][T10390] ? __fget_files+0x2a/0x420 [ 540.227493][T10390] ? __fget_files+0x2a/0x420 [ 540.227511][T10390] ? __fget_files+0x3a0/0x420 [ 540.227533][T10390] ? __fget_files+0x2a/0x420 [ 540.227555][T10390] security_file_ioctl+0xc3/0x2a0 [ 540.227575][T10390] __se_sys_ioctl+0x47/0x170 [ 540.227592][T10390] do_syscall_64+0x14d/0xf80 [ 540.227606][T10390] ? trace_irq_disable+0x3b/0x150 [ 540.227624][T10390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.227662][T10390] ? clear_bhb_loop+0x40/0x90 [ 540.227686][T10390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.227711][T10390] RIP: 0033:0x7f50c9d9c799 [ 540.227725][T10390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.227738][T10390] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.227753][T10390] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 540.227763][T10390] RDX: 00002000000004c0 RSI: 0000000000004b72 RDI: 0000000000000003 [ 540.227773][T10390] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 540.227781][T10390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.227790][T10390] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 540.227812][T10390] [ 540.228330][T10390] ERROR: Out of memory at tomoyo_realpath_from_path. [ 540.463563][ T5982] usb 5-1: Using ep0 maxpacket: 8 [ 540.473146][ T5982] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 540.482594][ T5982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.500352][ T5982] pvrusb2: Hardware description: Terratec Grabster AV400 [ 540.508162][ T5982] pvrusb2: ********** [ 540.512270][ T5982] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 540.524821][ T5982] pvrusb2: Important functionality might not be entirely working. [ 540.533062][ T5982] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 540.544855][ T5982] pvrusb2: ********** [ 540.596671][T10392] FAULT_INJECTION: forcing a failure. [ 540.596671][T10392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.610556][T10392] CPU: 1 UID: 0 PID: 10392 Comm: syz.3.1627 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.610591][T10392] Tainted: [L]=SOFTLOCKUP [ 540.610598][T10392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.610610][T10392] Call Trace: [ 540.610617][T10392] [ 540.610625][T10392] dump_stack_lvl+0xe8/0x150 [ 540.610661][T10392] should_fail_ex+0x412/0x560 [ 540.610690][T10392] _copy_to_user+0x31/0xb0 [ 540.610718][T10392] simple_read_from_buffer+0xe1/0x170 [ 540.610749][T10392] proc_fail_nth_read+0x1bb/0x230 [ 540.610779][T10392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.610808][T10392] ? rw_verify_area+0x2a6/0x4d0 [ 540.610837][T10392] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 540.610864][T10392] vfs_read+0x20c/0xa70 [ 540.610900][T10392] ? fdget_pos+0x246/0x320 [ 540.610931][T10392] ? __pfx___mutex_lock+0x10/0x10 [ 540.610954][T10392] ? __pfx_vfs_read+0x10/0x10 [ 540.610985][T10392] ? __fget_files+0x2a/0x420 [ 540.611015][T10392] ? __fget_files+0x3a0/0x420 [ 540.611039][T10392] ? __fget_files+0x2a/0x420 [ 540.611074][T10392] ksys_read+0x150/0x270 [ 540.611096][T10392] ? __pfx_ksys_read+0x10/0x10 [ 540.611114][T10392] ? __pfx_sock_ioctl+0x10/0x10 [ 540.611150][T10392] do_syscall_64+0x14d/0xf80 [ 540.611169][T10392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.611189][T10392] ? clear_bhb_loop+0x40/0x90 [ 540.611213][T10392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.611233][T10392] RIP: 0033:0x7f50c9d5cfce [ 540.611252][T10392] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 540.611269][T10392] RSP: 002b:00007f50cabaffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 540.611290][T10392] RAX: ffffffffffffffda RBX: 00007f50cabb06c0 RCX: 00007f50c9d5cfce [ 540.611304][T10392] RDX: 000000000000000f RSI: 00007f50cabb00a0 RDI: 0000000000000006 [ 540.611316][T10392] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 540.611329][T10392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.611340][T10392] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 540.611372][T10392] [ 540.836581][ T5828] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 540.915806][T10379] serio: Serial port ttyS3 [ 540.990441][ T2365] pvrusb2: Invalid write control endpoint [ 541.046171][ T2365] pvrusb2: Invalid write control endpoint [ 541.050298][ T5828] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 541.062067][ T5828] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.063753][ T2365] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 541.072752][ T5828] usb 1-1: config 0 has no interface number 0 [ 541.072802][ T5828] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 541.072827][ T5828] usb 1-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 541.120717][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 541.133453][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.141760][ T5828] usb 1-1: Product: syz [ 541.149292][ T5828] usb 1-1: Manufacturer: syz [ 541.154309][ T5828] usb 1-1: SerialNumber: syz [ 541.159888][ T2365] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 541.172824][ T5828] usb 1-1: config 0 descriptor?? [ 541.187016][ T2365] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 541.212789][T10386] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 541.221875][ T2365] pvrusb2: Device being rendered inoperable [ 541.232517][ T5828] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 541.244820][ T5828] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 541.255639][T10379] pvrusb2: Attempted to execute control transfer when device not ok [ 541.266451][ T2365] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 541.273867][ T2365] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 541.288399][ T2365] pvrusb2: Attached sub-driver cx25840 [ 541.299469][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 541.310239][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 541.459158][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.474839][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 541.503129][ T5884] usb 1-1: USB disconnect, device number 6 [ 541.635610][ T5941] usb 5-1: USB disconnect, device number 35 [ 541.987897][ T5884] usb 3-1: reset high-speed USB device number 86 using dummy_hcd [ 542.000625][ T5884] usb 3-1: device reset changed ep0 maxpacket size! [ 542.014775][ T5884] usb 3-1: USB disconnect, device number 86 [ 542.361198][ T5884] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 542.382951][ T5982] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 542.434412][T10423] fuse: Bad value for 'fd' [ 542.532170][ T5884] usb 3-1: Using ep0 maxpacket: 32 [ 542.545998][ T5884] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 542.566684][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.587326][ T5982] usb 1-1: Using ep0 maxpacket: 32 [ 542.597164][ T5884] usb 3-1: config 0 descriptor?? [ 542.605484][ T5982] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 542.624493][ T5982] usb 1-1: config 0 has no interface number 0 [ 542.631361][ T5982] usb 1-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 542.635092][ T5884] gspca_main: sunplus-2.14.0 probing 041e:400b [ 542.650507][ T5982] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 542.665985][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.675558][ T5982] usb 1-1: Product: syz [ 542.679804][ T5982] usb 1-1: Manufacturer: syz [ 542.684608][ T5982] usb 1-1: SerialNumber: syz [ 542.701517][ T5982] usb 1-1: config 0 descriptor?? [ 542.733747][ T5982] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 542.756016][ T5982] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 543.540153][ T5884] gspca_sunplus: reg_r err -32 [ 543.545085][ T5884] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 543.556564][ T5884] usb 3-1: USB disconnect, device number 87 [ 543.562967][ T5934] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 543.612405][ T5941] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 543.752809][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 543.764036][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 543.778608][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 543.790051][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 543.804137][ T5934] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 543.813411][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.821562][ T5934] usb 5-1: Product: syz [ 543.826231][ T5934] usb 5-1: Manufacturer: syz [ 543.830950][ T5934] usb 5-1: SerialNumber: syz [ 543.835838][ T5941] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 543.845234][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.855894][ T5941] usb 4-1: Product: syz [ 543.861155][ T5934] usb 5-1: config 0 descriptor?? [ 543.866208][ T5941] usb 4-1: Manufacturer: syz [ 543.871207][ T5941] usb 4-1: SerialNumber: syz [ 543.879895][ T5934] hub 5-1:0.0: bad descriptor, ignoring hub [ 543.887227][ T5934] hub 5-1:0.0: probe with driver hub failed with error -5 [ 543.896513][ T5941] usb 4-1: config 0 descriptor?? [ 543.904458][ T5941] hub 4-1:0.0: bad descriptor, ignoring hub [ 543.914881][ T5934] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 543.924204][ T5941] hub 4-1:0.0: probe with driver hub failed with error -5 [ 543.945961][ T5941] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 544.091607][T10431] FAULT_INJECTION: forcing a failure. [ 544.091607][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 544.107962][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.4.1637 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.107994][T10431] Tainted: [L]=SOFTLOCKUP [ 544.108002][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.108013][T10431] Call Trace: [ 544.108022][T10431] [ 544.108030][T10431] dump_stack_lvl+0xe8/0x150 [ 544.108069][T10431] should_fail_ex+0x412/0x560 [ 544.108090][T10431] should_failslab+0xa8/0x100 [ 544.108107][T10431] ? security_file_alloc+0x34/0x310 [ 544.108126][T10431] kmem_cache_alloc_noprof+0x87/0x650 [ 544.108150][T10431] ? rcu_is_watching+0x15/0xb0 [ 544.108165][T10431] ? trace_kmem_cache_alloc+0x29/0xf0 [ 544.108188][T10431] security_file_alloc+0x34/0x310 [ 544.108207][T10431] init_file+0x90/0x2b0 [ 544.108227][T10431] alloc_empty_file+0x6e/0x1d0 [ 544.108246][T10431] path_openat+0x10f/0x3860 [ 544.108259][T10431] ? arch_stack_walk+0xfb/0x150 [ 544.108280][T10431] ? do_getname+0x2e/0x250 [ 544.108297][T10431] ? stack_trace_save+0xa9/0x100 [ 544.108315][T10431] ? __pfx_stack_trace_save+0x10/0x10 [ 544.108333][T10431] ? do_getname+0x2e/0x250 [ 544.108350][T10431] ? stack_depot_save_flags+0x33/0x810 [ 544.108369][T10431] ? do_getname+0x2e/0x250 [ 544.108386][T10431] ? kasan_save_track+0x4f/0x80 [ 544.108407][T10431] ? kasan_save_track+0x3e/0x80 [ 544.108427][T10431] ? __kasan_slab_alloc+0x6c/0x80 [ 544.108440][T10431] ? __pfx_path_openat+0x10/0x10 [ 544.108452][T10431] ? __x64_sys_openat+0x138/0x170 [ 544.108470][T10431] ? do_syscall_64+0x14d/0xf80 [ 544.108484][T10431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.108528][T10431] ? __lock_acquire+0x6b5/0x2cf0 [ 544.108569][T10431] do_file_open+0x23e/0x4a0 [ 544.108586][T10431] ? __pfx_do_file_open+0x10/0x10 [ 544.108614][T10431] ? _raw_spin_unlock+0x28/0x50 [ 544.108640][T10431] ? alloc_fd+0x64b/0x6c0 [ 544.108666][T10431] do_sys_openat2+0x113/0x200 [ 544.108687][T10431] ? __pfx_do_sys_openat2+0x10/0x10 [ 544.108707][T10431] ? ksys_write+0x242/0x270 [ 544.108722][T10431] ? __pfx_ksys_write+0x10/0x10 [ 544.108739][T10431] __x64_sys_openat+0x138/0x170 [ 544.108762][T10431] do_syscall_64+0x14d/0xf80 [ 544.108775][T10431] ? trace_irq_disable+0x3b/0x150 [ 544.108793][T10431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.108808][T10431] ? clear_bhb_loop+0x40/0x90 [ 544.108826][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.108841][T10431] RIP: 0033:0x7f481d19c799 [ 544.108856][T10431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.108869][T10431] RSP: 002b:00007f481df9a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 544.108885][T10431] RAX: ffffffffffffffda RBX: 00007f481d415fa0 RCX: 00007f481d19c799 [ 544.108896][T10431] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 544.108906][T10431] RBP: 00007f481df9a090 R08: 0000000000000000 R09: 0000000000000000 [ 544.108915][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.108924][T10431] R13: 00007f481d416038 R14: 00007f481d415fa0 R15: 00007ffef8033928 [ 544.108946][T10431] [ 544.558755][T10436] FAULT_INJECTION: forcing a failure. [ 544.558755][T10436] name failslab, interval 1, probability 0, space 0, times 0 [ 544.572075][T10436] CPU: 1 UID: 0 PID: 10436 Comm: syz.2.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 544.572108][T10436] Tainted: [L]=SOFTLOCKUP [ 544.572115][T10436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 544.572136][T10436] Call Trace: [ 544.572144][T10436] [ 544.572152][T10436] dump_stack_lvl+0xe8/0x150 [ 544.572193][T10436] should_fail_ex+0x412/0x560 [ 544.572222][T10436] should_failslab+0xa8/0x100 [ 544.572243][T10436] ? do_getname+0x2e/0x250 [ 544.572266][T10436] kmem_cache_alloc_noprof+0x87/0x650 [ 544.572303][T10436] do_getname+0x2e/0x250 [ 544.572324][T10436] ? getname_flags+0x11/0x20 [ 544.572348][T10436] path_setxattrat+0x32d/0x440 [ 544.572376][T10436] ? __pfx_path_setxattrat+0x10/0x10 [ 544.572394][T10436] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 544.572440][T10436] ? ksys_write+0x242/0x270 [ 544.572462][T10436] ? __pfx_ksys_write+0x10/0x10 [ 544.572486][T10436] __x64_sys_lsetxattr+0xbf/0xe0 [ 544.572517][T10436] do_syscall_64+0x14d/0xf80 [ 544.572538][T10436] ? trace_irq_disable+0x3b/0x150 [ 544.572561][T10436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.572582][T10436] ? clear_bhb_loop+0x40/0x90 [ 544.572606][T10436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.572626][T10436] RIP: 0033:0x7f231559c799 [ 544.572645][T10436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.572662][T10436] RSP: 002b:00007f23164f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 544.572684][T10436] RAX: ffffffffffffffda RBX: 00007f2315815fa0 RCX: 00007f231559c799 [ 544.572698][T10436] RDX: 0000200000000680 RSI: 00002000000002c0 RDI: 0000200000000280 [ 544.572711][T10436] RBP: 00007f23164f0090 R08: 0000000000000002 R09: 0000000000000000 [ 544.572722][T10436] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 544.572734][T10436] R13: 00007f2315816038 R14: 00007f2315815fa0 R15: 00007ffd5d4a34b8 [ 544.572765][T10436] [ 545.096778][ T5934] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 545.270431][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 52, changing to 4 [ 545.281714][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 13368, setting to 1023 [ 545.295312][ T5934] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 545.304722][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.312805][ T5934] usb 3-1: Product: syz [ 545.316987][ T5934] usb 3-1: Manufacturer: syz [ 545.321657][ T5934] usb 3-1: SerialNumber: syz [ 545.329309][ T5934] usb 3-1: config 0 descriptor?? [ 545.342789][ T5934] hub 3-1:0.0: bad descriptor, ignoring hub [ 545.348791][ T5934] hub 3-1:0.0: probe with driver hub failed with error -5 [ 545.360575][ T5934] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input37 [ 545.373197][ T809] usb 1-1: USB disconnect, device number 7 [ 545.521565][ T5941] usb 5-1: USB disconnect, device number 36 [ 545.661595][ T5934] input: failed to attach handler mousedev to device input37, error: -5 [ 545.676167][ T29] usb 4-1: USB disconnect, device number 82 [ 545.759376][ T809] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 545.919624][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 545.927126][ T809] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 545.935797][ T809] usb 1-1: config 0 has no interface number 0 [ 545.942254][ T809] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 545.955590][ T809] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 545.967373][ T809] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 545.978515][ T809] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 545.992546][ T809] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 546.001710][ T809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.012564][ T809] usb 1-1: config 0 descriptor?? [ 546.024395][ T809] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 546.456024][T10446] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4096 (8192 ns) > initial count (1022 ns). Using initial count to start timer. [ 547.011263][ T5941] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 547.183913][ T5941] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 547.192874][ T5941] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 547.203026][ T5941] usb 5-1: config 0 interface 0 has no altsetting 0 [ 547.212404][ T5941] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 547.221790][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 547.224316][ T29] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 547.230071][ T5941] usb 5-1: Product: syz [ 547.230093][ T5941] usb 5-1: Manufacturer: syz [ 547.230108][ T5941] usb 5-1: SerialNumber: syz [ 547.248693][ T5941] usb 5-1: config 0 descriptor?? [ 547.265834][ T5941] hub 5-1:0.0: bad descriptor, ignoring hub [ 547.273396][ T5941] hub 5-1:0.0: probe with driver hub failed with error -5 [ 547.285729][ T5941] usb 5-1: selecting invalid altsetting 0 [ 547.394873][ T29] usb 4-1: device descriptor read/64, error -71 [ 547.619107][ T5941] usb 5-1: USB disconnect, device number 37 [ 547.662122][ T29] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 547.665713][ T5934] usb 3-1: USB disconnect, device number 88 [ 547.811206][ T29] usb 4-1: device descriptor read/64, error -71 [ 547.876258][ T5934] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 547.928929][ T29] usb usb4-port1: attempt power cycle [ 548.070820][ T5934] usb 3-1: unable to get BOS descriptor or descriptor too short [ 548.080394][ T5934] usb 3-1: config 212 has an invalid interface number: 134 but max is 0 [ 548.089353][ T5934] usb 3-1: config 212 has no interface number 0 [ 548.098862][ T5934] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 548.108174][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.118629][ T5934] usb 3-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 548.135828][ T5934] usb 3-1: Manufacturer: 㐉 [ 548.140503][ T5934] usb 3-1: SerialNumber: Ы [ 548.292377][ T29] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 548.335426][ T29] usb 4-1: device descriptor read/8, error -71 [ 548.392744][ T5934] usb 3-1: USB disconnect, device number 89 [ 548.465089][ T5941] usb 1-1: USB disconnect, device number 8 [ 548.489364][ T5941] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 548.555333][T10465] netlink: 'syz.4.1649': attribute type 10 has an invalid length. [ 548.584841][T10465] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 548.591494][ T29] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 548.624160][ T29] usb 4-1: device descriptor read/8, error -71 [ 548.753620][ T29] usb usb4-port1: unable to enumerate USB device [ 548.890467][ T29] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 548.987283][ T5941] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 549.029674][ T29] usb 4-1: device descriptor read/64, error -71 [ 549.120351][T10473] FAT-fs (nullb0): bogus number of reserved sectors [ 549.129015][T10473] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 549.169056][ T5941] usb 5-1: Using ep0 maxpacket: 32 [ 549.183340][ T5941] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 549.196917][T10476] FAULT_INJECTION: forcing a failure. [ 549.196917][T10476] name failslab, interval 1, probability 0, space 0, times 0 [ 549.213720][ T5941] usb 5-1: config 0 has no interface number 0 [ 549.219992][ T5941] usb 5-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 549.232064][T10476] CPU: 1 UID: 0 PID: 10476 Comm: syz.0.1654 Tainted: G L syzkaller #0 PREEMPT(full) [ 549.232116][T10476] Tainted: [L]=SOFTLOCKUP [ 549.232123][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 549.232159][T10476] Call Trace: [ 549.232167][T10476] [ 549.232175][T10476] dump_stack_lvl+0xe8/0x150 [ 549.232209][T10476] should_fail_ex+0x412/0x560 [ 549.232246][T10476] should_failslab+0xa8/0x100 [ 549.232270][T10476] __kmalloc_noprof+0xe8/0x760 [ 549.232301][T10476] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 549.232333][T10476] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 549.232367][T10476] genl_family_rcv_msg_doit+0xd9/0x330 [ 549.232399][T10476] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 549.232438][T10476] ? apparmor_capable+0x126/0x170 [ 549.232463][T10476] ? bpf_lsm_capable+0x9/0x20 [ 549.232485][T10476] ? security_capable+0x7e/0x2c0 [ 549.232521][T10476] genl_rcv_msg+0x61c/0x7a0 [ 549.232554][T10476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.232578][T10476] ? __pfx_hwsim_del_radio_nl+0x10/0x10 [ 549.232604][T10476] ? __lock_acquire+0x6b5/0x2cf0 [ 549.232670][T10476] netlink_rcv_skb+0x232/0x4b0 [ 549.232704][T10476] ? __pfx_genl_rcv_msg+0x10/0x10 [ 549.232730][T10476] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 549.232779][T10476] ? down_read+0x270/0x2e0 [ 549.232800][T10476] ? genl_rcv+0xd/0x40 [ 549.232825][T10476] genl_rcv+0x28/0x40 [ 549.232847][T10476] netlink_unicast+0x80f/0x9b0 [ 549.232885][T10476] ? __pfx_netlink_unicast+0x10/0x10 [ 549.232917][T10476] ? netlink_sendmsg+0x650/0xb40 [ 549.232935][T10476] ? skb_put+0x11b/0x210 [ 549.232961][T10476] netlink_sendmsg+0x813/0xb40 [ 