last executing test programs: 8.615726648s ago: executing program 2 (id=432): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@efer], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.854645058s ago: executing program 2 (id=435): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000020000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x56, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000c}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.139797374s ago: executing program 2 (id=439): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x10004000, &(0x7f0000000480)="415f0cbfd8ae64c01db7f6b07f3333af5391668b22cb71fb4b872cf27e6ac97f709d335ee7a81552e088fe302e0d31e3746694f2e7e5da738c8875a1be3099eee754528dcc88edd2badaedababc0564e774344aaf8062035732b0873e4d39a8a2551953eb690a87acc81702a2860a6bf22ccecce18a437a12abfefc8f4f22e7c2787a1cc7904cbe0b633a6e855493c1b0755476f4c0d5c61cf95dc9ddc", 0x9d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000540)="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") r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x1}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000980)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000b00)={@ptr={0x70742a85, 0x1, &(0x7f0000000a00)=""/254, 0xfe, 0x1, 0x30}, @ptr={0x70742a85, 0x0, &(0x7f00000007c0)=""/133, 0x85, 0x2, 0x40}, @flat=@binder={0x73622a85, 0xa, 0x3}}, &(0x7f0000000900)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000280)={r9, 0xfe3, 0x2, 0xfff}, &(0x7f00000002c0)=0x10) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFHWADDR(r10, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x124, 0x0, &(0x7f0000000ec0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@flat=@weak_handle={0x77682a85, 0xa, 0x3}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x0, 0x3}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000c40)={@flat=@weak_binder={0x77622a85, 0x10a, 0x2}, @ptr={0x70742a85, 0x7fffffff, &(0x7f0000000b80)=""/160, 0xa0, 0x1, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x35}}, &(0x7f0000000cc0)={0x0, 0x18, 0x40}}, 0x400}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000d40)={@fd={0x66642a85, 0x0, r8}, @ptr={0x70742a85, 0x0, &(0x7f0000000d00)=""/24, 0x18, 0x2, 0x27}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000dc0)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000e00)={@fd={0x66642a85, 0x0, r10}, @fda={0x66646185, 0x7, 0x2, 0x21}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000000e80)={0x0, 0x18, 0x38}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251000000005002a0001000000050037000000000005002e000000000008000600", @ANYRES32=r2, @ANYBLOB="08003c00060000000a0009000180c200003600000500380000050000055087208edb944ba80032ce7ed0a0b2440001000000b4d8295d01b53a"], 0x60}, 0x1, 0x0, 0x0, 0x8090}, 0x40850) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050401000000000000000a0000000900010073797a300000000040000000120a050402000000000000000a0000000900010073797a30000000000900020073797a310000000008000300000000050c000480080001"], 0x88}}, 0x0) 5.908491999s ago: executing program 2 (id=446): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) socket$pptp(0x18, 0x1, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0xfdfe, @empty}}, 0x1e) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120110035e159808fd0704003e59010203010902120001090360090904ca0100ff23c101d9083fc8b0165933746437be28"], &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x3) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x9e, 0x0, 0x179f}]}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) socket$packet(0x11, 0x3, 0x300) 5.612819599s ago: executing program 1 (id=447): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) 5.334422828s ago: executing program 1 (id=449): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) (fail_nth: 1) 4.493987242s ago: executing program 1 (id=451): syz_usb_connect$uac2(0x5, 0x97, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4004, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x39}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x101, 0x0, 0x1, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x1b, 0x4, {0x8, 0x25, 0x1, 0x0, 0x30, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7, 0x1, 0x5, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x0, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) (async) r0 = add_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000180)="8aad0858839d9451f7d9679371c4cbac792c252a8631dcaff7b40c6190066a1e0aa1ecac830fd6c623547ad2a90b752a4b8ff15166cae1282f3868c554f76a61381717e42d5037f23bdd9a144ed341445ff6c97ef1929126a786e98d61b3dfff507a63614c984020a75aa0cfe1ee400fd0d188f6839da96619fa7c23484c0462c7b479f2b25c0650a3a4150b7a5bc13e99073b7c55bfd1d0cc58b82d2af275ac6189537d771e884d2b7931e5a1c86c9cd0ee9f605c555c004f9f4fb82fca06b64c892cf9d993b6bd5d1e83b3617ac6d2", 0xd0, 0xfffffffffffffffa) mkdir(&(0x7f0000000000)='dir0\x00', 0xff) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) open(&(0x7f0000001980)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x80, 0x80) (async, rerun: 64) keyctl$describe(0x6, r0, &(0x7f0000000280)=""/124, 0x7c) (rerun: 64) 3.558674764s ago: executing program 2 (id=454): r0 = socket(0x2, 0x80805, 0x0) syz_usb_connect$uac1(0x3, 0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406307012040000102030109026f000301fbb0050904000000010100000a24012c050a00020102090401000001020000090401010101020000082402018002803a07240106020210090501092000"], 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000dc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x67, 0x200008c0}], 0x1, 0x20000140) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/set_event\x00', 0x1ef) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000800)={0x1, 0x6, 0xc, {0x5ffffe, 0xa}, 0xbfc, 0x1000}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write(r3, &(0x7f0000000300)='*ub:', 0x4) fanotify_mark(0xffffffffffffffff, 0x66, 0x1028, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r5, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0xc0080, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xe8) 3.523369574s ago: executing program 0 (id=455): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc0880) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) close(0x3) 3.093184372s ago: executing program 0 (id=456): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x4, @none, 0x9}, 0xe) write(r0, 0x0, 0x0) shutdown(r0, 0x0) 3.092812141s ago: executing program 3 (id=457): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x22400, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32], 0x398}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="9a036864e000"}) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={0x0, 0xff}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x400, 0x6, 0x2, 0xfff, 0x40, 0x290, 0x3}, 0x9c) ioctl$COMEDI_CMDTEST(r1, 0x8050640a, &(0x7f0000000200)={0x0, 0x20000, 0x40, 0x5, 0x80, 0x1011, 0x1, 0x1ff, 0x0, 0x81, 0x100, 0x524, 0x0, 0x0, 0x0}) 2.887409083s ago: executing program 0 (id=458): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x4, 0x80000, 0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000040)='./dev\x00', 0x1b7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) socket$kcm(0x29, 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x2180, 0x180) openat(r1, &(0x7f00000000c0)='./dev/mtdblock0\x00', 0x42, 0x1ff) 2.726588968s ago: executing program 3 (id=459): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) pselect6(0x0, 0x0, &(0x7f00000002c0)={0x7, 0xfea, 0x7, 0x6, 0x10000, 