last executing test programs: 6.236207093s ago: executing program 1 (id=1839): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) (fail_nth: 7) 5.876886017s ago: executing program 1 (id=1840): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000280)={r1}) (async) mount(&(0x7f0000000300)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='f2fs\x00', 0x0, &(0x7f00000035c0)='quota') 5.14398839s ago: executing program 1 (id=1843): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 5.130036635s ago: executing program 1 (id=1844): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c02124085010203010902240001000010"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000800)={0x0, 0x16, 0x1, "dc"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000500)={0x14, &(0x7f0000000380)={0x20, 0x0, 0xf3, {0xf3, 0x9, "69c6400e8e8b424af010c8aff8d5f7dded7e6d744bcbe6e36c25d1c1ac64b2e38e9cd4161a0f7ba08f109c9a76eed35e8700336e0267aa56deac2ac05c2259ac530f019d58638ec959b32ad30f277bc7e7d9aff267da3e99084c611262e7a1d6c1dcf71f3e6e9627595289a5777a5db429016802c25f86fe5ee79f631b3ece067de313dbafa7dceadfc6bb94c8ffd67f4f9e86389b5439cdc25778bfc49863bb2b0239bcd9ecf0aadd469a034c4292533757280d8f1f6d1582dde1b3b9e904b158ce794149a342b15b7e318b47b83f67a141d4920416175a35d3c1ff976d1c6671a26f585a55f5018efa37037f5ff818af"}}, &(0x7f0000000480)={0x0, 0x3, 0x72, @string={0x72, 0x3, "107785359d3770d7d2ccdb44b8493e02096cbdaf5f26c7a79e95045cfc77ce27fe6cd7734a463d77dc195c4ebdfbef6b36681d3252278b064671eb57dff786c7b5fd1485e627fee4c70dce71497f318cbd47a6b6fc5ebf88103be9a54875514df8ac0b9f37ec46e7146fa3050b1e94e6"}}}, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x40, 0x7, 0x53, "821253796b98ce91cdadff6811112aaef2bab6bbcf41995624890fb1ce12fecc26ec5ee35e9ad2086d92c26d70a48c7673d543f7263792122a5a4724d65401c32a1f404a1da7b51f9b16c56ed2df99cdcf4937"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000006c0)=ANY=[@ANYBLOB="f04913e7889f969d"], &(0x7f00000000c0)=ANY=[@ANYBLOB="2082bbbd24b972c6c6006d81241ef5857ba86124"], &(0x7f0000000740)={0x20, 0x83, 0x3, "ae79d9"}, &(0x7f0000000780)={0x20, 0x84, 0x2, "c792"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "a27fb7"}}) 4.413069584s ago: executing program 3 (id=1850): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 4.358328362s ago: executing program 3 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24000880) (fail_nth: 7) 4.195671888s ago: executing program 3 (id=1852): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) 3.912999933s ago: executing program 2 (id=1855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) shutdown(r1, 0x1) r2 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x80) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0x980000, 0x1, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980913, 0x0, '\x00', @string=0x0}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0, @ANYRES32=r0], 0xc0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.795144564s ago: executing program 2 (id=1856): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x41, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 3.793857013s ago: executing program 3 (id=1857): linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0xc00) 3.619651686s ago: executing program 3 (id=1858): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x412540, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) r2 = socket$unix(0x1, 0x2, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r11 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = inotify_init() r15 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000640)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) sendmmsg$unix(r2, &(0x7f00000007c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000140)="a424fed8208861ac49d790048690549ae9698d3a8e70366478854448915299ddd7aa0c3e5dd80aae6cb025bab647d2c8a7b04d18601f9de4947cec228065702e2821a2eaf711d40899c75841b686a2cc7fbfe8678a3c79ae574643fd", 0x5c}], 0x1, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [r3, r1, r0, r4, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xffffffffffffffff, r6}}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x30, 0x1, 0x1, [r14, r1, r15, r0, r0, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r16, r18, r19}}}], 0xf8}}], 0x1, 0x20004000) ioctl$TCSETSW2(r15, 0x402c542c, &(0x7f0000000800)={0x80, 0x6, 0xac, 0xfffffffa, 0x8, "54fd311e5684c76f88df277d7b79de5f106e31", 0x7fffffff, 0x7fffffff}) r20 = syz_open_dev$audion(&(0x7f0000000840), 0xffffffffffffff5f, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r20, 0x7c80, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x80140) r21 = memfd_secret(0x0) write$cgroup_int(r21, &(0x7f00000008c0)=0x7, 0x12) ioctl$BLKROGET(r17, 0x125e, &(0x7f0000000900)) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000940)) 3.31976123s ago: executing program 2 (id=1859): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 3.137137303s ago: executing program 2 (id=1861): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0xa, 0x1, 0x5, 0x7, 0x80000001, 0x9ade, 0x401}, 0x20) listen(r0, 0xec) accept(r0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0x2, @pix_mp={0xfffffffb, 0x8, 0x31364d4e, 0x1, 0x0, [{0x3}, {0x0, 0x1}, {0x4, 0x26f0}, {0x80000001, 0x80}, {0x8000, 0x1}, {0x4, 0x5}, {0x8ab, 0x80000000}, {0x0, 0x1}], 0x5, 0x0, 0x0, 0x0, 0x5}}) 2.991568109s ago: executing program 3 (id=1862): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x804000, &(0x7f0000000340)={[{@usrquota_inode_hardlimit={'usrquota_inode_hardlimit', 0x3d, [0x50]}}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003bc0)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000800) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x10454ca, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00001b4000/0x3000)=nil, 0x3000}, 0x3}) r2 = socket$kcm(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582", @ANYBLOB="bdb056"], 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) read$alg(r4, &(0x7f0000002300)=""/4128, 0x1020) sendmmsg$alg(r4, &(0x7f00000020c0)=[{0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000001440)="a79fec4b", 0x4}, {&(0x7f0000003340)="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", 0xffd}], 0x2, &(0x7f0000001300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20004080) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) 2.212244045s ago: executing program 2 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)}], 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00 \x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) 2.145933342s ago: executing program 0 (id=1866): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89400100120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2.011619549s ago: executing program 2 (id=1867): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0x101842) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x100000000) pipe2(&(0x7f0000001440), 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000900)={0x2c, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/hibernate_compression_threads', 0x800, 0x188) read$char_usb(r2, &(0x7f00000000c0)=""/233, 0xe9) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.916206946s ago: executing program 0 (id=1868): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x7ffffffe, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 1.858256173s ago: executing program 0 (id=1869): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x210804, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xbe) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) chroot(&(0x7f0000000000)='./bus\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x1e) unlinkat(r3, &(0x7f00000001c0)='./file2\x00', 0x200) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) 1.740608659s ago: executing program 0 (id=1870): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000180)={0x60, r1, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7f}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x81, @mcast2, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4ea2, @private=0xa010100}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0xff73) setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r6, 0x80}, 0x8) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0xfce) 932.058328ms ago: executing program 1 (id=1871): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0xd}, 0x1c) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x6c, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x24}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x48001) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x100000, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) recvmsg$can_raw(r9, &(0x7f0000000d00)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000a00)=""/155, 0x9b}, {&(0x7f0000000ac0)=""/46, 0x2e}, {&(0x7f0000000b00)=""/248, 0xf8}], 0x4, &(0x7f0000000c40)=""/149, 0x95}, 0x42) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0xc080}, 0x5) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c60133", 0x7}, {&(0x7f0000000100)="8ee94cd032beb6e5ff658bb539e2a1485d4c922306dfe538a2e2fe", 0x1b}, {&(0x7f0000000280)="bdcfe861eb9c", 0x6}], 0x3}, 0x20008b88) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 271.660216ms ago: executing program 0 (id=1872): r0 = socket(0x11, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440)={0x2, 0xfffffffffffffff7}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000100)=0xffffffffffffffff, 0x4) socket$alg(0x26, 0x5, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x408, 0x3, 0x2}, 0x18, 0x1) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000180)={0x6002, r1}, 0x0) (async, rerun: 64) sendmmsg(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000080)=@can={0x1d, r2}, 0x80, 0x0}}], 0x1, 0x4004801) (async, rerun: 64) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x8) 30.072561ms ago: executing program 0 (id=1873): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80800) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0xa, 0x1, 0x5, 0x7, 0x80000001, 0x9ade, 0x401}, 0x20) listen(r0, 0xec) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x1000) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) ioctl$VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000300)={0x2, @pix_mp={0xfffffffb, 0x8, 0x31364d4e, 0x1, 0x0, [{0x3}, {0x0, 0x1}, {0x4, 0x26f0}, {0x80000001, 0x80}, {0x8000, 0x1}, {0x4, 0x5}, {0x8ab, 0x80000000}, {0x0, 0x1}], 0x5, 0x0, 0x0, 0x0, 0x5}}) 0s ago: executing program 1 (id=1874): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)={0x300, r0, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x200}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x12c, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, "207dc6eb38e087134c1964d509375d6467200ee13ba676b99bc795a9012ec3cfc6f50104154fa97bf33539c31aa80af5fe321cec56fc67b93c338fb2b8299c40424d5d85952354cb746649e6b2b888f15cdfabe15525184a6031c77c"}, @NL80211_BAND_2GHZ={0xc5, 0x0, "05a1812c26c747c1c115be15fa61a6b85f9f4b47b4a79dbd20290e5f588cd145b97359f81600c4a01d8c4d320e01b00f065dc49b52f3c38659c3c18e0a4ef40f855d9763774160839a38ff245af6998f2772bfa1cd5e7ef43d4d56c07ff66ac2d51c6b722cfcf484fcf050129a3340405a0e620d99a53e462301fc3b6b023915240e6709bcb86619e45f03b6bc1b5c1577074022677eea69cb9f5de32ed3185def76d93ccd3f485bb16f8a407fb04f7eb29bf74db12a19ad38e9a69ce12840be2a"}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x9}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x2}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x17c, 0x84, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x7de8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x5da}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xe}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xfffffffc}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x2}, @NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x8}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x6, 0x1, @random="8c35"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xfffffff8}]}, {0x50, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x18001}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}, @NL80211_BAND_LC={0x8, 0x5, 0x6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0xdcd9}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0x80000000}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x7f}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x5}]}]}, {0x94, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x3}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x24, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x7c}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfd}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x5}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x14, 0x6, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8, 0x1, 0x7}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x4}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x9e6d}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="959dc304250c"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x15, 0x1, @random="2b900b2b8742332cefe300d0560bdc2b42"}]}]}]}, 0x300}}, 0x4c050) kernel console output (not intermixed with test programs): /0x420 [ 307.111397][ T9830] ? __fget_files+0x3a6/0x420 [ 307.111410][ T9830] ? __fget_files+0x2a/0x420 [ 307.111426][ T9830] security_file_ioctl+0xc3/0x2a0 [ 307.111449][ T9830] __se_sys_ioctl+0x47/0x170 [ 307.111481][ T9830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.111505][ T9830] do_syscall_64+0x15f/0xf80 [ 307.111526][ T9830] ? trace_irq_disable+0x3b/0x140 [ 307.111553][ T9830] ? clear_bhb_loop+0x40/0x90 [ 307.111570][ T9830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.111583][ T9830] RIP: 0033:0x7f0786e3cdd9 [ 307.111596][ T9830] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.111611][ T9830] RSP: 002b:00007f0785096028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.111633][ T9830] RAX: ffffffffffffffda RBX: 00007f07870b5fa0 RCX: 00007f0786e3cdd9 [ 307.111649][ T9830] RDX: 0000200000000040 RSI: 00000000c0285628 RDI: 0000000000000003 [ 307.111664][ T9830] RBP: 00007f0785096090 R08: 0000000000000000 R09: 0000000000000000 [ 307.111677][ T9830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 307.111690][ T9830] R13: 00007f07870b6038 R14: 00007f07870b5fa0 R15: 00007ffe9e9995d8 [ 307.111721][ T9830] [ 307.111873][ T9830] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.185605][ T5621] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 307.185691][ T5621] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 307.185710][ T5621] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 307.185801][ T5621] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 307.238503][ T5621] usb 1-1: USB disconnect, device number 40 [ 307.408725][ T9834] Bluetooth: MGMT ver 1.23 [ 308.064245][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.064715][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.073800][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.075213][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.075657][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.078598][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.079244][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.079768][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.080172][ T9840] netlink: 'syz.0.1465': attribute type 17 has an invalid length. [ 308.403697][ T55] usb 4-1: USB disconnect, device number 44 [ 308.581773][ T9837] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1464'. [ 308.581856][ T9837] FAULT_INJECTION: forcing a failure. [ 308.581856][ T9837] name failslab, interval 1, probability 0, space 0, times 0 [ 308.581876][ T9837] CPU: 1 UID: 0 PID: 9837 Comm: syz.2.1464 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 308.581893][ T9837] Tainted: [L]=SOFTLOCKUP [ 308.581898][ T9837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.581906][ T9837] Call Trace: [ 308.581911][ T9837] [ 308.581916][ T9837] dump_stack_lvl+0xe8/0x150 [ 308.581934][ T9837] should_fail_ex+0x46b/0x600 [ 308.581961][ T9837] should_failslab+0xa8/0x100 [ 308.581979][ T9837] kmem_cache_alloc_noprof+0x87/0x680 [ 308.581996][ T9837] ? fib_trie_unmerge+0x272/0xcd0 [ 308.582014][ T9837] fib_trie_unmerge+0x272/0xcd0 [ 308.582035][ T9837] fib_unmerge+0xc5/0x360 [ 308.582055][ T9837] fib4_rule_configure+0x2e2/0xa50 [ 308.582073][ T9837] fib_newrule+0x5d0/0x1030 [ 308.582095][ T9837] ? __pfx_fib_newrule+0x10/0x10 [ 308.582128][ T9837] ? __pfx_fib_nl_newrule+0x10/0x10 [ 308.582145][ T9837] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 308.582163][ T9837] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 308.582177][ T9837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.582191][ T9837] ? ref_tracker_free+0x673/0x820 [ 308.582206][ T9837] ? __netlink_deliver_tap+0x636/0x8b0 [ 308.582221][ T9837] ? netlink_deliver_tap+0x19c/0x1b0 [ 308.582236][ T9837] ? netlink_unicast+0x754/0x920 [ 308.582249][ T9837] ? netlink_sendmsg+0x813/0xb40 [ 308.582264][ T9837] ? sock_sendmsg_nosec+0x112/0x150 [ 308.582276][ T9837] ? ____sys_sendmsg+0x55c/0x870 [ 308.582292][ T9837] ? ___sys_sendmsg+0x2a5/0x360 [ 308.582308][ T9837] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 308.582324][ T9837] ? do_syscall_64+0x15f/0xf80 [ 308.582335][ T9837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.582352][ T9837] netlink_rcv_skb+0x232/0x4b0 [ 308.582368][ T9837] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.582384][ T9837] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.582406][ T9837] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.582422][ T9837] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.582441][ T9837] netlink_unicast+0x780/0x920 [ 308.582463][ T9837] netlink_sendmsg+0x813/0xb40 [ 308.582484][ T9837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.582503][ T9837] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 308.582525][ T9837] ? aa_sock_msg_perm+0x122/0x200 [ 308.582543][ T9837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.582559][ T9837] sock_sendmsg_nosec+0x112/0x150 [ 308.582574][ T9837] ____sys_sendmsg+0x55c/0x870 [ 308.582593][ T9837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.582615][ T9837] ? import_iovec+0x73/0xa0 [ 308.582634][ T9837] ___sys_sendmsg+0x2a5/0x360 [ 308.582650][ T9837] ? __lock_acquire+0x6b5/0x2d10 [ 308.582665][ T9837] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.582698][ T9837] ? __fget_files+0x2a/0x420 [ 308.582712][ T9837] ? __fget_files+0x3a6/0x420 [ 308.582731][ T9837] __x64_sys_sendmsg+0x1c3/0x2a0 [ 308.582749][ T9837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.582770][ T9837] ? __pfx_ksys_write+0x10/0x10 [ 308.582792][ T9837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.582804][ T9837] do_syscall_64+0x15f/0xf80 [ 308.582815][ T9837] ? trace_irq_disable+0x3b/0x140 [ 308.582833][ T9837] ? clear_bhb_loop+0x40/0x90 [ 308.582847][ T9837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.582859][ T9837] RIP: 0033:0x7f0786e3cdd9 [ 308.582872][ T9837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.582883][ T9837] RSP: 002b:00007f0785096028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.582896][ T9837] RAX: ffffffffffffffda RBX: 00007f07870b5fa0 RCX: 00007f0786e3cdd9 [ 308.582905][ T9837] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000008 [ 308.582913][ T9837] RBP: 00007f0785096090 R08: 0000000000000000 R09: 0000000000000000 [ 308.582921][ T9837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.582928][ T9837] R13: 00007f07870b6038 R14: 00007f07870b5fa0 R15: 00007ffe9e9995d8 [ 308.582950][ T9837] [ 309.240969][ T9859] tmpfs: Bad value for 'gid' [ 309.240986][ T9859] tmpfs: Bad value for 'gid' [ 309.426123][ T55] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 309.576263][ T32] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 309.580961][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 309.582528][ T55] usb 2-1: no configurations [ 309.582548][ T55] usb 2-1: can't read configurations, error -22 [ 309.716280][ T55] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 309.756121][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 309.758671][ T32] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 309.758704][ T32] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 309.758726][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 309.758749][ T32] usb 1-1: config 1 has no interface number 0 [ 309.758794][ T32] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 309.758823][ T32] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 309.758867][ T32] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 309.758891][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.786754][ T32] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 309.886103][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 309.887389][ T55] usb 2-1: no configurations [ 309.887407][ T55] usb 2-1: can't read configurations, error -22 [ 309.887833][ T55] usb usb2-port1: attempt power cycle [ 310.059090][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.063841][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.076049][ T32] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 310.246102][ T55] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 310.247167][ T9877] FAULT_INJECTION: forcing a failure. [ 310.247167][ T9877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.247203][ T9877] CPU: 0 UID: 0 PID: 9877 Comm: syz.3.1479 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 310.247233][ T9877] Tainted: [L]=SOFTLOCKUP [ 310.247240][ T9877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.247253][ T9877] Call Trace: [ 310.247261][ T9877] [ 310.247267][ T9877] dump_stack_lvl+0xe8/0x150 [ 310.247287][ T9877] should_fail_ex+0x46b/0x600 [ 310.247308][ T9877] _copy_from_user+0x2d/0xb0 [ 310.247339][ T9877] memdup_user+0x5e/0xd0 [ 310.247365][ T9877] kvm_arch_vm_ioctl+0x86e/0x1a20 [ 310.247395][ T9877] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 310.247421][ T9877] ? __lock_acquire+0x6b5/0x2d10 [ 310.247437][ T9877] ? __lock_acquire+0x6b5/0x2d10 [ 310.247460][ T9877] ? unwind_next_frame+0xa6/0x2550 [ 310.247485][ T9877] ? unwind_next_frame+0xa6/0x2550 [ 310.247514][ T9877] ? is_bpf_text_address+0x26/0x2b0 [ 310.247546][ T9877] ? is_bpf_text_address+0x26/0x2b0 [ 310.247575][ T9877] ? is_bpf_text_address+0x292/0x2b0 [ 310.247594][ T9877] ? is_bpf_text_address+0x26/0x2b0 [ 310.247607][ T9877] ? kernel_text_address+0xa5/0xe0 [ 310.247621][ T9877] ? __kernel_text_address+0xd/0x30 [ 310.247634][ T9877] ? unwind_get_return_address+0x4d/0x90 [ 310.247656][ T9877] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 310.247686][ T9877] ? arch_stack_walk+0xfb/0x150 [ 310.247732][ T9877] ? stack_trace_save+0xa9/0x100 [ 310.247758][ T9877] ? __pfx_stack_trace_save+0x10/0x10 [ 310.247774][ T9877] ? kasan_save_free_info+0x46/0x50 [ 310.247788][ T9877] ? stack_depot_save_flags+0x33/0x810 [ 310.247806][ T9877] ? kasan_save_track+0x4f/0x80 [ 310.247830][ T9877] ? kasan_save_track+0x3e/0x80 [ 310.247854][ T9877] ? kasan_save_free_info+0x46/0x50 [ 310.247873][ T9877] ? __kasan_slab_free+0x5c/0x80 [ 310.247899][ T9877] ? kfree+0x1c5/0x6c0 [ 310.247922][ T9877] ? tomoyo_path_number_perm+0x501/0x630 [ 310.247937][ T9877] ? security_file_ioctl+0xc3/0x2a0 [ 310.247951][ T9877] ? __se_sys_ioctl+0x47/0x170 [ 310.247966][ T9877] ? do_syscall_64+0x15f/0xf80 [ 310.247983][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.248018][ T9877] kvm_vm_ioctl+0x908/0xd50 [ 310.248047][ T9877] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 310.248089][ T9877] ? kasan_quarantine_put+0xbb/0x1f0 [ 310.248108][ T9877] ? tomoyo_path_number_perm+0x219/0x630 [ 310.248123][ T9877] ? tomoyo_path_number_perm+0x219/0x630 [ 310.248143][ T9877] ? do_vfs_ioctl+0x117b/0x1540 [ 310.248175][ T9877] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 310.248236][ T9877] ? __fget_files+0x2a/0x420 [ 310.248261][ T9877] ? __fget_files+0x2a/0x420 [ 310.248275][ T9877] ? __fget_files+0x3a6/0x420 [ 310.248288][ T9877] ? __fget_files+0x2a/0x420 [ 310.248304][ T9877] ? bpf_lsm_file_ioctl+0x9/0x20 [ 310.248326][ T9877] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 310.248351][ T9877] __se_sys_ioctl+0xff/0x170 [ 310.248379][ T9877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.248402][ T9877] do_syscall_64+0x15f/0xf80 [ 310.248420][ T9877] ? trace_irq_disable+0x3b/0x140 [ 310.248437][ T9877] ? clear_bhb_loop+0x40/0x90 [ 310.248452][ T9877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.248465][ T9877] RIP: 0033:0x7f24c8b3cdd9 [ 310.248483][ T9877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.248501][ T9877] RSP: 002b:00007f24c6d96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 310.248525][ T9877] RAX: ffffffffffffffda RBX: 00007f24c8db5fa0 RCX: 00007f24c8b3cdd9 [ 310.248540][ T9877] RDX: 0000200000000600 RSI: 000000008208ae63 RDI: 0000000000000004 [ 310.248554][ T9877] RBP: 00007f24c6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 310.248567][ T9877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.248580][ T9877] R13: 00007f24c8db6038 R14: 00007f24c8db5fa0 R15: 00007ffd64dfaa78 [ 310.248599][ T9877] [ 310.267187][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 310.268949][ T55] usb 2-1: no configurations [ 310.268967][ T55] usb 2-1: can't read configurations, error -22 [ 310.315745][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.320145][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.420284][ T55] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 310.426239][ T32] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 310.450663][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 310.451625][ T55] usb 2-1: no configurations [ 310.451643][ T55] usb 2-1: can't read configurations, error -22 [ 310.452052][ T55] usb usb2-port1: unable to enumerate USB device [ 310.559588][ T9862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.563291][ T9862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.579266][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 310.579360][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 310.579387][ T32] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 310.583795][ T32] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 310.583829][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.583902][ T32] usb 3-1: Product: syz [ 310.583918][ T32] usb 3-1: Manufacturer: syz [ 310.583933][ T32] usb 3-1: SerialNumber: syz [ 310.620681][ T32] usb 3-1: config 0 descriptor?? [ 310.622399][ T9875] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 310.622602][ T9875] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 310.636101][ T32] usb 3-1: ucan: probing device on interface #0 [ 310.832600][ T32] usb 3-1: ucan: could not read protocol version, ret=0 [ 310.832680][ T32] usb 3-1: ucan: probe failed; try to update the device firmware [ 311.146132][ T32] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 311.506318][ T32] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 311.656078][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 311.658144][ T32] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 311.660714][ T32] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 311.660735][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.660748][ T32] usb 4-1: Product: syz [ 311.660757][ T32] usb 4-1: Manufacturer: syz [ 311.660803][ T32] usb 4-1: SerialNumber: syz [ 311.710497][ T32] r8152-cfgselector 4-1: Unknown version 0x0000 [ 311.710558][ T32] r8152-cfgselector 4-1: config 0 descriptor?? [ 312.132865][ T5703] r8152-cfgselector 4-1: USB disconnect, device number 45 [ 312.424674][ T5703] usb 1-1: USB disconnect, device number 41 [ 312.439192][ T5703] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 312.505437][ T9897] FAULT_INJECTION: forcing a failure. [ 312.505437][ T9897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.505476][ T9897] CPU: 1 UID: 0 PID: 9897 Comm: syz.0.1486 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 312.505506][ T9897] Tainted: [L]=SOFTLOCKUP [ 312.505514][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 312.505526][ T9897] Call Trace: [ 312.505533][ T9897] [ 312.505541][ T9897] dump_stack_lvl+0xe8/0x150 [ 312.505567][ T9897] should_fail_ex+0x46b/0x600 [ 312.505601][ T9897] _copy_to_user+0x31/0xb0 [ 312.505629][ T9897] simple_read_from_buffer+0xe1/0x170 [ 312.505655][ T9897] proc_fail_nth_read+0x1be/0x230 [ 312.505679][ T9897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.505702][ T9897] ? rw_verify_area+0x2ac/0x4e0 [ 312.505724][ T9897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 312.505747][ T9897] vfs_read+0x212/0xa80 [ 312.505775][ T9897] ? __pfx_vfs_read+0x10/0x10 [ 312.505799][ T9897] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 312.505825][ T9897] ? lockdep_hardirqs_on+0x7a/0x110 [ 312.505850][ T9897] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 312.505874][ T9897] ? mutex_lock_nested+0x152/0x1d0 [ 312.505899][ T9897] ? fdget_pos+0x252/0x320 [ 312.505930][ T9897] ksys_read+0x156/0x270 [ 312.505955][ T9897] ? __pfx_ksys_read+0x10/0x10 [ 312.505984][ T9897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.506003][ T9897] do_syscall_64+0x15f/0xf80 [ 312.506021][ T9897] ? clear_bhb_loop+0x40/0x90 [ 312.506041][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.506059][ T9897] RIP: 0033:0x7f7db482d60e [ 312.506075][ T9897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.506091][ T9897] RSP: 002b:00007f7db2ac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 312.506110][ T9897] RAX: ffffffffffffffda RBX: 00007f7db2ac66c0 RCX: 00007f7db482d60e [ 312.506123][ T9897] RDX: 000000000000000f RSI: 00007f7db2ac60a0 RDI: 0000000000000003 [ 312.506134][ T9897] RBP: 00007f7db2ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 312.506145][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.506156][ T9897] R13: 00007f7db4ae6038 R14: 00007f7db4ae5fa0 R15: 00007ffd5633b2c8 [ 312.506182][ T9897] [ 313.171470][ T32] usb 3-1: USB disconnect, device number 57 [ 313.472536][ T9916] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1493'. [ 313.492663][ T9916] binder: 9915:9916 ioctl c0306201 2000000001c0 returned -14 [ 313.716122][ T32] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 313.881242][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 313.886131][ T32] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 313.886159][ T32] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 313.886177][ T32] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 313.886195][ T32] usb 3-1: config 1 has no interface number 0 [ 313.886231][ T32] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.886254][ T32] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 313.886288][ T32] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 313.886318][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.944395][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 314.179344][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.189446][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.268909][ T32] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 314.410506][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.419045][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.654351][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.659783][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.694699][ T5621] usb 3-1: USB disconnect, device number 58 [ 314.736880][ T5621] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 314.856945][ T9955] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1511'. [ 314.863626][ T9955] binder: 9954:9955 ioctl c0306201 2000000001c0 returned -14 [ 315.142040][ T9967] validate_nla: 2 callbacks suppressed [ 315.142063][ T9967] netlink: 'syz.1.1517': attribute type 46 has an invalid length. [ 315.604539][ T9984] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1525'. [ 315.816623][ T5813] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 315.987485][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 315.990258][ T5813] usb 1-1: config 11 has an invalid interface number: 35 but max is 0 [ 315.990287][ T5813] usb 1-1: config 11 has no interface number 0 [ 315.990335][ T5813] usb 1-1: config 11 interface 35 altsetting 4 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 315.990364][ T5813] usb 1-1: config 11 interface 35 has no altsetting 0 [ 315.992647][ T5813] usb 1-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=81.d3 [ 315.992678][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.992699][ T5813] usb 1-1: Product: syz [ 315.992715][ T5813] usb 1-1: Manufacturer: syz [ 315.992744][ T5813] usb 1-1: SerialNumber: syz [ 316.274410][ T5813] ax88179_178a 1-1:11.35: probe with driver ax88179_178a failed with error -22 [ 316.302216][ T5813] usb 1-1: USB disconnect, device number 42 [ 316.501832][T10011] FAULT_INJECTION: forcing a failure. [ 316.501832][T10011] name failslab, interval 1, probability 0, space 0, times 0 [ 316.501873][T10011] CPU: 1 UID: 0 PID: 10011 Comm: syz.3.1536 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 316.501902][T10011] Tainted: [L]=SOFTLOCKUP [ 316.501909][T10011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 316.501921][T10011] Call Trace: [ 316.501930][T10011] [ 