549.232992][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.233015][T10476] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 549.233057][T10476] ? __pfx_netlink_sendmsg+0x10/0x10 [ 549.233077][T10476] sock_sendmsg_nosec+0x112/0x150 [ 549.233110][T10476] ____sys_sendmsg+0x589/0x8c0 [ 549.233143][T10476] ? __pfx_____sys_sendmsg+0x10/0x10 [ 549.233178][T10476] ? import_iovec+0x73/0xa0 [ 549.233208][T10476] ___sys_sendmsg+0x2a5/0x360 [ 549.233246][T10476] ? __pfx____sys_sendmsg+0x10/0x10 [ 549.233306][T10476] ? __fget_files+0x2a/0x420 [ 549.233333][T10476] ? __fget_files+0x3a0/0x420 [ 549.233370][T10476] __x64_sys_sendmsg+0x1bd/0x2a0 [ 549.233397][T10476] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 549.233432][T10476] ? __pfx_ksys_write+0x10/0x10 [ 549.233463][T10476] do_syscall_64+0x14d/0xf80 [ 549.233482][T10476] ? trace_irq_disable+0x3b/0x150 [ 549.233506][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.233527][T10476] ? clear_bhb_loop+0x40/0x90 [ 549.233553][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.233571][T10476] RIP: 0033:0x7f9a7519c799 [ 549.233590][T10476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 549.233607][T10476] RSP: 002b:00007f9a76129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 549.233630][T10476] RAX: ffffffffffffffda RBX: 00007f9a75415fa0 RCX: 00007f9a7519c799 [ 549.233644][T10476] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 549.233656][T10476] RBP: 00007f9a76129090 R08: 0000000000000000 R09: 0000000000000000 [ 549.233669][T10476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 549.233681][T10476] R13: 00007f9a75416038 R14: 00007f9a75415fa0 R15: 00007ffec1171a98 [ 549.233714][T10476] [ 549.236110][ T5941] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 549.350009][ T29] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 549.622681][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.641363][ T5941] usb 5-1: Product: syz [ 549.660388][ T5941] usb 5-1: Manufacturer: syz [ 549.668989][ T5941] usb 5-1: SerialNumber: syz [ 549.678366][ T5941] usb 5-1: config 0 descriptor?? [ 549.689864][ T5941] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 549.701575][ T5941] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 549.736786][ T29] usb 4-1: device descriptor read/64, error -71 [ 549.864378][ T29] usb usb4-port1: attempt power cycle [ 550.153843][T10492] FAULT_INJECTION: forcing a failure. [ 550.153843][T10492] name failslab, interval 1, probability 0, space 0, times 0 [ 550.167273][T10492] CPU: 1 UID: 0 PID: 10492 Comm: syz.3.1661 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.167305][T10492] Tainted: [L]=SOFTLOCKUP [ 550.167312][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.167324][T10492] Call Trace: [ 550.167331][T10492] [ 550.167339][T10492] dump_stack_lvl+0xe8/0x150 [ 550.167372][T10492] should_fail_ex+0x412/0x560 [ 550.167399][T10492] should_failslab+0xa8/0x100 [ 550.167422][T10492] __kmalloc_cache_noprof+0x88/0x660 [ 550.167450][T10492] ? kfree+0x1c5/0x650 [ 550.167474][T10492] ? tomoyo_path_number_perm+0x501/0x630 [ 550.167499][T10492] ? drm_atomic_state_alloc+0xa9/0x100 [ 550.167610][T10492] ? do_syscall_64+0x14d/0xf80 [ 550.167628][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.167652][T10492] drm_atomic_state_alloc+0xa9/0x100 [ 550.167682][T10492] drm_mode_atomic_ioctl+0x4ab/0xdd0 [ 550.167707][T10492] ? __lock_acquire+0x6b5/0x2cf0 [ 550.167744][T10492] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 550.167787][T10492] ? do_raw_spin_unlock+0xf5/0x210 [ 550.167814][T10492] ? _raw_spin_unlock+0x28/0x50 [ 550.167840][T10492] ? drm_is_current_master+0x19f/0x200 [ 550.167866][T10492] drm_ioctl_kernel+0x2df/0x3b0 [ 550.167947][T10492] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 550.167969][T10492] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 550.168006][T10492] drm_ioctl+0x6ba/0xb80 [ 550.168040][T10492] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 550.168066][T10492] ? __pfx_drm_ioctl+0x10/0x10 [ 550.168114][T10492] ? __fget_files+0x2a/0x420 [ 550.168140][T10492] ? bpf_lsm_file_ioctl+0x9/0x20 [ 550.168157][T10492] ? __pfx_drm_ioctl+0x10/0x10 [ 550.168182][T10492] __se_sys_ioctl+0xfc/0x170 [ 550.168202][T10492] do_syscall_64+0x14d/0xf80 [ 550.168218][T10492] ? trace_irq_disable+0x3b/0x150 [ 550.168238][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.168258][T10492] ? clear_bhb_loop+0x40/0x90 [ 550.168280][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.168299][T10492] RIP: 0033:0x7f50c9d9c799 [ 550.168316][T10492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.168331][T10492] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 550.168351][T10492] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 550.168365][T10492] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 550.168377][T10492] RBP: 00007f50cabb0090 R08: 0000000000000000 R09: 0000000000000000 [ 550.168389][T10492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.168399][T10492] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 550.168428][T10492] [ 550.890703][T10501] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1663'. [ 550.922310][T10501] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 551.114459][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 551.134076][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1664'. [ 551.951841][ T5934] usb 5-1: USB disconnect, device number 38 [ 552.104353][T10520] FAULT_INJECTION: forcing a failure. [ 552.104353][T10520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.145873][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.4.1671 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.145909][T10520] Tainted: [L]=SOFTLOCKUP [ 552.145917][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.145928][T10520] Call Trace: [ 552.145943][T10520] [ 552.145952][T10520] dump_stack_lvl+0xe8/0x150 [ 552.145989][T10520] should_fail_ex+0x412/0x560 [ 552.146018][T10520] _copy_from_user+0x2d/0xb0 [ 552.146046][T10520] ___sys_sendmsg+0x1c6/0x360 [ 552.146077][T10520] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.146137][T10520] ? __fget_files+0x2a/0x420 [ 552.146164][T10520] ? __fget_files+0x3a0/0x420 [ 552.146201][T10520] __x64_sys_sendmsg+0x1bd/0x2a0 [ 552.146228][T10520] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 552.146262][T10520] ? __pfx_ksys_write+0x10/0x10 [ 552.146293][T10520] do_syscall_64+0x14d/0xf80 [ 552.146315][T10520] ? trace_irq_disable+0x3b/0x150 [ 552.146339][T10520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.146359][T10520] ? clear_bhb_loop+0x40/0x90 [ 552.146384][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.146405][T10520] RIP: 0033:0x7f481d19c799 [ 552.146425][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.146442][T10520] RSP: 002b:00007f481df9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 552.146464][T10520] RAX: ffffffffffffffda RBX: 00007f481d415fa0 RCX: 00007f481d19c799 [ 552.146480][T10520] RDX: 0000000004008054 RSI: 0000200000000200 RDI: 0000000000000005 [ 552.146493][T10520] RBP: 00007f481df9a090 R08: 0000000000000000 R09: 0000000000000000 [ 552.146506][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.146518][T10520] R13: 00007f481d416038 R14: 00007f481d415fa0 R15: 00007ffef8033928 [ 552.146550][T10520] [ 552.336864][ T10] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 552.523702][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 552.533029][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 552.549270][ T10] usb 3-1: config 0 has no interface number 0 [ 552.574116][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.616499][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.654281][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 552.674799][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.708637][ T10] usb 3-1: config 0 descriptor?? [ 552.754592][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 552.944582][T10487] iowarrior 3-1:0.1: Error -90 while submitting URB [ 552.961666][ T29] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 552.979624][T10532] FAULT_INJECTION: forcing a failure. [ 552.979624][T10532] name failslab, interval 1, probability 0, space 0, times 0 [ 553.006386][T10532] CPU: 0 UID: 0 PID: 10532 Comm: syz.3.1672 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.006419][T10532] Tainted: [L]=SOFTLOCKUP [ 553.006426][T10532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.006438][T10532] Call Trace: [ 553.006447][T10532] [ 553.006455][T10532] dump_stack_lvl+0xe8/0x150 [ 553.006491][T10532] should_fail_ex+0x412/0x560 [ 553.006522][T10532] should_failslab+0xa8/0x100 [ 553.006544][T10532] ? security_file_alloc+0x34/0x310 [ 553.006569][T10532] kmem_cache_alloc_noprof+0x87/0x650 [ 553.006599][T10532] ? rcu_is_watching+0x15/0xb0 [ 553.006620][T10532] ? trace_kmem_cache_alloc+0x29/0xf0 [ 553.006653][T10532] security_file_alloc+0x34/0x310 [ 553.006680][T10532] init_file+0x90/0x2b0 [ 553.006709][T10532] alloc_empty_file+0x6e/0x1d0 [ 553.006737][T10532] dentry_open+0x44/0xa0 [ 553.006764][T10532] ima_calc_file_hash+0x158/0x860 [ 553.006860][T10532] ? kmem_cache_free+0x189/0x640 [ 553.006879][T10532] ? __fuse_simple_request+0x157c/0x1c60 [ 553.006941][T10532] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 553.006966][T10532] ? __fuse_simple_request+0x157c/0x1c60 [ 553.007006][T10532] ? __pfx___fuse_simple_request+0x10/0x10 [ 553.007033][T10532] ? __pfx_autoremove_wake_function+0x10/0x10 [ 553.007060][T10532] ? look_up_lock_class+0x57/0x110 [ 553.007082][T10532] ? register_lock_class+0x31/0x2e0 [ 553.007118][T10532] ? fuse_getattr+0x306/0x610 [ 553.007154][T10532] ima_collect_measurement+0x51d/0x9c0 [ 553.007189][T10532] ? __pfx_ima_collect_measurement+0x10/0x10 [ 553.007225][T10532] ? __mutex_lock+0x320/0x1420 [ 553.007277][T10532] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 553.007344][T10532] process_measurement+0x12cd/0x1c80 [ 553.007384][T10532] ? __pfx_process_measurement+0x10/0x10 [ 553.007441][T10532] ? get_pid_task+0x20/0x1f0 [ 553.007465][T10532] ? get_pid_task+0x20/0x1f0 [ 553.007502][T10532] ima_file_mmap+0x1b0/0x200 [ 553.007526][T10532] ? __pfx_ima_file_mmap+0x10/0x10 [ 553.007552][T10532] ? apparmor_mmap_file+0x2da/0x3e0 [ 553.007580][T10532] security_mmap_file+0x773/0xa20 [ 553.007607][T10532] vm_mmap_pgoff+0x134/0x4f0 [ 553.007638][T10532] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 553.007664][T10532] ? __fget_files+0x2a/0x420 [ 553.007695][T10532] ? __fget_files+0x3a0/0x420 [ 553.007721][T10532] ? __fget_files+0x2a/0x420 [ 553.007752][T10532] ksys_mmap_pgoff+0x51e/0x760 [ 553.007788][T10532] do_syscall_64+0x14d/0xf80 [ 553.007808][T10532] ? trace_irq_disable+0x3b/0x150 [ 553.007839][T10532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.007860][T10532] ? clear_bhb_loop+0x40/0x90 [ 