last executing test programs: 3m20.176976973s ago: executing program 3 (id=19): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$packet(0x11, 0x3, 0x300) close(0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./tracefs/dynamic_events\x00', 0x2, 0x0) read(r0, &(0x7f00000023c0)=""/124, 0x7c) 3m19.955280946s ago: executing program 3 (id=21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x5, 0x3, 0x70000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m18.879150055s ago: executing program 3 (id=23): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f00000011c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3m16.246612538s ago: executing program 3 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 3m16.07122625s ago: executing program 3 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}}, {{0x2, 0x4e20, @local}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m15.70751698s ago: executing program 3 (id=40): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x805}, @val={0x2, 0x4, 0x7, 0x7, 0xfffb, 0x6}, @x25={0x0, 0x0, 0x1}}, 0x11) 3m15.427597066s ago: executing program 32 (id=40): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x805}, @val={0x2, 0x4, 0x7, 0x7, 0xfffb, 0x6}, @x25={0x0, 0x0, 0x1}}, 0x11) 2m56.108972627s ago: executing program 0 (id=138): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xd5a6, 0x9, 0x0, 0xfffffffd, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m55.157254322s ago: executing program 0 (id=142): socket$netlink(0x10, 0x3, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./config/usb_gadget/g1/functions/midi.usb0/index\x00', 0x1, 0x0) write(r0, &(0x7f00000003f0)='-1', 0x2) 2m54.782814599s ago: executing program 0 (id=145): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 2m53.751668178s ago: executing program 0 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(0x0, 0x8) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 2m53.524078139s ago: executing program 0 (id=157): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x30) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2m52.813567824s ago: executing program 0 (id=169): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x1, "eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r2, &(0x7f0000000200)=""/80, 0x50) 2m52.405819137s ago: executing program 33 (id=169): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x3, 0x40, &(0x7f00000006c0)=ANY=[], 0x0) syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000100)="9001000000000000") r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x1, "eb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$char_usb(r2, &(0x7f0000000200)=""/80, 0x50) 52.735361321s ago: executing program 2 (id=975): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000140)={@align=0x1, {0x6, 0x0, 0x4, 0x8000000000000001}}, 0x6, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000140)={0x4, 0xa, 0x2, 0x7ff, "6f6bdd827579e0b8d9f885670dbdef11f85fdc02aedb8f56a07922fe995896cc"}) 50.926456185s ago: executing program 2 (id=990): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000100)='oom_score_adj\x00') syz_usb_disconnect(0xffffffffffffffff) write$sysctl(r2, &(0x7f0000000200)='5\x00', 0x2) 50.106559923s ago: executing program 2 (id=994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) 50.001362179s ago: executing program 2 (id=995): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./debug\x00') pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0/../file0/../file0/../file0\x00') 49.927985273s ago: executing program 2 (id=996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "bada2acbe0b79dfb", "879b9fc205ab057ee05cff4c8a69d4dc", "7cb5b3a7", "cf0a54357fd46cb8"}, 0x28) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 49.29161596s ago: executing program 2 (id=997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 49.098961715s ago: executing program 34 (id=997): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sync() r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 23.990629231s ago: executing program 4 (id=1137): r0 = syz_usb_connect(0x3, 0x60, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402004c601000000000109024e0001010080fa0904000000ff0000000904000103ff0000000705810200020007050202000200070584020002000904000203ff0000000705820300020407050202"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 22.437701945s ago: executing program 4 (id=1151): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902440001fd00000009040000ff0202ffff052406000005240000000d240f010000000000000000000905810320000000000905820220000000000905030208"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000400)={0x40, 0x9, 0x8, "0800000000000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) 19.463031151s ago: executing program 4 (id=1165): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1c) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r1 = semget(0x0, 0x2, 0x30) semop(r1, &(0x7f0000000180)=[{0x3, 0x8000, 0x1800}], 0x1f4) 19.119639403s ago: executing program 4 (id=1167): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 19.027564054s ago: executing program 4 (id=1168): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x10000, 0x2, 0x2bf}, 0x0, 0x0, &(0x7f0000000240)) mmap$IORING_OFF_CQ_RING(0x0, 0x782, 0x1000002, 0x12, r1, 0x8000000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r0, &(0x7f0000000180)={0x0, 0xa124, 0x0, 0xfffffffe, 0x15a}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7333, 0x2, 0x40040081, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x0, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 16.930381878s ago: executing program 4 (id=1182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005240)={0x2020}, 0x2020) 16.336108248s ago: executing program 35 (id=1182): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050505050505f00ff"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000005240)={0x2020}, 0x2020) 15.563134627s ago: executing program 5 (id=1189): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 11.997173991s ago: executing program 5 (id=1205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x6005}, @void, @eth={@multicast, @multicast, @val={@void, {0x8100, 0x7, 0x1, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xe4, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010101, @loopback}}}}}}, 0x2a) 11.386628493s ago: executing program 5 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffffffffffffff88a84f028100400086dd63acca10001000ff000000000000000000000000000000002001000000000000000000000000000167010103"], 0x4e) 11.17263713s ago: executing program 5 (id=1198): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 11.052789411s ago: executing program 5 (id=1203): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x4, 0x0, 0x0, 0xc92}, {0x16, 0x3}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x88050000, 0x0, 0x0) 9.176905331s ago: executing program 5 (id=1214): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) 8.809948696s ago: executing program 36 (id=1214): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) 6.73174913s ago: executing program 1 (id=1223): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000066b8f7008ec0", 0x7e}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.299835075s ago: executing program 1 (id=1224): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000001500)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) 6.07996794s ago: executing program 7 (id=1225): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x60, 0xc, 0x6, "21b5141e671c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5.367770351s ago: executing program 1 (id=1227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.179971753s ago: executing program 7 (id=1229): sendmsg$alg(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x208, 0x20048040}, 0x48010) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setxattr$trusted_overlay_upper(0x0, 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f5, 0x0) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl(r0, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") 3.178119806s ago: executing program 1 (id=1235): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001030000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x18, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000005c0)={0x60, 0xc, 0x6, "21b5141e671c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.863047752s ago: executing program 7 (id=1230): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) 2.786611892s ago: executing program 6 (id=1231): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 2.645354259s ago: executing program 7 (id=1232): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/mjpeg/m1/bmaControls\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) 2.462131528s ago: executing program 7 (id=1233): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8032, 0xffffffffffffffff, 0x28f41000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.36588646s ago: executing program 6 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000780)={{}, {}, [], {0x4, 0x2}, [], {0x10, 0x1}, {0x20, 0x1}}, 0x24, 0x3) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2, 0x3, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x9cea}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000003c0)={0x50, 0xffffffffffffffda, 0x5, {0x7, 0x2d, 0x6, 0x450c402, 0x8, 0x7ff, 0x1, 0x1, 0x0, 0x0, 0x10, 0xa4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) 2.084599656s ago: executing program 6 (id=1236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa8000066b8f7008ec0", 0x7e}], 0x1, 0x74, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.714883332s ago: executing program 6 (id=1237): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000001500)='pagemap\x00') syz_usb_disconnect(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) 728.936668ms ago: executing program 6 (id=1238): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x5, 0xd6fe2, 0x3b3015, 0x534}) 557.348721ms ago: executing program 1 (id=1239): r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r0, &(0x7f0000000100)={0x0, ""/1}, 0x2063, 0x0, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) write$binfmt_elf32(r1, &(0x7f0000004000)=ANY=[], 0x1358) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r1, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x200000000000001, 0x8, 0x7f, 0x3}) 523.14623ms ago: executing program 7 (id=1240): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1b9) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000000)=ANY=[], 0x0) 30.745699ms ago: executing program 1 (id=1241): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) 0s ago: executing program 6 (id=1242): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x1403, 0x1, 0x70bd2a}, 0x10}}, 0x4000800) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0xa, 0x3a}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) kernel console output (not intermixed with test programs): escriptor, different from the interface descriptor's value: 5 [ 225.493706][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.497602][ T25] usb 3-1: config 0 descriptor?? [ 225.844825][ T8530] syzkaller1: entered promiscuous mode [ 225.844856][ T8530] syzkaller1: entered allmulticast mode [ 225.906571][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906599][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906619][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906637][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906656][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906674][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906693][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.906711][ T25] lenovo 0003:17EF:6047.0016: unknown main item tag 0x0 [ 225.954216][ T25] lenovo 0003:17EF:6047.0016: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 226.108743][ T8512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.305781][ T25] lenovo 0003:17EF:6047.0016: Failed to switch middle button: -71 [ 226.306285][ T25] lenovo 0003:17EF:6047.0016: Fn-lock setting failed: -71 [ 226.306765][ T25] lenovo 0003:17EF:6047.0016: Sensitivity setting failed: -71 [ 226.336658][ T25] usb 3-1: USB disconnect, device number 25 [ 226.490557][ T5694] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 226.491063][ T5715] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 226.641153][ T5715] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 226.642294][ T5694] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 226.643082][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.643115][ T5715] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.645934][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.645953][ T5715] usb 5-1: Product: syz [ 226.645963][ T5715] usb 5-1: Manufacturer: syz [ 226.645974][ T5715] usb 5-1: SerialNumber: syz [ 226.647706][ T5694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.647739][ T5694] usb 2-1: Product: syz [ 226.647750][ T5694] usb 2-1: Manufacturer: syz [ 226.647761][ T5694] usb 2-1: SerialNumber: syz [ 226.662311][ T5694] usb 2-1: config 0 descriptor?? [ 226.691964][ T5694] gspca_main: spca508-2.14.0 probing 041e:4018 [ 226.885902][ T5694] gspca_spca508: reg_read err -32 [ 226.887859][ T5694] gspca_spca508: reg_read err -32 [ 226.888710][ T5694] gspca_spca508: reg_read err -32 [ 227.090083][ T5694] gspca_spca508: reg_read err -71 [ 227.097329][ T5694] gspca_spca508: reg write: error -71 [ 227.097500][ T5694] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 227.117995][ T5694] usb 2-1: USB disconnect, device number 24 [ 227.146275][ T8187] Bluetooth: hci1: command 0x0406 tx timeout [ 227.182453][ T9] usb 5-1: USB disconnect, device number 22 [ 227.242536][ T5747] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 227.394025][ T5747] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.394081][ T5747] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 227.396644][ T5747] usb 3-1: config 8 has an invalid interface number: 109 but max is 0 [ 227.396673][ T5747] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 227.396695][ T5747] usb 3-1: config 8 has no interface number 0 [ 227.396738][ T5747] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 227.396769][ T5747] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 227.396799][ T5747] usb 3-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 151, setting to 8 [ 227.414756][ T5747] usb 3-1: string descriptor 0 read error: -22 [ 227.415126][ T5747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.471387][ T8545] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 227.509860][ T5747] metro_usb 3-1:8.109: Metrologic USB to Serial converter detected [ 227.526173][ T5747] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 228.300868][ T25] usb 3-1: USB disconnect, device number 26 [ 228.311020][ T25] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 228.330544][ T25] metro_usb 3-1:8.109: device disconnected [ 228.555769][ T8591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.654124][ T8595] netlink: 'syz.5.879': attribute type 2 has an invalid length. [ 228.654165][ T8595] netlink: 'syz.5.879': attribute type 2 has an invalid length. [ 228.967485][ T8608] FAULT_INJECTION: forcing a failure. [ 228.967485][ T8608] name failslab, interval 1, probability 0, space 0, times 0 [ 228.967535][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.5.882 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.967568][ T8608] Tainted: [L]=SOFTLOCKUP [ 228.967576][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.967591][ T8608] Call Trace: [ 228.967599][ T8608] [ 228.967609][ T8608] dump_stack_lvl+0xe8/0x150 [ 228.967646][ T8608] should_fail_ex+0x3eb/0x540 [ 228.967678][ T8608] should_failslab+0xa8/0x100 [ 228.967706][ T8608] __kmalloc_cache_noprof+0x9e/0x600 [ 228.967746][ T8608] ? sctp_add_bind_addr+0x8c/0x370 [ 228.967775][ T8608] ? sctp_add_bind_addr+0x8c/0x370 [ 228.967805][ T8608] ? __pfx_sctp_get_port_local+0x10/0x10 [ 228.967847][ T8608] sctp_add_bind_addr+0x8c/0x370 [ 228.967875][ T8608] ? sctp_auto_asconf_init+0x14d/0x1d0 [ 228.967915][ T8608] sctp_do_bind+0x597/0x9a0 [ 228.967961][ T8608] sctp_connect_new_asoc+0x270/0x6b0 [ 228.968001][ T8608] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 228.968046][ T8608] ? __local_bh_enable_ip+0xd6/0x140 [ 228.968070][ T8608] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 