316.501939][T10011] dump_stack_lvl+0xe8/0x150 [ 316.501968][T10011] should_fail_ex+0x46b/0x600 [ 316.501999][T10011] should_failslab+0xa8/0x100 [ 316.502030][T10011] __kmalloc_noprof+0xdf/0x7b0 [ 316.502058][T10011] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 316.502086][T10011] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 316.502116][T10011] genl_family_rcv_msg_doit+0xd9/0x330 [ 316.502139][T10011] ? __asan_memcpy+0x40/0x70 [ 316.502168][T10011] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 316.502199][T10011] ? apparmor_capable+0x126/0x170 [ 316.502224][T10011] ? bpf_lsm_capable+0x9/0x20 [ 316.502247][T10011] ? security_capable+0x7e/0x2c0 [ 316.502281][T10011] genl_rcv_msg+0x61c/0x7a0 [ 316.502309][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.502329][T10011] ? ref_tracker_free+0x673/0x820 [ 316.502355][T10011] ? __pfx_mptcp_pm_nl_del_addr_doit+0x10/0x10 [ 316.502388][T10011] ? ____sys_sendmsg+0x55c/0x870 [ 316.502415][T10011] ? ___sys_sendmsg+0x2a5/0x360 [ 316.502440][T10011] ? __x64_sys_sendmsg+0x1c3/0x2a0 [ 316.502467][T10011] ? do_syscall_64+0x15f/0xf80 [ 316.502485][T10011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.502521][T10011] netlink_rcv_skb+0x232/0x4b0 [ 316.502551][T10011] ? __pfx_genl_rcv_msg+0x10/0x10 [ 316.502598][T10011] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 316.502643][T10011] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.502670][T10011] ? netlink_deliver_tap+0x2e/0x1b0 [ 316.502701][T10011] genl_rcv+0x28/0x40 [ 316.502720][T10011] netlink_unicast+0x780/0x920 [ 316.502755][T10011] netlink_sendmsg+0x813/0xb40 [ 316.502792][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.502823][T10011] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 316.502858][T10011] ? aa_sock_msg_perm+0x122/0x200 [ 316.502888][T10011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 316.502916][T10011] sock_sendmsg_nosec+0x112/0x150 [ 316.502940][T10011] ____sys_sendmsg+0x55c/0x870 [ 316.502973][T10011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 316.503013][T10011] ? import_iovec+0x73/0xa0 [ 316.503046][T10011] ___sys_sendmsg+0x2a5/0x360 [ 316.503073][T10011] ? __lock_acquire+0x6b5/0x2d10 [ 316.503097][T10011] ? __pfx____sys_sendmsg+0x10/0x10 [ 316.503157][T10011] ? __fget_files+0x2a/0x420 [ 316.503181][T10011] ? __fget_files+0x3a6/0x420 [ 316.503215][T10011] __x64_sys_sendmsg+0x1c3/0x2a0 [ 316.503247][T10011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 316.503285][T10011] ? __pfx_ksys_write+0x10/0x10 [ 316.503322][T10011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.503342][T10011] do_syscall_64+0x15f/0xf80 [ 316.503361][T10011] ? trace_irq_disable+0x3b/0x140 [ 316.503389][T10011] ? clear_bhb_loop+0x40/0x90 [ 316.503414][T10011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.503435][T10011] RIP: 0033:0x7f24c8b3cdd9 [ 316.503454][T10011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.503473][T10011] RSP: 002b:00007f24c6d96028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 316.503496][T10011] RAX: ffffffffffffffda RBX: 00007f24c8db5fa0 RCX: 00007f24c8b3cdd9 [ 316.503511][T10011] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 316.503524][T10011] RBP: 00007f24c6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 316.503538][T10011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.503551][T10011] R13: 00007f24c8db6038 R14: 00007f24c8db5fa0 R15: 00007ffd64dfaa78 [ 316.503592][T10011] [ 316.972965][T10016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1539'. [ 317.241497][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241556][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.326037][ T5621] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 317.334586][T10029] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1545'. [ 317.505037][ T5621] usb 1-1: Using ep0 maxpacket: 32 [ 317.512628][ T5621] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.512685][ T5621] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 317.515189][ T5621] usb 1-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 317.515220][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.515241][ T5621] usb 1-1: Product: syz [ 317.515257][ T5621] usb 1-1: Manufacturer: syz [ 317.515273][ T5621] usb 1-1: SerialNumber: syz [ 317.561617][T10035] Can't find ip_set type hash:nq>,port,net [ 317.586671][ T5621] usb 1-1: config 0 descriptor?? [ 317.588334][ T5703] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 317.746350][ T5703] usb 4-1: Using ep0 maxpacket: 16 [ 317.749237][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.749302][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 317.749331][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 317.749354][ T5703] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 317.749378][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.756569][ T5703] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 317.756601][ T5703] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 317.756621][ T5703] usb 4-1: Manufacturer: syz [ 317.776158][ T5703] usb 4-1: config 0 descriptor?? [ 317.871826][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 318.057286][ T5703] rc_core: IR keymap rc-hauppauge not found [ 318.057309][ T5703] Registered IR keymap rc-empty [ 318.057506][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.081865][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.099182][ T5703] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 318.132478][ T5703] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input14 [ 318.148721][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.177112][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.212541][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.226302][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.246197][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.266352][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.288635][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.309294][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.326147][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.347699][ T5703] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 318.407831][ T5703] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 318.407859][ T5703] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 318.807086][ T5621] usb 4-1: USB disconnect, device number 46 [ 319.426097][ T5621] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 319.497624][ T5696] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 319.576079][ T5621] usb 3-1: Using ep0 maxpacket: 32 [ 319.578258][ T5621] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 319.578289][ T5621] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 319.578302][ T5621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 319.578315][ T5621] usb 3-1: config 1 has no interface number 0 [ 319.578342][ T5621] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.578357][ T5621] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 319.578382][ T5621] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 319.578396][ T5621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.656412][ T5696] usb 2-1: Using ep0 maxpacket: 16 [ 319.677608][ T5696] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 319.677639][ T5696] usb 2-1: config 0 has no interface number 0 [ 319.677743][ T5696] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 319.677771][ T5696] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 319.688813][ T5696] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 319.688846][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.688867][ T5696] usb 2-1: Product: syz [ 319.688883][ T5696] usb 2-1: Manufacturer: syz [ 319.688899][ T5696] usb 2-1: SerialNumber: syz [ 319.713395][ T5621] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 319.727869][ T5696] usb 2-1: config 0 descriptor?? [ 319.736526][T10085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 319.736821][T10085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 319.839005][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.842104][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.865333][ T5621] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 319.942348][T10085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 319.944295][T10085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 320.002613][ T5696] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 320.003136][ T5696] asix 2-1:0.34: probe with driver asix failed with error -71 [ 320.016740][ T5696] usb 2-1: USB disconnect, device number 37 [ 320.058767][T10080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.060957][T10080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.112694][ T5813] usb 3-1: USB disconnect, device number 59 [ 320.122058][ T5813] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 320.202682][ T5703] usb 1-1: USB disconnect, device number 43 [ 320.567455][T10115] binder: 10114:10115 ioctl 4018620d 0 returned -22 [ 320.567806][T10115] binder: 10114:10115 ioctl c0306201 200000000180 returned -11 [ 320.670262][T10118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1577'. [ 320.672427][T10118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1577'. [ 321.029626][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 321.029645][T10135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1583'. [ 321.786098][ T824] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 321.806419][ T5813] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 321.899620][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 321.899648][T10160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1594'. [ 321.936058][ T824] usb 2-1: Using ep0 maxpacket: 8 [ 321.938506][ T824] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 321.938537][ T824] usb 2-1: config 0 has no interface number 0 [ 321.938603][ T824] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 321.938881][ T824] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 321.938908][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.966095][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 321.970832][ T5813] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 321.970866][ T5813] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 321.975528][ T5813] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 321.975629][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.975652][ T5813] usb 4-1: Product: syz [ 321.975667][ T5813] usb 4-1: Manufacturer: syz [ 321.975683][ T5813] usb 4-1: SerialNumber: syz [ 322.062064][ T824] usb 2-1: config 0 descriptor?? [ 322.093302][ T824] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 322.109944][T10156] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 322.418107][T10156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.418641][T10156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.633238][ T55] usb 2-1: USB disconnect, device number 38 [ 322.650713][ T5813] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 322.650783][ T5813] usb 4-1: MIDIStreaming interface descriptor not found [ 323.191029][ T153] bridge_slave_1: left allmulticast mode [ 323.191264][ T153] bridge_slave_1: left promiscuous mode [ 323.259878][ T153] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.456109][ T5813] usb 4-1: USB disconnect, device number 47 [ 323.582318][ T153] bridge_slave_0: left allmulticast mode [ 323.582355][ T153] bridge_slave_0: left promiscuous mode [ 323.582646][ T153] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.916065][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 323.942404][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 323.942442][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 324.014285][ T153] dvmrp0: left allmulticast mode [ 324.113472][ T10] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 324.113495][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.113507][ T10] usb 1-1: Product: syz [ 324.113516][ T10] usb 1-1: Manufacturer: syz [ 324.113524][ T10] usb 1-1: SerialNumber: syz [ 324.621425][T10186] tmpfs: Unknown parameter 'no' [ 324.643908][T10180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.671155][T10180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.772481][ T7199] udevd[7199]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 324.793449][T10189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'. [ 325.077519][ T5813] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 325.122194][ T10] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:7e:71:28:90:d5 [ 325.136270][ T55] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 325.226058][ T5813] usb 4-1: Using ep0 maxpacket: 32 [ 325.231149][ T5813] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 325.231182][ T5813] usb 4-1: config 0 has no interface number 0 [ 325.231224][ T5813] usb 4-1: config 0 interface 12 has no altsetting 0 [ 325.234994][ T5813] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 325.235025][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.235037][ T5813] usb 4-1: Product: syz [ 325.235046][ T5813] usb 4-1: Manufacturer: syz [ 325.235056][ T5813] usb 4-1: SerialNumber: syz [ 325.282840][ T5813] usb 4-1: config 0 descriptor?? [ 325.306742][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 325.308562][ T55] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.308609][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.308636][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.308656][ T55] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 325.308679][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.309746][ T55] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 325.309775][ T55] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 325.309793][ T55] usb 2-1: Manufacturer: syz [ 325.399844][ T55] usb 2-1: config 0 descriptor?? [ 325.676855][ T55] rc_core: IR keymap rc-hauppauge not found [ 325.676878][ T55] Registered IR keymap rc-empty [ 325.677157][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.698855][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.719295][ T55] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 325.722260][ T55] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 325.751785][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.766259][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.786722][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.806136][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.826194][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.845674][ C1] rc rc0: IR event FIFO is full! [ 325.845700][ C1] rc rc0: IR event FIFO is full! [ 325.845715][ C1] rc rc0: IR event FIFO is full! [ 325.846071][ C1] rc rc0: IR event FIFO is full! [ 325.846089][ C1] rc rc0: IR event FIFO is full! [ 325.846103][ C1] rc rc0: IR event FIFO is full! [ 325.846563][ C1] rc rc0: IR event FIFO is full! [ 325.846580][ C1] rc rc0: IR event FIFO is full! [ 325.846595][ C1] rc rc0: IR event FIFO is full! [ 325.846611][ C1] rc rc0: IR event FIFO is full! [ 325.846626][ C1] rc rc0: IR event FIFO is full! [ 325.846641][ C1] rc rc0: IR event FIFO is full! [ 325.846655][ C1] rc rc0: IR event FIFO is full! [ 325.846669][ C1] rc rc0: IR event FIFO is full! [ 325.846685][ C1] rc rc0: IR event FIFO is full! [ 325.846699][ C1] rc rc0: IR event FIFO is full! [ 325.846714][ C1] rc rc0: IR event FIFO is full! [ 325.846935][ C1] rc rc0: IR event FIFO is full! [ 325.846951][ C1] rc rc0: IR event FIFO is full! [ 325.846967][ C1] rc rc0: IR event FIFO is full! [ 325.846982][ C1] rc rc0: IR event FIFO is full! [ 325.846996][ C1] rc rc0: IR event FIFO is full! [ 325.847010][ C1] rc rc0: IR event FIFO is full! [ 325.847026][ C1] rc rc0: IR event FIFO is full! [ 325.847247][ C1] rc rc0: IR event FIFO is full! [ 325.847264][ C1] rc rc0: IR event FIFO is full! [ 325.847279][ C1] rc rc0: IR event FIFO is full! [ 325.847294][ C1] rc rc0: IR event FIFO is full! [ 325.847315][ C1] rc rc0: IR event FIFO is full! [ 325.847331][ C1] rc rc0: IR event FIFO is full! [ 325.847345][ C1] rc rc0: IR event FIFO is full! [ 325.847568][ C1] rc rc0: IR event FIFO is full! [ 325.847586][ C1] rc rc0: IR event FIFO is full! [ 325.847602][ C1] rc rc0: IR event FIFO is full! [ 325.847618][ C1] rc rc0: IR event FIFO is full! [ 325.847634][ C1] rc rc0: IR event FIFO is full! [ 325.847648][ C1] rc rc0: IR event FIFO is full! [ 325.847661][ C1] rc rc0: IR event FIFO is full! [ 325.847671][ C1] rc rc0: IR event FIFO is full! [ 325.847894][ C1] rc rc0: IR event FIFO is full! [ 325.847909][ C1] rc rc0: IR event FIFO is full! [ 325.847926][ C1] rc rc0: IR event FIFO is full! [ 325.848143][ C1] rc rc0: IR