553.007885][T10532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.007905][T10532] RIP: 0033:0x7f50c9d9c799 [ 553.007925][T10532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.007942][T10532] RSP: 002b:00007f50cabb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 553.007964][T10532] RAX: ffffffffffffffda RBX: 00007f50ca015fa0 RCX: 00007f50c9d9c799 [ 553.007979][T10532] RDX: 000000000000000e RSI: 0000000000003000 RDI: 0000200000ffa000 [ 553.007992][T10532] RBP: 00007f50cabb0090 R08: 0000000000000004 R09: 0000000000000000 [ 553.008004][T10532] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 553.008016][T10532] R13: 00007f50ca016038 R14: 00007f50ca015fa0 R15: 00007ffc6b09f2f8 [ 553.008049][T10532] [ 553.010835][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 553.010850][ T30] audit: type=1800 audit(1773935882.616:589): pid=10532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1672" name="/" dev="fuse" ino=1 res=0 errno=0 [ 553.159434][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 553.394149][ T29] usb 5-1: config 212 has an invalid interface number: 134 but max is 0 [ 553.412369][ T29] usb 5-1: config 212 has no interface number 0 [ 553.437135][ T29] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 553.449994][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.465696][ T29] usb 5-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 553.497923][ T29] usb 5-1: Manufacturer: 㐉 [ 553.518060][ T29] usb 5-1: SerialNumber: Ы [ 553.639429][ T5941] usb 3-1: USB disconnect, device number 90 [ 553.743909][T10542] loop2: detected capacity change from 0 to 7 [ 553.775143][ T29] usb 5-1: USB disconnect, device number 39 [ 553.790490][T10542] Dev loop2: unable to read RDB block 7 [ 553.805405][T10542] loop2: unable to read partition table [ 553.813866][T10542] loop2: partition table beyond EOD, truncated [ 553.825290][T10542] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 554.372282][ T809] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 554.480125][T10556] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1681'. [ 554.544015][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 554.564895][ T809] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.584413][ T809] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 554.611006][ T809] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 554.628717][ T809] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 554.649494][ T809] usb 4-1: Product: syz [ 554.659797][ T809] usb 4-1: Manufacturer: syz [ 554.669918][ T809] usb 4-1: SerialNumber: syz [ 554.711054][ T809] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 555.171665][ T809] usb 4-1: USB disconnect, device number 90 [ 555.223122][ T809] appletouch 4-1:1.0: input: appletouch disconnected [ 555.305985][T10574] FAULT_INJECTION: forcing a failure. [ 555.305985][T10574] name failslab, interval 1, probability 0, space 0, times 0 [ 555.323690][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.2.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.323726][T10574] Tainted: [L]=SOFTLOCKUP [ 555.323734][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.323746][T10574] Call Trace: [ 555.323754][T10574] [ 555.323763][T10574] dump_stack_lvl+0xe8/0x150 [ 555.323799][T10574] should_fail_ex+0x412/0x560 [ 555.323829][T10574] should_failslab+0xa8/0x100 [ 555.323854][T10574] __kmalloc_cache_noprof+0x88/0x660 [ 555.323887][T10574] ? vhost_task_create+0x123/0x380 [ 555.323919][T10574] vhost_task_create+0x123/0x380 [ 555.323943][T10574] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 555.323966][T10574] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 555.323991][T10574] ? __pfx_vhost_task_create+0x10/0x10 [ 555.324024][T10574] ? __pfx_vhost_task_fn+0x10/0x10 [ 555.324061][T10574] ? __lock_acquire+0x6b5/0x2cf0 [ 555.324099][T10574] kvm_mmu_post_init_vm+0x14c/0x300 [ 555.324128][T10574] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 555.324175][T10574] ? __mutex_trylock_common+0x158/0x260 [ 555.324201][T10574] ? __pfx___mutex_trylock_common+0x10/0x10 [ 555.324224][T10574] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 555.324249][T10574] ? register_lock_class+0x31/0x2e0 [ 555.324282][T10574] ? __lock_acquire+0x6b5/0x2cf0 [ 555.324319][T10574] ? kasan_quarantine_put+0xbb/0x1f0 [ 555.324350][T10574] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 555.324380][T10574] ? do_raw_write_lock+0x11d/0x260 [ 555.324420][T10574] kvm_vcpu_ioctl+0xa62/0xfd0 [ 555.324448][T10574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 555.324467][T10574] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 555.324510][T10574] ? __fget_files+0x2a/0x420 [ 555.324539][T10574] ? __fget_files+0x2a/0x420 [ 555.324562][T10574] ? __fget_files+0x3a0/0x420 [ 555.324586][T10574] ? __fget_files+0x2a/0x420 [ 555.324615][T10574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 555.324635][T10574] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 555.324663][T10574] __se_sys_ioctl+0xfc/0x170 [ 555.324687][T10574] do_syscall_64+0x14d/0xf80 [ 555.324707][T10574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.324727][T10574] ? clear_bhb_loop+0x40/0x90 [ 555.324771][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.324791][T10574] RIP: 0033:0x7f231559c799 [ 555.324810][T10574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.324828][T10574] RSP: 002b:00007f23164f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 555.324849][T10574] RAX: ffffffffffffffda RBX: 00007f2315815fa0 RCX: 00007f231559c799 [ 555.324863][T10574] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 555.324876][T10574] RBP: 00007f23164f0090 R08: 0000000000000000 R09: 0000000000000000 [ 555.324889][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.324900][T10574] R13: 00007f2315816038 R14: 00007f2315815fa0 R15: 00007ffd5d4a34b8 [ 555.324963][T10574] [ 555.355772][ T29] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 555.710637][T10576] FAULT_INJECTION: forcing a failure. [ 555.710637][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 555.725199][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.0.1687 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.725231][T10576] Tainted: [L]=SOFTLOCKUP [ 555.725249][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 555.725260][T10576] Call Trace: [ 555.725267][T10576] [ 555.725275][T10576] dump_stack_lvl+0xe8/0x150 [ 555.725309][T10576] should_fail_ex+0x412/0x560 [ 555.725336][T10576] should_failslab+0xa8/0x100 [ 555.725357][T10576] __kmalloc_cache_noprof+0x88/0x660 [ 555.725386][T10576] ? sctp_add_bind_addr+0x8c/0x370 [ 555.725407][T10576] ? __pfx_sctp_get_port_local+0x10/0x10 [ 555.725446][T10576] sctp_add_bind_addr+0x8c/0x370 [ 555.725464][T10576] ? sctp_auto_asconf_init+0x15c/0x1e0 [ 555.725492][T10576] sctp_do_bind+0x5b2/0x9d0 [ 555.725525][T10576] sctp_connect_new_asoc+0x270/0x6b0 [ 555.725551][T10576] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 555.725583][T10576] ? __local_bh_enable_ip+0xd0/0x130 [ 555.725606][T10576] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 555.725622][T10576] ? security_sctp_bind_connect+0x7e/0x2c0 [ 555.725731][T10576] sctp_sendmsg+0x1528/0x2c10 [ 555.725771][T10576] ? __pfx_sctp_sendmsg+0x10/0x10 [ 555.725819][T10576] ? aa_sk_perm+0x6d5/0x900 [ 555.725850][T10576] ? __pfx_aa_sk_perm+0x10/0x10 [ 555.725871][T10576] ? sock_rps_record_flow+0x19/0x350 [ 555.725893][T10576] ? inet_sendmsg+0x2f4/0x370 [ 555.725913][T10576] ? __pfx_inet_sendmsg+0x10/0x10 [ 555.725930][T10576] sock_sendmsg_nosec+0xf9/0x150 [ 555.725957][T10576] ____sys_sendmsg+0x589/0x8c0 [ 555.725985][T10576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 555.726013][T10576] ? import_iovec+0x73/0xa0 [ 555.726038][T10576] ___sys_sendmsg+0x2a5/0x360 [ 555.726063][T10576] ? __pfx____sys_sendmsg+0x10/0x10 [ 555.726113][T10576] ? __fget_files+0x2a/0x420 [ 555.726140][T10576] ? __fget_files+0x3a0/0x420 [ 555.726170][T10576] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.726193][T10576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 555.726221][T10576] ? __pfx_ksys_write+0x10/0x10 [ 555.726255][T10576] do_syscall_64+0x14d/0xf80 [ 555.726272][T10576] ? trace_irq_disable+0x3b/0x150 [ 555.726293][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.726310][T10576] ? clear_bhb_loop+0x40/0x90 [ 555.726332][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.726349][T10576] RIP: 0033:0x7f9a7519c799 [ 555.726367][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.726382][T10576] RSP: 002b:00007f9a76129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.726400][T10576] RAX: ffffffffffffffda RBX: 00007f9a75415fa0 RCX: 00007f9a7519c799 [ 555.726413][T10576] RDX: 00000000000000c9 RSI: 0000200000002dc0 RDI: 0000000000000003 [ 555.726424][T10576] RBP: 00007f9a76129090 R08: 0000000000000000 R09: 0000000000000000 [ 555.726434][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.726444][T10576] R13: 00007f9a75416038 R14: 00007f9a75415fa0 R15: 00007ffec1171a98 [ 555.726471][T10576] [ 556.146448][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 556.153354][ T29] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 556.162712][ T29] usb 5-1: config 0 has no interface number 0 [ 556.175411][ T29] usb 5-1: too many endpoints for config 0 interface 25 altsetting 152: 60, using maximum allowed: 30 [ 556.186618][ T29] usb 5-1: config 0 interface 25 altsetting 152 has 0 endpoint descriptors, different from the interface descriptor's value: 60 [ 556.200531][ T29] usb 5-1: config 0 interface 25 has no altsetting 0 [ 556.209972][ T29] usb 5-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 556.219218][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.227823][ T29] usb 5-1: Product: syz [ 556.232132][ T29] usb 5-1: Manufacturer: syz [ 556.236800][ T29] usb 5-1: SerialNumber: syz [ 556.246648][ T29] usb 5-1: config 0 descriptor?? [ 556.545690][ T29] gspca_main: spca508-2.14.0 probing 041e:4018 [ 556.554581][ T29] gspca_spca508: reg_read err -71 [ 556.560103][ T29] gspca_spca508: reg_read err -71 [ 556.567241][ T29] gspca_spca508: reg_read err -71 [ 556.574389][ T10] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 556.577287][ T29] gspca_spca508: reg_read err -71 [ 556.595082][ T5941] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 556.599515][ T29] gspca_spca508: reg_read err -71 [ 556.626554][ T29] gspca_spca508: reg write: error -71 [ 556.635798][ T29] spca508 5-1:0.25: probe with driver spca508 failed with error -71 [ 556.651939][ T29] usb 5-1: USB disconnect, device number 40 [ 556.746825][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 556.755406][ T809] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 556.769401][ T10] usb 4-1: config 212 has an invalid interface number: 134 but max