0x1, 0x5, 0xf9d}, &(0x7f0000000300)={0x3, 0x0, 0xe9ae, 0x100000000000, 0xffffffffffff9886, 0x6, 0x40, 0x7}, &(0x7f0000000340)={0x0, 0x3938700}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109142, 0x5) fallocate(r1, 0x8, 0x200, 0x4002) 2.521135317s ago: executing program 1 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000cc0)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbff, {0x1, 0x0, 0x300}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0xc004}, 0x4004844) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 2.395642068s ago: executing program 0 (id=461): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) mkdirat(r0, &(0x7f0000000240)='./bus\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x50900, 0x4) getdents(r1, &(0x7f0000000400)=""/215, 0xd7) r2 = fanotify_init(0x40, 0x8000) write$binfmt_aout(r2, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x31}}, 0x20) 1.954976268s ago: executing program 1 (id=462): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0xfffffff9, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x1, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x7}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@remote, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='2\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002bbd7000ffdbdf250100000000000000024100000014001369623a73797a6b616c6c657231000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1ffb}, 0x30, 0x0) landlock_restrict_self(r6, 0x0) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x41, &(0x7f00000004c0)={0x1f, 0x14, 0x16, 0x3}, 0x8, 0x800000, 0x4, 0x0, 0x3ff, 0x0, 0x0}) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$USBDEVFS_REAPURB(r5, 0x4004550d, 0x0) write(r0, &(0x7f0000000100)="060000000300010000", 0x9) 1.844882247s ago: executing program 3 (id=463): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x10}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x6) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x4905, 0x3}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r2, &(0x7f0000000000)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/state\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='running\n', 0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/scsi_host/host1/state\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)='running\n', 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/scsi_host/host2/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='running\n', 0x8) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) write$tun(r5, &(0x7f0000000240)={@void, @val={0x2, 0x1, 0x8, 0x7, 0x400, 0x9}, @arp=@generic={0x0, 0x19, 0x6, 0x0, 0x8, @local, "", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, "27ad65c20274d392f28efa59f226"}}, 0x2c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001100)={0x60, r7, 0x11, 0x70bd26, 0x0, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}]}}]}, 0x60}}, 0x0) 1.730153691s ago: executing program 0 (id=464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000100)={0x2, 0x0, 0x98, &(0x7f0000000040)={0x59, 0xa6ab, 0xc}}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x3}) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r3, &(0x7f0000000100)=""/107, 0x6b) write$nci(r3, &(0x7f0000000100)=ANY=[], 0x4) ioctl$XFS_IOC_EXCHANGE_RANGE(r3, 0x40285881, &(0x7f0000000000)={r1, 0x0, 0x9, 0x5, 0x5f3, 0x1}) write$nci(r3, 0x0, 0xe) ioctl$sock_bt_hci(r1, 0x400448cb, 0x0) 1.157013212s ago: executing program 3 (id=465): r0 = fspick(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='+$-,\x00', &(0x7f0000000080)="17759e2a4276efc6665655e3d55c7fc37e676acf8865706c2d16e5fc1537e2ca4fa77145d6b7d3b8a6332acf9aceab502baf1f0cecae2221686c187b74f4e98624f093e4b57cc565e3dad283e53b8674fdd38e324800faad63a821e6a68229c8135f28dd8e0ed8cb645a7278ad97280a5d0c4236bac07d1eeb6a432b32d493e4b60b301e77b985b69872ea660ac22fe0a46458003be6f5e0be9d703124f4a725d8925598e1f27aad7df8be74dd57aa7b5b274ed8d6285975dfa5ca3421a4ede735ba34972a34c9e9ddc59ca3f9f4725d9ad0b09cba53104d7eb2ddf6dce6cae6ee5ba82bd221fc2df5559659b9d5b48158a222498c48ef2b7eadaf9e6499ef18d05a8154a8f56bde22bb4de4558f2422ea3e37852546714999ea14fddd2308179b5dde0deb9c069397e1eef820f9aa6677723c4208ae73efb85fbfe769a1d94285e660f6bd804e78061fec7275a898055b08e2c9527076749c8d68d57840382a92549fdbb16a7e6ed693d1db91bf3971c4d3e8028443b74b84d5dac49dbe27e933b54d90c0a3a2a3ec6a71eb0a49cf4afb011e658d864687046100aff3beb80e880d1b9da374d7da9a2d125d891f9454748d41b9f9a0f8820410c631789d940641ffdca779b81d1e48b810f0ab54b9e1263b4bc5b1cfc3373bda643048bf2240a778e3d353c539f1d5741f7fa4cbb30d9f881bed78746a129b1ac1167a8d0210e015c673557ab76874b529d7999b2db51c8a661c20322875a2012fe5aef091bbc7b948db6b6ac2a605e468c4ae33a26322584dce02bbd1af4b1f79496aba538ba95032a9e17e603028ec2ca15ebc833fc4267d8bb842adc55bc507767dfcb3af7af93224404237dccaf2703e32f703b792fc24284021d7ab85bb8fe613738a88183619beba58fb5e7eafa57493490f529852c23a3fe2c40a1005e5e5dff3cff43b8ee6d3e252eb2a61d7e5e5ea7932b6e2173f649e9d223b83bb14b8dfb2e7a7b49c6ad0c8d26c5cdd768973c9a1a8f21383359768f7d708898be442c43f3870ec5659c27e36855baa25406ff2779fc7a5ff791fb949a5f88e45a643744bf18b9ff421fce0f222e80a598f9f6e25095d372fee9d9bafef970e3eea4b7c8683637050219050e91c053b3fa528da214e2b8b7856032f7bb74159e3db45aa781990becb841feffee9c704e179331e1e3cac2dcc99bff2d0aadeded88a913a4dd4539a457a25802420cf81a8a95c06a11f9eeeb27e586bb18bd0c7deef4d623a0e9e14700910c547b56e8d74b4afe0beda01fa5478216c2e47b4bd3e970f156c8b9439f9497fbb8d5bca2afc775b8e78f92bfd1d57384458c787b7caad5d2523a4c40b82f2f0cf1c0cf8ce5597a6771923ac7b9c9fef137f1df032b73b2632f08adba76114f53a0a9ac373fa77ee8c938a34710bbce749c5be8abdaad5332dab8627d5c19d1c9491234026a0a32f63089f6519e1ad1b9dd87527f8d18b083d032b4a5c14d66755b9ce374f1e2f95a03567a99ebb16d360142057dfa06fede7fc62f5a46f4baac8686c8cb678627f105d86b819d9b9fc945a1084e1c6f8f3c1212f1cc1f33fef3aa9391f9308b0232c6803f1dd00629a58a89ac3d1b08e584d975de757378ee9c32e5891b530a29d80059e31f7623e0ccb96f6008e06bd1f6a334983522dfe5aa0cc5e70a0e9e0f5cb98ac4fbbb68402c16853b6903273f458412874242f42977b7b3592792809df5529da36c12faa3312a6c791b35d3baa1a01a13be2955a5a470edd9b9fd72ccf704243232e699b53d8fe15aac859e057e25b88c5c257df9f3a34ef2062a28fc0ac6061683e14253bb9b6cca7fb3a5983e14bb0540283b175ed0935529e824554aae5f53fce92ab3f5f2cc257c33460f3d4d9a55400f87e9509e66fca7d200f626486c407f51d8f04f36e60fbd25cbcd6ca02e926ac3bd69aefb7421bde71656719ca7e674baf90db9e2940475e7d532ca9afcc7342ff91b38474aed60276d8687a9bc3e95fae3abd657a6fb17490754d1699965cfd7b822e0ab55dfbe1073adc3ea6df764fecedf02b4aab3c492b7a1b429fec469535dc0426e238d45f3a8f799678df1726a288ad49064cfc7069756c1a64c8efa7cb3f6f7ac7155506680d1c69f4039c905bb7c7888ec39bd936e6423bfbd67c1d77e956e033c940a740b46ed0db8785e31a9023f801bca7ea0f00b5e350256cea3105f557c6ae9bfc92e0d19d05f72cf0a172c4f50afa6809d9a8784535c19da0e288e649f9ef35523a23ec875e0d175fbddfc75ac8712d7552533c0debae99c89239239617ae869c768c1fdf6a6702075a56737264df3bed6979a36a4515db7b2217e6946c6090658d13f46211596b2e58d2f2c7a5cb8d767264c065dc916758aa580225d207262ad61085aa9c52af35b77816891b393fc1dafbfbfd6dc3a16a8fdb279964693f44f94fa7834691ca47f7d034acc0a50a84ee93dc10f35f374fb58c4bdca197022c1307f671b896bf52e5d70b0670c8a35bc3877850b27855ca8eb55794e7ff6484b92bb2dbe84b9232a179aabf34ea59721b340db0f84fabb526b10b9f2d9336cff4ef56debe87e69c9564189b1f5762f9383dfad23e41d9c14afcb9d3d3a6994036a918ba8858f0073b3560e45fa4b88e329105481024d06f3f5c1afb4ae8d3d00512ff9c6e53edaeeecdf3d963bea9c1f5fa6d6b90be6a86b9d0447da8b67dbd32be23885f84e36e2761771257c424c4c681e7cd08655963aceddcd8376f48ad85d4c94629e48684e8af4c7186cdda82e6addb8794c3ffea0c5167cecc3717b0274115