event FIFO is full! [ 325.848158][ C1] rc rc0: IR event FIFO is full! [ 325.848172][ C1] rc rc0: IR event FIFO is full! [ 325.848188][ C1] rc rc0: IR event FIFO is full! [ 325.848203][ C1] rc rc0: IR event FIFO is full! [ 325.848217][ C1] rc rc0: IR event FIFO is full! [ 325.848231][ C1] rc rc0: IR event FIFO is full! [ 325.848244][ C1] rc rc0: IR event FIFO is full! [ 325.848258][ C1] rc rc0: IR event FIFO is full! [ 325.848481][ C1] rc rc0: IR event FIFO is full! [ 325.848497][ C1] rc rc0: IR event FIFO is full! [ 325.848512][ C1] rc rc0: IR event FIFO is full! [ 325.848527][ C1] rc rc0: IR event FIFO is full! [ 325.848752][ C1] rc rc0: IR event FIFO is full! [ 325.848769][ C1] rc rc0: IR event FIFO is full! [ 325.848783][ C1] rc rc0: IR event FIFO is full! [ 325.849001][ C1] rc rc0: IR event FIFO is full! [ 325.849018][ C1] rc rc0: IR event FIFO is full! [ 325.849032][ C1] rc rc0: IR event FIFO is full! [ 325.849047][ C1] rc rc0: IR event FIFO is full! [ 325.849062][ C1] rc rc0: IR event FIFO is full! [ 325.849078][ C1] rc rc0: IR event FIFO is full! [ 325.849093][ C1] rc rc0: IR event FIFO is full! [ 325.849106][ C1] rc rc0: IR event FIFO is full! [ 325.849121][ C1] rc rc0: IR event FIFO is full! [ 325.849347][ C1] rc rc0: IR event FIFO is full! [ 325.849364][ C1] rc rc0: IR event FIFO is full! [ 325.849379][ C1] rc rc0: IR event FIFO is full! [ 325.849393][ C1] rc rc0: IR event FIFO is full! [ 325.849408][ C1] rc rc0: IR event FIFO is full! [ 325.849422][ C1] rc rc0: IR event FIFO is full! [ 325.849437][ C1] rc rc0: IR event FIFO is full! [ 325.849450][ C1] rc rc0: IR event FIFO is full! [ 325.849671][ C1] rc rc0: IR event FIFO is full! [ 325.849687][ C1] rc rc0: IR event FIFO is full! [ 325.849702][ C1] rc rc0: IR event FIFO is full! [ 325.849717][ C1] rc rc0: IR event FIFO is full! [ 325.849732][ C1] rc rc0: IR event FIFO is full! [ 325.849747][ C1] rc rc0: IR event FIFO is full! [ 325.849761][ C1] rc rc0: IR event FIFO is full! [ 325.849776][ C1] rc rc0: IR event FIFO is full! [ 325.849791][ C1] rc rc0: IR event FIFO is full! [ 325.852163][ C1] rc rc0: IR event FIFO is full! [ 325.852185][ C1] rc rc0: IR event FIFO is full! [ 325.852200][ C1] rc rc0: IR event FIFO is full! [ 325.852216][ C1] rc rc0: IR event FIFO is full! [ 325.852232][ C1] rc rc0: IR event FIFO is full! [ 325.852247][ C1] rc rc0: IR event FIFO is full! [ 325.852479][ C1] rc rc0: IR event FIFO is full! [ 325.852496][ C1] rc rc0: IR event FIFO is full! [ 325.852511][ C1] rc rc0: IR event FIFO is full! [ 325.853170][ C1] rc rc0: IR event FIFO is full! [ 325.853189][ C1] rc rc0: IR event FIFO is full! [ 325.853205][ C1] rc rc0: IR event FIFO is full! [ 325.853220][ C1] rc rc0: IR event FIFO is full! [ 325.853451][ C1] rc rc0: IR event FIFO is full! [ 325.853466][ C1] rc rc0: IR event FIFO is full! [ 325.853707][ C1] rc rc0: IR event FIFO is full! [ 325.853723][ C1] rc rc0: IR event FIFO is full! [ 325.853738][ C1] rc rc0: IR event FIFO is full! [ 325.853753][ C1] rc rc0: IR event FIFO is full! [ 325.853768][ C1] rc rc0: IR event FIFO is full! [ 325.861123][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.898421][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.932279][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 325.968685][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 326.008826][ T55] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 326.454502][ T55] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 326.454533][ T55] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 326.514193][ T153] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 326.937936][ T5813] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 326.937995][ T5813] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 326.938014][ T5813] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 326.938106][ T5813] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 326.944143][ T153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.955132][ T5813] usb 4-1: USB disconnect, device number 48 [ 327.028058][ T153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.090733][ T153] bond0 (unregistering): Released all slaves [ 327.138979][T10200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1607'. [ 327.332660][ T55] usb 2-1: USB disconnect, device number 39 [ 327.970728][ T10] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 328.024812][ T10] usb 1-1: USB disconnect, device number 44 [ 328.062589][T10214] FAULT_INJECTION: forcing a failure. [ 328.062589][T10214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.062629][T10214] CPU: 0 UID: 0 PID: 10214 Comm: syz.1.1612 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 328.062664][T10214] Tainted: [L]=SOFTLOCKUP [ 328.062673][T10214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 328.062686][T10214] Call Trace: [ 328.062694][T10214] [ 328.062704][T10214] dump_stack_lvl+0xe8/0x150 [ 328.062733][T10214] should_fail_ex+0x46b/0x600 [ 328.062765][T10214] _copy_to_iter+0x589/0x17d0 [ 328.062805][T10214] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 328.062832][T10214] ? __pfx__copy_to_iter+0x10/0x10 [ 328.062856][T10214] ? rt_spin_lock+0x1e0/0x400 [ 328.062883][T10214] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 328.062919][T10214] __skb_datagram_iter+0xf8/0x980 [ 328.062952][T10214] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 328.062988][T10214] skb_copy_datagram_iter+0xb5/0x240 [ 328.063020][T10214] netlink_recvmsg+0x2c3/0xa50 [ 328.063056][T10214] ? __pfx_netlink_recvmsg+0x10/0x10 [ 328.063087][T10214] ? __pfx_aa_sk_perm+0x10/0x10 [ 328.063118][T10214] ? aa_sock_msg_perm+0x122/0x200 [ 328.063146][T10214] ? __pfx_netlink_recvmsg+0x10/0x10 [ 328.063174][T10214] sock_recvmsg_nosec+0x10c/0x140 [ 328.063201][T10214] ____sys_recvmsg+0x23d/0x4f0 [ 328.063237][T10214] ? __pfx_____sys_recvmsg+0x10/0x10 [ 328.063280][T10214] ? import_iovec+0x73/0xa0 [ 328.063313][T10214] ___sys_recvmsg+0x215/0x590 [ 328.063346][T10214] ? __pfx____sys_recvmsg+0x10/0x10 [ 328.063380][T10214] ? __fget_files+0x2a/0x420 [ 328.063420][T10214] ? __fget_files+0x3a6/0x420 [ 328.063453][T10214] do_recvmmsg+0x33a/0x800 [ 328.063490][T10214] ? __pfx_do_recvmmsg+0x10/0x10 [ 328.063531][T10214] ? _copy_from_user+0x94/0xb0 [ 328.063573][T10214] __x64_sys_recvmmsg+0x1b7/0x250 [ 328.063606][T10214] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 328.063644][T10214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.063674][T10214] do_syscall_64+0x15f/0xf80 [ 328.063694][T10214] ? trace_irq_disable+0x3b/0x140 [ 328.063722][T10214] ? clear_bhb_loop+0x40/0x90 [ 328.063748][T10214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.063769][T10214] RIP: 0033:0x7f400fa9cdd9 [ 328.063790][T10214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.063811][T10214] RSP: 002b:00007f400dcf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 328.063834][T10214] RAX: ffffffffffffffda RBX: 00007f400fd15fa0 RCX: 00007f400fa9cdd9 [ 328.063850][T10214] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 328.063865][T10214] RBP: 00007f400dcf6090 R08: 0000200000003700 R09: 0000000000000000 [ 328.063879][T10214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.063892][T10214] R13: 00007f400fd16038 R14: 00007f400fd15fa0 R15: 00007ffc630b82a8 [ 328.063923][T10214] [ 329.063503][T10228] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5617] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[10228] [ 329.333997][T10238] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1621'. [ 329.379796][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 329.452597][T10236] netlink: 'syz.1.1619': attribute type 28 has an invalid length. [ 329.452622][T10236] netlink: 8352 bytes leftover after parsing attributes in process `syz.1.1619'. [ 329.727395][ T5696] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 329.806092][ T55] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 329.841307][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 329.925070][ T5696] usb 3-1: Using ep0 maxpacket: 16 [ 329.956128][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.956186][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.956215][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 329.956236][ T5696] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 329.956259][ T5696] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.958346][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.958381][ T55] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.958404][ T55] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.958444][ T55] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.958469][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.961912][ T5696] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 329.961945][ T5696] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.961967][ T5696] usb 3-1: Manufacturer: syz [ 330.006046][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 330.008183][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 330.008211][ T10] usb 1-1: config 0 has no interface number 0 [ 330.008271][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 330.013642][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 330.013673][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.013694][ T10] usb 1-1: Product: syz [ 330.013709][ T10] usb 1-1: Manufacturer: syz [ 330.013726][ T10] usb 1-1: SerialNumber: syz [ 330.235287][ T55] usb 2-1: config 0 descriptor?? [ 330.278115][ T10] usb 1-1: config 0 descriptor?? [ 330.278339][ T5696] usb 3-1: config 0 descriptor?? [ 330.437032][ T5813] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 330.616332][ T5696] rc_core: IR keymap rc-hauppauge not found [ 330.616418][ T5696] Registered IR keymap rc-empty [ 330.616629][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.638460][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 330.670233][ T5813] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 330.670268][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 330.670345][ T5813] usb 4-1: Product: syz [ 330.670362][ T5813] usb 4-1: Manufacturer: syz [ 330.670376][ T5813] usb 4-1: SerialNumber: syz [ 330.765230][ T5813] usb 4-1: config 0 descriptor?? [ 330.776951][ T5696] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 330.901584][ T5813] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 330.908159][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.909379][ T5696] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16 [ 330.923916][ T5813] dvb-usb: bulk message failed: -22 (2/0) [ 330.943364][ T55] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 330.943683][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.189086][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.206334][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.246028][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.259777][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.352212][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.375272][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.396202][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.418550][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.434097][ T5813] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.434685][ T5813] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 331.434759][ T5813] usb 4-1: media controller created [ 331.438904][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.468672][ T5696] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 331.708173][ T5696] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 331.708203][ T5696] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 331.771288][ T5696] usb 3-1: USB disconnect, device number 60 [ 331.969201][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 331.969259][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 331.969279][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 331.969371][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 331.978063][ T5813] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 332.019752][ T153] hsr_slave_0: left promiscuous mode [ 332.022678][ T5703] usb 2-1: USB disconnect, device number 40 [ 332.066073][ T153] hsr_slave_1: left promiscuous mode [ 332.089714][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.089820][ T153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.177836][ T153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.177862][ T153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.193827][ T10] usb 1-1: USB disconnect, device number 45 [ 333.129518][ T5696] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 333.288985][ T5813] cxusb: set interface failed [ 333.289006][ T5813] dvb-usb: bulk message failed: -22 (1/0) [ 333.315985][ T5696] usb 3-1: Using ep0 maxpacket: 32 [ 333.323294][ T5696] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 333.323327][ T5696] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 333.323351][ T5696] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 333.323373][ T5696] usb 3-1: config 1 has no interface number 0 [ 333.323429][ T5696] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 333.323469][ T5696] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 333.323513][ T5696] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 333.323539][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.375189][ T5696] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 333.525217][ T5813] DVB: Unable to find symbol mt352_attach() [ 333.634185][ T5813] dvb-usb: bulk message failed: -22 (5/0) [ 333.634219][ T5813] zl10353_read_register: readreg error (reg=127, ret==-121) [ 333.634329][ T5813] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 333.634407][T10272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.634966][T10272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.702937][ T5696] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 333.851577][ T5813] rc_core: IR keymap rc-dvico-mce not found [ 333.851601][ T5813] Registered IR keymap rc-empty [ 333.970456][ T5813] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 333.990795][ T5813] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input17 [ 334.060005][ T5813] dvb-usb: schedule remote query interval to 100 msecs. [ 334.060034][ T5813] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 334.109931][ T5813] usb 4-1: USB disconnect, device number 49 [ 334.218939][ T5696] usb 3-1: USB disconnect, device number 61 [ 334.251904][ T5696] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 334.344238][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 334.344266][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1633'. [ 334.424927][ T153] veth1_macvtap: left promiscuous mode [ 334.425472][ T153] veth0_macvtap: left promiscuous mode [ 334.425877][ T153] veth1_vlan: left promiscuous mode [ 334.448116][ T153] veth0_vlan: left promiscuous mode [ 334.687497][ T5813] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 335.472116][T10309] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1642'. [ 335.549542][T10310] cgroup: release_agent respecified [ 336.116987][ T153] team0 (unregistering): Port device team_slave_1 removed [ 336.167132][ T153] team0 (unregistering): Port device team_slave_0 removed [ 336.600463][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 336.600492][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 336.922705][ T824] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 337.106118][ T824] usb 2-1: Using ep0 maxpacket: 32 [ 337.124177][ T824] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 337.124213][ T824] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 337.124246][ T824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 337.124270][ T824] usb 2-1: config 1 has no interface number 0 [ 337.124318][ T824] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.124349][ T824] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 337.124395][ T824] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 337.124421][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.220979][ T824] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 337.372832][T10342] FAULT_INJECTION: forcing a failure. [ 337.372832][T10342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.372869][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.0.1654 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.372900][T10342] Tainted: [L]=SOFTLOCKUP [ 337.372908][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 337.372920][T10342] Call Trace: [ 337.372929][T10342] [ 337.372937][T10342] dump_stack_lvl+0xe8/0x150 [ 337.372966][T10342] should_fail_ex+0x46b/0x600 [ 