is 0 [ 556.777885][ T5941] usb 1-1: Using ep0 maxpacket: 32 [ 556.784611][ T10] usb 4-1: config 212 has no interface number 0 [ 556.793321][ T5941] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 556.803247][ T5941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.812893][ T10] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 556.825141][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.835135][ T5941] usb 1-1: config 0 descriptor?? [ 556.845420][ T10] usb 4-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 556.870096][ T5941] gspca_main: sunplus-2.14.0 probing 041e:400b [ 556.876803][ T10] usb 4-1: Manufacturer: 㐉 [ 556.881542][ T10] usb 4-1: SerialNumber: Ы [ 556.936916][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 556.943977][ T809] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 556.952630][ T809] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 556.962648][ T809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 556.976562][ T809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 556.986706][ T809] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 557.000136][ T809] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 557.011183][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.134871][ T10] usb 4-1: USB disconnect, device number 91 [ 557.575745][ T5941] gspca_sunplus: reg_r err -71 [ 557.582285][ T5941] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 557.589207][ T5941] usb 1-1: USB disconnect, device number 9 [ 557.596315][ T29] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 557.772355][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 557.792193][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.802143][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.811687][ T29] usb 5-1: Product: syz [ 557.816358][ T29] usb 5-1: Manufacturer: syz [ 557.821089][ T29] usb 5-1: SerialNumber: syz [ 557.835585][ T29] cdc_ncm 5-1:1.0: skipping garbage [ 557.848371][T10597] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 557.857861][ T809] usb 3-1: USB disconnect, device number 91 [ 558.508113][ T5982] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 558.669193][ T5982] usb 1-1: Using ep0 maxpacket: 8 [ 558.705485][ T5982] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 558.733688][ T5982] usb 1-1: config 0 has no interface number 0 [ 558.750091][ T5982] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 558.761672][ T5982] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 558.775275][ T5982] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 558.787332][ T5982] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 558.803257][ T5982] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 558.812613][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.841067][ T5982] usb 1-1: config 0 descriptor?? [ 558.857869][ T5982] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 558.935799][ T10] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 559.083483][ T5927] usb 1-1: USB disconnect, device number 10 [ 559.099513][ T5927] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 559.107387][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 559.129589][ T10] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 559.146373][ T10] usb 4-1: config 0 has no interface number 0 [ 559.165846][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 559.178782][ T10] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 559.192302][ T10] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 559.204441][ T10] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 559.217981][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 559.227298][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.252338][ T10] usb 4-1: config 0 descriptor?? [ 559.279075][ T10] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 559.414488][T10621] FAULT_INJECTION: forcing a failure. [ 559.414488][T10621] name failslab, interval 1, probability 0, space 0, times 0 [ 559.429399][T10621] CPU: 0 UID: 0 PID: 10621 Comm: syz.2.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 559.429434][T10621] Tainted: [L]=SOFTLOCKUP [ 559.429441][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 559.429453][T10621] Call Trace: [ 559.429462][T10621] [ 559.429470][T10621] dump_stack_lvl+0xe8/0x150 [ 559.429504][T10621] should_fail_ex+0x412/0x560 [ 559.429533][T10621] should_failslab+0xa8/0x100 [ 559.429555][T10621] ? alloc_empty_file+0x55/0x1d0 [ 559.429581][T10621] kmem_cache_alloc_noprof+0x87/0x650 [ 559.429610][T10621] ? is_bpf_text_address+0x292/0x2b0 [ 559.429646][T10621] alloc_empty_file+0x55/0x1d0 [ 559.429672][T10621] path_openat+0x10f/0x3860 [ 559.429689][T10621] ? arch_stack_walk+0xfb/0x150 [ 559.429718][T10621] ? do_getname+0x2e/0x250 [ 559.429746][T10621] ? stack_trace_save+0xa9/0x100 [ 559.429771][T10621] ? __pfx_stack_trace_save+0x10/0x10 [ 559.429796][T10621] ? do_getname+0x2e/0x250 [ 559.429819][T10621] ? stack_depot_save_flags+0x33/0x810 [ 559.429844][T10621] ? do_getname+0x2e/0x250 [ 559.429868][T10621] ? kasan_save_track+0x4f/0x80 [ 559.429897][T10621] ? kasan_save_track+0x3e/0x80 [ 559.429923][T10621] ? __kasan_slab_alloc+0x6c/0x80 [ 559.429942][T10621] ? __pfx_path_openat+0x10/0x10 [ 559.429958][T10621] ? __x64_sys_open+0x11e/0x150 [ 559.429982][T10621] ? do_syscall_64+0x14d/0xf80 [ 559.430001][T10621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.430031][T10621] ? __lock_acquire+0x6b5/0x2cf0 [ 559.430068][T10621] do_file_open+0x23e/0x4a0 [ 559.430092][T10621] ? __pfx_do_file_open+0x10/0x10 [ 559.430132][T10621] ? _raw_spin_unlock+0x28/0x50 [ 559.430161][T10621] ? alloc_fd+0x64b/0x6c0 [ 559.430199][T10621] do_sys_openat2+0x113/0x200 [ 559.430228][T10621] ? __pfx_do_sys_openat2+0x10/0x10 [ 559.430255][T10621] ? ksys_write+0x242/0x270 [ 559.430277][T10621] ? __pfx_ksys_write+0x10/0x10 [ 559.430300][T10621] __x64_sys_open+0x11e/0x150 [ 559.430331][T10621] do_syscall_64+0x14d/0xf80 [ 559.430350][T10621] ? trace_irq_disable+0x3b/0x150 [ 559.430372][T10621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.430400][T10621] ? clear_bhb_loop+0x40/0x90 [ 559.430426][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.430447][T10621] RIP: 0033:0x7f231559c799 [ 559.430466][T10621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.430484][T10621] RSP: 002b:00007f23164f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 559.430504][T10621] RAX: ffffffffffffffda RBX: 00007f2315815fa0 RCX: 00007f231559c799 [ 559.430517][T10621] RDX: 0000000000000000 RSI: 0000000000109281 RDI: 00002000000000c0 [ 559.430529][T10621] RBP: 00007f23164f0090 R08: 0000000000000000 R09: 0000000000000000 [ 559.430540][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.430550][T10621] R13: 00007f2315816038 R14: 00007f2315815fa0 R15: 00007ffd5d4a34b8 [ 559.430579][T10621] [ 559.896036][ T5982] usb 4-1: USB disconnect, device number 92 [ 559.915793][ T5982] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 560.463355][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 560.512416][T10616] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.559287][ T29] cdc_ncm 5-1:1.0: bind() failure [ 560.628833][ T29] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 560.644967][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 560.656010][ T29] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 560.664584][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 560.679391][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.722965][ T29] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 560.726730][ T10] usb 1-1: config 0 descriptor?? [ 560.749949][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 560.766697][ T29] usb 5-1: USB disconnect, device number 41 [ 560.941221][T10642] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1709'. [ 561.055958][T10644] fuse: Bad value for 'group_id' [ 561.061671][T10644] fuse: Bad value for 'group_id' [ 561.286134][T10648] FAULT_INJECTION: forcing a failure. [ 561.286134][T10648] name failslab, interval 1, probability 0, space 0, times 0 [ 561.300164][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.2.1711 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.300188][T10648] Tainted: [L]=SOFTLOCKUP [ 561.300194][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 561.300203][T10648] Call Trace: [ 561.300209][T10648] [ 561.300215][T10648] dump_stack_lvl+0xe8/0x150 [ 561.300242][T10648] should_fail_ex+0x412/0x560 [ 561.300264][T10648] ? __d_alloc+0x37/0x6f0 [ 561.300286][T10648] should_failslab+0xa8/0x100 [ 561.300303][T10648] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 561.300325][T10648] ? __lock_acquire+0x6b5/0x2cf0 [ 561.300353][T10648] __d_alloc+0x37/0x6f0 [ 561.300373][T10648] ? lockdep_unlock+0x5d/0xd0 [ 561.300392][T10648] ? __lock_acquire+0x146e/0x2cf0 [ 561.300416][T10648] d_alloc_parallel+0xe6/0x1610 [ 561.300443][T10648] ? __d_lookup+0x66/0x780 [ 561.300460][T10648] ? __d_lookup+0x66/0x780 [ 561.300476][T10648] ? __pfx_d_alloc_parallel+0x10/0x10 [ 561.300499][T10648] ? d_lookup+0x1f/0xa0 [ 561.300513][T10648] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 561.300539][T10648] fuse_readdir+0x27ac/0x3250 [ 561.300577][T10648] ? look_up_lock_class+0x57/0x110 [ 561.300600][T10648] ? __lock_acquire+0x6b5/0x2cf0 [ 561.300623][T10648] ? __pfx_fuse_readdir+0x10/0x10 [ 561.300650][T10648] ? aa_file_perm+0x192/0x15e0 [ 561.300665][T10648] ? look_up_lock_class+0x57/0x110 [ 561.300679][T10648] ? register_lock_class+0x31/0x2e0 [ 561.300699][T10648] ? aa_file_perm+0x50e/0x15e0 [ 561.300722][T10648] ? __mutex_lock+0x320/0x1420 [ 561.300758][T10648] ? iterate_dir+0x292/0x570 [ 561.300772][T10648] ? down_read_killable+0x1bb/0x340 [ 561.300792][T10648] iterate_dir+0x399/0x570 [ 561.300811][T10648] __se_sys_getdents64+0xf1/0x280 [ 561.300829][T10648] ? __pfx___se_sys_getdents64+0x10/0x10 [ 561.300844][T10648] ? ksys_write+0x242/0x270 [ 561.300856][T10648] ? __pfx_filldir64+0x10/0x10 [ 561.300872][T10648] ? __pfx_ksys_write+0x10/0x10 [ 561.300894][T10648] do_syscall_64+0x14d/0xf80 [ 561.300908][T10648] ? trace_irq_disable+0x3b/0x150 [ 561.300925][T10648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.300940][T10648] ? clear_bhb_loop+0x40/0x90 [ 561.300957][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.300971][T10648] RIP: 0033:0x7f231559c799 [ 561.300985][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.301020][T10648] RSP: 002b:00007f23164cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 561.301041][T10648] RAX: ffffffffffffffda RBX: 00007f2315816090 RCX: 00007f231559c799 [ 561.301055][T10648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 561.301067][T10648] RBP: 00007f23164cf090 R08: 0000000000000000 R09: 0000000000000000 [ 561.301079][T10648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.301102][T10648] R13: 