228.968099][ T8608] ? security_sctp_bind_connect+0x7e/0x2c0 [ 228.968140][ T8608] sctp_sendmsg+0x159b/0x2d00 [ 228.968188][ T8608] ? __pfx_futex_wake_mark+0x10/0x10 [ 228.968219][ T8608] ? __pfx_sctp_sendmsg+0x10/0x10 [ 228.968277][ T8608] ? aa_sock_msg_perm+0xf5/0x210 [ 228.968304][ T8608] ? sock_rps_record_flow+0x19/0x350 [ 228.968339][ T8608] ? inet_sendmsg+0x298/0x320 [ 228.968372][ T8608] ? __pfx_inet_sendmsg+0x10/0x10 [ 228.968401][ T8608] sock_sendmsg_nosec+0x10e/0x180 [ 228.968437][ T8608] __sys_sendto+0x408/0x5a0 [ 228.968466][ T8608] ? __pfx___sys_sendto+0x10/0x10 [ 228.968527][ T8608] ? rcu_is_watching+0x16/0xb0 [ 228.968560][ T8608] __x64_sys_sendto+0xde/0x100 [ 228.968588][ T8608] do_syscall_64+0x166/0x520 [ 228.968610][ T8608] ? trace_irq_disable+0x3b/0x140 [ 228.968643][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.968669][ T8608] ? clear_bhb_loop+0x70/0xc0 [ 228.968697][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.968721][ T8608] RIP: 0033:0x7f081c59e159 [ 228.968743][ T8608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.968764][ T8608] RSP: 002b:00007f081d514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 228.968790][ T8608] RAX: ffffffffffffffda RBX: 00007f081c825fa0 RCX: 00007f081c59e159 [ 228.968808][ T8608] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 228.968824][ T8608] RBP: 00007f081c63503b R08: 000020000005ffe4 R09: 000000000000001c [ 228.968840][ T8608] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000000 [ 228.968855][ T8608] R13: 00007f081c826038 R14: 00007f081c825fa0 R15: 00007ffd90cca938 [ 228.968892][ T8608] [ 230.035966][ T8612] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 230.352114][ T5694] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 230.510493][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 230.518612][ T5694] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 230.541945][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.541974][ T5694] usb 5-1: Product: syz [ 230.541991][ T5694] usb 5-1: Manufacturer: syz [ 230.542007][ T5694] usb 5-1: SerialNumber: syz [ 230.805627][ T8664] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.090698][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 231.250551][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 231.251351][ T25] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 231.252743][ T25] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 231.252770][ T25] usb 2-1: config 0 has no interface number 0 [ 231.252844][ T25] usb 2-1: config 0 interface 12 has no altsetting 0 [ 231.256328][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.256356][ T25] usb 2-1: Product: syz [ 231.256407][ T25] usb 2-1: Manufacturer: syz [ 231.256425][ T25] usb 2-1: SerialNumber: syz [ 231.319586][ T25] usb 2-1: config 0 descriptor?? [ 231.650719][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 231.800513][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 231.803977][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.804029][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 231.805203][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 231.809865][ T9] usb 6-1: string descriptor 0 read error: -22 [ 231.809960][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 231.875565][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 231.934907][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.935280][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 231.935336][ T9] usb 6-1: media controller created [ 232.000133][ T5694] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 232.011895][ T5694] usb 5-1: USB disconnect, device number 23 [ 232.044211][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.613032][ T25] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 232.613121][ T25] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 232.613141][ T25] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 232.613260][ T25] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 232.664153][ T25] usb 2-1: USB disconnect, device number 25 [ 233.169874][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 233.263060][ T9] usb 6-1: USB disconnect, device number 19 [ 233.322400][ T8696] FAULT_INJECTION: forcing a failure. [ 233.322400][ T8696] name failslab, interval 1, probability 0, space 0, times 0 [ 233.322438][ T8696] CPU: 1 UID: 0 PID: 8696 Comm: syz.2.907 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.322470][ T8696] Tainted: [L]=SOFTLOCKUP [ 233.322480][ T8696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.322493][ T8696] Call Trace: [ 233.322503][ T8696] [ 233.322512][ T8696] dump_stack_lvl+0xe8/0x150 [ 233.322548][ T8696] should_fail_ex+0x3eb/0x540 [ 233.322581][ T8696] should_failslab+0xa8/0x100 [ 233.322618][ T8696] ? prepare_creds+0x30/0x820 [ 233.322654][ T8696] kmem_cache_alloc_noprof+0x9c/0x600 [ 233.322688][ T8696] ? __pfx___mutex_lock+0x10/0x10 [ 233.322709][ T8696] ? prepare_creds+0x30/0x820 [ 233.322743][ T8696] ? __up_read+0x29c/0x930 [ 233.322772][ T8696] prepare_creds+0x30/0x820 [ 233.322811][ T8696] prepare_exec_creds+0x18/0x220 [ 233.322849][ T8696] bprm_execve+0xe7/0x1590 [ 233.322884][ T8696] ? copy_string_kernel+0x5b4/0x5f0 [ 233.322925][ T8696] ? __pfx_bprm_execve+0x10/0x10 [ 233.322963][ T8696] ? alloc_bprm+0x57d/0x640 [ 233.322999][ T8696] do_execveat_common+0x99f/0xbd0 [ 233.323038][ T8696] ? do_getname+0x151/0x250 [ 233.323065][ T8696] __x64_sys_execveat+0xc7/0xf0 [ 233.323106][ T8696] do_syscall_64+0x166/0x520 [ 233.323126][ T8696] ? trace_irq_disable+0x3b/0x140 [ 233.323157][ T8696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.323181][ T8696] ? clear_bhb_loop+0x70/0xc0 [ 233.323208][ T8696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.323231][ T8696] RIP: 0033:0x7f009cb9e159 [ 233.323259][ T8696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.323279][ T8696] RSP: 002b:00007f009d9e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 233.323304][ T8696] RAX: ffffffffffffffda RBX: 00007f009ce25fa0 RCX: 00007f009cb9e159 [ 233.323321][ T8696] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 233.323336][ T8696] RBP: 00007f009cc3503b R08: 0000000000001000 R09: 0000000000000000 [ 233.323351][ T8696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.323365][ T8696] R13: 00007f009ce26038 R14: 00007f009ce25fa0 R15: 00007fffb462ecc8 [ 233.323400][ T8696] [ 233.664333][ T8700] lo speed is unknown, defaulting to 1000 [ 234.872341][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 235.021210][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 235.022247][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.022297][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 235.022326][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 235.022369][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.250926][ T5694] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 235.423568][ T5694] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.427868][ T5694] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.427901][ T5694] usb 5-1: Product: syz [ 235.427919][ T5694] usb 5-1: Manufacturer: syz [ 235.427938][ T5694] usb 5-1: SerialNumber: syz [ 235.470990][ T9] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 235.471033][ T9] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 235.471051][ T9] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 235.476217][ T9] cxacru 3-1:1.0: probe with driver cxacru failed with error -71 [ 235.499586][ T9] usb 3-1: USB disconnect, device number 27 [ 235.526180][ T5694] usb 5-1: config 0 descriptor?? [ 235.724131][ T8760] netlink: 'syz.5.930': attribute type 2 has an invalid length. [ 235.724159][ T8760] netlink: 'syz.5.930': attribute type 8 has an invalid length. [ 235.724174][ T8760] netlink: 'syz.5.930': attribute type 9 has an invalid length. [ 235.724190][ T8760] netlink: 24 bytes leftover after parsing attributes in process `syz.5.930'. [ 235.780571][ T5694] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.863036][ T8762] lo speed is unknown, defaulting to 1000 [ 236.031621][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 236.181239][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 236.182908][ T9] usb 2-1: config index 0 descriptor too short (expected 64, got 18) [ 236.182937][ T9] usb 2-1: config 15 has an invalid descriptor of length 199, skipping remainder of the config [ 236.182970][ T9] usb 2-1: config 15 has no interfaces? [ 236.183005][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.581512][ T9] usb 2-1: string descriptor 0 read error: -71 [ 236.588511][ T9] usb 2-1: USB disconnect, device number 26 [ 236.611597][ T5694] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 236.616281][ T5694] usb 5-1: USB disconnect, device number 24 [ 236.990337][ T8778] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1424729573 (182365385344 ns) > initial count (134528494848 ns). Using initial count to start timer. [ 237.283196][ T8788] FAULT_INJECTION: forcing a failure. [ 237.283196][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 237.283236][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.4.942 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.283267][ T8788] Tainted: [L]=SOFTLOCKUP [ 237.283276][ T8788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.283300][ T8788] Call Trace: [ 237.283309][ T8788] [ 237.283319][ T8788] dump_stack_lvl+0xe8/0x150 [ 237.283364][ T8788] should_fail_ex+0x3eb/0x540 [ 237.283394][ T8788] should_failslab+0xa8/0x100 [ 237.283419][ T8788] ? copy_sighand+0x50/0x220 [ 237.283446][ T8788] kmem_cache_alloc_noprof+0x9c/0x600 [ 237.283477][ T8788] ? do_raw_spin_unlock+0xf5/0x200 [ 237.283505][ T8788] ? copy_sighand+0x50/0x220 [ 237.283535][ T8788] ? copy_process+0xd37/0x43e0 [ 237.283559][ T8788] copy_sighand+0x50/0x220 [ 237.283586][ T8788] ? copy_process+0xd37/0x43e0 [ 237.283628][ T8788] copy_process+0x1db6/0x43e0 [ 237.283664][ T8788] ? copy_process+0xd37/0x43e0 [ 237.283708][ T8788] ? __pfx_copy_process+0x10/0x10 [ 237.283749][ T8788] kernel_clone+0x2d7/0x940 [ 237.283786][ T8788] ? __pfx_kernel_clone+0x10/0x10 [ 237.283825][ T8788] ? do_futex+0x3e7/0x4e0 [ 237.283857][ T8788] __x64_sys_clone+0x1b6/0x230 [ 237.283890][ T8788] ? __pfx___x64_sys_clone+0x10/0x10 [ 237.283933][ T8788] ? __pfx___se_sys_futex+0x10/0x10 [ 237.283959][ T8788] ? rcu_is_watching+0x16/0xb0 [ 237.283995][ T8788] do_syscall_64+0x166/0x520 [ 237.284017][ T8788] ? trace_irq_disable+0x3b/0x140 [ 237.284051][ T8788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.284075][ T8788] ? clear_bhb_loop+0x70/0xc0 [ 237.284104][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.284128][ T8788] RIP: 0033:0x7ff89c99e159 [ 237.284149][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.284169][ T8788] RSP: 002b:00007ff89d8b6fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 237.284196][ T8788] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 237.284214][ T8788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.284229][ T8788] RBP: 00007ff89ca3503b R08: 0000000000000000 R09: 0000000000000000 [ 237.284244][ T8788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.284258][ T8788] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 237.284292][ T8788] [ 237.633020][ T8792] FAULT_INJECTION: forcing a failure. [ 237.633020][ T8792] name failslab, interval 1, probability 0, space 0, times 0 [ 237.633059][ T8792] CPU: 1 UID: 0 PID: 8792 Comm: syz.4.944 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.633091][ T8792] Tainted: [L]=SOFTLOCKUP [ 237.633099][ T8792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.633113][ T8792] Call Trace: [ 237.633122][ T8792] [ 237.633132][ T8792] dump_stack_lvl+0xe8/0x150 [ 237.633167][ T8792] should_fail_ex+0x3eb/0x540 [ 237.633198][ T8792] should_failslab+0xa8/0x100 [ 237.633224][ T8792] __kmalloc_noprof+0xf9/0x710 [ 237.633255][ T8792] ? prepare_creds+0x30/0x820 [ 237.633290][ T8792] ? security_prepare_creds+0x52/0x360 [ 237.633311][ T8792] ? security_prepare_creds+0x52/0x360 [ 237.633335][ T8792] ? kmem_cache_alloc_noprof+0x151/0x600 [ 237.633369][ T8792] security_prepare_creds+0x52/0x360 [ 237.633403][ T8792] prepare_creds+0x57d/0x820 [ 237.633443][ T8792] __sys_setregid+0xf5/0x650 [ 237.633471][ T8792] do_syscall_64+0x166/0x520 [ 237.633492][ T8792] ? trace_irq_disable+0x3b/0x140 [ 237.633523][ T8792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.633567][ T8792] ? clear_bhb_loop+0x70/0xc0 [ 237.633596][ T8792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.633619][ T8792] RIP: 0033:0x7ff89c99e159 [ 237.633641][ T8792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.633661][ T8792] RSP: 002b:00007ff89d8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 237.633687][ T8792] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 237.633705][ T8792] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee00 [ 237.633720][ T8792] RBP: 00007ff89ca3503b R08: 0000000000000000 R09: 0000000000000000 [ 237.633735][ T8792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.633752][ T8792] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 237.633787][ T8792] [ 238.019180][ T8798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.947'. [ 238.160630][ T5694] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 238.206251][ T5715] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 238.300573][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 238.321085][ T5694] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 238.322118][ T5694] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.322166][ T5694] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.322191][ T5694] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.322213][ T5694] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 238.322243][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.350680][ T5715] usb 5-1: Using ep0 maxpacket: 16 [ 238.362447][ T5715] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.362644][ T5715] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 238.366817][ T5715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.367054][ T5715] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 238.367219][ T5715] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 238.381425][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.381552][ T5715] usb 5-1: Product: syz [ 238.381594][ T5715] usb 5-1: Manufacturer: syz [ 238.381635][ T5715] usb 5-1: SerialNumber: syz [ 238.510502][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 238.511338][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 238.512401][ T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 238.514703][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.514729][ T10] usb 6-1: Product: syz [ 238.514745][ T10] usb 6-1: Manufacturer: syz [ 238.514762][ T10] usb 6-1: SerialNumber: syz [ 238.517799][ T10] usb 6-1: config 0 descriptor?? [ 238.572217][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 238.617335][ T5715] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 238.617883][ T5715] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.984641][ T8795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.985440][ T8795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.017254][ T5715] usb 5-1: 2:1 : bogus bTerminalLink 6 [ 239.272774][ T5715] usb 5-1: USB disconnect, device number 25 [ 239.324279][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.402520][ T5694] [drm] Initialized gud 1.0.0 for 2-1:1.0 on minor 1 [ 239.660464][ T5694] Console: switching to colour frame buffer device 128x48 [ 239.678779][ T5694] gud 2-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 239.690122][ T5694] usb 2-1: USB disconnect, device number 27 [ 239.706435][ T5694] Console: switching to colour VGA+ 80x25 [ 239.751961][ T10] gspca_zc3xx: reg_w_i err -71 [ 239.945981][ T8810] tipc: Enabled bearer , priority 10 [ 240.076115][ T8814] sg_write: data in/out 483328/136 bytes for SCSI command 0x0-- guessing data in; [ 240.076115][ T8814] program syz.4.961 not setting count and/or reply_len properly [ 240.360676][ T10] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 240.360772][ T10] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 240.367669][ T10] usb 6-1: USB disconnect, device number 20 [ 240.543214][ T8829] trusted_key: syz.4.957 sent an empty control message without MSG_MORE. [ 241.050501][ T5694] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 241.068197][ T25] tipc: Node number set to 4170786125 [ 241.080506][ T5715] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 241.201639][ T5694] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 241.202688][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 241.202712][ T5694] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.202740][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.205125][ T5694] usb 6-1: config 0 descriptor?? [ 241.230907][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 241.236896][ T5715] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 241.262571][ T5715] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 241.262600][ T5715] usb 2-1: config 0 has no interface number 0 [ 241.262866][ T5715] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 241.262941][ T5715] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 241.289389][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.289512][ T5715] usb 2-1: Product: syz [ 241.289552][ T5715] usb 2-1: Manufacturer: syz [ 241.289923][ T5715] usb 2-1: SerialNumber: syz [ 241.333659][ T5715] usb 2-1: config 0 descriptor?? [ 241.334386][ T8842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.334545][ T8842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.436600][ T8844] FAULT_INJECTION: forcing a failure. [ 241.436600][ T8844] name failslab, interval 1, probability 0, space 0, times 0 [ 241.436639][ T8844] CPU: 0 UID: 0 PID: 8844 Comm: syz.4.964 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.436668][ T8844] Tainted: [L]=SOFTLOCKUP [ 241.436677][ T8844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.436692][ T8844] Call Trace: [ 241.436701][ T8844] [ 241.436711][ T8844] dump_stack_lvl+0xe8/0x150 [ 241.436745][ T8844] should_fail_ex+0x3eb/0x540 [ 241.436779][ T8844] should_failslab+0xa8/0x100 [ 241.436807][ T8844] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 241.436846][ T8844] ? x509_get_sig_params+0xdb/0x630 [ 241.436873][ T8844] ? x509_get_sig_params+0xdb/0x630 [ 241.436906][ T8844] kmemdup_noprof+0x2b/0x70 [ 241.436943][ T8844] x509_get_sig_params+0xdb/0x630 [ 241.436976][ T8844] x509_cert_parse+0x514/0x7a0 [ 241.437008][ T8844] x509_key_preparse+0x64/0x6d0 [ 241.437030][ T8844] ? down_read+0x2b9/0x320 [ 241.437061][ T8844] asymmetric_key_preparse+0xb9/0x1b0 [ 241.437097][ T8844] __key_create_or_update+0x3a4/0xa70 [ 241.437135][ T8844] ? __pfx___key_create_or_update+0x10/0x10 [ 241.437179][ T8844] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 241.437215][ T8844] key_create_or_update+0x42/0x60 [ 241.437244][ T8844] __se_sys_add_key+0x349/0x420 [ 241.437281][ T8844] ? __pfx___se_sys_add_key+0x10/0x10 [ 241.437319][ T8844] ? __x64_sys_add_key+0x20/0xc0 [ 241.437355][ T8844] do_syscall_64+0x166/0x520 [ 241.437374][ T8844] ? trace_irq_disable+0x3b/0x140 [ 241.437407][ T8844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.437430][ T8844] ? clear_bhb_loop+0x70/0xc0 [ 241.437455][ T8844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.437479][ T8844] RIP: 0033:0x7ff89c99e159 [ 241.437510][ T8844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.437530][ T8844] RSP: 002b:00007ff89d8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 241.437557][ T8844] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 241.437573][ T8844] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 241.437588][ T8844] RBP: 00007ff89ca3503b R08: ffffffffffffffff R09: 0000000000000000 [ 241.437602][ T8844] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 241.437617][ T8844] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 241.437652][ T8844] [ 241.688839][ T8842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.688991][ T8842] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 241.719408][ T5694] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 241.719476][ T5694] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 241.719505][ T5694] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 241.719533][ T5694] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 241.719560][ T5694] elan 0003:04F3:0755.0017: unknown main item tag 0x0 [ 241.722639][ T5694] elan 0003:04F3:0755.0017: failed to start in urb: -90 [ 241.773983][ T5694] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 241.903202][ T5715] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 241.921550][ T31] audit: type=1326 audit(1789466522.067:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8839 comm="syz.5.963" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f081c59e159 code=0x0 [ 242.020351][ T10] usb 6-1: USB disconnect, device number 21 [ 242.140508][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 242.292223][ T9] usb 5-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 242.293494][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 242.293542][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.297713][ T8847] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 242.300149][ T9] opticon 5-1:1.0: opticon converter detected [ 242.346010][ T9] usb 5-1: opticon converter now attached to ttyUSB0 [ 242.927371][ T5715] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 242.927580][ T5715] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 242.928644][ T5715] asix 2-1:0.34: probe with driver asix failed with error -71 [ 242.969856][ T5715] usb 2-1: USB disconnect, device number 28 [ 243.082711][ T9] usb 5-1: USB disconnect, device number 26 [ 243.109301][ T9] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 243.119738][ T9] opticon 5-1:1.0: device disconnected [ 243.660494][ T5694] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 243.814839][ T5694] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 243.815847][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.815869][ T5694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.815897][ T5694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.818509][ T5694] usb 3-1: config 0 descriptor?? [ 244.009544][ T8884] bond0: option mode: unable to set because the bond device is up [ 244.250063][ T5694] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 244.250193][ T5694] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 244.287316][ T5694] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0018/input/input21 [ 244.355977][ T5694] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 244.452567][ T5747] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 244.546425][ T10] usb 3-1: USB disconnect, device number 29 [ 244.604369][ T5747] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 244.606916][ T5747] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 244.606958][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.606978][ T5747] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 244.607022][ T5747] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.608565][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 244.608588][ T5747] usb 2-1: Product: syz [ 244.608603][ T5747] usb 2-1: Manufacturer: syz [ 244.705157][ T5747] cdc_wdm 2-1:1.0: skipping garbage [ 244.705179][ T5747] cdc_wdm 2-1:1.0: skipping garbage [ 244.736203][ T5747] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 244.736226][ T5747] cdc_wdm 2-1:1.0: Unknown control protocol [ 244.974226][ C0] wdm_int_callback: 465 callbacks suppressed [ 244.974255][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 244.974273][ C0] wdm_int_callback: 465 callbacks suppressed [ 244.974290][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 244.974533][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 244.974556][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 244.974712][ T5694] usb 2-1: USB disconnect, device number 29 [ 244.974780][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 244.974801][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 244.974819][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 245.204252][ T5715] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 245.352488][ T5715] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 245.353567][ T5715] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 245.353594][ T5715] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 245.353638][ T5715] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.370124][ T5715] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 245.411255][ T5715] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 245.560520][ T5694] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 245.714241][ T5694] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 245.715924][ T5694] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.715955][ T5694] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 245.716026][ T5694] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.731210][ T8899] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 245.731871][ T8899] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 245.732685][ T8899] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 245.738359][ T5694] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 245.830503][ T8899] SPCP8x5 ttyUSB0: Set UART format 0xb failed (error = -32) [ 247.169591][ T8507] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 247.178796][ T8507] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 247.181126][ T8507] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 247.195229][ T8507] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 247.198191][ T8507] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 247.598283][ T8929] lo speed is unknown, defaulting to 1000 [ 247.622229][ T8507] Bluetooth: hci0: command 0x0406 tx timeout [ 247.874353][ T10] usb 5-1: USB disconnect, device number 27 [ 247.896025][ T10] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 247.909517][ T10] spcp8x5 5-1:1.0: device disconnected [ 248.125557][ T5702] usb 6-1: USB disconnect, device number 22 [ 248.140774][ T5702] idmouse 6-1:1.0: disconnected [ 248.203130][ T8929] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.203260][ T8929] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.203359][ T8929] bridge_slave_0: entered allmulticast mode [ 248.204710][ T8929] bridge_slave_0: entered promiscuous mode [ 248.211623][ T8929] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.211899][ T8929] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.212350][ T8929] bridge_slave_1: entered allmulticast mode [ 248.214193][ T8929] bridge_slave_1: entered promiscuous mode [ 248.285163][ T8929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.288041][ T8929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.325016][ T8929] team0: Port device team_slave_0 added [ 248.327406][ T8929] team0: Port device team_slave_1 added [ 248.364658][ T8929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.364684][ T8929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.364706][ T8929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.366446][ T8929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.366461][ T8929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.366492][ T8929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.482636][ T8929] hsr_slave_0: entered promiscuous mode [ 248.485013][ T8929] hsr_slave_1: entered promiscuous mode [ 248.486311][ T8929] debugfs: 'hsr0' already exists in 'hsr' [ 248.486334][ T8929] Cannot create hsr debugfs directory [ 248.836600][ T8954] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 248.836628][ T8954] overlayfs: failed to set xattr on upper [ 248.836637][ T8954] overlayfs: ...falling back to redirect_dir=nofollow. [ 248.836646][ T8954] overlayfs: ...falling back to uuid=null. [ 248.882252][ T8956] FAULT_INJECTION: forcing a failure. [ 248.882252][ T8956] name failslab, interval 1, probability 0, space 0, times 0 [ 248.882290][ T8956] CPU: 1 UID: 0 PID: 8956 Comm: syz.4.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.882323][ T8956] Tainted: [L]=SOFTLOCKUP [ 248.882332][ T8956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.882347][ T8956] Call Trace: [ 248.882356][ T8956] [ 248.882366][ T8956] dump_stack_lvl+0xe8/0x150 [ 248.882404][ T8956] should_fail_ex+0x3eb/0x540 [ 248.882436][ T8956] should_failslab+0xa8/0x100 [ 248.882474][ T8956] __kmalloc_cache_noprof+0x9e/0x600 [ 248.882510][ T8956] ? alloc_fs_context+0x66/0xd00 [ 248.882544][ T8956] ? alloc_fs_context+0x66/0xd00 [ 248.882578][ T8956] ? __get_fs_type+0x21/0x280 [ 248.882615][ T8956] alloc_fs_context+0x66/0xd00 [ 248.882648][ T8956] ? __get_fs_type+0x267/0x280 [ 248.882680][ T8956] ? __get_fs_type+0x21/0x280 [ 248.882721][ T8956] do_new_mount+0x17f/0xdc0 [ 248.882755][ T8956] ? __pfx_do_new_mount+0x10/0x10 [ 248.882786][ T8956] ? ns_capable+0x84/0xe0 [ 248.882814][ T8956] ? path_mount+0x647/0x1050 [ 248.882846][ T8956] ? user_path_at+0xd4/0x160 [ 248.882880][ T8956] __se_sys_mount+0x31d/0x420 [ 248.882915][ T8956] ? __pfx___se_sys_mount+0x10/0x10 [ 248.882952][ T8956] ? __x64_sys_mount+0x20/0xc0 [ 248.882984][ T8956] do_syscall_64+0x166/0x520 [ 248.883006][ T8956] ? trace_irq_disable+0x3b/0x140 [ 248.883039][ T8956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.883064][ T8956] ? clear_bhb_loop+0x70/0xc0 [ 248.883096][ T8956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.883120][ T8956] RIP: 0033:0x7ff89c99e159 [ 248.883142][ T8956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.883163][ T8956] RSP: 002b:00007ff89d8b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.883189][ T8956] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 248.883207][ T8956] RDX: 00002000000003c0 RSI: 0000200000000280 RDI: 00002000000004c0 [ 248.883225][ T8956] RBP: 00007ff89ca3503b R08: 0000200000000300 R09: 0000000000000000 [ 248.883242][ T8956] R10: 0000000002208440 R11: 0000000000000246 R12: 0000000000000000 [ 248.883257][ T8956] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 248.883293][ T8956] [ 249.206052][ T8507] Bluetooth: hci4: sending frame failed (-49) [ 249.211356][ T8187] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 249.226282][ T8187] Bluetooth: hci3: command tx timeout [ 249.312628][ T8929] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.342131][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.344334][ T8929] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.371344][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.374264][ T8929] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.416180][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.418793][ T8929] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 249.446603][ T8929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.514953][ T8972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.516948][ T8972] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 249.546837][ T8972] ovl_remap_lower_ino: 8 callbacks suppressed [ 249.546867][ T8972] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 249.546890][ T8972] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 249.575180][ T8972] overlayfs: d_ino too big (231, ino=9223372036854777061, xinobits=3) [ 249.575436][ T8972] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 249.575676][ T8972] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 249.575921][ T8972] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 249.576247][ T8972] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 249.576475][ T8972] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 249.576714][ T8972] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 249.577065][ T8972] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 249.775679][ T8929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.779612][ T8976] syzkaller0: entered promiscuous mode [ 249.779630][ T8976] syzkaller0: entered allmulticast mode [ 249.845540][ T8929] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.857550][ T8146] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.857624][ T8146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.882959][ T8143] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.883031][ T8143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.535309][ T8929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.540853][ T5715] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 250.700499][ T5715] usb 6-1: Using ep0 maxpacket: 8 [ 250.701270][ T5715] usb 6-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 250.702603][ T5715] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.702630][ T5715] usb 6-1: config 0 has no interfaces? [ 250.705189][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.705217][ T5715] usb 6-1: Product: syz [ 250.705234][ T5715] usb 6-1: Manufacturer: syz [ 250.705250][ T5715] usb 6-1: SerialNumber: syz [ 250.708613][ T5715] usb 6-1: config 0 descriptor?? [ 250.867438][ T8929] veth0_vlan: entered promiscuous mode [ 250.902212][ T8929] veth1_vlan: entered promiscuous mode [ 250.954908][ T8929] veth0_macvtap: entered promiscuous mode [ 250.967530][ T8929] veth1_macvtap: entered promiscuous mode [ 250.998700][ T8929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.017529][ T8929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.071560][ T8160] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.105178][ T5911] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.105243][ T5911] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.105283][ T5911] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.310558][ T8507] Bluetooth: hci3: command tx timeout [ 251.370596][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.370622][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.519482][ T1293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.519519][ T1293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.923351][ T5715] usb 6-1: USB disconnect, device number 23 [ 252.383383][ T9031] lo speed is unknown, defaulting to 1000 [ 252.521254][ T44] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 252.640710][ T5701] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 252.672924][ T44] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 252.675304][ T44] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 252.675340][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 252.678351][ T44] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 252.678379][ T44] usb 5-1: Product: syz [ 252.678396][ T44] usb 5-1: Manufacturer: syz [ 252.678412][ T44] usb 5-1: SerialNumber: syz [ 252.736657][ T44] usb 5-1: config 0 descriptor?? [ 252.755617][ T44] usb 5-1: selecting invalid altsetting 0 [ 252.771179][ T5715] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 252.791906][ T5701] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 252.794244][ T5701] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 252.794268][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.794286][ T5701] usb 2-1: config 0 has no interfaces? [ 252.794311][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.799148][ T5701] usb 2-1: config 0 descriptor?? [ 252.931300][ T5715] usb 6-1: Using ep0 maxpacket: 8 [ 252.933600][ T5715] usb 6-1: unable to get BOS descriptor or descriptor too short [ 252.933658][ T5715] usb 6-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 252.934824][ T5715] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.934891][ T5715] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 252.934932][ T5715] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 205, changing to 7 [ 252.934962][ T5715] usb 6-1: config 1 interface 0 has no altsetting 0 [ 252.949805][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.949892][ T5715] usb 6-1: Product: syz [ 252.949963][ T5715] usb 6-1: Manufacturer: syz [ 252.950006][ T5715] usb 6-1: SerialNumber: syz [ 253.123144][ T25] usb 5-1: USB disconnect, device number 28 [ 253.123190][ C0] usb 5-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 253.123347][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 253.123638][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.124067][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.124509][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.124948][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.125406][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.125845][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.126305][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.126735][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.127190][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.127619][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.128042][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.128457][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.128891][ T9027] usb 5-1: cannot submit urb 0, error -19: no device [ 253.373029][ T5702] usb 2-1: USB disconnect, device number 30 [ 253.381397][ T8507] Bluetooth: hci3: command tx timeout [ 253.425046][ T5715] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 253.450245][ T5715] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 253.595934][ T5715] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 253.600350][ T5715] usb 6-1: USB disconnect, device number 24 [ 253.661342][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.165043][ T9047] svc: failed to register lockdv1 RPC service (errno 111). [ 254.429726][ T9047] svc: failed to register nfsdv3 RPC service (errno 111). [ 254.435154][ T9047] svc: failed to register nfsaclv3 RPC service (errno 111). [ 254.435214][ T9047] failed to unregister tcp with rpcbind [ 254.435727][ T9047] svc: failed to register nfsdv3 RPC service (errno 97). [ 254.435771][ T9047] svc: failed to register nfsaclv3 RPC service (errno 97). [ 254.435810][ T9047] failed to unregister tcp with rpcbind [ 255.386312][ T9068] tipc: Enabled bearer , priority 0 [ 255.388834][ T9068] tipc: Resetting bearer [ 255.470713][ T8507] Bluetooth: hci3: command tx timeout [ 255.491713][ T9068] tipc: Disabling bearer [ 255.793813][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.361479][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 256.394350][ T9081] FAULT_INJECTION: forcing a failure. [ 256.394350][ T9081] name failslab, interval 1, probability 0, space 0, times 0 [ 256.394390][ T9081] CPU: 1 UID: 0 PID: 9081 Comm: syz.4.1037 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.394422][ T9081] Tainted: [L]=SOFTLOCKUP [ 256.394431][ T9081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.394446][ T9081] Call Trace: [ 256.394455][ T9081] [ 256.394465][ T9081] dump_stack_lvl+0xe8/0x150 [ 256.394503][ T9081] should_fail_ex+0x3eb/0x540 [ 256.394534][ T9081] should_failslab+0xa8/0x100 [ 256.394564][ T9081] __kmalloc_noprof+0xf9/0x710 [ 256.394598][ T9081] ? kobj_map+0x76/0x5b0 [ 256.394628][ T9081] ? kobj_map+0x76/0x5b0 [ 256.394664][ T9081] kobj_map+0x76/0x5b0 [ 256.394694][ T9081] ? __pfx_exact_match+0x10/0x10 [ 256.394716][ T9081] ? __pfx_exact_lock+0x10/0x10 [ 256.394737][ T9081] ? __kmalloc_cache_noprof+0x148/0x600 [ 256.394778][ T9081] cdev_add+0x8c/0x160 [ 256.394803][ T9081] tty_register_device_attr+0x76e/0x990 [ 256.394838][ T9081] ? __pfx_tty_register_device_attr+0x10/0x10 [ 256.394872][ T9081] ? tty_port_init+0x136/0x1a0 [ 256.394897][ T9081] ? gsm_dlci_alloc+0x330/0x640 [ 256.394927][ T9081] gsm_activate_mux+0x110/0x2a0 [ 256.394960][ T9081] gsmld_ioctl+0x12d3/0x1930 [ 256.394993][ T9081] ? __pfx_gsmld_ioctl+0x10/0x10 [ 256.395031][ T9081] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 256.395075][ T9081] ? ldsem_down_read+0x12/0x40 [ 256.395112][ T9081] ? __pfx_gsmld_ioctl+0x10/0x10 [ 256.395135][ T9081] tty_ioctl+0x9bd/0xdd0 [ 256.395160][ T9081] ? __pfx_tty_ioctl+0x10/0x10 [ 256.395183][ T9081] __se_sys_ioctl+0xfc/0x170 [ 256.395222][ T9081] do_syscall_64+0x166/0x520 [ 256.395243][ T9081] ? trace_irq_disable+0x3b/0x140 [ 256.395283][ T9081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.395307][ T9081] ? clear_bhb_loop+0x70/0xc0 [ 256.395337][ T9081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.395360][ T9081] RIP: 0033:0x7ff89c99e159 [ 256.395381][ T9081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.395402][ T9081] RSP: 002b:00007ff89d8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.395429][ T9081] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 256.395446][ T9081] RDX: 0000200000000a00 RSI: 00000000404c4701 RDI: 0000000000000004 [ 256.395462][ T9081] RBP: 00007ff89ca3503b R08: 0000000000000000 R09: 0000000000000000 [ 256.395477][ T9081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.395490][ T9081] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 256.395526][ T9081] [ 256.462025][ T5715] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 256.544408][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 256.547796][ T25] usb 7-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 256.566480][ T25] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.566555][ T25] usb 7-1: config 0 has no interfaces? [ 256.692112][ T5715] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.720364][ T5715] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 256.720534][ T5715] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.736389][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.736485][ T25] usb 7-1: Product: syz [ 256.736528][ T25] usb 7-1: Manufacturer: syz [ 256.736563][ T25] usb 7-1: SerialNumber: syz [ 256.787524][ T25] usb 7-1: config 0 descriptor?? [ 256.795425][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.795554][ T5715] usb 2-1: Product: syz [ 256.795583][ T5715] usb 2-1: Manufacturer: syz [ 256.795623][ T5715] usb 2-1: SerialNumber: syz [ 256.833302][ T5715] usb 2-1: config 0 descriptor?? [ 256.865053][ T5715] usb 2-1: selecting invalid altsetting 0 [ 257.154727][ T44] usb 2-1: USB disconnect, device number 31 [ 257.154777][ C1] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 257.154887][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 257.156112][ T9078] usb 2-1: cannot submit urb 0, error -19: no device [ 257.157966][ T9078] usb 2-1: cannot submit urb 0, error -19: no device [ 257.229444][ T9093] netlink: 'syz.5.1039': attribute type 4 has an invalid length. [ 257.433408][ T9097] syzkaller1: entered promiscuous mode [ 257.433433][ T9097] syzkaller1: entered allmulticast mode [ 257.797049][ T5694] usb 7-1: USB disconnect, device number 2 [ 257.920516][ T5747] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 258.070513][ T5747] usb 6-1: Using ep0 maxpacket: 16 [ 258.071085][ T5747] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 258.072160][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.072181][ T5747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.072198][ T5747] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 258.072227][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.074621][ T5747] usb 6-1: config 0 descriptor?? [ 258.554531][ T5747] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0019/input/input22 [ 258.674272][ T5747] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 258.776139][ T5747] usb 6-1: USB disconnect, device number 25 [ 258.936482][ T9121] netlink: 'syz.4.1051': attribute type 4 has an invalid length. [ 259.004998][ T5715] lo speed is unknown, defaulting to 1000 [ 259.005040][ T5715] syz0: Port: 1 Link DOWN [ 259.029081][ T5715] lo speed is unknown, defaulting to 1000 [ 259.470334][ T9131] syzkaller1: entered promiscuous mode [ 259.471320][ T9131] syzkaller1: entered allmulticast mode [ 259.680540][ T5694] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 259.830522][ T5694] usb 5-1: Using ep0 maxpacket: 16 [ 259.831523][ T5694] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 259.831565][ T5694] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 259.833306][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.834346][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.835333][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.836456][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.837430][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.838386][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.839364][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.840326][ T5694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.915587][ T5694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 259.915619][ T5694] usb 5-1: SerialNumber: syz [ 259.963333][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 259.965132][ T5694] usb 5-1: config 0 descriptor?? [ 259.989687][ T5694] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input23 [ 260.110662][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 260.111412][ T44] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 260.112557][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.112590][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.112666][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.115979][ T44] usb 7-1: config 0 descriptor?? [ 260.200936][ T9129] input: syz1 as /devices/virtual/input/input24 [ 260.542762][ T44] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 260.542829][ T44] ft260 0003:0403:6030.001A: unknown main item tag 0x0 [ 260.730540][ T5747] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 260.739766][ T44] ft260 0003:0403:6030.001A: chip code: 0000 0000 [ 260.880544][ T5747] usb 2-1: Using ep0 maxpacket: 16 [ 260.881319][ T5747] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 260.882511][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.882573][ T5747] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.882590][ T5747] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 260.882621][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.885500][ T5747] usb 2-1: config 0 descriptor?? [ 260.964673][ T44] ft260 0003:0403:6030.001A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 260.990619][ T4971] bcm5974 5-1:0.0: could not read from device [ 260.995431][ T4971] bcm5974 5-1:0.0: could not read from device [ 260.999038][ T4971] bcm5974 5-1:0.0: could not read from device [ 261.008250][ T4971] bcm5974 5-1:0.0: could not read from device [ 261.030840][ T5694] usb 5-1: USB disconnect, device number 29 [ 261.167853][ T44] ft260 0003:0403:6030.001A: failed to retrieve status: -32, no wakeup [ 261.316007][ T5747] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.001B/input/input25 [ 261.369336][ T44] ft260 0003:0403:6030.001A: failed to reset I2C controller: -71 [ 261.393266][ T44] usb 7-1: USB disconnect, device number 3 [ 261.433503][ T5747] microsoft 0003:045E:07DA.001B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 261.579117][ T5702] usb 2-1: USB disconnect, device number 32 [ 261.851536][ T5694] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 262.020690][ T5694] usb 6-1: Using ep0 maxpacket: 16 [ 262.021732][ T5694] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 262.023537][ T5694] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 262.023564][ T5694] usb 6-1: config 0 has no interface number 0 [ 262.023607][ T5694] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.023634][ T5694] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 262.023661][ T5694] usb 6-1: config 0 interface 41 has no altsetting 0 [ 262.026179][ T5694] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.026205][ T5694] usb 6-1: Product: syz [ 262.026222][ T5694] usb 6-1: Manufacturer: syz [ 262.026238][ T5694] usb 6-1: SerialNumber: syz [ 262.029482][ T5694] usb 6-1: config 0 descriptor?? [ 262.030823][ T9157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.030968][ T9157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.301240][ T9157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.301389][ T9157] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 262.810553][ T10] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 262.906299][ T5694] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 262.962378][ T10] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 262.963774][ T10] usb 2-1: config 1 interface 0 altsetting 37 endpoint 0x1 has invalid wMaxPacketSize 0 [ 262.963805][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 262.966350][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.966376][ T10] usb 2-1: Product: syz [ 262.966392][ T10] usb 2-1: Manufacturer: syz [ 262.966409][ T10] usb 2-1: SerialNumber: syz [ 263.313307][ T5694] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 263.313342][ T5694] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 263.313610][ T5694] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 263.359637][ T5694] usb 6-1: USB disconnect, device number 26 [ 263.398850][ T10] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 33 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 263.917092][ T9208] syzkaller1: entered promiscuous mode [ 263.917113][ T9208] syzkaller1: entered allmulticast mode [ 264.446116][ T9217] tipc: Enabled bearer , priority 10 [ 264.447351][ T9216] tipc: Resetting bearer [ 264.489324][ T9216] tipc: Disabling bearer [ 264.592530][ T5694] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 264.745026][ T5694] usb 7-1: Using ep0 maxpacket: 8 [ 264.745765][ T5694] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 264.748203][ T5694] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 264.748231][ T5694] usb 7-1: config 0 has no interface number 0 [ 264.748278][ T5694] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.790488][ T5694] usb 7-1: config 0 descriptor?? [ 264.903923][ T5694] viperboard 7-1:0.143: version 0.00 found at bus 007 address 004 [ 264.930531][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 264.957693][ T5694] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 264.957727][ T5694] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 265.012293][ T5694] usb 7-1: USB disconnect, device number 4 [ 265.081820][ T10] usb 6-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 265.082929][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 265.082948][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 265.082975][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.089125][ T10] spcp8x5 6-1:1.0: SPCP8x5 converter detected [ 265.116589][ T10] usb 6-1: SPCP8x5 converter now attached to ttyUSB0 [ 265.462426][ T9222] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 265.462729][ T9222] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 265.463037][ T9222] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 265.520636][ T5694] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 265.578008][ T10] usb 2-1: USB disconnect, device number 33 [ 265.611618][ T9185] usblp0: removed [ 265.665097][ T9221] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 265.669195][ T44] usb 6-1: USB disconnect, device number 27 [ 265.689306][ T5694] usb 7-1: not running at top speed; connect to a high speed hub [ 265.689342][ T5694] usb 7-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 6.00 [ 265.698803][ T5694] usb 7-1: config index 0 descriptor too short (expected 32, got 18) [ 265.698855][ T5694] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 265.732156][ T5694] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.732187][ T5694] usb 7-1: Product: syz [ 265.732203][ T5694] usb 7-1: Manufacturer: syz [ 265.732219][ T5694] usb 7-1: SerialNumber: syz [ 265.734941][ T44] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 265.735727][ T44] spcp8x5 6-1:1.0: device disconnected [ 265.784843][ T5694] ftdi_sio 7-1:1.0: FTDI USB Serial Device converter detected [ 265.791555][ T5694] usb 7-1: Detected FT232R [ 265.893323][ T9232] syzkaller1: entered promiscuous mode [ 265.893342][ T9232] syzkaller1: entered allmulticast mode [ 265.922843][ T5702] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 266.081555][ T5702] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 266.085092][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.085112][ T5702] usb 5-1: Product: syz [ 266.085123][ T5702] usb 5-1: Manufacturer: syz [ 266.085134][ T5702] usb 5-1: SerialNumber: syz [ 266.088091][ T5702] usb 5-1: config 0 descriptor?? [ 266.321780][ T5702] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 030 [ 266.711264][ T9250] FAULT_INJECTION: forcing a failure. [ 266.711264][ T9250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.711303][ T9250] CPU: 1 UID: 0 PID: 9250 Comm: syz.1.1104 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.711335][ T9250] Tainted: [L]=SOFTLOCKUP [ 266.711343][ T9250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 266.711358][ T9250] Call Trace: [ 266.711371][ T9250] [ 266.711381][ T9250] dump_stack_lvl+0xe8/0x150 [ 266.711418][ T9250] should_fail_ex+0x3eb/0x540 [ 266.711450][ T9250] _copy_to_iter+0x404/0x1810 [ 266.711491][ T9250] ? seq_putc+0x75/0xf0 [ 266.711518][ T9250] ? __pfx__copy_to_iter+0x10/0x10 [ 266.711546][ T9250] ? netstat_seq_show+0xe0b/0xe50 [ 266.711598][ T9250] seq_read_iter+0xaae/0xca0 [ 266.711638][ T9250] seq_read+0x367/0x480 [ 266.711672][ T9250] ? __pfx_seq_read+0x10/0x10 [ 266.711693][ T9250] ? __mutex_trylock_common+0x15f/0x270 [ 266.711729][ T9250] ? apparmor_file_permission+0x1fb/0x2b0 [ 266.711774][ T9250] ? __pfx_seq_read+0x10/0x10 [ 266.711794][ T9250] proc_reg_read+0x1e9/0x2e0 [ 266.711821][ T9250] ? __pfx_proc_reg_read+0x10/0x10 [ 266.711844][ T9250] vfs_read+0x213/0xa80 [ 266.711883][ T9250] ? __pfx___mutex_lock+0x10/0x10 [ 266.711907][ T9250] ? __pfx_vfs_read+0x10/0x10 [ 266.711940][ T9250] ? __fget_files+0x2a/0x420 [ 266.711981][ T9250] ? __fget_files+0x3a2/0x420 [ 266.712009][ T9250] ? __fget_files+0x2a/0x420 [ 266.712049][ T9250] ksys_read+0x150/0x270 [ 266.712083][ T9250] ? __pfx_ksys_read+0x10/0x10 [ 266.712128][ T9250] do_syscall_64+0x166/0x520 [ 266.712149][ T9250] ? trace_irq_disable+0x3b/0x140 [ 266.712182][ T9250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.712206][ T9250] ? clear_bhb_loop+0x70/0xc0 [ 266.712234][ T9250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.712258][ T9250] RIP: 0033:0x7fac09f9e159 [ 266.712279][ T9250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.712300][ T9250] RSP: 002b:00007fac0af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.712326][ T9250] RAX: ffffffffffffffda RBX: 00007fac0a225fa0 RCX: 00007fac09f9e159 [ 266.712342][ T9250] RDX: 0000000000000229 RSI: 0000200000000040 RDI: 0000000000000003 [ 266.712358][ T9250] RBP: 00007fac0a03503b R08: 0000000000000000 R09: 0000000000000000 [ 266.712373][ T9250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.712386][ T9250] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 266.712423][ T9250] [ 266.998121][ T5694] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 266.999296][ T5694] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 266.999824][ T5694] ftdi_sio 7-1:1.0: GPIO initialisation failed: -71 [ 267.010771][ T44] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 267.038648][ T5694] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 267.051859][ T5694] usb 7-1: USB disconnect, device number 5 [ 267.074913][ T5694] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 267.075717][ T5694] ftdi_sio 7-1:1.0: device disconnected [ 267.164573][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 267.165396][ T44] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 267.166158][ T44] usb 6-1: config 0 has no interfaces? [ 267.166195][ T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.201531][ T44] usb 6-1: config 0 descriptor?? [ 267.264502][ T9251] i2c i2c-1: failure reading status [ 267.269898][ T44] usb 5-1: USB disconnect, device number 30 [ 267.288406][ T9254] ptp: physical clock is free running [ 267.418651][ T9247] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 267.424634][ T10] usb 6-1: USB disconnect, device number 28 [ 267.509365][ T9256] FAULT_INJECTION: forcing a failure. [ 267.509365][ T9256] name failslab, interval 1, probability 0, space 0, times 0 [ 267.509409][ T9256] CPU: 0 UID: 0 PID: 9256 Comm: syz.1.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.509445][ T9256] Tainted: [L]=SOFTLOCKUP [ 267.509455][ T9256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.509470][ T9256] Call Trace: [ 267.509480][ T9256] [ 267.509491][ T9256] dump_stack_lvl+0xe8/0x150 [ 267.509532][ T9256] should_fail_ex+0x3eb/0x540 [ 267.509568][ T9256] should_failslab+0xa8/0x100 [ 267.509600][ T9256] __kmalloc_cache_noprof+0x9e/0x600 [ 267.509642][ T9256] ? __kmalloc_cache_noprof+0x148/0x600 [ 267.509679][ T9256] ? garp_init_applicant+0x181/0x430 [ 267.509719][ T9256] ? garp_init_applicant+0x181/0x430 [ 267.509773][ T9256] garp_init_applicant+0x181/0x430 [ 267.509819][ T9256] register_vlan_dev+0x1f4/0x850 [ 267.509878][ T9256] register_vlan_device+0x393/0x4b0 [ 267.509922][ T9256] ? __pfx_register_vlan_device+0x10/0x10 [ 267.509963][ T9256] ? security_capable+0x7e/0x2c0 [ 267.510002][ T9256] vlan_ioctl_handler+0x248/0x630 [ 267.510041][ T9256] ? __pfx___mutex_lock+0x10/0x10 [ 267.510069][ T9256] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 267.510105][ T9256] ? hook_file_ioctl+0x1f2/0x600 [ 267.510151][ T9256] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 267.510189][ T9256] sock_ioctl+0x612/0x7e0 [ 267.510226][ T9256] ? __pfx_sock_ioctl+0x10/0x10 [ 267.510260][ T9256] ? __fget_files+0x2a/0x420 [ 267.510292][ T9256] ? __fget_files+0x3a2/0x420 [ 267.510324][ T9256] ? __fget_files+0x2a/0x420 [ 267.510361][ T9256] ? bpf_lsm_file_ioctl+0x9/0x20 [ 267.510393][ T9256] ? __pfx_sock_ioctl+0x10/0x10 [ 267.510426][ T9256] __se_sys_ioctl+0xfc/0x170 [ 267.510470][ T9256] do_syscall_64+0x166/0x520 [ 267.510495][ T9256] ? trace_irq_disable+0x3b/0x140 [ 267.510531][ T9256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.510558][ T9256] ? clear_bhb_loop+0x70/0xc0 [ 267.510591][ T9256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.510618][ T9256] RIP: 0033:0x7fac09f9e159 [ 267.510642][ T9256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.510666][ T9256] RSP: 002b:00007fac0af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.510695][ T9256] RAX: ffffffffffffffda RBX: 00007fac0a225fa0 RCX: 00007fac09f9e159 [ 267.510716][ T9256] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 0000000000000004 [ 267.510733][ T9256] RBP: 00007fac0a03503b R08: 0000000000000000 R09: 0000000000000000 [ 267.510750][ T9256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.510766][ T9256] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 267.510808][ T9256] [ 267.979860][ T9260] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2914234730 (93255511360 ns) > initial count (12345443520 ns). Using initial count to start timer. [ 268.615386][ T9283] FAULT_INJECTION: forcing a failure. [ 268.615386][ T9283] name failslab, interval 1, probability 0, space 0, times 0 [ 268.615425][ T9283] CPU: 0 UID: 0 PID: 9283 Comm: syz.1.1117 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.615457][ T9283] Tainted: [L]=SOFTLOCKUP [ 268.615483][ T9283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 268.615498][ T9283] Call Trace: [ 268.615508][ T9283] [ 268.615518][ T9283] dump_stack_lvl+0xe8/0x150 [ 268.615600][ T9283] should_fail_ex+0x3eb/0x540 [ 268.615641][ T9283] should_failslab+0xa8/0x100 [ 268.615669][ T9283] __kmalloc_noprof+0xf9/0x710 [ 268.615702][ T9283] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.615737][ T9283] ? kvm_io_bus_register_dev+0x1ef/0x700 [ 268.615761][ T9283] ? kvm_io_bus_register_dev+0x1ef/0x700 [ 268.615794][ T9283] kvm_io_bus_register_dev+0x1ef/0x700 [ 268.615833][ T9283] kvm_pic_init+0x1dc/0x2f0 [ 268.615867][ T9283] kvm_arch_vm_ioctl+0x1624/0x1a10 [ 268.615897][ T9283] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 268.615922][ T9283] ? __lock_acquire+0x747/0x2de0 [ 268.615966][ T9283] ? __lock_acquire+0x747/0x2de0 [ 268.616027][ T9283] ? lock_acquire+0x115/0x350 [ 268.616069][ T9283] ? lock_acquire+0x115/0x350 [ 268.616111][ T9283] ? is_bpf_text_address+0x26/0x2b0 [ 268.616142][ T9283] ? is_bpf_text_address+0x292/0x2b0 [ 268.616166][ T9283] ? is_bpf_text_address+0x26/0x2b0 [ 268.616194][ T9283] ? kernel_text_address+0xa5/0xe0 [ 268.616231][ T9283] ? __kernel_text_address+0xd/0x30 [ 268.616276][ T9283] ? unwind_get_return_address+0x4d/0x90 [ 268.616308][ T9283] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.616341][ T9283] ? arch_stack_walk+0xfb/0x150 [ 268.616379][ T9283] ? stack_trace_save+0xa9/0x100 [ 268.616409][ T9283] ? __pfx_stack_trace_save+0x10/0x10 [ 268.616440][ T9283] ? kasan_save_track+0x4f/0x80 [ 268.616479][ T9283] ? stack_depot_save_flags+0x33/0x7f0 [ 268.616506][ T9283] ? __lock_acquire+0x747/0x2de0 [ 268.616544][ T9283] ? kasan_save_track+0x4f/0x80 [ 268.616578][ T9283] ? kasan_save_track+0x3e/0x80 [ 268.616611][ T9283] ? kasan_save_free_info+0x40/0x50 [ 268.616640][ T9283] ? __kasan_slab_free+0x5c/0x80 [ 268.616661][ T9283] ? kfree+0x1c5/0x650 [ 268.616688][ T9283] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 268.616713][ T9283] ? security_file_ioctl+0xc3/0x2a0 [ 268.616746][ T9283] ? __se_sys_ioctl+0x47/0x170 [ 268.616779][ T9283] ? do_syscall_64+0x166/0x520 [ 268.616800][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.616840][ T9283] kvm_vm_ioctl+0x8f7/0xd30 [ 268.616875][ T9283] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 268.616927][ T9283] ? kasan_quarantine_put+0xbb/0x1f0 [ 268.616971][ T9283] ? tomoyo_path_number_perm+0x219/0x5f0 [ 268.616997][ T9283] ? tomoyo_path_number_perm+0x219/0x5f0 [ 268.617025][ T9283] ? do_vfs_ioctl+0x116f/0x1530 [ 268.617050][ T9283] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 268.617087][ T9283] ? hook_file_ioctl+0x1f2/0x600 [ 268.617134][ T9283] ? __fget_files+0x2a/0x420 [ 268.617166][ T9283] ? __fget_files+0x2a/0x420 [ 268.617194][ T9283] ? __fget_files+0x3a2/0x420 [ 268.617222][ T9283] ? __fget_files+0x2a/0x420 [ 268.617264][ T9283] ? bpf_lsm_file_ioctl+0x9/0x20 [ 268.617294][ T9283] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 268.617324][ T9283] __se_sys_ioctl+0xfc/0x170 [ 268.617365][ T9283] do_syscall_64+0x166/0x520 [ 268.617385][ T9283] ? trace_irq_disable+0x3b/0x140 [ 268.617419][ T9283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.617444][ T9283] ? clear_bhb_loop+0x70/0xc0 [ 268.617474][ T9283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.617498][ T9283] RIP: 0033:0x7fac09f9e159 [ 268.617520][ T9283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.617541][ T9283] RSP: 002b:00007fac0af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.617567][ T9283] RAX: ffffffffffffffda RBX: 00007fac0a225fa0 RCX: 00007fac09f9e159 [ 268.617585][ T9283] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000004 [ 268.617600][ T9283] RBP: 00007fac0a03503b R08: 0000000000000000 R09: 0000000000000000 [ 268.617615][ T9283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.617630][ T9283] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 268.617667][ T9283] [ 269.093875][ T9287] syzkaller1: entered promiscuous mode [ 269.093901][ T9287] syzkaller1: entered allmulticast mode [ 269.184548][ T44] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 269.337209][ T44] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 269.352128][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.352158][ T44] usb 7-1: Product: syz [ 269.352184][ T44] usb 7-1: Manufacturer: syz [ 269.352201][ T44] usb 7-1: SerialNumber: syz [ 269.359790][ T44] usb 7-1: config 0 descriptor?? [ 269.478653][ T9291] syzkaller1: entered promiscuous mode [ 269.478705][ T9291] syzkaller1: entered allmulticast mode [ 269.641474][ T44] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 006 [ 269.764716][ T9295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2914234730 (93255511360 ns) > initial count (12345443520 ns). Using initial count to start timer. [ 270.390839][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1126'. [ 270.422421][ T9308] i2c i2c-1: failure reading status [ 270.424754][ T10] usb 7-1: USB disconnect, device number 6 [ 271.372049][ T5694] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 271.530920][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 271.531637][ T5694] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.532711][ T5694] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 271.532745][ T5694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.532772][ T5694] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.532799][ T5694] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.532844][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.761295][ T5694] usb 2-1: GET_CAPABILITIES returned 0 [ 271.761356][ T5694] usbtmc 2-1:16.0: can't read capabilities [ 271.972470][ C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 271.990284][ T5694] usb 2-1: USB disconnect, device number 34 [ 272.415639][ T5702] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 272.561124][ T5702] usb 5-1: New USB device found, idVendor=2040, idProduct=c604, bcdDevice= 0.01 [ 272.562301][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.562366][ T5702] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 272.562390][ T5702] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x2 has invalid maxpacket 0 [ 272.562415][ T5702] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.562458][ T5702] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.642637][ T5702] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx DVBT' in warm state [ 272.664404][ T5702] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.664864][ T5702] dvbdev: DVB: registering new adapter (Hauppauge 126xxx DVBT) [ 272.664915][ T5702] usb 5-1: media controller created [ 272.707882][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.816731][ T9358] @ÿ: renamed from veth0_vlan (while UP) [ 272.817268][ T9358] FAULT_INJECTION: forcing a failure. [ 272.817268][ T9358] name failslab, interval 1, probability 0, space 0, times 0 [ 272.817294][ T9358] CPU: 1 UID: 0 PID: 9358 Comm: syz.1.