c57cd50e51fb6b7a50d9abc7bc9826f85750b9d3c9d9ab54a85b97a7815c560d78d4dcbee68972f1c64b520b93a2601d900715943ad414e2c0646ba9ab96a0c51f2f29c841b77ee0a23f24488fffd46e51c72fe1c70ea5a08cf80849940194cb858f10764e3dd4fa12ec2a049f45600abaa7ae2eb1dc05dee0b1745ecb0754a6efd6dbd13478128448976e7fcf2778e41491057667f0921694ae9f4cf843a061e0cf9507ea0063541bb8f2d3e2d0bbf650c2db3e1eb4e425b988febb3ca2c6977362bcaf0cf97dc64e7710c05766aa03584afc24c6f70daa70028c165ee7b30846db1fc516437448a44964e59b01c2e2b4f5c3ad19be0b46631f0d6a510e068c46ef97ca5a417fc4ccad08248129caab5adb58503069e100e7b1691155d08c890ab0bbe82b9ccb72f974e90e1ae51dbce9093b35693f8c98c4ce717ce2a3270bbae3b74a4bb2eb9efefaa32d83a7919d33e2d193571ddf18450c7e6942dea658b4e29176d99843526131028c3827dea5bee4c75f2bda88b09caaee5718a63cd1c25066001488e80b4fa854d021527fa459672ca560ead0a66c47fbf339fbd954cd60233817e19a524a7e0711672c50505a307b4a2e9b0c0282afeec1c7d2269ab4d8a877d382cd7f4411ebf7f37a9d99d6b43c7efa08b35199f41150f7007f648cb13a0460fb57f20915ba1a49f0ecfc186aab8f04735d6f938d1c34eaad015f5107e2729be6b2e5a922c9ce604b7c711c05591d842a85fd6d832bc5573f4d520adfbec67891e0f357abd62ed7d6b75a916f0a1f951978a3a969bd9693efae63e6ce8fc01e188bfd1e91a8f4638f7fafa07de2a2569d1ab96a35125454c4bc571a08f0228ec39730f2f0d43b0168d7fda86eb65b4f84edebadf8d984e98e3456799ba2aee99ecc4efbefb582f979c4ccd9d7e4a1d5296aa86fbb510066c1189ed4822f6e5ddecb72e690908af20e692a1cfc41eb47bd81274b53c89c13fbf8d6e06aa6c98702961eefadb48e0628dce14163065954d861ad30b96fb6ff48218c70b18570f60c8dfce80774e17770e594f69127a2f4f312eca0a962b25eea51cdccae72958f67c879278560ff05a5a451212c4600277f0c6c6ea8dd067126e2efd3d9b4661701f0d4757e44822c0143a59d070384be853c51f6e3c234158bdffe35b134216309621ded0d4f589856d16258a97ba87f2a5eef1d2bfcfa03691cc59f37483ce3d662e767725a937e1e6f17327259208b70c37ee25c01290b8ef2e1ae6457e1f71bf6e75f9606f469064a1e5fb4d10bed7636901d6d6c982621857eaf90223054c0c768a213e8d5a7f75f4c80a616878b3cf7107e65f9d26999661e0dad721a838a10e2594edf00c3f1a1b7baa8cad2a310b233c8de04cd3443fa9e31a7641be23ce4b055858991097eed7af49c57e65bc6b3f944e3faaddc51c4b2f419c93f838f465d6ba8bac9dfaf3aacfd47f8a0319b6a4a29164627d12c3f592ac9a41982f4ff517e59a0d1800ec0b8a40f57ae6eca538ac986cf3b83ac66cf57d70c638015784566b0fe0b240287f869e0403994c179f5aa0a423a0699b5236a3b1c178f310f0811e6fa5c457fdb39caf955cc6769d4cf6a9238b1d3cb717af6f039d1b26b641a2ab88ad9ffc3e88351b883ecfb70be9f511c2d9ae3176a30ecef75ef2479735522c562cf27a5d125fc923379cd6e7a319eb4673d9a644f795471c8a54a236de90152a0fb3b41960f8dc309c29e7175bedb33d2c98ff7481a525d56b370705fae227e60fe46f910d376164839444de5536ca786ef53211dc2fd240bb4c526399989d46eedbc467be0af350410fc05b691b03344cec5d7851b17a41080a2c8b959f7dda44d4fad0d80bc3123f9f2e3a1300aed0f9f19a29b316a2a804ebbfbc63b923e6847ac68405c607e7a0057920218efc9635df576cf53a6db76cfa05c3aa17a0a0947dfaaebd74fb03b43969c9d7eb0efed6b83286faf127f5f6cce583e494eaf1565b316710e82f975f757eebc5afdecec9f64dfc21e3486dae6f65d8dabada075c6f0b57ac3da6798f419836891811ebf6539436a705d45ce16503055e2a4f848e55b0a7b81ecae9254150ea14f45037cac892d234574e4a500dd9558d555e2273bd0da16a7ce24694429a7007c1b8f16861fcb77bf6499469cfa0bb68767557c2de7b36e9d6814ac96f1bc37b7fe83a7d8862265898e2150889a0de80fdf903407c0668e40c4e276b49154fb8238fcaad991494c3f28204c0535d694f6b6947f191d071d8fcdc110dc156ef50a1f8deb4598711b347629befe909def6dc1a992430c3023cd9a9f7ba76a0aa664b7c132db731f0315a1f4cabe3896ed1bd850c06e7a43e114bf6a2ece3721e207d01deb98111ae6c8e68e5df50dcf34230bfcf811a2ebd72bfe75bf6ea86f5237b6efda7b5fa6d8e5fef77e2825298b7a787b7a05e5157c356ab211368024ffc075dca91bb1cd857172267f44c07a28cc07cfdc7b7072b175fef8d1a1709c34aaf2837c0b533a0b029744148ebd9dfc23427d5e3e2cf0f174529712140b743d543ccf921692362dc20f31baf6ba5ea6380a9f7ee31a1d32f24d97e4eef910cbc342b259c4ff0880e19d1b96e724f1031d0198faf1d2a11dc355715a91521a2a019d3c84d33b3ac91bb3d976d5024e087fdf8d7aa88b1452ca6a7a3abb03462e9fa10578581b914c3a72ab201e6f24649e425b0f828981a0c046c4edbca2d9c7f809e7efda1015754b3e40b8e9cafe5d75453964970151764647618fb4880fe823ec6e59ee88723f7d0674445fcbe310cd42bf36ba264a7e28953a3b15c4c3a83b6965e7fe2e55c48fb5ca1fe08ebe6e4d6f8a415d3222db076be71dd7337dd426b9f46f415a3290e6fbd8dfc7fefe48e14a67496dc0cefee66a2f382e11252f7e4102e3988197614eb921ae63446157e14d85b4ee210db81970a186d0", 0x1000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000001080)) close_range(r0, r0, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001200)={r0, &(0x7f0000001100)='+$-,\x00', 0x200000, &(0x7f0000001140)={@_ha_fsid={[0x5, 0x9]}, {0x97, 0x5, 0x5, 0x400}}, 0x4, &(0x7f0000001180), &(0x7f00000011c0)=0xf}) read$FUSE(0xffffffffffffffff, &(0x7f0000001240)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LSEEK(r1, &(0x7f0000003280)={0x18, 0x0, r2, {0xfffffffffffff87f}}, 0x18) splice(r0, &(0x7f00000032c0)=0x2, r1, &(0x7f0000003300)=0x3, 0x8, 0x3) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000003340)) getdents64(r1, &(0x7f0000003380)=""/248, 0xf8) read$char_usb(r1, &(0x7f0000003480)=""/132, 0x84) write$char_usb(r1, &(0x7f0000003540)="18eac296c8dd2ba767a0df22b106122d325d8f5bbb4787365136fed125e3a91499b3fcdde9575e589c9fa7fabc08c8aefecdcc00cb572e874421ccbef6a166bba67e2a3ff0e6464a2d28b5bb1802bc7ac2b3619fa794095eb8fcd8a423754264a91947931a951c5d8a48b09c0b564b0aaebeb3196faf19", 0x77) r3 = syz_open_dev$usbmon(&(0x7f00000035c0), 0x3, 0x8000) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000003600)=0xde6e) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000003640)) r4 = openat$fault_inject(0xffffffffffffff9c, &(0x7f0000003680)='/sys/kernel/debug/fail_io_timeout/times\x00', 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000036c0), 0x42, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0xffff) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000003700)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003780), 0x8000, 0x0) recvfrom$llc(r5, &(0x7f00000037c0)=""/143, 0x8f, 0x100, &(0x7f0000003880)={0x1a, 0xffff, 0x9, 0x2, 0xb1, 0x7, @local}, 0x10) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000038c0)={0x6, 0xa, 0x6, 0x0, 0x4}) ioctl$VIDIOC_G_TUNER(r1, 0xc054561d, &(0x7f0000003900)={0xd68, "6cfc77d4c7d2f47a20bcaa6415d752095acddd89e9ba5b857523ae97f2897abe", 0x3, 0x80, 0x6, 0x4858, 0x1, 0x0, 0x27, 0x101}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000003980)={0x0, 0x0, 0x30, 0x4, 0x6}, &(0x7f00000039c0)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000003a00)={r6, 0x7, 0x3, 0x9, 0x200, 0x9}, &(0x7f0000003a40)=0x14) socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r1, 0x641e) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f0000003a80)={r4, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000003ac0)={0x0, 0x3, 0x8000, 0x200, 0x4, 0x9, 0x8d, 0x0, r6}, &(0x7f0000003b00)=0x20) 712.837403ms ago: executing program 3 (id=466): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x1040) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x4094) write(r0, &(0x7f0000000000)='6', 0x32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$BLKSSZGET(r2, 0x80004506, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000340)={0x7, 0x6d, 0x1}, 0x7) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r5, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, 0x0, 0x0, 0xfffffffffffffffc, 0x1541}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000001c0)=0xb) fsopen(&(0x7f0000000180)='debugfs\x00', 0x1) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000080)={0xa, 0x4e21, 0x6, @loopback}, 0x1c) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x2000008, 0x0) 90.142654ms ago: executing program 0 (id=467): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000940), 0x1, 