337.372997][T10342] _copy_from_user+0x2d/0xb0 [ 337.373028][T10342] kstrtouint_from_user+0xd6/0x180 [ 337.373057][T10342] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 337.373098][T10342] proc_fail_nth_write+0x8e/0x210 [ 337.373124][T10342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.373155][T10342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 337.373177][T10342] vfs_write+0x2a3/0xba0 [ 337.373212][T10342] ? __pfx_vfs_write+0x10/0x10 [ 337.373239][T10342] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 337.373269][T10342] ? lockdep_hardirqs_on+0x7a/0x110 [ 337.373299][T10342] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 337.373329][T10342] ? mutex_lock_nested+0x152/0x1d0 [ 337.373352][T10342] ? fdget_pos+0x252/0x320 [ 337.373383][T10342] ksys_write+0x156/0x270 [ 337.373413][T10342] ? __pfx_ksys_write+0x10/0x10 [ 337.373446][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.373467][T10342] do_syscall_64+0x15f/0xf80 [ 337.373484][T10342] ? trace_irq_disable+0x3b/0x140 [ 337.373512][T10342] ? clear_bhb_loop+0x40/0x90 [ 337.373535][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.373554][T10342] RIP: 0033:0x7f7db482d60e [ 337.373574][T10342] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 337.373591][T10342] RSP: 002b:00007f7db2ac5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 337.373656][T10342] RAX: ffffffffffffffda RBX: 00007f7db2ac66c0 RCX: 00007f7db482d60e [ 337.373671][T10342] RDX: 0000000000000001 RSI: 00007f7db2ac60a0 RDI: 0000000000000004 [ 337.373684][T10342] RBP: 00007f7db2ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 337.373696][T10342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.373709][T10342] R13: 00007f7db4ae6038 R14: 00007f7db4ae5fa0 R15: 00007ffd5633b2c8 [ 337.373741][T10342] [ 337.692312][T10323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.695039][T10323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.747804][ T824] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 338.261186][ T5813] usb 2-1: USB disconnect, device number 41 [ 338.451113][ T5813] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 338.885217][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1657'. [ 339.239949][ T153] IPVS: stop unused estimator thread 0... [ 339.260150][T10385] netlink: 524 bytes leftover after parsing attributes in process `syz.2.1660'. [ 340.176326][ T55] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 340.339360][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 340.342642][ T55] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 340.342672][ T55] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 340.342693][ T55] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 340.342715][ T55] usb 4-1: config 1 has no interface number 0 [ 340.342770][ T55] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.342799][ T55] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 340.342841][ T55] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 340.342866][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.606076][T10443] IPVS: length: 4096 != 8 [ 340.618780][ T55] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 340.761405][T10416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.761997][T10416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.808175][ T55] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 340.964585][T10452] dlm: non-version read from control device 8224 [ 341.060794][ T5610] Bluetooth: hci4: hardware error 0x6f [ 341.216105][ T55] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 341.251326][ T10] usb 4-1: USB disconnect, device number 50 [ 341.274595][ T10] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 341.461512][ T5813] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 341.479845][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 341.479883][ T55] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 341.479910][ T55] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 341.482503][ T55] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 341.482534][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.482556][ T55] usb 1-1: Product: syz [ 341.482572][ T55] usb 1-1: Manufacturer: syz [ 341.482588][ T55] usb 1-1: SerialNumber: syz [ 341.495487][ T55] usb 1-1: config 0 descriptor?? [ 341.496317][T10447] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 341.496439][T10447] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 341.499045][ T55] usb 1-1: ucan: probing device on interface #0 [ 341.619325][ T5813] usb 3-1: device descriptor read/64, error -71 [ 341.876051][ T5813] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 342.036268][ T5813] usb 3-1: device descriptor read/64, error -71 [ 342.146417][ T5813] usb usb3-port1: attempt power cycle [ 342.465247][T10477] FAULT_INJECTION: forcing a failure. [ 342.465247][T10477] name failslab, interval 1, probability 0, space 0, times 0 [ 342.465285][T10477] CPU: 0 UID: 0 PID: 10477 Comm: syz.3.1686 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.465314][T10477] Tainted: [L]=SOFTLOCKUP [ 342.465322][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 342.465335][T10477] Call Trace: [ 342.465343][T10477] [ 342.465353][T10477] dump_stack_lvl+0xe8/0x150 [ 342.465382][T10477] should_fail_ex+0x46b/0x600 [ 342.465413][T10477] should_failslab+0xa8/0x100 [ 342.465449][T10477] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 342.465477][T10477] ? __alloc_skb+0x1d0/0x7d0 [ 342.465501][T10477] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.465538][T10477] __alloc_skb+0x1d0/0x7d0 [ 342.465569][T10477] xfrm_send_acquire+0x15f/0xf20 [ 342.465596][T10477] ? alloc_object+0xbf/0x300 [ 342.465625][T10477] ? km_query+0x2e/0x210 [ 342.465658][T10477] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 342.465686][T10477] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 342.465715][T10477] ? xfrm_init_tempstate+0xa59/0x1290 [ 342.465741][T10477] ? km_query+0x2e/0x210 [ 342.465768][T10477] km_query+0x11c/0x210 [ 342.465789][T10477] ? km_query+0x2e/0x210 [ 342.465816][T10477] xfrm_state_find+0x3e53/0x5eb0 [ 342.465858][T10477] ? look_up_lock_class+0x57/0x110 [ 342.465890][T10477] ? xfrm_state_find+0x2e3/0x5eb0 [ 342.465916][T10477] ? __pfx_xfrm_state_find+0x10/0x10 [ 342.465937][T10477] ? vsnprintf+0xe42/0xef0 [ 342.465968][T10477] ? __lock_acquire+0x6b5/0x2d10 [ 342.465993][T10477] xfrm_resolve_and_create_bundle+0x81c/0x30c0 [ 342.466039][T10477] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.466068][T10477] ? seqcount_lockdep_reader_access+0xea/0x100 [ 342.466096][T10477] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 342.466125][T10477] ? xfrm_policy_lookup_bytype+0x143/0x1830 [ 342.466157][T10477] ? xfrm_policy_lookup_bytype+0x17bf/0x1830 [ 342.466196][T10477] ? xfrm_policy_lookup_bytype+0x143/0x1830 [ 342.466242][T10477] ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10 [ 342.466279][T10477] ? ip6_dst_lookup_tail+0x2df/0x15a0 [ 342.466301][T10477] ? xfrm_expand_policies+0x48f/0x740 [ 342.466336][T10477] xfrm_lookup_with_ifid+0x536/0x1bf0 [ 342.466366][T10477] ? ip6_dst_lookup_tail+0x2df/0x15a0 [ 342.466396][T10477] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 342.466433][T10477] ? sk_dst_check+0x25/0x490 [ 342.466463][T10477] xfrm_lookup_route+0x3c/0x1c0 [ 342.466495][T10477] ip6_sk_dst_lookup_flow+0x7cb/0xa30 [ 342.466521][T10477] ? udpv6_sendmsg+0x1864/0x25c0 [ 342.466548][T10477] udpv6_sendmsg+0x1a69/0x25c0 [ 342.466585][T10477] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 342.466613][T10477] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 342.466642][T10477] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 342.466694][T10477] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 342.466730][T10477] ? inet_send_prepare+0x1b9/0x270 [ 342.466755][T10477] ? inet6_sendmsg+0xe4/0x120 [ 342.466784][T10477] ? __pfx_inet6_sendmsg+0x10/0x10 [ 342.466812][T10477] sock_sendmsg_nosec+0x90/0x150 [ 342.466838][T10477] ____sys_sendmsg+0x55c/0x870 [ 342.466873][T10477] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.466912][T10477] ? import_iovec+0x73/0xa0 [ 342.466946][T10477] ___sys_sendmsg+0x2a5/0x360 [ 342.466974][T10477] ? __lock_acquire+0x6b5/0x2d10 [ 342.466999][T10477] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.467064][T10477] ? __fget_files+0x2a/0x420 [ 342.467087][T10477] ? __fget_files+0x3a6/0x420 [ 342.467121][T10477] __x64_sys_sendmsg+0x1c3/0x2a0 [ 342.467154][T10477] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.467192][T10477] ? __pfx_ksys_write+0x10/0x10 [ 342.467229][T10477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.467252][T10477] do_syscall_64+0x15f/0xf80 [ 342.467271][T10477] ? trace_irq_disable+0x3b/0x140 [ 342.467300][T10477] ? clear_bhb_loop+0x40/0x90 [ 342.467326][T10477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.467347][T10477] RIP: 0033:0x7f24c8b3cdd9 [ 342.467368][T10477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.467386][T10477] RSP: 002b:00007f24c6d75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.467409][T10477] RAX: ffffffffffffffda RBX: 00007f24c8db6090 RCX: 00007f24c8b3cdd9 [ 342.467425][T10477] RDX: 0000000000008000 RSI: 0000200000000540 RDI: 0000000000000005 [ 342.467439][T10477] RBP: 00007f24c6d75090 R08: 0000000000000000 R09: 0000000000000000 [ 342.467453][T10477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.467467][T10477] R13: 00007f24c8db6128 R14: 00007f24c8db6090 R15: 00007ffd64dfaa78 [ 342.467499][T10477] [ 342.486122][ T5813] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 342.507183][ T5813] usb 3-1: device descriptor read/8, error -71 [ 342.513740][ T55] usb 1-1: ucan: could not read protocol version, ret=-110 [ 342.513769][ T55] usb 1-1: ucan: probe failed; try to update the device firmware [ 342.768916][ T5813] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 342.786744][ T5813] usb 3-1: device descriptor read/8, error -71 [ 342.906569][ T5813] usb usb3-port1: unable to enumerate USB device [ 343.707152][ T5610] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 343.727328][ T824] usb 1-1: USB disconnect, device number 46 [ 343.874737][T10515] netlink: 'syz.3.1693': attribute type 4 has an invalid length. [ 344.076091][ T824] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 344.226089][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 344.229257][ T824] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 344.229289][ T824] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 344.229312][ T824] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 344.229334][ T824] usb 1-1: config 1 has no interface number 0 [ 344.229376][ T824] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.229404][ T824] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 344.229444][ T824] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 344.229468][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.263123][ T824] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 344.432681][T10531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1700'. [ 344.433608][T10531] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1700'. [ 344.619206][T10539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 344.626491][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.627244][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.635472][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.650485][T10539] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1702'. [ 344.651917][T10539] FAULT_INJECTION: forcing a failure. [ 344.651917][T10539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.651959][T10539] CPU: 1 UID: 0 PID: 10539 Comm: syz.3.1702 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.651990][T10539] Tainted: [L]=SOFTLOCKUP [ 344.651998][T10539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 344.652010][T10539] Call Trace: [ 344.652018][T10539] [ 344.652027][T10539] dump_stack_lvl+0xe8/0x150 [ 344.652055][T10539] should_fail_ex+0x46b/0x600 [ 344.652086][T10539] _copy_to_user+0x31/0xb0 [ 344.652118][T10539] simple_read_from_buffer+0xe1/0x170 [ 344.652148][T10539] proc_fail_nth_read+0x1be/0x230 [ 344.652177][T10539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.652205][T10539] ? rw_verify_area+0x2ac/0x4e0 [ 344.652232][T10539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.652258][T10539] vfs_read+0x212/0xa80 [ 344.652292][T10539] ? __pfx_vfs_read+0x10/0x10 [ 344.652322][T10539] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.652351][T10539] ? lockdep_hardirqs_on+0x7a/0x110 [ 344.652382][T10539] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.652412][T10539] ? mutex_lock_nested+0x152/0x1d0 [ 344.652435][T10539] ? fdget_pos+0x252/0x320 [ 344.652467][T10539] ksys_read+0x156/0x270 [ 344.652496][T10539] ? __pfx_ksys_read+0x10/0x10 [ 344.652531][T10539] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.652554][T10539] do_syscall_64+0x15f/0xf80 [ 344.652573][T10539] ? trace_irq_disable+0x3b/0x140 [ 344.652601][T10539] ? clear_bhb_loop+0x40/0x90 [ 344.652626][T10539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.652646][T10539] RIP: 0033:0x7f24c8afd60e [ 344.652665][T10539] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 344.652683][T10539] RSP: 002b:00007f24c6d95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.652705][T10539] RAX: ffffffffffffffda RBX: 00007f24c6d966c0 RCX: 00007f24c8afd60e [ 344.652721][T10539] RDX: 000000000000000f RSI: 00007f24c6d960a0 RDI: 0000000000000004 [ 344.652735][T10539] RBP: 00007f24c6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 344.652747][T10539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.652760][T10539] R13: 00007f24c8db6038 R14: 00007f24c8db5fa0 R15: 00007ffd64dfaa78 [ 344.652792][T10539] [ 344.717257][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.228429][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 346.295289][T10571] netlink: 576 bytes leftover after parsing attributes in process `syz.3.1715'. [ 346.295401][T10571] ksmbd: Unknown IPC event: 1, ignore. [ 346.396154][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 346.400216][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 346.421300][ T10] usb 2-1: New USB device found, idVendor=7104, idProduct=2202, bcdDevice= 0.40 [ 346.421343][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.421365][ T10] usb 2-1: Product: syz [ 346.421381][ T10] usb 2-1: Manufacturer: syz [ 346.421397][ T10] usb 2-1: SerialNumber: syz [ 346.615250][T10570] syzkaller1: entered allmulticast mode [ 346.694087][T10561] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1712'. [ 346.696058][T10561] xt_socket: unknown flags 0xd0 [ 346.771900][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1712'. [ 346.879195][ T824] snd_usb_pod 1-1:1.1: set_interface failed [ 346.879439][ T824] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 346.879605][ T824] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 346.904233][ T824] usb 1-1: USB disconnect, device number 47 [ 346.998809][T10581] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1719'. [ 346.998855][T10581] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1719'. [ 347.004893][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.117431][ T10] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 347.143286][ T10] usb 2-1: USB disconnect, device number 42 [ 347.185515][ T8110] udevd[8110]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.605527][T10591] binder: binder_mmap: 10590 200000ffd000-200001000000 bad vm_flags failed -1 [ 347.874427][T10601] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1729'. [ 347.996924][ T824] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 348.146115][ T824] usb 2-1: Using ep0 maxpacket: 32 [ 348.153328][ T824] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 348.153360][ T824] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 348.153383][ T824] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 348.153406][ T824] usb 2-1: config 1 has no interface number 0 [ 348.153453][ T824] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 348.153481][ T824] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 348.153524][ T824] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 348.153548][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.242998][ T824] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 348.392390][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.408904][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.411337][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.411829][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.916038][ T7151] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 