00007f2315816128 R14: 00007f2315816090 R15: 00007ffd5d4a34b8 [ 561.301126][T10648] [ 561.617626][ T10] gspca_sunplus: reg_r err -71 [ 561.622649][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 561.633196][ T10] usb 1-1: USB disconnect, device number 11 [ 562.012897][ T29] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 562.176993][ T29] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 562.194039][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.216252][ T29] usb 4-1: Product: syz [ 562.226248][ T29] usb 4-1: Manufacturer: syz [ 562.232701][ T29] usb 4-1: SerialNumber: syz [ 562.245549][ T29] usb 4-1: config 0 descriptor?? [ 562.482787][ T29] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 562.760865][ T809] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 562.921059][ T809] usb 1-1: Using ep0 maxpacket: 8 [ 562.928226][ T809] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 562.936619][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.947734][ T809] usb 1-1: config 0 has no interface number 0 [ 562.959548][ T809] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 562.968765][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.976890][ T809] usb 1-1: Product: syz [ 562.981118][ T809] usb 1-1: Manufacturer: syz [ 562.985860][ T809] usb 1-1: SerialNumber: syz [ 562.997139][ T809] usb 1-1: config 0 descriptor?? [ 563.010165][ T809] ttusb_dec_send_command: command bulk message failed: error -22 [ 563.019718][ T809] ttusb-dec 1-1:0.113: probe with driver ttusb-dec failed with error -22 [ 563.218763][ T10] usb 1-1: USB disconnect, device number 12 [ 564.433127][ T29] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 564.463893][ T29] usb 4-1: USB disconnect, device number 93 [ 564.994175][ T5927] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 565.133198][ T5927] usb 5-1: device descriptor read/64, error -71 [ 565.336168][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 565.400243][ T5927] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 565.510436][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 565.520406][ T10] usb 4-1: config 212 has an invalid interface number: 134 but max is 0 [ 565.529623][ T10] usb 4-1: config 212 has no interface number 0 [ 565.540448][ T10] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 565.550251][ T5927] usb 5-1: device descriptor read/64, error -71 [ 565.556709][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.567297][ T10] usb 4-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 565.583047][ T10] usb 4-1: Manufacturer: 㐉 [ 565.587865][ T10] usb 4-1: SerialNumber: Ы [ 565.678536][ T5927] usb usb5-port1: attempt power cycle [ 565.826088][ T10] usb 4-1: USB disconnect, device number 94 [ 566.030904][ T809] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 566.052863][ T5927] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 566.074332][ T5927] usb 5-1: device descriptor read/8, error -71 [ 566.204906][ T809] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x1 has invalid wMaxPacketSize 0 [ 566.224403][ T809] usb 1-1: config 0 interface 0 has no altsetting 0 [ 566.238562][ T809] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 566.250050][ T809] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 566.262338][ T809] usb 1-1: Product: syz [ 566.267067][ T809] usb 1-1: Manufacturer: syz [ 566.273652][ T809] usb 1-1: SerialNumber: syz [ 566.286718][ T809] usb 1-1: config 0 descriptor?? [ 566.301103][ T809] usb 1-1: selecting invalid altsetting 0 [ 566.347516][ T5927] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 566.382210][ T5927] usb 5-1: device descriptor read/8, error -71 [ 566.518768][ T5927] usb usb5-port1: unable to enumerate USB device [ 566.552025][ T809] usb 1-1: USB disconnect, device number 13 [ 566.679566][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.856928][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.968503][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.007205][ T5162] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 567.017844][ T5162] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.031747][ T5162] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.043816][ T5162] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.053449][ T5162] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 567.076328][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.550830][ T13] bridge_slave_1: left allmulticast mode [ 567.557673][ T13] bridge_slave_1: left promiscuous mode [ 567.563941][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.575646][ T13] bridge_slave_0: left allmulticast mode [ 567.589498][ T13] bridge_slave_0: left promiscuous mode [ 567.597593][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.948727][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 567.974072][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 567.990637][ T13] bond0 (unregistering): Released all slaves [ 568.009105][T10714] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1733'. [ 568.037255][T10695] chnl_net:caif_netlink_parms(): no params data found [ 568.125345][T10124] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 568.258592][T10722] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 568.322880][T10716] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1734'. [ 568.342103][T10124] usb 4-1: unable to get BOS descriptor or descriptor too short [ 568.367061][T10124] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 568.375030][ T809] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 568.382872][T10124] usb 4-1: can't read configurations, error -71 [ 568.524247][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.534931][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.545202][T10695] bridge_slave_0: entered allmulticast mode  [ 568.567459][ T809] usb 5-1: unable to get BOS descriptor or descriptor too short [ 568.568232][T10695] bridge_slave_0: entered promiscuous mode [ 568.586638][ T809] usb 5-1: config 212 has an invalid interface number: 134 but max is 0 [ 568.600393][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.609280][ T809] usb 5-1: config 212 has no interface number 0 [ 568.618540][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.627087][ T809] usb 5-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 568.636864][T10695] bridge_slave_1: entered allmulticast mode [ 568.645078][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.657313][T10695] bridge_slave_1: entered promiscuous mode [ 568.663681][ T809] usb 5-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 568.686591][ T809] usb 5-1: Manufacturer: 㐉 [ 568.692380][ T809] usb 5-1: SerialNumber: Ы [ 568.796363][ T13] hsr_slave_0: left promiscuous mode [ 568.813680][ T13] hsr_slave_1: left promiscuous mode [ 568.831682][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.840168][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 568.850984][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.859867][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 568.891831][ T13] veth1_macvtap: left promiscuous mode [ 568.899083][ T13] veth0_macvtap: left promiscuous mode [ 568.905961][ T13] veth1_vlan: left promiscuous mode [ 568.911865][ T13] veth0_vlan: left promiscuous mode ./file0/file0[ 568.979320][ T809] usb 5-1: USB disconnect, device number 46 ./file0fuse.file0ރm#։!f۪y&jAcaAC|D9 ^瀘hyfH8fC2l%S`-$mRFZ|H7M[ >Q,EGXIQ5J?V9g4aS3% FhM^6)Q7:L]>]bHYv€r8`)5ݺŦ.=W&W!s.)#>01A'^䮅nȈgQR~UvCD/p%E:b& Zq`CJjM37`xl!Xۀv`6o{FН,gIKL,gPe[^++ǀ [ 569.770931][T10759] dump_stack_lvl+0xe8/0x150 [ 569.770967][T10759] should_fail_ex+0x412/0x560 [ 569.770995][T10759] should_failslab+0xa8/0x100 [ 569.771021][T10759] ? skb_clone+0x212/0x3a0 [ 569.771038][T10759] kmem_cache_alloc_noprof+0x87/0x650 [ 569.771067][T10759] skb_clone+0x212/0x3a0 [ 569.771110][T10759] __netlink_deliver_tap+0x424/0x8b0 [ 569.771154][T10759] ? netlink_deliver_tap+0x2e/0x1b0 [ 569.771186][T10759] netlink_deliver_tap+0x19c/0x1b0 [ 569.771221][T10759] netlink_unicast+0x7e3/0x9b0 [ 569.771248][T10759] ? __pfx_netlink_unicast+0x10/0x10 [ 569.771270][T10759] ? netlink_sendmsg+0x650/0xb40 [ 569.771283][T10759] ? skb_put+0x11b/0x210 [ 569.771301][T10759] netlink_sendmsg+0x813/0xb40 [ 569.771321][T10759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.771337][T10759] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 569.771367][T10759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.771380][T10759] sock_sendmsg_nosec+0x112/0x150 [ 569.771403][T10759] ____sys_sendmsg+0x589/0x8c0 [ 569.771432][T10759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.771455][T10759] ? import_iovec+0x73/0xa0 [ 569.771477][T10759] ___sys_sendmsg+0x2a5/0x360 [ 569.771498][T10759] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.771552][T10759] ? __fget_files+0x2a/0x420 [ 569.771570][T10759] ? __fget_files+0x3a0/0x420 [ 569.771595][T10759] __x64_sys_sendmsg+0x1bd/0x2a0 [ 569.771613][T10759] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 569.771636][T10759] ? __pfx_ksys_write+0x10/0x10 [ 569.771657][T10759] do_syscall_64+0x14d/0xf80 [ 569.771672][T10759] ? trace_irq_disable+0x3b/0x150 [ 569.771689][T10759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.771703][T10759] ? clear_bhb_loop+0x40/0x90 [ 569.771721][T10759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.771735][T10759] RIP: 0033:0x7f9a7519c799 [ 569.771748][T10759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.771760][T10759] RSP: 002b:00007f9a76129028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.771775][T10759] RAX: ffffffffffffffda RBX: 00007f9a75415fa0 RCX: 00007f9a7519c799 [ 569.771786][T10759] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 569.771794][T10759] RBP: 00007f9a76129090 R08: 0000000000000000 R09: 0000000000000000 [ 569.771803][T10759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.771811][T10759] R13: 00007f9a75416038 R14: 00007f9a75415fa0 R15: 00007ffec1171a98 [ 569.771836][T10759] [ 570.061087][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.068291][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.211175][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.238603][T10764] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1744'. [ 570.252770][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.301778][T10695] team0: Port device team_slave_0 added [ 570.311885][T10695] team0: Port device team_slave_1 added [ 570.354212][T10695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.361535][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.387964][T10695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.421938][T10695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.430420][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.459709][T10695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.646016][T10695] hsr_slave_0: entered promiscuous mode [ 570.671468][T10695] hsr_slave_1: entered promiscuous mode [ 570.705382][T10695] debugfs: 'hsr0' already exists in 'hsr' [ 570.713156][T10695] Cannot create hsr debugfs directory [ 570.861151][ T5927] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 570.930869][ T13] IPVS: stop unused estimator thread 0... [ 571.053183][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 571.073415][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 571.104173][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 571.133436][ T5927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 571.161744][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.171710][ T5927] usb 4-1: Product: syz [ 571.182433][ T5927] usb 4-1: Manufacturer: syz [ 571.194252][ T5927] usb 4-1: SerialNumber: syz [ 571.220439][ T5927] usb 4-1: 0:2 : does not exist [ 571.368982][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 571.488843][ T5927] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 571.545404][ T51] Bluetooth: hci1: command tx timeout [ 571.560235][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 571.591107][ T10] usb 1-1: config 212 has an invalid interface number: 134 but max is 0 [ 571.617285][ T10] usb 1-1: config 212 has no interface number 0 [ 571.642856][ T10] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 571.673176][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.687474][ T5927] usb 4-1: USB disconnect, device number 97 [ 571.719563][ T10] usb 1-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 571.772468][ T10] usb 1-1: Manufacturer: 㐉 [ 571.787989][ T10] usb 1-1: SerialNumber: Ы [ 572.075129][ T10] usb 1-1: USB disconnect, device number 14 [ 572.174847][T10802] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1753'. [ 572.187980][ T809] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 572.329462][T10695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 572.345238][T10695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 572.362560][T10695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 572.378291][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 572.383820][T10695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 572.394245][ T809] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 572.415686][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.440609][ T809] usb 5-1: config 0 descriptor?? [ 572.464609][ T809] gspca_main: sunplus-2.14.0 probing 041e:400b [ 572.560675][ T10] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 572.617157][T10695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.689123][T10695] 8021q: adding VLAN 0 to HW filter on device team0 [ 572.708634][ T8365] bridge0: port 1(bridge_slave_0) entered blocking state [ 572.715920][ T8365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 572.742306][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 572.758542][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 572.778715][ T10] usb 4-1: config 4 has an invalid interface number: 79 but max is 0 [ 572.791177][ T10] usb 4-1: config 4 has no interface number 0 [ 572.812542][ T8366] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.819852][ T8366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 572.833331][ T10] usb 4-1: config 4 interface 79 altsetting 236 endpoint 0x1 has an invalid bInterval 127, changing to 10 [ 572.857815][ T10] usb 4-1: config 4 interface 79 altsetting 236 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 572.887486][T10822] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3642988519 (466302530432 ns) > initial count (459226025088 ns). Using initial count to start timer. [ 572.905687][ T10] usb 4-1: config 4 interface 79 has no altsetting 0 [ 572.931301][ T10] usb 4-1: New USB device found, idVendor=10f5, idProduct=548c, bcdDevice=5e.dd [ 572.941407][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.980175][ T10] usb 4-1: Product: syz [ 572.991815][ T10] usb 4-1: Manufacturer: syz [ 573.008422][ T10] usb 4-1: SerialNumber: syz [ 573.185947][ T809] gspca_sunplus: reg_r err -71 [ 573.202888][ T809] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 573.227237][ T809] usb 5-1: USB disconnect, device number 47 [ 573.252100][T10805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.331952][ T10] usb 4-1: USB disconnect, device number 98 [ 573.531285][T10695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.629433][T10695] veth0_vlan: entered promiscuous mode [ 573.650927][T10695] veth1_vlan: entered promiscuous mode [ 573.720998][T10695] veth0_macvtap: entered promiscuous mode [ 573.738991][T10695] veth1_macvtap: entered promiscuous mode [ 573.768342][ T51] Bluetooth: hci1: command tx timeout [ 573.809415][T10695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.869365][T10695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.919576][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.945119][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.977701][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.994412][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 574.122891][T10853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 574.343174][ T8366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.357738][T10853] affs: No valid root block on device nullb0 [ 574.380062][ T8366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.525122][ T8359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.544959][ T8359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.565155][T10865] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1762'. [ 574.897886][T10124] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 575.071874][T10124] usb 5-1: Using ep0 maxpacket: 32 [ 575.116332][T10124] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 575.154551][T10124] usb 5-1: config 0 has no interface number 0 [ 575.203516][T10124] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.236867][T10124] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.250996][T10124] usb 5-1: Product: syz [ 575.263434][T10124] usb 5-1: Manufacturer: syz [ 575.269799][T10124] usb 5-1: SerialNumber: syz [ 575.288246][T10124] usb 5-1: config 0 descriptor?? [ 575.747524][T10124] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 575.774543][T10124] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 575.798552][T10124] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 575.830177][T10124] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 575.858373][T10124] usb 5-1: USB disconnect, device number 48 [ 576.000985][ T51] Bluetooth: hci1: command tx timeout [ 576.036379][T10879] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 576.049192][T10879] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 576.061379][T10879] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 576.220473][T10884] FAULT_INJECTION: forcing a failure. [ 576.220473][T10884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 576.234379][T10884] CPU: 0 UID: 0 PID: 10884 Comm: syz.2.1769 Tainted: G L syzkaller #0 PREEMPT(full) [ 576.234410][T10884] Tainted: [L]=SOFTLOCKUP [ 576.234428][T10884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 576.234441][T10884] Call Trace: [ 576.234449][T10884] [ 576.234457][T10884] dump_stack_lvl+0xe8/0x150 [ 576.234493][T10884] should_fail_ex+0x412/0x560 [ 576.234521][T10884] _copy_from_user+0x2d/0xb0 [ 576.234566][T10884] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 576.234600][T10884] ? __lock_acquire+0x6b5/0x2cf0 [ 576.234633][T10884] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 576.234658][T10884] ? _raw_spin_unlock_irq+0x2e/0x50 [ 576.234716][T10884] ? __task_pid_nr_ns+0x28/0x470 [ 576.234752][T10884] do_syscall_64+0x14d/0xf80 [ 576.234773][T10884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.234795][T10884] ? clear_bhb_loop+0x40/0x90 [ 576.234821][T10884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.234841][T10884] RIP: 0033:0x7fae66f3db19 [ 576.234861][T10884] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 576.234879][T10884] RSP: 002b:00007fae67dcaa40 EFLAGS: 00000206 ORIG_RAX: 000000000000000f [ 576.234900][T10884] RAX: ffffffffffffffda RBX: 00007fae67dcb6c0 RCX: 00007fae66f3db19 [ 576.234913][T10884] RDX: 00007fae67dcaa40 RSI: 00007fae67dcab70 RDI: 0000000000000021 [ 576.234927][T10884] RBP: 00007fae67dcb090 R08: 0000000000000000 R09: 0000000000000000 [ 576.234939][T10884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000004 [ 576.234950][T10884] R13: 00007fae67216038 R14: 00007fae67215fa0 R15: 00007ffc5c1dab18 [ 576.234982][T10884] [ 576.491660][T10888] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 576.595711][T10892] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1771'. [ 577.080161][ T6003] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 577.240541][ T6003] usb 5-1: Using ep0 maxpacket: 32 [ 577.255327][ T6003] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 577.267123][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.281766][ T6003] usb 5-1: Product: syz [ 577.290988][ T6003] usb 5-1: Manufacturer: syz [ 577.299820][ T6003] usb 5-1: SerialNumber: syz [ 577.314531][ T6003] usb 5-1: config 0 descriptor?? [ 577.980106][ T6003] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 251090988 serial 5A4317D1.9C335B1A (2 channels) [ 578.007960][ T6003] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 578.023792][ T6003] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 578.128405][ T6003] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 578.177821][T10910] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 578.188413][T10910] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 578.214304][T10910] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 578.225024][ T6003] usb 5-1: USB disconnect, device number 49 [ 578.278565][ T809] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 578.471480][ T809] usb 3-1: unable to get BOS descriptor or descriptor too short [ 578.504844][ T809] usb 3-1: config 212 has an invalid interface number: 134 but max is 0 [ 578.515252][ T809] usb 3-1: config 212 has no interface number 0 [ 578.537643][ T809] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a5b, bcdDevice=29.cd [ 578.547103][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.567183][ T809] usb 3-1: Product: ಩⑤ꊞ嬻窻㉼濿㩅◒Ỡ뀉⨟苋ᢙ獙퇓䬸캐ꊥ쪝㭳ᰖ촙䞞鿭⏬᧑Ǫﲦ㮊は⎃ധ [ 578.598616][ T809] usb 3-1: Manufacturer: 㐉 [ 578.608808][ T809] usb 3-1: SerialNumber: Ы [ 578.866027][ T809] usb 3-1: USB disconnect, device number 92 [ 579.495507][ T31] INFO: task syz.1.745:7916 blocked for more than 143 seconds. [ 579.521775][ T31] Tainted: G L syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.544508][ T31] Blocked by coredump. [ 