0x100) read(r0, &(0x7f0000000280)=""/195, 0xc3) ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+p', 0x2) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x24c02, 0x143) syz_usb_control_io(r2, 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl(r3, 0x40186f40, &(0x7f0000000040)="ffffffff0000000089") 78.551004ms ago: executing program 1 (id=468): brk(0x4000200000ffc002) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$sock(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="4400000010000100000000000000000000000000000000000000000000000000240012000a00010076786c616e00000014000200080001007b00000008000a0007020304ce46e43ca9d94947e0d92aefb5ca8a4eb52df3", 0x57}], 0x1}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x3}, {0x0, 0x0, 0x1, 0x1}}], 0x10) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x4) 13.024619ms ago: executing program 3 (id=469): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x8000000, 0x1, 0x1, 0x2, 0x0, 0x97}, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000340)={@remote, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x4000}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000000)=0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000000080)=0x4, 0x4) recvmmsg(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0xffffff81}], 0x1, 0x45833af92e4b38ff, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0xfe, 0x0, 0x7fff7ffc}]}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="f30fb8b7a600000066bad104b013ee66ba2100b836000000ef8f4818a23a00646543d9f466baf80cb81bd8228fef66bafc0cec66b833008ed8c441ffe6df470f01df660fc7b778b0e83f", 0x4a}], 0x1, 0xb, &(0x7f0000000100), 0x1000000000000199) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=470): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f00000029c0)=[{0x0}, {&(0x7f0000000980)=""/62, 0x3e}], 0x2}, 0x2) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="01", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000001a01000001"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/83, 0x53}], 0x1}, 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) readv(r4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) keyctl$reject(0x13, 0x0, 0x349, 0x201, 0xfffffffffffffff9) open(&(0x7f0000000040)='./file0\x00', 0x4c27e, 0x0) kernel console output (not intermixed with test programs): 290 [ 121.083519][ T6256] do_mprotect_pkey+0x8e7/0xd10 [ 121.083620][ T6256] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 121.083795][ T6256] ? rcu_is_watching+0x16/0xb0 [ 121.083909][ T6256] __x64_sys_mprotect+0x80/0x90 [ 121.084017][ T6256] do_syscall_64+0x166/0x520 [ 121.084078][ T6256] ? trace_irq_disable+0x3b/0x140 [ 121.084176][ T6256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.084244][ T6256] ? clear_bhb_loop+0x70/0xc0 [ 121.084330][ T6256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.084402][ T6256] RIP: 0033:0x7f830919e159 [ 121.084463][ T6256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.084521][ T6256] RSP: 002b:00007f830a04d028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 121.084595][ T6256] RAX: ffffffffffffffda RBX: 00007f8309425fa0 RCX: 00007f830919e159 [ 121.084644][ T6256] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 121.084691][ T6256] RBP: 00007f830923503b R08: 0000000000000000 R09: 0000000000000000 [ 121.084750][ T6256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.084788][ T6256] R13: 00007f8309426038 R14: 00007f8309425fa0 R15: 00007ffea0ef0318 [ 121.084895][ T6256] [ 121.397180][ T6256] gadgetfs: bound to dummy_udc driver [ 121.635638][ T5725] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 121.635890][ C0] gadgetfs: connected [ 121.637531][ T5725] gadgetfs: disconnected [ 121.680519][ T6266] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 121.680561][ T6266] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 121.680604][ T6266] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 121.684535][ T6266] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.759961][ T6266] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 122.150961][ T156] smbdirect: ib_dev[syz2] removed [ 122.553687][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 122.553850][ T6291] FAULT_INJECTION: forcing a failure. [ 122.553850][ T6291] name fail_futex, interval 1, probability 0, space 0, times 0 [ 122.553869][ T6291] CPU: 0 UID: 0 PID: 6291 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 122.553887][ T6291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.553897][ T6291] Call Trace: [ 122.553903][ T6291] [ 122.553911][ T6291] dump_stack_lvl+0xe8/0x150 [ 122.553938][ T6291] should_fail_ex+0x3eb/0x540 [ 122.553960][ T6291] get_futex_key+0x1b4/0x1580 [ 122.553990][ T6291] ? kfree+0x4d/0x650 [ 122.554010][ T6291] ? import_iovec+0x73/0xa0 [ 122.554032][ T6291] ? __pfx_get_futex_key+0x10/0x10 [ 122.554055][ T6291] ? ___sys_sendmsg+0x2b5/0x360 [ 122.554072][ T6291] ? __lock_acquire+0x747/0x2de0 [ 122.554104][ T6291] futex_wake+0x119/0x5f0 [ 122.554129][ T6291] ? __pfx_futex_wake+0x10/0x10 [ 122.554163][ T6291] do_futex+0x458/0x4e0 [ 122.554184][ T6291] ? __pfx_do_futex+0x10/0x10 [ 122.554208][ T6291] __se_sys_futex+0x3a8/0x450 [ 122.554230][ T6291] ? __pfx___se_sys_futex+0x10/0x10 [ 122.554253][ T6291] ? __x64_sys_futex+0x21/0xf0 [ 122.554273][ T6291] do_syscall_64+0x166/0x520 [ 122.554287][ T6291] ? trace_irq_disable+0x3b/0x140 [ 122.554310][ T6291] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.554326][ T6291] ? clear_bhb_loop+0x70/0xc0 [ 122.554346][ T6291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.554362][ T6291] RIP: 0033:0x7f390799e159 [ 122.554377][ T6291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.554390][ T6291] RSP: 002b:00007f39088f40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.554407][ T6291] RAX: ffffffffffffffda RBX: 00007f3907c25fa8 RCX: 00007f390799e159 [ 122.554418][ T6291] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3907c25fac [ 122.554429][ T6291] RBP: 00007f3907c25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 122.554439][ T6291] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 122.554449][ T6291] R13: 00007f3907c26038 R14: 00007ffc3bd393d0 R15: 00007ffc3bd394b8 [ 122.554473][ T6291] [ 122.777980][ T978] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 122.904584][ T6293] syz.0.161 uses obsolete (PF_INET,SOCK_PACKET) [ 122.925686][ T978] usb 3-1: device descriptor read/64, error -71 [ 122.928713][ T6293] FAULT_INJECTION: forcing a failure. [ 122.928713][ T6293] name failslab, interval 1, probability 0, space 0, times 0 [ 122.928750][ T6293] CPU: 0 UID: 0 PID: 6293 Comm: syz.0.161 Not tainted syzkaller #0 PREEMPT(full) [ 122.928776][ T6293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.928790][ T6293] Call Trace: [ 122.928799][ T6293] [ 122.928810][ T6293] dump_stack_lvl+0xe8/0x150 [ 122.928848][ T6293] should_fail_ex+0x3eb/0x540 [ 122.928880][ T6293] should_failslab+0xa8/0x100 [ 122.928909][ T6293] __kmalloc_cache_noprof+0x9e/0x600 [ 122.928953][ T6293] ? tipc_nametbl_subscribe+0x280/0x11f0 [ 122.928981][ T6293] ? tipc_nametbl_subscribe+0x280/0x11f0 [ 122.929017][ T6293] tipc_nametbl_subscribe+0x280/0x11f0 [ 122.929050][ T6293] ? __kasan_kmalloc+0x93/0xb0 [ 122.929075][ T6293] ? __pfx_tipc_nametbl_subscribe+0x10/0x10 [ 122.929112][ T6293] ? __kmalloc_cache_noprof+0x148/0x600 [ 122.929150][ T6293] ? __raw_spin_lock_init+0x45/0x100 [ 122.929183][ T6293] tipc_sub_subscribe+0x3a5/0x690 [ 122.929214][ T6293] tipc_conn_rcv_sub+0x14f/0x370 [ 122.929256][ T6293] tipc_topsrv_kern_subscr+0x188/0x250 [ 122.929292][ T6293] ? tipc_own_addr+0x45/0x2a0 [ 122.929316][ T6293] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 122.929356][ T6293] ? tipc_own_addr+0x45/0x2a0 [ 122.929382][ T6293] ? __asan_memset+0x22/0x50 [ 122.929416][ T6293] tipc_group_create+0x35b/0x4f0 [ 122.929446][ T6293] tipc_sk_join+0x25d/0x6a0 [ 122.929487][ T6293] ? __pfx_tipc_sk_join+0x10/0x10 [ 122.929518][ T6293] ? tipc_setsockopt+0x731/0x9a0 [ 122.929552][ T6293] ? __local_bh_enable_ip+0xd6/0x140 [ 122.929583][ T6293] tipc_setsockopt+0x73e/0x9a0 [ 122.929620][ T6293] ? __pfx_tipc_setsockopt+0x10/0x10 [ 122.929652][ T6293] ? aa_sock_opt_perm+0x142/0x1e0 [ 122.929684][ T6293] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 122.929711][ T6293] ? __pfx_tipc_setsockopt+0x10/0x10 [ 122.929744][ T6293] do_sock_setsockopt+0x17c/0x1b0 [ 122.929776][ T6293] __x64_sys_setsockopt+0x13d/0x1b0 [ 122.929807][ T6293] do_syscall_64+0x166/0x520 [ 122.929827][ T6293] ? trace_irq_disable+0x3b/0x140 [ 122.929859][ T6293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.929881][ T6293] ? clear_bhb_loop+0x70/0xc0 [ 122.929907][ T6293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.929928][ T6293] RIP: 0033:0x7f390799e159 [ 122.929950][ T6293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.929970][ T6293] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 122.929996][ T6293] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 122.930013][ T6293] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000009 [ 122.930028][ T6293] RBP: 00007f3907a3503b R08: 0000000000000010 R09: 0000000000000000 [ 122.930042][ T6293] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 122.930056][ T6293] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 122.930103][ T6293] [ 122.930113][ T6293] tipc: Service creation failed, no memory [ 122.930122][ T6293] tipc: Failed to subscribe for {67,0,4294967295} [ 123.294934][ T978] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.425070][ T978] usb 3-1: device descriptor read/64, error -71 [ 123.537575][ T978] usb usb3-port1: attempt power cycle [ 123.771436][ T6323] FAULT_INJECTION: forcing a failure. [ 123.771436][ T6323] name failslab, interval 1, probability 0, space 0, times 0 [ 123.771469][ T6323] CPU: 0 UID: 0 PID: 6323 Comm: syz.1.168 Not tainted syzkaller #0 PREEMPT(full) [ 123.771494][ T6323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.771507][ T6323] Call Trace: [ 123.771517][ T6323] [ 123.771526][ T6323] dump_stack_lvl+0xe8/0x150 [ 123.771562][ T6323] should_fail_ex+0x3eb/0x540 [ 123.771594][ T6323] should_failslab+0xa8/0x100 [ 123.771621][ T6323] __kmalloc_noprof+0xf9/0x710 [ 123.771653][ T6323] ? rcu_is_watching+0x16/0xb0 [ 123.771677][ T6323] ? tomoyo_realpath_from_path+0xef/0x640 [ 123.771705][ T6323] ? tomoyo_realpath_from_path+0xef/0x640 [ 123.771742][ T6323] tomoyo_realpath_from_path+0xef/0x640 [ 123.771788][ T6323] ? tomoyo_path_number_perm+0x219/0x5f0 [ 123.771813][ T6323] tomoyo_path_number_perm+0x246/0x5f0 [ 123.771841][ T6323] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.771864][ T6323] ? __lock_acquire+0x747/0x2de0 [ 123.771913][ T6323] ? hook_file_ioctl+0x1f2/0x600 [ 123.771968][ T6323] ? __fget_files+0x2a/0x420 [ 123.772000][ T6323] ? __fget_files+0x2a/0x420 [ 123.772027][ T6323] ? __fget_files+0x3a2/0x420 [ 123.772055][ T6323] ? __fget_files+0x2a/0x420 [ 123.772093][ T6323] security_file_ioctl+0xc3/0x2a0 [ 123.772132][ T6323] __se_sys_ioctl+0x47/0x170 [ 123.772171][ T6323] do_syscall_64+0x166/0x520 [ 123.772192][ T6323] ? trace_irq_disable+0x3b/0x140 [ 123.772225][ T6323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.772248][ T6323] ? clear_bhb_loop+0x70/0xc0 [ 123.772277][ T6323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.772300][ T6323] RIP: 0033:0x7fcde9d9e159 [ 123.772320][ T6323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.772339][ T6323] RSP: 002b:00007fcde7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.772364][ T6323] RAX: ffffffffffffffda RBX: 00007fcdea025fa0 RCX: 00007fcde9d9e159 [ 123.772381][ T6323] RDX: 0000200000000180 RSI: 00000000c0109207 RDI: 0000000000000006 [ 123.772396][ T6323] RBP: 00007fcde7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 123.772410][ T6323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.772423][ T6323] R13: 00007fcdea026038 R14: 00007fcdea025fa0 R15: 00007ffd615e3338 [ 123.772457][ T6323] [ 123.772539][ T6323] ERROR: Out of memory at tomoyo_realpath_from_path. [ 124.031747][ T978] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 124.055723][ T978] usb 3-1: device descriptor read/8, error -71 [ 124.295332][ T978] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 124.315837][ T978] usb 3-1: device descriptor read/8, error -71 [ 124.425362][ T978] usb usb3-port1: unable to enumerate USB device [ 124.964313][ T6337] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20004 [ 124.970314][ T6338] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 125.313132][ T6345] FAULT_INJECTION: forcing a failure. [ 125.313132][ T6345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.313162][ T6345] CPU: 1 UID: 0 PID: 6345 Comm: syz.1.174 Not tainted syzkaller #0 PREEMPT(full) [ 125.313183][ T6345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.313195][ T6345] Call Trace: [ 125.313203][ T6345] [ 125.313211][ T6345] dump_stack_lvl+0xe8/0x150 [ 125.313242][ T6345] should_fail_ex+0x3eb/0x540 [ 125.313268][ T6345] _copy_from_iter+0x1d3/0x1660 [ 125.313290][ T6345] ? skb_set_owner_w+0x263/0x3d0 [ 125.313325][ T6345] ? _copy_from_iter+0x21b/0x1660 [ 125.313349][ T6345] ? __pfx__copy_from_iter+0x10/0x10 [ 125.313383][ T6345] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 125.313414][ T6345] skb_copy_datagram_from_iter+0xe6/0x720 [ 125.313447][ T6345] ? skb_put+0x112/0x210 [ 125.313471][ T6345] tun_get_user+0xc7f/0x44d0 [ 125.313520][ T6345] ? aa_file_perm+0x18b/0x15f0 [ 125.313553][ T6345] ? aa_file_perm+0x4ed/0x15f0 [ 125.313580][ T6345] ? __pfx_tun_get_user+0x10/0x10 [ 125.313611][ T6345] ? __lock_acquire+0x747/0x2de0 [ 125.313640][ T6345] ? kstrtoull+0x137/0x1d0 [ 125.313675][ T6345] ? ref_tracker_alloc+0x341/0x4b0 [ 125.313696][ T6345] ? lock_acquire+0x115/0x350 [ 125.313722][ T6345] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 125.313746][ T6345] ? lock_acquire+0x115/0x350 [ 125.313772][ T6345] ? tun_get+0x1c/0x2f0 [ 125.313803][ T6345] ? tun_get+0x1c/0x2f0 [ 125.313829][ T6345] ? tun_get+0x1c/0x2f0 [ 125.313859][ T6345] tun_chr_write_iter+0x113/0x200 [ 125.313894][ T6345] vfs_write+0x612/0xba0 [ 125.313930][ T6345] ? __pfx_vfs_write+0x10/0x10 [ 125.313992][ T6345] ? __fget_files+0x2a/0x420 [ 125.314026][ T6345] ksys_write+0x150/0x270 [ 125.314057][ T6345] ? __pfx_ksys_write+0x10/0x10 [ 125.314093][ T6345] do_syscall_64+0x166/0x520 [ 125.314111][ T6345] ? trace_irq_disable+0x3b/0x140 [ 125.314141][ T6345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.314164][ T6345] ? clear_bhb_loop+0x70/0xc0 [ 125.314191][ T6345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.314213][ T6345] RIP: 0033:0x7fcde9d9e159 [ 125.314233][ T6345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.314252][ T6345] RSP: 002b:00007fcde7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.314275][ T6345] RAX: ffffffffffffffda RBX: 00007fcdea025fa0 RCX: 00007fcde9d9e159 [ 125.314290][ T6345] RDX: 000000000000340a RSI: 0000200000000300 RDI: 0000000000000003 [ 125.314304][ T6345] RBP: 00007fcde7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.314316][ T6345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.314326][ T6345] R13: 