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.817315][ T9358] Tainted: [L]=SOFTLOCKUP [ 272.817322][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 272.817332][ T9358] Call Trace: [ 272.817338][ T9358] [ 272.817345][ T9358] dump_stack_lvl+0xe8/0x150 [ 272.817370][ T9358] should_fail_ex+0x3eb/0x540 [ 272.817392][ T9358] should_failslab+0xa8/0x100 [ 272.817426][ T9358] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 272.817451][ T9358] ? __pfx_sprintf+0x10/0x10 [ 272.817471][ T9358] ? kobject_rename+0x1f6/0x500 [ 272.817487][ T9358] ? kobject_rename+0x1f6/0x500 [ 272.817504][ T9358] ? __kmalloc_noprof+0x1a6/0x710 [ 272.817528][ T9358] kstrdup+0x42/0x100 [ 272.817554][ T9358] kobject_rename+0x1f6/0x500 [ 272.817573][ T9358] ? __pfx_kobject_rename+0x10/0x10 [ 272.817593][ T9358] ? sysfs_rename_link_ns+0x178/0x1b0 [ 272.817619][ T9358] device_rename+0x15d/0x210 [ 272.817642][ T9358] netif_change_name+0x27a/0x970 [ 272.817667][ T9358] ? dev_change_name+0x101/0x220 [ 272.817682][ T9358] ? dev_ioctl+0x5dc/0x1150 [ 272.817698][ T9358] ? __pfx_netif_change_name+0x10/0x10 [ 272.817718][ T9358] ? full_name_hash+0x92/0xe0 [ 272.817759][ T9358] ? __dev_get_by_name+0xe5/0x130 [ 272.817783][ T9358] dev_change_name+0x101/0x220 [ 272.817802][ T9358] dev_ioctl+0x5ec/0x1150 [ 272.817820][ T9358] sock_do_ioctl+0x23e/0x320 [ 272.817843][ T9358] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.817862][ T9358] ? hook_file_ioctl+0x1f2/0x600 [ 272.817892][ T9358] sock_ioctl+0x57a/0x7e0 [ 272.817932][ T9358] ? __pfx_sock_ioctl+0x10/0x10 [ 272.817953][ T9358] ? __fget_files+0x2a/0x420 [ 272.817972][ T9358] ? __fget_files+0x3a2/0x420 [ 272.817991][ T9358] ? __fget_files+0x2a/0x420 [ 272.818031][ T9358] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.818052][ T9358] ? __pfx_sock_ioctl+0x10/0x10 [ 272.818072][ T9358] __se_sys_ioctl+0xfc/0x170 [ 272.818099][ T9358] do_syscall_64+0x166/0x520 [ 272.818136][ T9358] ? trace_irq_disable+0x3b/0x140 [ 272.818170][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.818195][ T9358] ? clear_bhb_loop+0x70/0xc0 [ 272.818228][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.818245][ T9358] RIP: 0033:0x7fac09f9e159 [ 272.818260][ T9358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.818274][ T9358] RSP: 002b:00007fac0af16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.818291][ T9358] RAX: ffffffffffffffda RBX: 00007fac0a225fa0 RCX: 00007fac09f9e159 [ 272.818303][ T9358] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 272.818313][ T9358] RBP: 00007fac0a03503b R08: 0000000000000000 R09: 0000000000000000 [ 272.818323][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.818332][ T9358] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 272.818357][ T9358] [ 272.982887][ T44] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 273.006994][ T5702] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-90 [ 273.007015][ T5702] error writing reg: 0xff, val: 0x00 [ 273.135183][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 273.137323][ T44] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 273.178073][ T44] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 273.178105][ T44] usb 7-1: config 0 has no interface number 0 [ 273.178150][ T44] usb 7-1: config 0 interface 12 has no altsetting 0 [ 273.217597][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.217627][ T44] usb 7-1: Product: syz [ 273.217643][ T44] usb 7-1: Manufacturer: syz [ 273.217672][ T44] usb 7-1: SerialNumber: syz [ 273.238405][ T44] usb 7-1: config 0 descriptor?? [ 273.256837][ T5702] dvb_usb_mxl111sf 5-1:1.0: probe with driver dvb_usb_mxl111sf failed with error -90 [ 273.259435][ T5702] usb 5-1: USB disconnect, device number 31 [ 273.757076][ T9374] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.960584][ T5747] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 274.112504][ T5747] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.113880][ T5747] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 274.113928][ T5747] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.113971][ T5747] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 274.115033][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.115057][ T5747] usb 5-1: SerialNumber: syz [ 274.334426][ T5747] rndis_host 5-1:253.0: RNDIS init failed, -71 [ 274.334760][ T5747] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -71 [ 274.348683][ T5747] usb 5-1: USB disconnect, device number 32 [ 274.704643][ T44] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 274.704707][ T44] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 274.704726][ T44] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 274.704809][ T44] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 274.715468][ T44] usb 7-1: USB disconnect, device number 7 [ 274.772514][ T5747] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 274.921713][ T5747] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 274.923679][ T5747] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 274.923725][ T5747] usb 5-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.923753][ T5747] usb 5-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 274.924861][ T5747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 274.924887][ T5747] usb 5-1: SerialNumber: syz [ 275.130504][ T5694] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 275.280735][ T5694] usb 2-1: Using ep0 maxpacket: 8 [ 275.284943][ T5694] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.284996][ T5694] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 275.286144][ T5694] usb 2-1: config 4 interface 0 has no altsetting 0 [ 275.327413][ T5694] usb 2-1: string descriptor 0 read error: -22 [ 275.327508][ T5694] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 275.363515][ T5694] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 275.369370][ T5694] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.369715][ T5694] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 275.369763][ T5694] usb 2-1: media controller created [ 275.425991][ T5694] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.310495][ T5747] rndis_host 5-1:253.0: RNDIS init failed, -110 [ 276.310791][ T5747] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -110 [ 276.359490][ T5747] usb 5-1: USB disconnect, device number 33 [ 276.392216][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1160'. [ 276.479640][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.512628][ T5694] zl10353_read_register: readreg error (reg=127, ret==0) [ 276.590848][ T5694] usb 2-1: USB disconnect, device number 35 [ 276.694283][ T9405] FAULT_INJECTION: forcing a failure. [ 276.694283][ T9405] name failslab, interval 1, probability 0, space 0, times 0 [ 276.694324][ T9405] CPU: 1 UID: 0 PID: 9405 Comm: syz.4.1165 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.694358][ T9405] Tainted: [L]=SOFTLOCKUP [ 276.694367][ T9405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.694381][ T9405] Call Trace: [ 276.694390][ T9405] [ 276.694401][ T9405] dump_stack_lvl+0xe8/0x150 [ 276.694438][ T9405] should_fail_ex+0x3eb/0x540 [ 276.694470][ T9405] should_failslab+0xa8/0x100 [ 276.694498][ T9405] __kvmalloc_node_noprof+0x171/0x820 [ 276.694539][ T9405] ? do_semtimedop+0x1cb/0x3a0 [ 276.694582][ T9405] ? do_semtimedop+0x1cb/0x3a0 [ 276.694625][ T9405] do_semtimedop+0x1cb/0x3a0 [ 276.694665][ T9405] ? __pfx_do_semtimedop+0x10/0x10 [ 276.694738][ T9405] ? rcu_is_watching+0x16/0xb0 [ 276.694775][ T9405] do_syscall_64+0x166/0x520 [ 276.694813][ T9405] ? trace_irq_disable+0x3b/0x140 [ 276.694847][ T9405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.694873][ T9405] ? clear_bhb_loop+0x70/0xc0 [ 276.694901][ T9405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.694925][ T9405] RIP: 0033:0x7ff89c99e159 [ 276.694947][ T9405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.694968][ T9405] RSP: 002b:00007ff89d8b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000041 [ 276.694995][ T9405] RAX: ffffffffffffffda RBX: 00007ff89cc25fa0 RCX: 00007ff89c99e159 [ 276.695012][ T9405] RDX: 00000000000001f4 RSI: 0000200000000180 RDI: 0000000000000000 [ 276.695028][ T9405] RBP: 00007ff89ca3503b R08: 0000000000000000 R09: 0000000000000000 [ 276.695043][ T9405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.695057][ T9405] R13: 00007ff89cc26038 R14: 00007ff89cc25fa0 R15: 00007ffd8f0f2238 [ 276.695091][ T9405] [ 277.978014][ T9428] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1174'. [ 278.223360][ T9431] @ÿ: renamed from veth0_vlan (while UP) [ 278.223561][ T9431] FAULT_INJECTION: forcing a failure. [ 278.223561][ T9431] name failslab, interval 1, probability 0, space 0, times 0 [ 278.223582][ T9431] CPU: 1 UID: 0 PID: 9431 Comm: syz.6.1175 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.223604][ T9431] Tainted: [L]=SOFTLOCKUP [ 278.223610][ T9431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.223622][ T9431] Call Trace: [ 278.223630][ T9431] [ 278.223637][ T9431] dump_stack_lvl+0xe8/0x150 [ 278.223661][ T9431] should_fail_ex+0x3eb/0x540 [ 278.223684][ T9431] should_failslab+0xa8/0x100 [ 278.223704][ T9431] __kmalloc_noprof+0xf9/0x710 [ 278.223732][ T9431] ? kobject_get_path+0xc5/0x2f0 [ 278.223749][ T9431] ? kobject_get_path+0xc5/0x2f0 [ 278.223772][ T9431] kobject_get_path+0xc5/0x2f0 [ 278.223793][ T9431] kobject_uevent_env+0x29e/0x9e0 [ 278.223820][ T9431] kobject_rename+0x400/0x500 [ 278.223840][ T9431] ? __pfx_kobject_rename+0x10/0x10 [ 278.223862][ T9431] ? sysfs_rename_link_ns+0x178/0x1b0 [ 278.223889][ T9431] device_rename+0x15d/0x210 [ 278.223912][ T9431] netif_change_name+0x27a/0x970 [ 278.223939][ T9431] ? dev_change_name+0x101/0x220 [ 278.223955][ T9431] ? dev_ioctl+0x5dc/0x1150 [ 278.223971][ T9431] ? __pfx_netif_change_name+0x10/0x10 [ 278.223992][ T9431] ? full_name_hash+0x92/0xe0 [ 278.224014][ T9431] ? __dev_get_by_name+0xe5/0x130 [ 278.224039][ T9431] dev_change_name+0x101/0x220 [ 278.224057][ T9431] dev_ioctl+0x5ec/0x1150 [ 278.224074][ T9431] sock_do_ioctl+0x23e/0x320 [ 278.224098][ T9431] ? __pfx_sock_do_ioctl+0x10/0x10 [ 278.224125][ T9431] ? hook_file_ioctl+0x1f2/0x600 [ 278.224155][ T9431] sock_ioctl+0x57a/0x7e0 [ 278.224178][ T9431] ? __pfx_sock_ioctl+0x10/0x10 [ 278.224199][ T9431] ? __fget_files+0x2a/0x420 [ 278.224219][ T9431] ? __fget_files+0x3a2/0x420 [ 278.224238][ T9431] ? __fget_files+0x2a/0x420 [ 278.224260][ T9431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 278.224282][ T9431] ? __pfx_sock_ioctl+0x10/0x10 [ 278.224302][ T9431] __se_sys_ioctl+0xfc/0x170 [ 278.224329][ T9431] do_syscall_64+0x166/0x520 [ 278.224343][ T9431] ? trace_irq_disable+0x3b/0x140 [ 278.224366][ T9431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.224383][ T9431] ? clear_bhb_loop+0x70/0xc0 [ 278.224402][ T9431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.224419][ T9431] RIP: 0033:0x7f323619e159 [ 278.224433][ T9431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.224447][ T9431] RSP: 002b:00007f32370e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 278.224464][ T9431] RAX: ffffffffffffffda RBX: 00007f3236425fa0 RCX: 00007f323619e159 [ 278.224476][ T9431] RDX: 00002000000000c0 RSI: 0000000000008923 RDI: 0000000000000005 [ 278.224486][ T9431] RBP: 00007f323623503b R08: 0000000000000000 R09: 0000000000000000 [ 278.224496][ T9431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.224505][ T9431] R13: 00007f3236426038 R14: 00007f3236425fa0 R15: 00007ffd616e5ae8 [ 278.224529][ T9431] [ 279.013584][ T5715] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 279.160460][ T5715] usb 7-1: Using ep0 maxpacket: 8 [ 279.167952][ T5715] usb 7-1: unable to get BOS descriptor or descriptor too short [ 279.168004][ T5715] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 279.169478][ T5715] usb 7-1: config 4 interface 0 has no altsetting 0 [ 279.206674][ T5715] usb 7-1: string descriptor 0 read error: -22 [ 279.206769][ T5715] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 279.234166][ T5715] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 279.261294][ T5715] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 279.261647][ T5715] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 279.261699][ T5715] usb 7-1: media controller created [ 279.299948][ T5715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 280.101472][ T8507] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 280.107638][ T8507] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 280.109474][ T8507] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 280.128295][ T8507] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 280.145085][ T8507] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 280.340871][ T5715] zl10353_read_register: readreg error (reg=127, ret==0) [ 280.414713][ T5715] usb 7-1: USB disconnect, device number 8 [ 280.901920][ T5715] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 281.051193][ T5715] usb 6-1: Using ep0 maxpacket: 32 [ 281.052700][ T5715] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 281.054709][ T5715] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 281.054738][ T5715] usb 6-1: config 0 has no interface number 0 [ 281.054784][ T5715] usb 6-1: config 0 interface 12 has no altsetting 0 [ 281.100533][ T5715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.100562][ T5715] usb 6-1: Product: syz [ 281.100579][ T5715] usb 6-1: Manufacturer: syz [ 281.100594][ T5715] usb 6-1: SerialNumber: syz [ 281.104276][ T5715] usb 6-1: config 0 descriptor?? [ 281.289202][ T9454] lo speed is unknown, defaulting to 1000 [ 281.891677][ T25] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 282.060638][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 282.061508][ T25] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 282.063793][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.118657][ T25] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 282.260522][ T7246] Bluetooth: hci1: command tx timeout [ 282.563606][ T5715] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 282.563695][ T5715] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 282.563715][ T5715] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 282.563825][ T5715] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 282.609079][ T5715] usb 6-1: USB disconnect, device number 29 [ 282.706600][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.706791][ T9454] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.706918][ T9454] bridge_slave_0: entered allmulticast mode [ 282.708914][ T9454] bridge_slave_0: entered promiscuous mode [ 282.727645][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.729661][ T9454] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.730184][ T9454] bridge_slave_1: entered allmulticast mode [ 282.742006][ T9454] bridge_slave_1: entered promiscuous mode [ 282.792309][ T9454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.795836][ T9454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.842392][ T9454] team0: Port device team_slave_0 added [ 282.845302][ T9454] team0: Port device team_slave_1 added [ 282.884626][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.884647][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.884685][ T9454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.886636][ T9454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.886652][ T9454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.886691][ T9454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.002599][ T9454] hsr_slave_0: entered promiscuous mode [ 283.003978][ T9454] hsr_slave_1: entered promiscuous mode [ 283.004699][ T9454] debugfs: 'hsr0' already exists in 'hsr' [ 283.004720][ T9454] Cannot create hsr debugfs directory [ 283.280582][ T9454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 283.285255][ T9454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 