579.563502][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.586137][ T31] task:syz.1.745 state:D stack:24512 pid:7916 tgid:7908 ppid:5882 task_flags:0x40044c flags:0x00080000 [ 579.619880][ T31] Call Trace: [ 579.623339][ T31] [ 579.629687][ T31] __schedule+0x1665/0x5590 [ 579.642267][ T31] ? __pfx___schedule+0x10/0x10 [ 579.654778][ T31] ? schedule+0x90/0x360 [ 579.670268][ T31] schedule+0x164/0x360 [ 579.676766][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.687029][ T31] rwsem_down_read_slowpath+0x6d9/0x940 [ 579.708666][ T31] ? rwsem_down_read_slowpath+0x596/0x940 [ 579.722681][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 579.741817][ T31] ? do_futex+0x395/0x420 [ 579.764601][ T31] down_read+0x99/0x2e0 [ 579.776306][ T31] ? exit_mm+0x64/0x250 [ 579.803210][ T31] exit_mm+0x73/0x250 [ 579.823279][ T31] ? unwind_deferred_task_exit+0x67/0xa0 [ 579.852647][ T31] do_exit+0x8b9/0x2490 [ 579.876204][ T31] ? __pfx_do_exit+0x10/0x10 [ 579.902955][ T31] do_group_exit+0x21b/0x2d0 [ 579.922374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 579.940796][ T31] get_signal+0x1284/0x1330 [ 579.957469][ T31] arch_do_signal_or_restart+0xbc/0x830 [ 579.973798][ T31] ? __pfx___se_sys_mremap+0x10/0x10 [ 579.997360][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 580.018724][ T31] ? exc_page_fault+0x6a/0xc0 [ 580.023691][ T31] exit_to_user_mode_loop+0x86/0x480 [ 580.029051][ T31] ? rcu_is_watching+0x15/0xb0 [ 580.041605][ T31] do_syscall_64+0x32d/0xf80 [ 580.048312][ T31] ? trace_irq_disable+0x3b/0x150 [ 580.061468][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.068406][ T31] ? clear_bhb_loop+0x40/0x90 [ 580.073233][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.079176][ T31] RIP: 0033:0x7fd08919c799 [ 580.083679][ T31] RSP: 002b:00007fd0873f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 580.092133][ T31] RAX: fffffffffffffffc RBX: 00007fd089416180 RCX: 00007fd08919c799 [ 580.100212][ T31] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 580.108257][ T31] RBP: 00007fd089232c99 R08: 0000200000130000 R09: 0000000000000000 [ 580.116308][ T31] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 580.124313][ T31] R13: 00007fd089416218 R14: 00007fd089416180 R15: 00007ffc7d350fd8 [ 580.132482][ T31] [ 580.135640][ T31] [ 580.135640][ T31] Showing all locks held in the system: [ 580.152806][ T31] no locks held by rcu_exp_gp_kthr/18. [ 580.159772][ T31] 1 lock held by khungtaskd/31: [ 580.164703][ T31] #0: ffffffff8eb5d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 580.182843][ T31] 2 locks held by getty/5601: [ 580.197899][ T31] #0: ffff8880381cf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 580.232593][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 580.260449][ T31] 3 locks held by kworker/0:6/6003: [ 580.275681][ T31] #0: ffff88813fe03140 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x894/0x1780 [ 580.310355][ T31] #1: ffffc90004a97c40 (free_ipc_work){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1780 [ 580.330146][ T31] #2: ffffffff8eb63928 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 580.360660][ T31] 1 lock held by syz.3.656/7697: [ 580.365700][ T31] #0: ffffffff8eb637f8 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 580.393584][ T31] 1 lock held by syz.1.745/7908: [ 580.399244][ T31] #0: ffff88803597ce38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 580.427972][ T31] 1 lock held by syz.1.745/7909: [ 580.444101][ T31] #0: ffff88803597ce38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 580.475728][ T31] 1 lock held by syz.1.745/7916: [ 580.490695][ T31] #0: ffff88803597ce38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250 [ 580.531314][ T31] 1 lock held by syz.1.745/7917: [ 580.552956][ T31] #0: ffff88803597ce38 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70 [ 580.575907][ T31] 1 lock held by syz.3.865/8233: [ 580.592742][ T31] 1 lock held by syz-executor/9932: [ 580.609774][ T31] 1 lock held by syz.4.1785/10928: [ 580.627267][ T31] [ 580.637014][ T31] ============================================= [ 580.637014][ T31] [ 580.698956][ T31] NMI backtrace for cpu 1 [ 580.698981][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 580.699007][ T31] Tainted: [L]=SOFTLOCKUP [ 580.699014][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.699026][ T31] Call Trace: [ 580.699033][ T31] [ 580.699041][ T31] dump_stack_lvl+0xe8/0x150 [ 580.699075][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 580.699101][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 580.699131][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 580.699157][ T31] sys_info+0x135/0x170 [ 580.699178][ T31] watchdog+0x1002/0x1060 [ 580.699207][ T31] ? watchdog+0x1da/0x1060 [ 580.699234][ T31] kthread+0x388/0x470 [ 580.699257][ T31] ? __pfx_watchdog+0x10/0x10 [ 580.699276][ T31] ? __pfx_kthread+0x10/0x10 [ 580.699299][ T31] ret_from_fork+0x51e/0xb90 [ 580.699327][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 580.699352][ T31] ? __switch_to+0xc7d/0x1450 [ 580.699378][ T31] ? __pfx_kthread+0x10/0x10 [ 580.699401][ T31] ret_from_fork_asm+0x1a/0x30 [ 580.699431][ T31] [ 580.699438][ T31] Sending NMI from CPU 1 to CPUs 0: [ 580.817355][ C0] NMI backtrace for cpu 0 [ 580.817374][ C0] CPU: 0 UID: 0 PID: 10695 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 580.817398][ C0] Tainted: [L]=SOFTLOCKUP [ 580.817405][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.817415][ C0] RIP: 0010:__lock_acquire+0x2be/0x2cf0 [ 580.817447][ C0] Code: 24 18 0f 83 14 28 00 00 48 89 6c 24 28 48 8d 04 ad 00 00 00 00 48 01 e8 89 f1 81 e1 ff 1f 00 00 ba 00 e0 ff ff 41 23 54 c7 20 <09> ca 41 89 54 c7 20 4d 89 44 c7 08 4d 89 4c c7 10 48 8b 94 24 20 [ 580.817461][ C0] RSP: 0018:ffffc900042675d8 EFLAGS: 00000006 [ 580.817477][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000007 [ 580.817489][ C0] RDX: 0000000000020000 RSI: 0000000000000007 RDI: 0000000000000000 [ 580.817500][ C0] RBP: 0000000000000000 R08: ffffffff81778bb5 R09: ffffffff8eb5d6e0 [ 580.817512][ C0] R10: ffffc900042678b8 R11: ffffffff81b21b20 R12: 0000000000000000 [ 580.817524][ C0] R13: 0000000000000002 R14: ffff888027701e80 R15: ffff8880277029d0 [ 580.817536][ C0] FS: 0000000000000000(0000) GS:ffff888124de1000(0000) knlGS:0000000000000000 [ 580.817550][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.817562][ C0] CR2: 0000200001000000 CR3: 000000000e94a000 CR4: 00000000003526f0 [ 580.817578][ C0] Call Trace: [ 580.817585][ C0] [ 580.817594][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 580.817620][ C0] ? irqentry_exit+0x61a/0x700 [ 580.817639][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817658][ C0] lock_acquire+0xf0/0x2e0 [ 580.817680][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817698][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817713][ C0] ? vfree+0x1d1/0x2f0 [ 580.817736][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817751][ C0] unwind_next_frame+0xc2/0x23c0 [ 580.817766][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817785][ C0] ? unwind_next_frame+0xa5/0x23c0 [ 580.817800][ C0] ? __free_frozen_pages+0xbf0/0xd00 [ 580.817826][ C0] ? vfree+0x1d1/0x2f0 [ 580.817848][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 580.817870][ C0] arch_stack_walk+0x11b/0x150 [ 580.817888][ C0] ? vfree+0x1d1/0x2f0 [ 580.817912][ C0] stack_trace_save+0xa9/0x100 [ 580.817932][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 580.817952][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 580.817984][ C0] save_stack+0x122/0x230 [ 580.818010][ C0] ? __pfx_save_stack+0x10/0x10 [ 580.818034][ C0] ? __free_frozen_pages+0xbf0/0xd00 [ 580.818058][ C0] ? vfree+0x1d1/0x2f0 [ 580.818084][ C0] ? page_ext_put+0x97/0xc0 [ 580.818111][ C0] __reset_page_owner+0x71/0x1f0 [ 580.818136][ C0] __free_frozen_pages+0xbf0/0xd00 [ 580.818162][ C0] ? ___free_pages+0x9a/0x1b0 [ 580.818180][ C0] vfree+0x1d1/0x2f0 [ 580.818203][ C0] ? __pfx_kcov_close+0x10/0x10 [ 580.818223][ C0] kcov_close+0x28/0x50 [ 580.818241][ C0] __fput+0x451/0x8c0 [ 580.818266][ C0] task_work_run+0x1d9/0x270 [ 580.818288][ C0] ? __pfx_task_work_run+0x10/0x10 [ 580.818309][ C0] ? kmem_cache_free+0x189/0x640 [ 580.818325][ C0] ? do_exit+0x921/0x2490 [ 580.818345][ C0] do_exit+0x926/0x2490 [ 580.818371][ C0] ? __pfx_do_exit+0x10/0x10 [ 580.818389][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 580.818413][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.818438][ C0] do_group_exit+0x21b/0x2d0 [ 580.818460][ C0] __x64_sys_exit_group+0x3f/0x40 [ 580.818479][ C0] x64_sys_call+0x221a/0x2240 [ 580.818496][ C0] do_syscall_64+0x14d/0xf80 [ 580.818512][ C0] ? trace_irq_disable+0x3b/0x150 [ 580.818532][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.818549][ C0] ? clear_bhb_loop+0x40/0x90 [ 580.818568][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.818585][ C0] RIP: 0033:0x7fae66f9c799 [ 580.818598][ C0] Code: Unable to access opcode bytes at 0x7fae66f9c76f. [ 580.818607][ C0] RSP: 002b:00007ffc5c1dad68 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 580.818624][ C0] RAX: ffffffffffffffda RBX: 00007fae67033be1 RCX: 00007fae66f9c799 [ 580.818636][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 580.818646][ C0] RBP: 00007fae67033bf3 R08: 0000000000000000 R09: 00000000000927c0 [ 580.818658][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 580.818668][ C0] R13: 00000000000927c0 R14: 000000000008ba86 R15: 00007ffc5c1daf10 [ 580.818686][ C0] [ 581.294310][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 581.301240][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 581.311993][ T31] Tainted: [L]=SOFTLOCKUP [ 581.316344][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.326431][ T31] Call Trace: [ 581.329748][ T31] [ 581.332731][ T31] vpanic+0x56c/0xa60 [ 581.336759][ T31] ? __pfx___schedule+0x10/0x10 [ 581.341673][ T31] ? __pfx_vpanic+0x10/0x10 [ 581.346216][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 581.352423][ T31] panic+0xc5/0xd0 [ 581.356217][ T31] ? __pfx_panic+0x10/0x10 [ 581.360724][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 581.366145][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 581.372348][ T31] watchdog+0x105b/0x1060 [ 581.376731][ T31] ? watchdog+0x1da/0x1060 [ 581.381193][ T31] kthread+0x388/0x470 [ 581.385304][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.390015][ T31] ? __pfx_kthread+0x10/0x10 [ 581.394650][ T31] ret_from_fork+0x51e/0xb90 [ 581.399307][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 581.404475][ T31] ? __switch_to+0xc7d/0x1450 [ 581.409194][ T31] ? __pfx_kthread+0x10/0x10 [ 581.413833][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.418654][ T31] [ 581.423552][ T31] Kernel Offset: disabled [ 581.427903][ T31] Rebooting in 86400 seconds..