00007fcdea026038 R14: 00007fcdea025fa0 R15: 00007ffd615e3338 [ 125.314358][ T6345] [ 125.950634][ T6354] netlink: 'syz.0.179': attribute type 23 has an invalid length. [ 126.002929][ T6358] bonding: bo is being created... [ 126.035453][ T978] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 126.194893][ T978] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 126.208482][ T978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.208541][ T978] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 126.208598][ T978] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 126.208624][ T978] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.208671][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.320161][ T6366] overlay: Unknown parameter 'smackfsfloor' [ 126.356277][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 126.785127][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 126.924874][ T5771] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 126.943840][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 126.952208][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.952388][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 126.960828][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 126.960907][ T9] usb 1-1: SerialNumber: syz [ 126.998857][ T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 126.999398][ T9] usb-storage 1-1:1.0: USB Mass Storage device detected [ 127.024328][ T9] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 127.033695][ T9] scsi host1: usb-storage 1-1:1.0 [ 127.086860][ T5771] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.088053][ T978] gud 3-1:1.0: Failed to get connectors (error=-5) [ 127.088053][ T5771] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 127.088086][ T978] gud 3-1:1.0: probe with driver gud failed with error -5 [ 127.088094][ T5771] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 127.088134][ T5771] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 127.090523][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 127.090552][ T5771] usb 2-1: SerialNumber: syz [ 127.292693][ T6351] kernel profiling enabled (shift: 3) [ 127.355010][ T5771] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 127.355294][ T5771] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 127.361578][ T5771] usb 2-1: USB disconnect, device number 11 [ 127.451818][ T5695] usb 3-1: USB disconnect, device number 16 [ 127.515070][ T1236] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 127.665763][ T1236] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 127.667159][ T1236] usb 4-1: config 0 has an invalid interface number: 45 but max is 0 [ 127.667194][ T1236] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 127.667216][ T1236] usb 4-1: config 0 has no interface number 0 [ 127.667246][ T1236] usb 4-1: too many endpoints for config 0 interface 45 altsetting 53: 32, using maximum allowed: 30 [ 127.667322][ T1236] usb 4-1: config 0 interface 45 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 127.667342][ T1236] usb 4-1: config 0 interface 45 has no altsetting 0 [ 127.670019][ T1236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 127.670049][ T1236] usb 4-1: Product: syz [ 127.670064][ T1236] usb 4-1: Manufacturer: syz [ 127.670079][ T1236] usb 4-1: SerialNumber: syz [ 127.672620][ T1236] usb 4-1: config 0 descriptor?? [ 127.772426][ T1236] usb 4-1: no audio or video endpoints found [ 127.883493][ T5725] usb 4-1: USB disconnect, device number 8 [ 127.895195][ T5771] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 128.046452][ T5771] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 128.047852][ T5771] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 128.047887][ T5771] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 128.047908][ T5771] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 128.048823][ T5771] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 128.048840][ T5771] usb 2-1: SerialNumber: syz [ 128.337248][ T5725] usb 1-1: USB disconnect, device number 9 [ 128.546162][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 128.561059][ T6392] warning: `syz.3.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 128.689533][ T6396] syzkaller1: entered promiscuous mode [ 128.689560][ T6396] syzkaller1: entered allmulticast mode [ 128.983277][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 129.296532][ T6414] random: crng reseeded on system resumption [ 129.316697][ T5771] rndis_host 2-1:253.0: RNDIS init failed, -110 [ 129.316994][ T5771] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -110 [ 129.361056][ T5771] usb 2-1: USB disconnect, device number 12 [ 129.732491][ T6429] jffs2: notice: (6429) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 129.905060][ T5695] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 130.024858][ T5771] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 130.042566][ T5695] usb 1-1: device descriptor read/64, error -71 [ 130.155030][ T5771] usb 4-1: device descriptor read/64, error -71 [ 130.274906][ T5695] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 130.277854][ T5725] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 130.406264][ T5771] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 130.406399][ T5695] usb 1-1: device descriptor read/64, error -71 [ 130.438409][ T5725] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 130.439627][ T5725] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.439681][ T5725] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.439729][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.515157][ T5695] usb usb1-port1: attempt power cycle [ 130.545585][ T5771] usb 4-1: device descriptor read/64, error -71 [ 130.658082][ T5771] usb usb4-port1: attempt power cycle [ 130.700096][ T5725] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 130.700550][ T5725] cxacru 2-1:1.0: probe with driver cxacru failed with error -22 [ 130.854896][ T5695] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 130.875989][ T5695] usb 1-1: device descriptor read/8, error -71 [ 130.908427][ T5725] usb 2-1: USB disconnect, device number 13 [ 130.994881][ T5771] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 131.015563][ T5771] usb 4-1: device descriptor read/8, error -71 [ 131.115618][ T5695] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 131.138221][ T5695] usb 1-1: device descriptor read/8, error -71 [ 131.247144][ T5695] usb usb1-port1: unable to enumerate USB device [ 131.265048][ T5771] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.285639][ T5771] usb 4-1: device descriptor read/8, error -71 [ 131.395436][ T5771] usb usb4-port1: unable to enumerate USB device [ 131.781086][ T6487] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 131.781107][ T6487] overlayfs: failed to set xattr on upper [ 131.781113][ T6487] overlayfs: ...falling back to redirect_dir=nofollow. [ 131.781119][ T6487] overlayfs: ...falling back to index=off. [ 131.781125][ T6487] overlayfs: ...falling back to uuid=null. [ 132.344964][ T5771] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 132.494905][ T5771] usb 3-1: Invalid ep0 maxpacket: 32 [ 132.624957][ T5771] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 132.775104][ T5771] usb 3-1: Invalid ep0 maxpacket: 32 [ 132.776910][ T5771] usb usb3-port1: attempt power cycle [ 132.967200][ T6516] netlink: 'syz.3.222': attribute type 6 has an invalid length. [ 132.967218][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 133.036576][ T978] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 