283.286408][ T9454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 283.290116][ T9454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 283.296901][ T9454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 283.332537][ T9454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 283.333786][ T9454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 283.338015][ T9454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 283.393738][ T9454] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.393913][ T9454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.394881][ T9454] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.395011][ T9454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.493419][ T9454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.513608][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.514408][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.542709][ T44] usb 7-1: USB disconnect, device number 9 [ 283.543063][ T9454] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.577946][ T8160] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.578065][ T8160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.585235][ T8160] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.585528][ T8160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.996632][ T9454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.340599][ T7246] Bluetooth: hci1: command tx timeout [ 284.378444][ T9454] veth0_vlan: entered promiscuous mode [ 284.395379][ T9454] veth1_vlan: entered promiscuous mode [ 284.435720][ T9454] veth0_macvtap: entered promiscuous mode [ 284.440087][ T9454] veth1_macvtap: entered promiscuous mode [ 284.470284][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.484543][ T9454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.521231][ T72] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.521282][ T72] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.521318][ T72] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.521355][ T72] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.619034][ T1293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.619057][ T1293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.668379][ T1293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.668403][ T1293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.041246][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 285.127027][ T9545] FAULT_INJECTION: forcing a failure. [ 285.127027][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 285.127068][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.7.1202 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.127101][ T9545] Tainted: [L]=SOFTLOCKUP [ 285.127110][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 285.127125][ T9545] Call Trace: [ 285.127133][ T9545] [ 285.127144][ T9545] dump_stack_lvl+0xe8/0x150 [ 285.127181][ T9545] should_fail_ex+0x3eb/0x540 [ 285.127216][ T9545] ? __pfx_sock_alloc_inode+0x10/0x10 [ 285.127248][ T9545] should_failslab+0xa8/0x100 [ 285.127275][ T9545] ? __pfx_sock_alloc_inode+0x10/0x10 [ 285.127304][ T9545] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 285.127340][ T9545] ? sock_alloc_inode+0x2c/0x1a0 [ 285.127370][ T9545] ? sock_alloc_inode+0x2c/0x1a0 [ 285.127406][ T9545] ? __pfx_sock_alloc_inode+0x10/0x10 [ 285.127437][ T9545] sock_alloc_inode+0x2c/0x1a0 [ 285.127469][ T9545] ? __pfx_sock_alloc_inode+0x10/0x10 [ 285.127508][ T9545] alloc_inode+0x6a/0x1b0 [ 285.127537][ T9545] __sock_create+0x127/0xac0 [ 285.127573][ T9545] ? __pfx___se_sys_setns+0x10/0x10 [ 285.127605][ T9545] __sys_socket+0xd6/0x1b0 [ 285.127643][ T9545] __x64_sys_socket+0x7a/0x90 [ 285.127677][ T9545] do_syscall_64+0x166/0x520 [ 285.127699][ T9545] ? trace_irq_disable+0x3b/0x140 [ 285.127734][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.127758][ T9545] ? clear_bhb_loop+0x70/0xc0 [ 285.127786][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.127810][ T9545] RIP: 0033:0x7f594b99e159 [ 285.127832][ T9545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.127853][ T9545] RSP: 002b:00007f594c7defc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 285.127880][ T9545] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f594b99e159 [ 285.127897][ T9545] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 285.127912][ T9545] RBP: 00007f594ba3503b R08: 0000000000000000 R09: 0000000000000000 [ 285.127927][ T9545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.127941][ T9545] R13: 00007f594bc26038 R14: 00007f594bc25fa0 R15: 00007ffc697b1b68 [ 285.127976][ T9545] [ 285.128002][ T9545] socket: no more sockets [ 285.227758][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice= 1.00 [ 285.238551][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.310845][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 285.310875][ T10] usb 7-1: Product: syz [ 285.310892][ T10] usb 7-1: Manufacturer: syz [ 285.437099][ T10] pwc: Philips SPC 900NC USB webcam detected. [ 285.811810][ T5715] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 285.878869][ T50] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.970480][ T5715] usb 8-1: Using ep0 maxpacket: 16 [ 285.971428][ T5715] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 285.971469][ T5715] usb 8-1: too many configurations: 123, using maximum allowed: 8 [ 285.972779][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.975353][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.976603][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.977622][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.979324][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.058775][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.077365][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.095869][ T5715] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.100070][ T5715] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 286.100097][ T5715] usb 8-1: SerialNumber: syz [ 286.131676][ T5715] usb 8-1: config 0 descriptor?? [ 286.150172][ T5715] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input26 [ 286.266009][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 286.297794][ T50] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.375391][ T4971] bcm5974 8-1:0.0: could not read from device [ 286.399665][ T5715] usb 8-1: USB disconnect, device number 2 [ 286.431816][ T7246] Bluetooth: hci1: command tx timeout [ 286.468872][ T10] pwc: recv_control_msg error -71 req 02 val 2c00 [ 286.470169][ T10] pwc: recv_control_msg error -71 req 04 val 1000 [ 286.472049][ T10] pwc: recv_control_msg error -71 req 04 val 1300 [ 286.491657][ T10] pwc: recv_control_msg error -71 req 04 val 1400 [ 286.498563][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 286.505651][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 286.510137][ T10] pwc: recv_control_msg error -71 req 06 val 0600 [ 286.514620][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 286.515136][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 286.523639][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 286.532493][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 286.536093][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 286.545053][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 286.564090][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 286.587683][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 286.614400][ T10] pwc: Registered as video103. [ 286.639915][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input27 [ 286.685951][ T10] usb 7-1: USB disconnect, device number 10 [ 286.749469][ T50] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.116321][ T50] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.428145][ T9565] FAULT_INJECTION: forcing a failure. [ 287.428145][ T9565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.428184][ T9565] CPU: 0 UID: 0 PID: 9565 Comm: syz.6.1216 Tainted: G L syzkaller #0 PREEMPT(full) [ 287.428227][ T9565] Tainted: [L]=SOFTLOCKUP [ 287.428236][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 287.428250][ T9565] Call Trace: [ 287.428259][ T9565] [ 287.428269][ T9565] dump_stack_lvl+0xe8/0x150 [ 287.428307][ T9565] should_fail_ex+0x3eb/0x540 [ 287.428340][ T9565] copy_folio_from_iter_atomic+0x67d/0x1a30 [ 287.428383][ T9565] ? shmem_get_folio_gfp+0x6ba/0x1330 [ 287.428415][ T9565] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 287.428454][ T9565] ? shmem_write_begin+0x1d8/0x330 [ 287.428486][ T9565] generic_perform_write+0x5c7/0x8e0 [ 287.428529][ T9565] ? __pfx_generic_perform_write+0x10/0x10 [ 287.428559][ T9565] ? do_raw_spin_unlock+0xf5/0x200 [ 287.428587][ T9565] ? mnt_put_write_access_file+0xc3/0x100 [ 287.428625][ T9565] ? file_update_time_flags+0x3ab/0x440 [ 287.428663][ T9565] shmem_file_write_iter+0xf8/0x120 [ 287.428693][ T9565] do_iter_readv_writev+0x612/0x8c0 [ 287.428731][ T9565] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 287.428782][ T9565] vfs_writev+0x343/0x990 [ 287.428816][ T9565] ? __pfx_vfs_writev+0x10/0x10 [ 287.428855][ T9565] ? __fget_files+0x2a/0x420 [ 287.428888][ T9565] ? __fget_files+0x3a2/0x420 [ 287.428914][ T9565] ? __fget_files+0x2a/0x420 [ 287.428952][ T9565] __se_sys_pwritev2+0x177/0x2a0 [ 287.428990][ T9565] ? __pfx___se_sys_pwritev2+0x10/0x10 [ 287.429031][ T9565] ? __x64_sys_pwritev2+0x20/0xc0 [ 287.429068][ T9565] do_syscall_64+0x166/0x520 [ 287.429089][ T9565] ? trace_irq_disable+0x3b/0x140 [ 287.429120][ T9565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.429144][ T9565] ? clear_bhb_loop+0x70/0xc0 [ 287.429172][ T9565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.429194][ T9565] RIP: 0033:0x7f323619e159 [ 287.429223][ T9565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.429243][ T9565] RSP: 002b:00007f32370e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 287.429266][ T9565] RAX: ffffffffffffffda RBX: 00007f3236425fa0 RCX: 00007f323619e159 [ 287.429280][ T9565] RDX: 000000000000001c RSI: 0000200000000500 RDI: 0000000000000003 [ 287.429291][ T9565] RBP: 00007f323623503b R08: 0000000000000000 R09: 0000000000000022 [ 287.429302][ T9565] R10: 0000000000000a00 R11: 0000000000000246 R12: 0000000000000000 [ 287.429314][ T9565] R13: 00007f3236426038 R14: 00007f3236425fa0 R15: 00007ffd616e5ae8 [ 287.429346][ T9565] [ 287.674281][ T25] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 287.808255][ T8507] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 287.819746][ T8507] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 287.830885][ T8507] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 287.845950][ T8507] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 287.848408][ T8507] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 287.882843][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 287.902873][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.909811][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.909841][ T25] usb 8-1: Product: syz [ 287.909857][ T25] usb 8-1: Manufacturer: syz [ 287.909874][ T25] usb 8-1: SerialNumber: syz [ 287.948386][ T50] bridge_slave_1: left allmulticast mode [ 287.948414][ T50] bridge_slave_1: left promiscuous mode [ 287.949390][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.000142][ T50] bridge_slave_0: left allmulticast mode [ 288.000171][ T50] bridge_slave_0: left promiscuous mode [ 288.000516][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.207235][ T9566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.246116][ T9566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.277958][ T25] cdc_ether 8-1:1.0: skipping garbage [ 288.278197][ T25] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 288.299076][ T25] usb 8-1: USB disconnect, device number 3 [ 288.482561][ T10] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 288.500621][ T8507] Bluetooth: hci1: command tx timeout [ 288.655067][ T10] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 288.656253][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 288.656282][ T10] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 288.656338][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.712140][ T10] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 288.748452][ T10] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 288.808847][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.821268][ T25] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 288.848095][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.859290][ T50] bond0 (unregistering): Released all slaves [ 288.990544][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 288.991258][ T25] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 288.992410][ T25] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 288.992437][ T25] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 288.992483][ T25] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 288.992509][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 288.992536][ T25] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 288.992563][ T25] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 288.992607][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.994700][ T50] tipc: Left network mode [ 289.105360][ T9573] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 289.106661][ T9573] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 289.108710][ T9573] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 289.195450][ T9573] SPCP8x5 ttyUSB0: Set UART format 0x104 failed (error = -32) [ 289.215856][ T25] usb 8-1: GET_CAPABILITIES returned 0 [ 289.215905][ T25] usbtmc 8-1:16.0: can't read capabilities [ 289.216097][ T9573] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 289.275852][ T5281] 8021q: adding VLAN 0 to HW filter on device eth9 [ 289.498279][ T5747] usb 8-1: USB disconnect, device number 4 [ 289.814226][ T5694] usb 7-1: USB disconnect, device number 11 [ 289.871156][ T5694] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 289.878648][ T5694] spcp8x5 7-1:1.0: device disconnected [ 289.941418][ T8507] Bluetooth: hci0: command tx timeout [ 290.098836][ T9567] lo speed is unknown, defaulting to 1000 [ 290.376345][ T44] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 290.494251][ T5281] 8021q: adding VLAN 0 to HW filter on device eth10 [ 290.522882][ T50] hsr_slave_0: left promiscuous mode [ 290.523618][ T50] hsr_slave_1: left promiscuous mode [ 290.524577][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.524598][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.525400][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.525427][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.541891][ T44] usb 8-1: Using ep0 maxpacket: 32 [ 290.557446][ T44] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 290.562223][ T50] veth1_macvtap: left promiscuous mode [ 290.562322][ T50] veth0_macvtap: left promiscuous mode [ 290.562850][ T50] veth1_vlan: left promiscuous mode [ 290.563031][ T50] veth0_vlan: left promiscuous mode [ 290.579491][ T44] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.628224][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 290.683017][ T25] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 290.831923][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 290.834106][ T25] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 290.835119][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.852702][ T25] usb 7-1: config 0 descriptor?? [ 290.891881][ T25] gspca_main: sunplus-2.14.0 probing 041e:400b [ 291.228502][ T50] team0 (unregistering): Port device team_slave_1 removed [ 291.252507][ T50] team0 (unregistering): Port device team_slave_0 removed [ 291.785250][ T50] IPVS: stop unused estimator thread 0... [ 292.022494][ T8507] Bluetooth: hci0: command tx timeout [ 292.026485][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.070201][ T44] usb 8-1: USB disconnect, device number 5 [ 292.194376][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.299959][ T25] gspca_sunplus: reg_w_riv err -71 [ 292.300054][ T25] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 292.326313][ T25] usb 7-1: USB disconnect, device number 12 [ 292.363609][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.399845][ T5281] 8021q: adding VLAN 0 to HW filter on device eth11 [ 292.428078][ T9567] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.428179][ T9567] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.428319][ T9567] bridge_slave_0: entered allmulticast mode [ 292.441396][ T9567] bridge_slave_0: entered promiscuous mode [ 292.458207][ T9567] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.458396][ T9567] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.458496][ T9567] bridge_slave_1: entered allmulticast mode [ 292.459879][ T9567] bridge_slave_1: entered promiscuous mode [ 292.503798][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.568276][ T9567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.576224][ T9567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.661201][ T9567] team0: Port device team_slave_0 added [ 292.677989][ T9567] team0: Port device team_slave_1 added [ 292.775785][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.775805][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.775834][ T9567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.865487][ T9567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.865507][ T9567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.865537][ T9567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.184064][ T50] bridge_slave_1: left allmulticast mode [ 293.184093][ T50] bridge_slave_1: left promiscuous mode [ 293.184310][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.224611][ T50] bridge_slave_0: left allmulticast mode [ 293.224640][ T50] bridge_slave_0: left promiscuous mode [ 293.224868][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.307081][ T44] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 293.460510][ T44] usb 2-1: Using ep0 maxpacket: 32 [ 293.461409][ T44] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 293.464025][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.528993][ T44] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 293.745479][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.771924][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.775529][ T50] bond0 (unregistering): Released all slaves [ 293.821214][ T9567] hsr_slave_0: entered promiscuous mode [ 293.822326][ T9567] hsr_slave_1: entered promiscuous mode [ 293.845556][ T5281] 8021q: adding VLAN 0 to HW filter on device eth12 [ 293.943101][ T50] tipc: Disabling bearer [ 293.943236][ T50] tipc: Left network mode [ 294.100696][ T8507] Bluetooth: hci0: command tx timeout [ 294.972858][ T44] usb 2-1: USB disconnect, device number 36 [ 295.032495][ T50] hsr_slave_0: left promiscuous mode [ 295.034722][ T50] hsr_slave_1: left promiscuous mode [ 295.035629][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.035653][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.037653][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.037674][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.097702][ T50] veth1_macvtap: left promiscuous mode [ 295.097746][ T50] veth0_macvtap: left promiscuous mode [ 295.097851][ T50] veth1_vlan: left promiscuous mode [ 295.097935][ T50] veth0_vlan: left promiscuous mode [ 295.707280][ T9717] FAULT_INJECTION: forcing a failure. [ 295.707280][ T9717] name failslab, interval 1, probability 0, space 0, times 0 [ 295.707318][ T9717] CPU: 0 UID: 0 PID: 9717 Comm: syz.7.1240 Tainted: G L syzkaller #0 PREEMPT(full) [ 295.707350][ T9717] Tainted: [L]=SOFTLOCKUP [ 295.707359][ T9717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.707373][ T9717] Call Trace: [ 295.707383][ T9717] [ 295.707392][ T9717] dump_stack_lvl+0xe8/0x150 [ 295.707429][ T9717] should_fail_ex+0x3eb/0x540 [ 295.707462][ T9717] should_failslab+0xa8/0x100 [ 295.707489][ T9717] __kmalloc_noprof+0xf9/0x710 [ 295.707522][ T9717] ? rcu_is_watching+0x16/0xb0 [ 295.707547][ T9717] ? tomoyo_realpath_from_path+0xef/0x640 [ 295.707576][ T9717] ? tomoyo_realpath_from_path+0xef/0x640 [ 295.707624][ T9717] tomoyo_realpath_from_path+0xef/0x640 [ 295.707665][ T9717] ? tomoyo_path_number_perm+0x219/0x5f0 [ 295.707691][ T9717] tomoyo_path_number_perm+0x246/0x5f0 [ 295.707718][ T9717] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 295.707741][ T9717] ? __lock_acquire+0x747/0x2de0 [ 295.707791][ T9717] ? hook_file_ioctl+0x1f2/0x600 [ 295.707838][ T9717] ? __fget_files+0x2a/0x420 [ 295.707871][ T9717] ? __fget_files+0x2a/0x420 [ 295.707899][ T9717] ? __fget_files+0x3a2/0x420 [ 295.707927][ T9717] ? __fget_files+0x2a/0x420 [ 295.707960][ T9717] security_file_ioctl+0xc3/0x2a0 [ 295.707999][ T9717] __se_sys_ioctl+0x47/0x170 [ 295.708042][ T9717] do_syscall_64+0x166/0x520 [ 295.708064][ T9717] ? trace_irq_disable+0x3b/0x140 [ 295.708097][ T9717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.708122][ T9717] ? clear_bhb_loop+0x70/0xc0 [ 295.708151][ T9717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.708175][ T9717] RIP: 0033:0x7f594b99ddeb [ 295.708196][ T9717] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 295.708215][ T9717] RSP: 002b:00007f594c7dcf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 295.708241][ T9717] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f594b99ddeb [ 295.708257][ T9717] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 295.708272][ T9717] RBP: 00007f594c7ddfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 295.708287][ T9717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.708301][ T9717] R13: 0000200000000000 R14: 0000000000000005 R15: 0000000000000000 [ 295.708335][ T9717] [ 295.708371][ T9717] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.980530][ T44] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 296.016982][ T50] team0 (unregistering): Port device team_slave_1 removed [ 296.077857][ T50] team0 (unregistering): Port device team_slave_0 removed [ 296.114477][ T44] usb 8-1: device descriptor read/64, error -71 [ 296.152103][ T9723] ================================================================== [ 296.152123][ T9723] BUG: KASA ** replaying previous printk message ** [ 296.152123][ T9723] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 296.152160][ T9723] Write of size 4 at addr ffff88802b4ce300 by task syz.1.1241/9723 [ 296.152179][ T9723] [ 296.152194][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.1.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.152225][ T9723] Tainted: [L]=SOFTLOCKUP [ 296.152234][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.152247][ T9723] Call Trace: [ 296.152256][ T9723] [ 296.152266][ T9723] dump_stack_lvl+0xe8/0x150 [ 296.152295][ T9723] print_address_description+0x55/0x1e0 [ 296.152328][ T9723] ? try_module_get+0x46/0xc0 [ 296.152355][ T9723] print_report+0x58/0x70 [ 296.152383][ T9723] kasan_report+0x117/0x150 [ 296.152408][ T9723] ? try_module_get+0x46/0xc0 [ 296.152440][ T9723] kasan_check_range+0x264/0x2c0 [ 296.152467][ T9723] try_module_get+0x46/0xc0 [ 296.152495][ T9723] dvb_device_open+0xef/0x340 [ 296.152522][ T9723] ? do_raw_spin_unlock+0xf5/0x200 [ 296.152551][ T9723] chrdev_open+0x4d9/0x600 [ 296.152574][ T9723] ? __pfx_chrdev_open+0x10/0x10 [ 296.152597][ T9723] ? devcgroup_check_permission+0x31/0x8f0 [ 296.152632][ T9723] ? __pfx_chrdev_open+0x10/0x10 [ 296.152653][ T9723] do_dentry_open+0x80e/0x1360 [ 296.152683][ T9723] vfs_open_consume+0x4a/0x350 [ 296.152706][ T9723] ? path_openat+0x14bb/0x1e40 [ 296.152740][ T9723] path_openat+0x14d7/0x1e40 [ 296.152783][ T9723] do_file_open+0x23e/0x4a0 [ 296.152819][ T9723] ? __pfx_do_file_open+0x10/0x10 [ 296.152863][ T9723] ? _raw_spin_unlock+0x28/0x50 [ 296.152892][ T9723] ? alloc_fd+0x651/0x6c0 [ 296.152923][ T9723] do_sys_openat2+0x115/0x200 [ 296.152950][ T9723] ? __pfx_do_sys_openat2+0x10/0x10 [ 296.152988][ T9723] ? __task_pid_nr_ns+0x28/0x470 [ 296.153022][ T9723] __x64_sys_openat+0x138/0x170 [ 296.153050][ T9723] do_syscall_64+0x166/0x520 [ 296.153070][ T9723] ? trace_irq_disable+0x3b/0x140 [ 296.153102][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.153126][ T9723] ? clear_bhb_loop+0x70/0xc0 [ 296.153152][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.153174][ T9723] RIP: 0033:0x7fac09f5e98e [ 296.153212][ T9723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 296.153233][ T9723] RSP: 002b:00007fac0af15b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 296.153259][ T9723] RAX: ffffffffffffffda RBX: 00007fac0af166c0 RCX: 00007fac09f5e98e [ 296.153277][ T9723] RDX: 0000000000000002 RSI: 00007fac0af15c00 RDI: ffffffffffffff9c [ 296.153293][ T9723] RBP: 00007fac0af15c00 R08: 0000000000000000 R09: 0000000000000000 [ 296.153308][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 296.153323][ T9723] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 296.153349][ T9723] [ 296.153357][ T9723] [ 296.153370][ T9723] Allocated by task 9585: [ 296.153381][ T9723] kasan_save_track+0x3e/0x80 [ 296.153417][ T9723] __kasan_slab_alloc+0x6c/0x80 [ 296.153436][ T9723] kmem_cache_alloc_from_sheaf_noprof+0x9b/0x1b0 [ 296.153469][ T9723] dst_setup+0x7e8/0x1160 [ 296.153492][ T9723] mas_wr_store_entry+0x34e9/0x7cf0 [ 296.153522][ T9723] mas_store_prealloc+0x803/0xc20 [ 296.153553][ T9723] mmap_region+0x1c20/0x2270 [ 296.153574][ T9723] do_mmap+0xe0a/0x1300 [ 296.153596][ T9723] vm_mmap_pgoff+0x272/0x4e0 [ 296.153614][ T9723] do_syscall_64+0x166/0x520 [ 296.153632][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.153652][ T9723] [ 296.153658][ T9723] Freed by task 9584: [ 296.153668][ T9723] kasan_save_track+0x3e/0x80 [ 296.153698][ T9723] kasan_save_free_info+0x40/0x50 [ 296.153725][ T9723] __kasan_slab_free+0x5c/0x80 [ 296.153743][ T9723] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 296.153765][ T9723] rcu_free_sheaf+0x31/0x200 [ 296.153795][ T9723] rcu_core+0x926/0x1260 [ 296.153825][ T9723] handle_softirqs+0x226/0x860 [ 296.153848][ T9723] __irq_exit_rcu+0xcb/0x220 [ 296.153870][ T9723] irq_exit_rcu+0x9/0x30 [ 296.153892][ T9723] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 296.153923][ T9723] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 296.153945][ T9723] [ 296.153950][ T9723] The buggy address belongs to the object at ffff88802b4ce200 [ 296.153950][ T9723] which belongs to the cache maple_node of size 256 [ 296.153978][ T9723] The buggy address is located 0 bytes to the right of [ 296.153978][ T9723] allocated 256-byte region [ffff88802b4ce200, ffff88802b4ce300) [ 296.154002][ T9723] [ 296.154008][ T9723] The buggy address belongs to the physical page: [ 296.154025][ T9723] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b4ce [ 296.154046][ T9723] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.154064][ T9723] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.154096][ T9723] page_type: f5(slab) [ 296.154116][ T9723] raw: 00fff00000000040 ffff88813ff24c80 dead000000000100 dead000000000122 [ 296.154137][ T9723] raw: 0000000000000000 0000000200100010 00000000f5000000 0000000000000000 [ 296.154158][ T9723] head: 00fff00000000040 ffff88813ff24c80 dead000000000100 dead000000000122 [ 296.154178][ T9723] head: 0000000000000000 0000000200100010 00000000f5000000 0000000000000000 [ 296.154198][ T9723] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 296.154218][ T9723] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 296.154230][ T9723] page dumped because: kasan: bad access detected [ 296.154246][ T9723] page_owner tracks the page as allocated [ 296.154254][ T9723] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9585, tgid 9585 (sed), ts 288644583854 [ 296.154290][ T9723] post_alloc_hook+0x1f9/0x250 [ 296.154318][ T9723] get_page_from_freelist+0x2209/0x2280 [ 296.154351][ T9723] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 296.154384][ T9723] allocate_slab+0x7d/0x620 [ 296.154406][ T9723] refill_objects+0x2d5/0x350 [ 296.154429][ T9723] kmem_cache_prefill_sheaf+0x2fd/0x550 [ 296.154457][ T9723] mas_alloc_nodes+0x1c2/0x350 [ 296.154482][ T9723] mas_preallocate+0x42a/0x840 [ 296.154506][ T9723] mmap_region+0x13b7/0x2270 [ 296.154522][ T9723] do_mmap+0xe0a/0x1300 [ 296.154539][ T9723] vm_mmap_pgoff+0x272/0x4e0 [ 296.154553][ T9723] do_syscall_64+0x166/0x520 [ 296.154567][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.154583][ T9723] page last free pid 5702 tgid 5702 ts 261830943976 stack trace: [ 296.154596][ T9723] __free_frozen_pages+0xc93/0xd90 [ 296.154618][ T9723] __slab_free+0x274/0x2c0 [ 296.154642][ T9723] qlist_free_all+0x99/0x100 [ 296.154665][ T9723] kasan_quarantine_reduce+0x148/0x160 [ 296.154690][ T9723] __kasan_slab_alloc+0x22/0x80 [ 296.154705][ T9723] __kmalloc_cache_noprof+0x29a/0x600 [ 296.154729][ T9723] usb_control_msg+0x73/0x3e0 [ 296.154752][ T9723] hub_ext_port_status+0x112/0x840 [ 296.154773][ T9723] hub_port_debounce+0x21e/0x330 [ 296.154797][ T9723] hub_event+0x1c57/0x4d30 [ 296.154811][ T9723] process_scheduled_works+0xc3d/0x1630 [ 296.154829][ T9723] worker_thread+0xa47/0xfb0 [ 296.154847][ T9723] kthread+0x38b/0x480 [ 296.154869][ T9723] ret_from_fork+0x514/0xb70 [ 296.154892][ T9723] ret_from_fork_asm+0x1a/0x30 [ 296.154915][ T9723] [ 296.154919][ T9723] Memory state around the buggy address: [ 296.154928][ T9723] ffff88802b4ce200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.154940][ T9723] ffff88802b4ce280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.154952][ T9723] >ffff88802b4ce300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.154969][ T9723] ^ [ 296.154977][ T9723] ffff88802b4ce380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.154989][ T9723] ffff88802b4ce400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.154999][ T9723] ================================================================== [ 296.171306][ T9723] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.936329][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.1.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.947220][ T9723] Tainted: [L]=SOFTLOCKUP [ 296.951573][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.961652][ T9723] Call Trace: [ 296.964957][ T9723] [ 296.967954][ T9723] vpanic+0x56d/0xa70 [ 296.972024][ T9723] ? __pfx_vpanic+0x10/0x10 [ 296.976575][ T9723] panic+0xc5/0xd0 [ 296.980344][ T9723] ? __pfx_panic+0x10/0x10 [ 296.984815][ T9723] ? preempt_schedule_thunk+0x16/0x40 [ 296.990242][ T9723] ? preempt_schedule_thunk+0x16/0x40 [ 296.995669][ T9723] ? try_module_get+0x46/0xc0 [ 297.000383][ T9723] check_panic_on_warn+0x89/0xb0 [ 297.005377][ T9723] ? try_module_get+0x46/0xc0 [ 297.010095][ T9723] end_report+0x73/0x170 [ 297.014373][ T9723] ? try_module_get+0x46/0xc0 [ 297.019073][ T9723] kasan_report+0x128/0x150 [ 297.023618][ T9723] ? try_module_get+0x46/0xc0 [ 297.028345][ T9723] kasan_check_range+0x264/0x2c0 [ 297.033319][ T9723] try_module_get+0x46/0xc0 [ 297.037859][ T9723] dvb_device_open+0xef/0x340 [ 297.042568][ T9723] ? do_raw_spin_unlock+0xf5/0x200 [ 297.047737][ T9723] chrdev_open+0x4d9/0x600 [ 297.052178][ T9723] ? __pfx_chrdev_open+0x10/0x10 [ 297.057151][ T9723] ? devcgroup_check_permission+0x31/0x8f0 [ 297.063010][ T9723] ? __pfx_chrdev_open+0x10/0x10 [ 297.067983][ T9723] do_dentry_open+0x80e/0x1360 [ 297.072783][ T9723] vfs_open_consume+0x4a/0x350 [ 297.077573][ T9723] ? path_openat+0x14bb/0x1e40 [ 297.082376][ T9723] path_openat+0x14d7/0x1e40 [ 297.086994][ T9723] do_file_open+0x23e/0x4a0 [ 297.091525][ T9723] ? __pfx_do_file_open+0x10/0x10 [ 297.096581][ T9723] ? _raw_spin_unlock+0x28/0x50 [ 297.101455][ T9723] ? alloc_fd+0x651/0x6c0 [ 297.105805][ T9723] do_sys_openat2+0x115/0x200 [ 297.110506][ T9723] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.115728][ T9723] ? __task_pid_nr_ns+0x28/0x470 [ 297.120690][ T9723] __x64_sys_openat+0x138/0x170 [ 297.125575][ T9723] do_syscall_64+0x166/0x520 [ 297.130192][ T9723] ? trace_irq_disable+0x3b/0x140 [ 297.135247][ T9723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.141333][ T9723] ? clear_bhb_loop+0x70/0xc0 [ 297.146034][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.151942][ T9723] RIP: 0033:0x7fac09f5e98e [ 297.156382][ T9723] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 297.176011][ T9723] RSP: 002b:00007fac0af15b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 297.184456][ T9723] RAX: ffffffffffffffda RBX: 00007fac0af166c0 RCX: 00007fac09f5e98e [ 297.192441][ T9723] RDX: 0000000000000002 RSI: 00007fac0af15c00 RDI: ffffffffffffff9c [ 297.200434][ T9723] RBP: 00007fac0af15c00 R08: 0000000000000000 R09: 0000000000000000 [ 297.208419][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 297.216400][ T9723] R13: 00007fac0a226038 R14: 00007fac0a225fa0 R15: 00007ffce1e18208 [ 297.224393][ T9723] [ 297.228049][ T9723] Kernel Offset: disabled [ 297.232402][ T9723] Rebooting in 86400 seconds..