349.079262][ T7151] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.079388][ T7151] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 349.079416][ T7151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 349.079469][ T7151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 349.083118][ T7151] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 349.083153][ T7151] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 349.083229][ T7151] usb 3-1: Product: syz [ 349.083246][ T7151] usb 3-1: Manufacturer: syz [ 349.083262][ T7151] usb 3-1: SerialNumber: syz [ 349.108775][ T7151] usb 3-1: config 0 descriptor?? [ 349.277895][ T7151] rc_core: IR keymap rc-imon-rsc not found [ 349.277909][ T7151] Registered IR keymap rc-empty [ 349.279560][ T7151] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 349.288347][ T7151] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input19 [ 349.419880][ T7151] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 349.446139][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 349.645156][ T10] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 349.645191][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.645212][ T10] usb 1-1: Product: syz [ 349.645228][ T10] usb 1-1: Manufacturer: syz [ 349.645244][ T10] usb 1-1: SerialNumber: syz [ 349.647467][ T7151] usb 3-1: USB disconnect, device number 66 [ 349.701586][ T10] usb 1-1: config 0 descriptor?? [ 349.729357][ T10] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 349.856057][ T5621] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 349.986107][ T5621] usb 4-1: device descriptor read/64, error -71 [ 350.226410][ T5621] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 350.356066][ T5621] usb 4-1: device descriptor read/64, error -71 [ 350.472766][ T5621] usb usb4-port1: attempt power cycle [ 350.712366][ T10] gspca_sunplus: reg_w_riv err -71 [ 350.712466][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 350.734991][ T10] usb 1-1: USB disconnect, device number 48 [ 350.803809][ T824] snd_usb_pod 2-1:1.1: set_interface failed [ 350.804047][ T824] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 350.804163][ T824] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 350.812457][ T5621] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 350.828118][ T5621] usb 4-1: device descriptor read/8, error -71 [ 350.872397][ T824] usb 2-1: USB disconnect, device number 43 [ 351.066072][ T5621] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 351.086920][ T5621] usb 4-1: device descriptor read/8, error -71 [ 351.199055][ T5621] usb usb4-port1: unable to enumerate USB device [ 351.304960][T10641] debugfs: Bad value for 'gid' [ 351.304975][T10641] debugfs: Bad value for 'gid' [ 351.426242][ T10] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 351.587113][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 351.588275][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 351.588301][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 351.590547][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 351.590577][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.590599][ T10] usb 3-1: Product: syz [ 351.590615][ T10] usb 3-1: Manufacturer: syz [ 351.590630][ T10] usb 3-1: SerialNumber: syz [ 351.716073][ T5703] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 351.813522][ T10] usb 3-1: BAAD GENERIC IO: no channels? [ 351.861817][ T10] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 351.881068][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.881124][ T5703] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 351.881144][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 351.881159][ T5703] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 351.883249][ T5703] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 351.883279][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 351.883301][ T5703] usb 1-1: Product: syz [ 351.883312][ T5703] usb 1-1: Manufacturer: syz [ 351.883321][ T5703] usb 1-1: SerialNumber: syz [ 351.891030][ T5703] usb 1-1: config 0 descriptor?? [ 351.892392][ T10] usb 3-1: USB disconnect, device number 67 [ 351.998374][ T8110] udevd[8110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.019629][ T5703] rc_core: IR keymap rc-imon-rsc not found [ 352.019652][ T5703] Registered IR keymap rc-empty [ 352.021545][ T5703] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 352.025725][ T5703] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 352.031040][ T5703] imon_raw 1-1:0.0: probe with driver imon_raw failed with error -90 [ 352.237437][ T5621] usb 1-1: USB disconnect, device number 49 [ 352.576133][ T5703] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 352.746390][ T5703] usb 2-1: Using ep0 maxpacket: 32 [ 352.755682][ T5703] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 352.755715][ T5703] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 352.755738][ T5703] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 352.755760][ T5703] usb 2-1: config 1 has no interface number 0 [ 352.755805][ T5703] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.755832][ T5703] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 352.755857][ T5703] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 352.755871][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.851022][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 353.087589][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.090085][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.094223][T10651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.102620][T10651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.288208][ T7151] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 353.415536][T10674] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 353.416148][ T7151] usb 4-1: device descriptor read/64, error -71 [ 353.419204][T10675] cgroup: noprefix used incorrectly [ 353.419271][T10674] cgroup: noprefix used incorrectly [ 353.443107][T10674] ./file0: Can't lookup blockdev [ 353.656058][ T7151] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 353.716145][ T5621] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 353.756127][ T55] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 353.788301][ T7151] usb 4-1: device descriptor read/64, error -71 [ 353.868739][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 353.868775][ T5621] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 353.868802][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 353.871592][ T5621] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 353.871624][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.871646][ T5621] usb 3-1: Product: syz [ 353.871662][ T5621] usb 3-1: Manufacturer: syz [ 353.871678][ T5621] usb 3-1: SerialNumber: syz [ 353.880360][ T5621] usb 3-1: config 0 descriptor?? [ 353.886276][ T55] usb 1-1: device descriptor read/64, error -71 [ 353.896617][ T7151] usb usb4-port1: attempt power cycle [ 353.958849][T10677] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 353.959231][T10677] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 353.964433][ T5621] usb 3-1: ucan: probing device on interface #0 [ 354.126138][ T55] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 354.162850][ T5621] usb 3-1: ucan: could not read protocol version, ret=0 [ 354.162870][ T5621] usb 3-1: ucan: probe failed; try to update the device firmware [ 354.256177][ T7151] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 354.256569][ T55] usb 1-1: device descriptor read/64, error -71 [ 354.276828][ T7151] usb 4-1: device descriptor read/8, error -71 [ 354.366711][ T55] usb usb1-port1: attempt power cycle [ 354.516108][ T7151] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 354.536762][ T7151] usb 4-1: device descriptor read/8, error -71 [ 354.647533][ T7151] usb usb4-port1: unable to enumerate USB device [ 354.706006][ T55] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 354.726827][ T55] usb 1-1: device descriptor read/8, error -71 [ 354.966063][ T55] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 354.987807][ T55] usb 1-1: device descriptor read/8, error -71 [ 355.097347][ T55] usb usb1-port1: unable to enumerate USB device [ 355.361018][ T5703] snd_usb_pod 2-1:1.1: set_interface failed [ 355.361256][ T5703] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 355.361373][ T5703] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 355.382421][ T5703] usb 2-1: USB disconnect, device number 44 [ 355.491054][T10683] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 356.378224][ T5703] usb 3-1: USB disconnect, device number 68 [ 356.386119][ T7151] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 356.436095][ T55] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 356.541411][ T7151] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.541443][ T7151] usb 2-1: config 0 has no interfaces? [ 356.543761][ T7151] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 356.543794][ T7151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.543808][ T7151] usb 2-1: Product: syz [ 356.543819][ T7151] usb 2-1: Manufacturer: syz [ 356.543828][ T7151] usb 2-1: SerialNumber: syz [ 356.550604][ T7151] usb 2-1: config 0 descriptor?? [ 356.600555][ T55] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.600612][ T55] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 356.600670][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 356.600686][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 356.603738][ T55] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 356.603759][ T55] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 356.603772][ T55] usb 4-1: Product: syz [ 356.603824][ T55] usb 4-1: Manufacturer: syz [ 356.603833][ T55] usb 4-1: SerialNumber: syz [ 356.615533][ T55] usb 4-1: config 0 descriptor?? [ 356.736076][ T55] rc_core: IR keymap rc-imon-rsc not found [ 356.736100][ T55] Registered IR keymap rc-empty [ 356.743452][ T55] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 356.760385][ T55] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input21 [ 356.781827][ T55] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 356.837112][ T7151] usb 2-1: USB disconnect, device number 45 [ 356.878415][ T55] usb 4-1: USB disconnect, device number 59 [ 357.776126][ T5813] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 357.949868][ T5813] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.965842][ T5813] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 357.965873][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.987938][ T5813] usb 2-1: Product: syz [ 357.987964][ T5813] usb 2-1: Manufacturer: syz [ 357.987981][ T5813] usb 2-1: SerialNumber: syz [ 358.627872][ T55] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.770759][T10741] FAULT_INJECTION: forcing a failure. [ 358.770759][T10741] name failslab, interval 1, probability 0, space 0, times 0 [ 358.770790][T10741] CPU: 1 UID: 0 PID: 10741 Comm: syz.0.1781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 358.770807][T10741] Tainted: [L]=SOFTLOCKUP [ 358.770812][T10741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 358.770822][T10741] Call Trace: [ 358.770828][T10741] [ 358.770838][T10741] dump_stack_lvl+0xe8/0x150 [ 358.770867][T10741] should_fail_ex+0x46b/0x600 [ 358.770899][T10741] should_failslab+0xa8/0x100 [ 358.770930][T10741] kmem_cache_alloc_noprof+0x87/0x680 [ 358.770953][T10741] ? skb_clone+0x212/0x3a0 [ 358.770973][T10741] skb_clone+0x212/0x3a0 [ 358.770993][T10741] __netlink_deliver_tap+0x424/0x8b0 [ 358.771032][T10741] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.771062][T10741] netlink_deliver_tap+0x19c/0x1b0 [ 358.771092][T10741] netlink_sendskb+0x68/0x140 [ 358.771118][T10741] netlink_rcv_skb+0x2b6/0x4b0 [ 358.771135][T10741] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.771149][T10741] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.771177][T10741] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.771205][T10741] ? netlink_deliver_tap+0x2e/0x1b0 [ 358.771237][T10741] genl_rcv+0x28/0x40 [ 358.771256][T10741] netlink_unicast+0x780/0x920 [ 358.771287][T10741] netlink_sendmsg+0x813/0xb40 [ 358.771309][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.771326][T10741] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 358.771360][T10741] ? aa_sock_msg_perm+0x122/0x200 [ 358.771392][T10741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.771418][T10741] sock_sendmsg_nosec+0x112/0x150 [ 358.771444][T10741] ____sys_sendmsg+0x55c/0x870 [ 358.771465][T10741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.771487][T10741] ? import_iovec+0x73/0xa0 [ 358.771514][T10741] ___sys_sendmsg+0x2a5/0x360 [ 358.771551][T10741] ? __lock_acquire+0x6b5/0x2d10 [ 358.771577][T10741] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.771626][T10741] ? __fget_files+0x2a/0x420 [ 358.771641][T10741] ? __fget_files+0x3a6/0x420 [ 358.771660][T10741] __x64_sys_sendmsg+0x1c3/0x2a0 [ 358.771692][T10741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.771731][T10741] ? __pfx_ksys_write+0x10/0x10 [ 358.771769][T10741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.771785][T10741] do_syscall_64+0x15f/0xf80 [ 358.771798][T10741] ? trace_irq_disable+0x3b/0x140 [ 358.771815][T10741] ? clear_bhb_loop+0x40/0x90 [ 358.771833][T10741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.771854][T10741] RIP: 0033:0x7f7db486cdd9 [ 358.771875][T10741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.771892][T10741] RSP: 002b:00007f7db2ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.771914][T10741] RAX: ffffffffffffffda RBX: 00007f7db4ae5fa0 RCX: 00007f7db486cdd9 [ 358.771930][T10741] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 358.771943][T10741] RBP: 00007f7db2ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 358.771951][T10741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.771958][T10741] R13: 00007f7db4ae6038 R14: 00007f7db4ae5fa0 R15: 00007ffd5633b2c8 [ 358.771976][T10741] [ 358.877704][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.877742][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.877781][ T55] usb 4-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 358.877805][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.903194][ T55] usb 4-1: config 0 descriptor?? [ 359.259051][ T5813] usb 2-1: USB disconnect, device number 46 [ 359.422834][ T55] playstation 0003:054C:0BA0.0008: unknown global tag 0xe [ 359.422860][ T55] playstation 0003:054C:0BA0.0008: item 0 0 1 14 parsing failed [ 359.423549][ T55] playstation 0003:054C:0BA0.0008: Parse failed [ 359.423625][ T55] playstation 0003:054C:0BA0.0008: probe with driver playstation failed with error -22 [ 359.526545][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.506326][T10774] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.026032][ T5703] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 361.180140][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.183719][ T5703] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 361.183753][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.183775][ T5703] usb 1-1: Product: syz [ 361.183790][ T5703] usb 1-1: Manufacturer: syz [ 361.183805][ T5703] usb 1-1: SerialNumber: syz [ 361.426493][ T7151] usb 4-1: USB disconnect, device number 60 [ 361.734783][T10803] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 361.886631][ T5813] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 362.068415][ T5813] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 362.068438][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 362.068450][ T5813] usb 4-1: Product: syz [ 362.076751][ T7151] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 362.111036][ T5813] usb 4-1: config 0 descriptor?? [ 362.140858][ T5813] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 362.145429][ T5813] usb 4-1: Detected FT232H [ 362.206281][ T7151] usb 3-1: device descriptor read/64, error -71 [ 362.331955][ T5703] usb 1-1: USB disconnect, device number 54 [ 362.373141][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.385813][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.402432][ T5813] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 362.402871][ T5813] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 362.417619][ T5813] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 362.457479][ T5813] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 362.487654][ T5813] usb 4-1: USB disconnect, device number 61 [ 362.506240][ T7151] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 362.548963][ T5813] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 362.549698][ T5813] ftdi_sio 