133.115827][ T5771] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 133.135348][ T30] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.137051][ T5771] usb 3-1: Invalid ep0 maxpacket: 32 [ 133.137401][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.137495][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.184936][ T978] usb 2-1: Invalid ep0 maxpacket: 32 [ 133.264938][ T5771] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 133.265083][ T30] usb 1-1: device descriptor read/64, error -71 [ 133.291195][ T5771] usb 3-1: Invalid ep0 maxpacket: 32 [ 133.291569][ T5771] usb usb3-port1: unable to enumerate USB device [ 133.314952][ T978] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 133.464952][ T978] usb 2-1: Invalid ep0 maxpacket: 32 [ 133.466219][ T978] usb usb2-port1: attempt power cycle [ 133.505634][ T30] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 133.634878][ T30] usb 1-1: device descriptor read/64, error -71 [ 133.745372][ T30] usb usb1-port1: attempt power cycle [ 133.805007][ T978] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 133.825415][ T978] usb 2-1: Invalid ep0 maxpacket: 32 [ 133.954907][ T978] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 133.975620][ T978] usb 2-1: Invalid ep0 maxpacket: 32 [ 133.975969][ T978] usb usb2-port1: unable to enumerate USB device [ 134.087735][ T30] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 134.113808][ T30] usb 1-1: device descriptor read/8, error -71 [ 134.132419][ T6528] FAULT_INJECTION: forcing a failure. [ 134.132419][ T6528] name failslab, interval 1, probability 0, space 0, times 0 [ 134.132455][ T6528] CPU: 1 UID: 0 PID: 6528 Comm: syz.3.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.132484][ T6528] Tainted: [L]=SOFTLOCKUP [ 134.132493][ T6528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.132506][ T6528] Call Trace: [ 134.132514][ T6528] [ 134.132524][ T6528] dump_stack_lvl+0xe8/0x150 [ 134.132559][ T6528] should_fail_ex+0x3eb/0x540 [ 134.132599][ T6528] ? __alloc_skb+0x1db/0x7a0 [ 134.132619][ T6528] should_failslab+0xa8/0x100 [ 134.132645][ T6528] ? __alloc_skb+0x1db/0x7a0 [ 134.132663][ T6528] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 134.132694][ T6528] ? __alloc_skb+0x18d/0x7a0 [ 134.132719][ T6528] ? __alloc_skb+0x1db/0x7a0 [ 134.132738][ T6528] __alloc_skb+0x1db/0x7a0 [ 134.132756][ T6528] alloc_skb_with_frags+0xc6/0x760 [ 134.132781][ T6528] sock_alloc_send_pskb+0x95e/0xa70 [ 134.132803][ T6528] ? _copy_from_iter+0x21b/0x1660 [ 134.132850][ T6528] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 134.132889][ T6528] ? iov_iter_advance+0x8b/0x1c0 [ 134.132917][ T6528] tun_get_user+0x8fb/0x44d0 [ 134.132952][ T6528] ? aa_file_perm+0x18b/0x15f0 [ 134.132975][ T6528] ? aa_file_perm+0x4ed/0x15f0 [ 134.132994][ T6528] ? __pfx_tun_get_user+0x10/0x10 [ 134.133019][ T6528] ? __lock_acquire+0x747/0x2de0 [ 134.133044][ T6528] ? kstrtoull+0x137/0x1d0 [ 134.133076][ T6528] ? ref_tracker_alloc+0x341/0x4b0 [ 134.133095][ T6528] ? lock_acquire+0x115/0x350 [ 134.133118][ T6528] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 134.133138][ T6528] ? lock_acquire+0x115/0x350 [ 134.133160][ T6528] ? tun_get+0x1c/0x2f0 [ 134.133186][ T6528] ? tun_get+0x1c/0x2f0 [ 134.133207][ T6528] ? tun_get+0x1c/0x2f0 [ 134.133232][ T6528] tun_chr_write_iter+0x113/0x200 [ 134.133258][ T6528] vfs_write+0x612/0xba0 [ 134.133286][ T6528] ? __pfx_vfs_write+0x10/0x10 [ 134.133338][ T6528] ? __fget_files+0x2a/0x420 [ 134.133374][ T6528] ksys_write+0x150/0x270 [ 134.133408][ T6528] ? __pfx_ksys_write+0x10/0x10 [ 134.133443][ T6528] do_syscall_64+0x166/0x520 [ 134.133458][ T6528] ? trace_irq_disable+0x3b/0x140 [ 134.133486][ T6528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.133521][ T6528] ? clear_bhb_loop+0x70/0xc0 [ 134.133547][ T6528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.133576][ T6528] RIP: 0033:0x7fe9d039e159 [ 134.133597][ T6528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.133618][ T6528] RSP: 002b:00007fe9d1226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.133636][ T6528] RAX: ffffffffffffffda RBX: 00007fe9d0625fa0 RCX: 00007fe9d039e159 [ 134.133648][ T6528] RDX: 000000000000fd6c RSI: 0000200000000280 RDI: 0000000000000005 [ 134.133658][ T6528] RBP: 00007fe9d1226090 R08: 0000000000000000 R09: 0000000000000000 [ 134.133667][ T6528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.133676][ T6528] R13: 00007fe9d0626038 R14: 00007fe9d0625fa0 R15: 00007ffe3ab86778 [ 134.133700][ T6528] [ 134.407345][ T30] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 134.436794][ T30] usb 1-1: device descriptor read/8, error -71 [ 134.535384][ T30] usb usb1-port1: unable to enumerate USB device [ 134.792536][ T6536] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 134.792576][ T6536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.011617][ T6540] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 135.011639][ T6540] PKCS7: Unknown OID: [41] 1.2.840.113553.1.7.1 [ 135.011647][ T6540] PKCS7: Unsupported data type 106 [ 135.012315][ T6540] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 135.012337][ T6540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.312999][ T6549] FAULT_INJECTION: forcing a failure. [ 135.312999][ T6549] name failslab, interval 1, probability 0, space 0, times 0 [ 135.313036][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: syz.3.235 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.313066][ T6549] Tainted: [L]=SOFTLOCKUP [ 135.313074][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.313088][ T6549] Call Trace: [ 135.313096][ T6549] [ 135.313107][ T6549] dump_stack_lvl+0xe8/0x150 [ 135.313143][ T6549] should_fail_ex+0x3eb/0x540 [ 135.313174][ T6549] should_failslab+0xa8/0x100 [ 135.313198][ T6549] ? skb_clone+0x212/0x3a0 [ 135.313224][ T6549] kmem_cache_alloc_noprof+0x9c/0x600 [ 135.313254][ T6549] ? __pfx__copy_from_iter+0x10/0x10 [ 135.313281][ T6549] ? skb_clone+0x212/0x3a0 [ 135.313312][ T6549] skb_clone+0x212/0x3a0 [ 135.313343][ T6549] pfkey_sendmsg+0x4d6/0x11d0 [ 135.313384][ T6549] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 135.313434][ T6549] ? aa_sock_msg_perm+0x144/0x210 [ 135.313467][ T6549] ? apparmor_socket_sendmsg+0x98/0x360 [ 135.313492][ T6549] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 135.313518][ T6549] sock_sendmsg_nosec+0x13a/0x180 [ 135.313552][ T6549] ____sys_sendmsg+0x54e/0x850 [ 135.313584][ T6549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.313619][ T6549] ? import_iovec+0x73/0xa0 [ 135.313652][ T6549] ___sys_sendmsg+0x2a5/0x360 [ 135.313675][ T6549] ? __lock_acquire+0x747/0x2de0 [ 135.313714][ T6549] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.313777][ T6549] ? __fget_files+0x2a/0x420 [ 135.313805][ T6549] ? __fget_files+0x3a2/0x420 [ 135.313843][ T6549] __x64_sys_sendmsg+0x1b1/0x290 [ 135.313872][ T6549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.313920][ T6549] do_syscall_64+0x166/0x520 [ 135.313941][ T6549] ? trace_irq_disable+0x3b/0x140 [ 135.313980][ T6549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.314004][ T6549] ? clear_bhb_loop+0x70/0xc0 [ 135.314036][ T6549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.314059][ T6549] RIP: 0033:0x7fe9d039e159 [ 135.314080][ T6549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.314098][ T6549] RSP: 002b:00007fe9d1226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.314122][ T6549] RAX: ffffffffffffffda RBX: 00007fe9d0625fa0 RCX: 00007fe9d039e159 [ 135.314138][ T6549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 