4-1:0.0: device disconnected [ 362.632812][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.636203][ T7151] usb 3-1: device descriptor read/64, error -71 [ 362.686019][ T5696] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 362.747298][ T7151] usb usb3-port1: attempt power cycle [ 362.866051][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 362.869042][ T5696] usb 2-1: config 3 has an invalid interface number: 19 but max is 1 [ 362.869075][ T5696] usb 2-1: config 3 has an invalid interface number: 12 but max is 1 [ 362.869168][ T5696] usb 2-1: config 3 has no interface number 0 [ 362.869184][ T5696] usb 2-1: config 3 has no interface number 1 [ 362.869241][ T5696] usb 2-1: config 3 interface 19 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 362.869265][ T5696] usb 2-1: config 3 interface 19 altsetting 12 endpoint 0x6 has an invalid bInterval 87, changing to 7 [ 362.869285][ T5696] usb 2-1: config 3 interface 19 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 362.869298][ T5696] usb 2-1: config 3 interface 19 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 362.869319][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 362.869335][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 362.869350][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.869362][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 362.869377][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has a duplicate endpoint with address 0x8, skipping [ 362.869390][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 362.869403][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0x5 has an invalid bInterval 229, changing to 7 [ 362.869418][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 362.869431][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 362.869442][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has an endpoint descriptor with address 0x5C, changing to 0xC [ 362.869456][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0xC has an invalid bInterval 194, changing to 7 [ 362.869470][ T5696] usb 2-1: config 3 interface 12 altsetting 0 endpoint 0xC has invalid maxpacket 17744, setting to 1024 [ 362.869485][ T5696] usb 2-1: config 3 interface 12 altsetting 0 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 362.869500][ T5696] usb 2-1: config 3 interface 19 has no altsetting 0 [ 362.871735][ T5696] usb 2-1: New USB device found, idVendor=045e, idProduct=0459, bcdDevice=7a.06 [ 362.871765][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.871786][ T5696] usb 2-1: Product: syz [ 362.871800][ T5696] usb 2-1: Manufacturer: syz [ 362.871809][ T5696] usb 2-1: SerialNumber: syz [ 362.881556][T10818] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 363.106144][ T7151] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 363.128827][ T7151] usb 3-1: device descriptor read/8, error -71 [ 363.322600][ T5696] usb 2-1: USB disconnect, device number 47 [ 363.396437][ T7151] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 363.399242][T10828] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1812'. [ 363.416881][ T7151] usb 3-1: device descriptor read/8, error -71 [ 363.526731][ T7151] usb usb3-port1: unable to enumerate USB device [ 364.016067][ T5696] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 364.136154][ T7151] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 364.166025][ T5696] usb 1-1: Using ep0 maxpacket: 16 [ 364.167802][ T5696] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.167830][ T5696] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.170322][ T5696] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.170354][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.170374][ T5696] usb 1-1: Product: syz [ 364.170384][ T5696] usb 1-1: Manufacturer: syz [ 364.170394][ T5696] usb 1-1: SerialNumber: syz [ 364.238094][ T5696] usb 1-1: 0:2 : does not exist [ 364.270735][ T7151] usb 2-1: device descriptor read/64, error -71 [ 364.420374][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.422195][T10844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.422736][T10844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.425261][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.427922][T10835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.429332][T10835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.507807][ T7151] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 364.531320][ T5696] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 364.596071][ T5696] usb 1-1: USB disconnect, device number 55 [ 364.596309][ T824] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 364.644291][ T8110] udevd[8110]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.646134][ T7151] usb 2-1: device descriptor read/64, error -71 [ 364.746088][ T824] usb 4-1: Using ep0 maxpacket: 16 [ 364.752487][ T824] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 364.752521][ T824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.752543][ T824] usb 4-1: Product: syz [ 364.752559][ T824] usb 4-1: Manufacturer: syz [ 364.752575][ T824] usb 4-1: SerialNumber: syz [ 364.756435][ T7151] usb usb2-port1: attempt power cycle [ 364.983235][ T824] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 364.987031][ T824] usb 4-1: USB disconnect, device number 62 [ 365.136078][ T7151] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 365.158109][ T7151] usb 2-1: device descriptor read/8, error -71 [ 365.407921][ T7151] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 365.426546][ T7151] usb 2-1: device descriptor read/8, error -71 [ 365.537588][ T7151] usb usb2-port1: unable to enumerate USB device [ 365.766057][ T824] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 365.900228][ T824] usb 4-1: device descriptor read/64, error -71 [ 366.137291][ T824] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 366.216098][ T5813] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 366.267494][ T824] usb 4-1: device descriptor read/64, error -71 [ 366.336097][ T5696] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 366.366121][ T5813] usb 3-1: Using ep0 maxpacket: 16 [ 366.367824][ T5813] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 366.367850][ T5813] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.367870][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.370051][ T5813] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 366.370080][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.370102][ T5813] usb 3-1: Product: syz [ 366.370117][ T5813] usb 3-1: Manufacturer: syz [ 366.370126][ T5813] usb 3-1: SerialNumber: syz [ 366.378188][ T824] usb usb4-port1: attempt power cycle [ 366.449236][ T5813] usb 3-1: 0:2 : does not exist [ 366.536076][ T5696] usb 1-1: Using ep0 maxpacket: 32 [ 366.537962][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.537989][ T5696] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 366.540227][ T5696] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 366.540257][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.540312][ T5696] usb 1-1: Product: syz [ 366.540322][ T5696] usb 1-1: Manufacturer: syz [ 366.540331][ T5696] usb 1-1: SerialNumber: syz [ 366.545332][ T5696] usb 1-1: config 0 descriptor?? [ 366.726195][ T824] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 366.746796][ T824] usb 4-1: device descriptor read/8, error -71 [ 366.988689][ T824] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 367.009754][ T824] usb 4-1: device descriptor read/8, error -71 [ 367.047324][T10867] FAULT_INJECTION: forcing a failure. [ 367.047324][T10867] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.047379][T10867] CPU: 1 UID: 0 PID: 10867 Comm: syz.1.1829 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 367.047408][T10867] Tainted: [L]=SOFTLOCKUP [ 367.047416][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 367.047433][T10867] Call Trace: [ 367.047445][T10867] [ 367.047454][T10867] dump_stack_lvl+0xe8/0x150 [ 367.047479][T10867] should_fail_ex+0x46b/0x600 [ 367.047498][T10867] prepare_alloc_pages+0x22a/0x6b0 [ 367.047525][T10867] __alloc_frozen_pages_noprof+0x12f/0x380 [ 367.047560][T10867] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.047595][T10867] ? __pfx_policy_nodemask+0x10/0x10 [ 367.047626][T10867] ? __lock_acquire+0x6b5/0x2d10 [ 367.047646][T10867] alloc_pages_mpol+0xd1/0x380 [ 367.047666][T10867] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 367.047685][T10867] vma_alloc_folio_noprof+0xe1/0x1e0 [ 367.047717][T10867] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 367.047748][T10867] ? __pte_offset_map+0x29/0x200 [ 367.047781][T10867] do_pte_missing+0x822/0x2940 [ 367.047812][T10867] ? handle_mm_fault+0xed/0x14c0 [ 367.047830][T10867] handle_mm_fault+0xdb5/0x14c0 [ 367.047850][T10867] ? handle_mm_fault+0xed/0x14c0 [ 367.047880][T10867] ? __pfx_handle_mm_fault+0x10/0x10 [ 367.047908][T10867] ? follow_page_pte+0xbc8/0xe40 [ 367.047945][T10867] ? __pfx_follow_page_pte+0x10/0x10 [ 367.047977][T10867] __get_user_pages+0x168f/0x2570 [ 367.048007][T10867] __gup_longterm_locked+0xdcf/0x1630 [ 367.048035][T10867] ? sanity_check_pinned_pages+0x7af/0x870 [ 367.048069][T10867] gup_fast_fallback+0x1cfd/0x2040 [ 367.048126][T10867] ? __pfx_gup_fast_fallback+0x10/0x10 [ 367.048149][T10867] ? is_valid_gup_args+0x11f/0x200 [ 367.048165][T10867] ? pin_user_pages_fast+0x4d/0xb0 [ 367.048181][T10867] rds_info_getsockopt+0x20e/0x400 [ 367.048213][T10867] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 367.048244][T10867] ? __might_fault+0xaf/0x130 [ 367.048276][T10867] ? rds_getsockopt+0x2cd/0x500 [ 367.048301][T10867] ? __pfx_rds_getsockopt+0x10/0x10 [ 367.048317][T10867] do_sock_getsockopt+0x51d/0x7e0 [ 367.048342][T10867] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 367.048378][T10867] ? __fget_files+0x3a6/0x420 [ 367.048402][T10867] ? __fget_files+0x2a/0x420 [ 367.048434][T10867] __x64_sys_getsockopt+0x1aa/0x250 [ 367.048469][T10867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.048484][T10867] do_syscall_64+0x15f/0xf80 [ 367.048496][T10867] ? trace_irq_disable+0x3b/0x140 [ 367.048514][T10867] ? clear_bhb_loop+0x40/0x90 [ 367.048535][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.048557][T10867] RIP: 0033:0x7f400fa9cdd9 [ 367.048578][T10867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.048596][T10867] RSP: 002b:00007f400dcf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 367.048623][T10867] RAX: ffffffffffffffda RBX: 00007f400fd15fa0 RCX: 00007f400fa9cdd9 [ 367.048637][T10867] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003 [ 367.048647][T10867] RBP: 00007f400dcf6090 R08: 0000200000000040 R09: 0000000000000000 [ 367.048655][T10867] R10: 0000200000019580 R11: 0000000000000246 R12: 0000000000000001 [ 367.048663][T10867] R13: 00007f400fd16038 R14: 00007f400fd15fa0 R15: 00007ffc630b82a8 [ 367.048680][T10867] [ 367.117086][ T824] usb usb4-port1: unable to enumerate USB device [ 368.829419][T10904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 369.746099][ T5696] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 369.931679][ T5696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.931713][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.931735][ T5696] usb 4-1: Product: syz [ 369.931751][ T5696] usb 4-1: Manufacturer: syz [ 369.931766][ T5696] usb 4-1: SerialNumber: syz [ 369.996860][ T5696] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 370.065216][ T5793] usb 1-1: USB disconnect, device number 56 [ 370.184964][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 370.412889][T10938] netlink: 1372 bytes leftover after parsing attributes in process `syz.0.1835'. [ 370.695183][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1839'. [ 370.738365][T10950] FAULT_INJECTION: forcing a failure. [ 370.738365][T10950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.738405][T10950] CPU: 0 UID: 0 PID: 10950 Comm: syz.0.1837 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.738432][T10950] Tainted: [L]=SOFTLOCKUP [ 370.738440][T10950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.738455][T10950] Call Trace: [ 370.738463][T10950] [ 370.738472][T10950] dump_stack_lvl+0xe8/0x150 [ 370.738502][T10950] should_fail_ex+0x46b/0x600 [ 370.738530][T10950] _copy_from_user+0x2d/0xb0 [ 370.738557][T10950] ___sys_sendmsg+0x1c6/0x360 [ 370.738581][T10950] ? __lock_acquire+0x6b5/0x2d10 [ 370.738601][T10950] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.738651][T10950] ? __fget_files+0x2a/0x420 [ 370.738671][T10950] ? __fget_files+0x3a6/0x420 [ 370.738697][T10950] __x64_sys_sendmsg+0x1c3/0x2a0 [ 370.738722][T10950] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.738753][T10950] ? __pfx_ksys_write+0x10/0x10 [ 370.738775][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.738800][T10950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.738817][T10950] do_syscall_64+0x15f/0xf80 [ 370.738836][T10950] ? clear_bhb_loop+0x40/0x90 [ 370.738857][T10950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.738881][T10950] RIP: 0033:0x7f7db486cdd9 [ 370.738898][T10950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.738912][T10950] RSP: 002b:00007f7db2aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.738931][T10950] RAX: ffffffffffffffda RBX: 00007f7db4ae6090 RCX: 00007f7db486cdd9 [ 370.738943][T10950] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 370.738955][T10950] RBP: 00007f7db2aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 370.738966][T10950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.738976][T10950] R13: 00007f7db4ae6128 R14: 00007f7db4ae6090 R15: 00007ffd5633b2c8 [ 370.739001][T10950] [ 370.807479][T10948] FAULT_INJECTION: forcing a failure. [ 370.807479][T10948] name failslab, interval 1, probability 0, space 0, times 0 [ 370.807521][T10948] CPU: 1 UID: 0 PID: 10948 Comm: syz.1.1839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.807550][T10948] Tainted: [L]=SOFTLOCKUP [ 370.807558][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.807571][T10948] Call Trace: [ 370.807579][T10948] [ 370.807588][T10948] dump_stack_lvl+0xe8/0x150 [ 370.807620][T10948] should_fail_ex+0x46b/0x600 [ 370.807653][T10948] should_failslab+0xa8/0x100 [ 370.807687][T10948] __kmalloc_cache_noprof+0x84/0x690 [ 370.807718][T10948] ? nbd_add_socket+0x48f/0xbb0 [ 370.807750][T10948] nbd_add_socket+0x48f/0xbb0 [ 370.807784][T10948] ? __pfx_nbd_add_socket+0x10/0x10 [ 370.807812][T10948] ? __nla_parse+0x40/0x60 [ 370.807845][T10948] nbd_genl_connect+0x13dc/0x1c80 [ 370.807871][T10948] ? __pfx___nla_validate_parse+0x10/0x10 [ 370.807911][T10948] ? __pfx_nbd_genl_connect+0x10/0x10 [ 370.807943][T10948] ? rcu_is_watching+0x15/0xb0 [ 370.807967][T10948] ? trace_kmalloc+0x2a/0xf0 [ 370.807999][T10948] ? __nla_parse+0x40/0x60 [ 370.808030][T10948] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 370.808055][T10948] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 370.808087][T10948] genl_family_rcv_msg_doit+0x22a/0x330 [ 370.808116][T10948] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 370.808149][T10948] ? lockdep_hardirqs_on+0x7a/0x110 [ 370.808180][T10948] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 370.808217][T10948] genl_rcv_msg+0x61c/0x7a0 [ 370.808247][T10948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.808268][T10948] ? __pfx_nbd_genl_connect+0x10/0x10 [ 370.808308][T10948] netlink_rcv_skb+0x232/0x4b0 [ 370.808337][T10948] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.808360][T10948] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.808411][T10948] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.808439][T10948] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.808470][T10948] genl_rcv+0x28/0x40 [ 370.808490][T10948] netlink_unicast+0x780/0x920 [ 370.808527][T10948] netlink_sendmsg+0x813/0xb40 [ 370.808564][T10948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.808594][T10948] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 370.808632][T10948] ? aa_sock_msg_perm+0x122/0x200 [ 370.808662][T10948] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.808689][T10948] sock_sendmsg_nosec+0x112/0x150 [ 370.808716][T10948] ____sys_sendmsg+0x55c/0x870 [ 370.808752][T10948] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.808792][T10948] ? import_iovec+0x73/0xa0 [ 370.808825][T10948] ___sys_sendmsg+0x2a5/0x360 [ 370.808853][T10948] ? __lock_acquire+0x6b5/0x2d10 [ 370.808877][T10948] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.808944][T10948] ? __fget_files+0x2a/0x420 [ 370.808969][T10948] ? __fget_files+0x3a6/0x420 [ 370.809004][T10948] __x64_sys_sendmsg+0x1c3/0x2a0 [ 370.809036][T10948] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.809075][T10948] ? __pfx_ksys_write+0x10/0x10 [ 370.809113][T10948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.809136][T10948] do_syscall_64+0x15f/0xf80 [ 370.809158][T10948] ? clear_bhb_loop+0x40/0x90 [ 370.809184][T10948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.809204][T10948] RIP: 0033:0x7f400fa9cdd9 [ 370.809226][T10948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.809244][T10948] RSP: 002b:00007f400dcf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.809268][T10948] RAX: ffffffffffffffda RBX: 00007f400fd15fa0 RCX: 00007f400fa9cdd9 [ 370.809283][T10948] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 370.809297][T10948] RBP: 00007f400dcf6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.809310][T10948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.809323][T10948] R13: 00007f400fd16038 R14: 00007f400fd15fa0 R15: 00007ffc630b82a8 [ 370.809353][T10948] [ 371.485275][T10958] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.485308][T10958] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 371.524226][T10958] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 371.524257][T10958] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 371.642120][ T5793] usb 4-1: USB disconnect, device number 67 [ 371.947009][ T9] usb 4-1: Service connection timeout for: 258 [ 371.947037][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 371.975225][ T5813] usb 3-1: USB disconnect, device number 73 [ 372.028008][ T9] ath9k_htc: Failed to initialize the device [ 372.029582][ T5793] usb 4-1: ath9k_htc: USB layer deinitialized [ 372.076105][ T5696] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 372.118713][ T8110] udevd[8110]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.227963][ T5696] usb 2-1: Using ep0 maxpacket: 32 [ 372.241570][ T5696] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.241601][ T5696] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 372.247594][ T5696] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 372.247627][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.247662][ T5696] usb 2-1: Product: syz [ 372.247678][ T5696] usb 2-1: Manufacturer: syz [ 372.247696][ T5696] usb 2-1: SerialNumber: syz [ 372.303491][ T5696] usb 2-1: config 0 descriptor?? [ 372.574393][T10993] FAULT_INJECTION: forcing a failure. [ 372.574393][T10993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.574431][T10993] CPU: 1 UID: 0 PID: 10993 Comm: syz.3.1851 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 372.574460][T10993] Tainted: [L]=SOFTLOCKUP [ 372.574469][T10993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 372.574482][T10993] Call Trace: [ 372.574490][T10993] [ 372.574500][T10993] dump_stack_lvl+0xe8/0x150 [ 372.574528][T10993] should_fail_ex+0x46b/0x600 [ 372.574559][T10993] _copy_to_user+0x31/0xb0 [ 372.574593][T10993] simple_read_from_buffer+0xe1/0x170 [ 372.574626][T10993] proc_fail_nth_read+0x1be/0x230 [ 372.574656][T10993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.574685][T10993] ? rw_verify_area+0x2ac/0x4e0 [ 372.574713][T10993] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.574739][T10993] vfs_read+0x212/0xa80 [ 372.574774][T10993] ? __pfx_vfs_read+0x10/0x10 [ 372.574804][T10993] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.574836][T10993] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.574867][T10993] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 372.574898][T10993] ? mutex_lock_nested+0x152/0x1d0 [ 372.574922][T10993] ? fdget_pos+0x252/0x320 [ 372.574955][T10993] ksys_read+0x156/0x270 [ 372.574985][T10993] ? __pfx_ksys_read+0x10/0x10 [ 372.575021][T10993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.575044][T10993] do_syscall_64+0x15f/0xf80 [ 372.575065][T10993] ? clear_bhb_loop+0x40/0x90 [ 372.575090][T10993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.575111][T10993] RIP: 0033:0x7f24c8afd60e [ 372.575131][T10993] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 372.575150][T10993] RSP: 002b:00007f24c6d95fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.575173][T10993] RAX: ffffffffffffffda RBX: 00007f24c6d966c0 RCX: 00007f24c8afd60e [ 372.575189][T10993] RDX: 000000000000000f RSI: 00007f24c6d960a0 RDI: 0000000000000004 [ 372.575203][T10993] RBP: 00007f24c6d96090 R08: 0000000000000000 R09: 0000000000000000 [ 372.575216][T10993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.575236][T10993] R13: 00007f24c8db6038 R14: 00007f24c8db5fa0 R15: 00007ffd64dfaa78 [ 372.575268][T10993] [ 373.602180][T11006] syz.0.1854 (11006) used greatest stack depth: 16512 bytes left [ 373.939937][T11039] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 374.206056][ T7151] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 374.366071][ T7151] usb 4-1: Using ep0 maxpacket: 32 [ 374.368790][ T7151] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 374.368821][ T7151] usb 4-1: config 0 has no interface number 0 [ 374.368869][ T7151] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 374.368898][ T7151] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid maxpacket 18096, setting to 1024 [ 374.368928][ T7151] usb 4-1: config 0 interface 89 has no altsetting 0 [ 374.372635][ T7151] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 374.372668][ T7151] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.372691][ T7151] usb 4-1: Product: syz [ 374.372707][ T7151] usb 4-1: Manufacturer: syz [ 374.372723][ T7151] usb 4-1: SerialNumber: syz [ 374.384991][ T7151] usb 4-1: config 0 descriptor?? [ 374.395149][ T7151] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 374.395188][ T7151] em28xx 4-1:0.89: Video interface 89 found: isoc [ 375.090779][T11067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 375.206092][ T5793] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 375.329525][T11070] syzkaller1: entered promiscuous mode [ 375.329542][T11070] syzkaller1: entered allmulticast mode [ 375.366191][ T5793] usb 3-1: Using ep0 maxpacket: 8 [ 375.368433][ T5793] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 375.368486][ T5793] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 375.368555][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.396685][ T5793] usb 3-1: config 0 descriptor?? [ 375.423523][ T5793] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 375.537323][ T7151] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 375.644624][ T7151] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 375.644650][ T7151] em28xx 4-1:0.89: board has no eeprom [ 375.696140][ T7151] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 375.696174][ T7151] em28xx 4-1:0.89: analog set to isoc mode. [ 375.721306][ T824] em28xx 4-1:0.89: Registering V4L2 extension [ 375.886701][ T7151] usb 2-1: USB disconnect, device number 52 [ 376.057699][ T824] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 376.060232][ T824] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 376.064267][ T824] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 376.075732][ T824] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 376.108425][ T824] em28xx 4-1:0.89: Config register raw data: 0xfffffffb [ 376.109711][ T824] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 376.109769][ T824] em28xx 4-1:0.89: No AC97 audio processor [ 376.163460][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 376.163485][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1871'. [ 376.580074][ T5793] gspca_vc032x: reg_w err -110 [ 376.580151][ T5793] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 376.729898][ T824] usb 4-1: Decoder not found [ 376.729922][ T824] em28xx 4-1:0.89: failed to create media graph [ 376.729996][ T824] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 376.951127][ T5696] usb 4-1: USB disconnect, device number 68 [ 376.954426][ T5696] em28xx 4-1:0.89: Disconnecting em28xx [ 377.111019][T11077] ================================================================== [ 377.111037][T11077] BUG: KASAN: use-after-free in v4l2_open+0x398/0x3a0 [ 377.111074][T11077] Read of size 4 at addr ffff88805e65c9d0 by task v4l_id/11077 [ 377.111092][T11077] [ 377.111106][T11077] CPU: 1 UID: 0 PID: 11077 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.111135][T11077] Tainted: [L]=SOFTLOCKUP [ 377.111143][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.111155][T11077] Call Trace: [ 377.111163][T11077] [ 377.111172][T11077] dump_stack_lvl+0xe8/0x150 [ 377.111196][T11077] print_address_description+0x55/0x1e0 [ 377.111223][T11077] ? v4l2_open+0x398/0x3a0 [ 377.111248][T11077] print_report+0x58/0x70 [ 377.111272][T11077] kasan_report+0x117/0x150 [ 377.111301][T11077] ? v4l2_open+0x398/0x3a0 [ 377.111329][T11077] v4l2_open+0x398/0x3a0 [ 377.111358][T11077] chrdev_open+0x4d0/0x5f0 [ 377.111379][T11077] ? __pfx_chrdev_open+0x10/0x10 [ 377.111399][T11077] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 377.111429][T11077] ? __pfx_chrdev_open+0x10/0x10 [ 377.111448][T11077] do_dentry_open+0x83d/0x13e0 [ 377.111475][T11077] vfs_open+0x3b/0x350 [ 377.111495][T11077] ? path_openat+0x2e2b/0x38a0 [ 377.111521][T11077] path_openat+0x2e43/0x38a0 [ 377.111558][T11077] ? __pfx_path_openat+0x10/0x10 [ 377.111584][T11077] ? kasan_save_track+0x4f/0x80 [ 377.111607][T11077] ? kasan_save_track+0x3e/0x80 [ 377.111629][T11077] ? __kasan_slab_alloc+0x6c/0x80 [ 377.111653][T11077] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 377.111683][T11077] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.111715][T11077] do_file_open+0x23e/0x4a0 [ 377.111741][T11077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.111771][T11077] ? __pfx_do_file_open+0x10/0x10 [ 377.111794][T11077] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 377.111823][T11077] ? alloc_fd+0x64e/0x6c0 [ 377.111849][T11077] do_sys_openat2+0x113/0x200 [ 377.111880][T11077] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.111903][T11077] ? exc_page_fault+0x6a/0xc0 [ 377.111933][T11077] ? do_user_addr_fault+0xc6f/0x1340 [ 377.111957][T11077] __x64_sys_openat+0x138/0x170 [ 377.111980][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.112001][T11077] do_syscall_64+0x15f/0xf80 [ 377.112020][T11077] ? trace_irq_disable+0x3b/0x140 [ 377.112046][T11077] ? clear_bhb_loop+0x40/0x90 [ 377.112069][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.112088][T11077] RIP: 0033:0x7f564c0ac407 [ 377.112108][T11077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 377.112126][T11077] RSP: 002b:00007ffddeb6b000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 377.112148][T11077] RAX: ffffffffffffffda RBX: 00007f564bfbe880 RCX: 00007f564c0ac407 [ 377.112163][T11077] RDX: 0000000000000000 RSI: 00007ffddeb6cf1c RDI: ffffffffffffff9c [ 377.112178][T11077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 377.112190][T11077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 377.112202][T11077] R13: 00007ffddeb6b250 R14: 00007f564c842000 R15: 000056294d84d4d8 [ 377.112224][T11077] [ 377.112232][T11077] [ 377.112238][T11077] The buggy address belongs to the physical page: [ 377.112255][T11077] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e65c [ 377.112273][T11077] flags: 0x80000000000000(node=0|zone=1) [ 377.112297][T11077] raw: 0080000000000000 ffffea0000fdd908 ffff8880b8742cc0 0000000000000000 [ 377.112314][T11077] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 377.112325][T11077] page dumped because: kasan: bad access detected [ 377.112334][T11077] page_owner tracks the page as freed [ 377.112342][T11077] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 824, tgid 824 (kworker/1:2), ts 375746737850, free_ts 377099847077 [ 377.112371][T11077] post_alloc_hook+0x1f9/0x250 [ 377.112393][T11077] get_page_from_freelist+0x27d6/0x2850 [ 377.112422][T11077] __alloc_frozen_pages_noprof+0x18d/0x380 [ 377.112447][T11077] alloc_pages_mpol+0xd1/0x380 [ 377.112473][T11077] ___kmalloc_large_node+0x4e/0x120 [ 377.112497][T11077] __kmalloc_large_noprof+0x1a/0x90 [ 377.112521][T11077] em28xx_v4l2_init+0xe0/0x3320 [ 377.112537][T11077] em28xx_init_extension+0x120/0x1c0 [ 377.112562][T11077] process_one_work+0x98b/0x1630 [ 377.112584][T11077] worker_thread+0xb49/0x1140 [ 377.112607][T11077] kthread+0x388/0x470 [ 377.112624][T11077] ret_from_fork+0x514/0xb70 [ 377.112643][T11077] ret_from_fork_asm+0x1a/0x30 [ 377.112672][T11077] page last free pid 824 tgid 824 stack trace: [ 377.112684][T11077] __free_frozen_pages+0x1075/0x11b0 [ 377.112708][T11077] em28xx_v4l2_init+0x18e9/0x3320 [ 377.112725][T11077] em28xx_init_extension+0x120/0x1c0 [ 377.112750][T11077] process_one_work+0x98b/0x1630 [ 377.112772][T11077] worker_thread+0xb49/0x1140 [ 377.112797][T11077] kthread+0x388/0x470 [ 377.112814][T11077] ret_from_fork+0x514/0xb70 [ 377.112833][T11077] ret_from_fork_asm+0x1a/0x30 [ 377.112856][T11077] [ 377.112867][T11077] Memory state around the buggy address: [ 377.112878][T11077] ffff88805e65c880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.112891][T11077] ffff88805e65c900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.112904][T11077] >ffff88805e65c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.112914][T11077] ^ [ 377.112926][T11077] ffff88805e65ca00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.112939][T11077] ffff88805e65ca80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 377.112949][T11077] ================================================================== [ 377.112990][T11077] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 377.113008][T11077] CPU: 1 UID: 0 PID: 11077 Comm: v4l_id Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 377.113035][T11077] Tainted: [L]=SOFTLOCKUP [ 377.113044][T11077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 377.113056][T11077] Call Trace: [ 377.113064][T11077] [ 377.113073][T11077] vpanic+0x56c/0xa60 [ 377.113103][T11077] ? __pfx_vpanic+0x10/0x10 [ 377.113132][T11077] ? __pfx___schedule+0x10/0x10 [ 377.113163][T11077] panic+0xc5/0xd0 [ 377.113189][T11077] ? __pfx_panic+0x10/0x10 [ 377.113217][T11077] ? preempt_schedule_thunk+0x16/0x40 [ 377.113251][T11077] ? v4l2_open+0x398/0x3a0 [ 377.113277][T11077] check_panic_on_warn+0x89/0xb0 [ 377.113299][T11077] ? v4l2_open+0x398/0x3a0 [ 377.113325][T11077] end_report+0x73/0x170 [ 377.113352][T11077] ? v4l2_open+0x398/0x3a0 [ 377.113378][T11077] kasan_report+0x128/0x150 [ 377.113407][T11077] ? v4l2_open+0x398/0x3a0 [ 377.113437][T11077] v4l2_open+0x398/0x3a0 [ 377.113466][T11077] chrdev_open+0x4d0/0x5f0 [ 377.113487][T11077] ? __pfx_chrdev_open+0x10/0x10 [ 377.113507][T11077] ? fsnotify_open_perm_and_set_mode+0x13b/0x6e0 [ 377.113536][T11077] ? __pfx_chrdev_open+0x10/0x10 [ 377.113556][T11077] do_dentry_open+0x83d/0x13e0 [ 377.113581][T11077] vfs_open+0x3b/0x350 [ 377.113601][T11077] ? path_openat+0x2e2b/0x38a0 [ 377.113628][T11077] path_openat+0x2e43/0x38a0 [ 377.113667][T11077] ? __pfx_path_openat+0x10/0x10 [ 377.113694][T11077] ? kasan_save_track+0x4f/0x80 [ 377.113716][T11077] ? kasan_save_track+0x3e/0x80 [ 377.113738][T11077] ? __kasan_slab_alloc+0x6c/0x80 [ 377.113762][T11077] ? kmem_cache_alloc_noprof+0x33b/0x680 [ 377.113791][T11077] ? do_raw_spin_lock+0x12b/0x2f0 [ 377.113822][T11077] do_file_open+0x23e/0x4a0 [ 377.113847][T11077] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 377.113885][T11077] ? __pfx_do_file_open+0x10/0x10 [ 377.113911][T11077] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 377.113945][T11077] ? alloc_fd+0x64e/0x6c0 [ 377.113972][T11077] do_sys_openat2+0x113/0x200 [ 377.113996][T11077] ? __pfx_do_sys_openat2+0x10/0x10 [ 377.114020][T11077] ? exc_page_fault+0x6a/0xc0 [ 377.114050][T11077] ? do_user_addr_fault+0xc6f/0x1340 [ 377.114074][T11077] __x64_sys_openat+0x138/0x170 [ 377.114097][T11077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.114118][T11077] do_syscall_64+0x15f/0xf80 [ 377.114138][T11077] ? trace_irq_disable+0x3b/0x140 [ 377.114166][T11077] ? clear_bhb_loop+0x40/0x90 [ 377.114189][T11077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.114209][T11077] RIP: 0033:0x7f564c0ac407 [ 377.114228][T11077] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 377.114246][T11077] RSP: 002b:00007ffddeb6b000 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 377.114268][T11077] RAX: ffffffffffffffda RBX: 00007f564bfbe880 RCX: 00007f564c0ac407 [ 377.114283][T11077] RDX: 0000000000000000 RSI: 00007ffddeb6cf1c RDI: ffffffffffffff9c [ 377.114298][T11077] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 377.114311][T11077] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 377.114326][T11077] R13: 00007ffddeb6b250 R14: 00007f564c842000 R15: 000056294d84d4d8 [ 377.114347][T11077] [ 377.114929][T11077] Kernel Offset: disabled