135.314159][ T6549] RBP: 00007fe9d1226090 R08: 0000000000000000 R09: 0000000000000000 [ 135.314173][ T6549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.314186][ T6549] R13: 00007fe9d0626038 R14: 00007fe9d0625fa0 R15: 00007ffe3ab86778 [ 135.314226][ T6549] [ 136.071894][ T6569] nvme_tcp: malformed address passed: 127.0.0.1:442. [ 136.194867][ T1236] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 136.214850][ T9] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 136.234924][ T978] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 136.345683][ T1236] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 136.348228][ T1236] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.348257][ T1236] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 136.353346][ T1236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.353378][ T1236] usb 1-1: Product: syz [ 136.353395][ T1236] usb 1-1: Manufacturer: syz [ 136.353412][ T1236] usb 1-1: SerialNumber: syz [ 136.372996][ T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 136.378755][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 136.378841][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.378896][ T9] usb 4-1: config 0 has no interface number 0 [ 136.378994][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 136.379131][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 136.379196][ T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.385091][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 136.388263][ T978] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.394394][ T978] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 136.395729][ T978] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.395871][ T978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.395944][ T978] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.396058][ T978] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.398945][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.412589][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.412672][ T9] usb 4-1: Product: syz [ 136.412716][ T9] usb 4-1: Manufacturer: syz [ 136.412770][ T9] usb 4-1: SerialNumber: syz [ 136.568256][ T9] usb 4-1: config 0 descriptor?? [ 136.828944][ T1236] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 136.848025][ T978] usb 3-1: GET_CAPABILITIES returned 0 [ 136.848086][ T978] usbtmc 3-1:16.0: can't read capabilities [ 137.083470][ T978] usb 1-1: USB disconnect, device number 18 [ 137.121696][ T978] usblp0: removed [ 137.139946][ T6575] netlink: 36 bytes leftover after parsing attributes in process `syz.1.244'. [ 137.169812][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 137.588703][ T9] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 137.627265][ T9] usb 4-1: USB disconnect, device number 13 [ 138.034921][ T30] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 138.185857][ T30] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 138.187349][ T30] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.187472][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.227229][ T30] usb 2-1: config 0 descriptor?? [ 138.720465][ T30] hid_parser_main: 4 callbacks suppressed [ 138.720492][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x1 [ 138.720563][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x5 [ 138.720589][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x6 [ 138.720614][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720638][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720662][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720686][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720709][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720733][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 138.720756][ T30] hid-led 0003:0FC5:B080.0004: unknown main item tag 0x0 [ 139.009716][ T978] usb 3-1: USB disconnect, device number 21 [ 139.281747][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.284555][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.310860][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.314256][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.896565][ T978] usb 2-1: USB disconnect, device number 18 [ 140.036908][ T30] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 140.195582][ T30] usb 4-1: Using ep0 maxpacket: 16 [ 140.197257][ T30] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 140.198526][ T30] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 140.204218][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.204248][ T30] usb 4-1: Product: syz [ 140.204265][ T30] usb 4-1: Manufacturer: syz [ 140.204289][ T30] usb 4-1: SerialNumber: syz [ 140.270622][ T30] usb 4-1: config 0 descriptor?? [ 140.291015][ T30] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 140.291062][ T30] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 140.543750][ T6651] MTD: Couldn't look up 'mtd0/file0': -2 [ 140.896262][ T6657] 9p: Bad value for 'wfdno' [ 140.998174][ T30] em28xx 4-1:0.0: chip ID is em2882/3 [ 141.116497][ T6662] ptn5150 0-001d: probe with driver ptn5150 failed with error -22 [ 141.123157][ T6662] i2c i2c-0: new_device: Instantiated device ptn5150 at 0x1d [ 141.348605][ T30] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 141.348643][ T30] em28xx 4-1:0.0: board has no eeprom [ 141.384166][ T6670] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 141.396474][ T6670] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 141.400757][ T6670] netlink: 'syz.0.261': attribute type 29 has an invalid length. [ 141.423786][ T6674] FAULT_INJECTION: forcing a failure. [ 141.423786][ T6674] name failslab, interval 1, probability 0, space 0, times 0 [ 141.423823][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.2.263 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.423854][ T6674] Tainted: [L]=SOFTLOCKUP [ 141.423862][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.423876][ T6674] Call Trace: [ 141.423885][ T6674] [ 141.423895][ T6674] dump_stack_lvl+0xe8/0x150 [ 141.423930][ T6674] should_fail_ex+0x3eb/0x540 [ 141.423961][ T6674] should_failslab+0xa8/0x100 [ 141.423989][ T6674] __kvmalloc_node_noprof+0x171/0x820 [ 141.424030][ T6674] ? aa_file_perm+0x4ed/0x15f0 [ 141.424059][ T6674] ? register_lock_class+0x31/0x2e0 [ 141.424092][ T6674] ? seq_read_iter+0x1ea/0xca0 [ 141.424113][ T6674] ? seq_read_iter+0x1ea/0xca0 [ 141.424141][ T6674] seq_read_iter+0x1ea/0xca0 [ 141.424178][ T6674] seq_read+0x367/0x480 [ 141.424209][ T6674] ? __pfx_seq_read+0x10/0x10 [ 141.424245][ T6674] ? rw_verify_area+0x24a/0x4c0 [ 141.424277][ T6674] ? __pfx_seq_read+0x10/0x10 [ 141.424298][ T6674] vfs_read+0x213/0xa80 [ 141.424335][ T6674] ? __pfx___mutex_lock+0x10/0x10 [ 141.424358][ T6674] ? __pfx_vfs_read+0x10/0x10 [ 141.424389][ T6674] ? __fget_files+0x2a/0x420 [ 141.424423][ T6674] ? __fget_files+0x3a2/0x420 [ 141.424450][ T6674] ? __fget_files+0x2a/0x420 [ 141.424489][ T6674] ksys_read+0x150/0x270 [ 141.424523][ T6674] ? __pfx_ksys_read+0x10/0x10 [ 141.424575][ T6674] do_syscall_64+0x166/0x520 [ 141.424598][ T6674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.424621][ T6674] ? clear_bhb_loop+0x70/0xc0 [ 141.424649][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.424673][ T6674] RIP: 0033:0x7f830919e159 [ 141.424692][ T6674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.424712][ T6674] RSP: 002b:00007f830a04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.424740][ T6674] RAX: ffffffffffffffda RBX: 00007f8309425fa0 RCX: 00007f830919e159 [ 141.424757][ T6674] RDX: 000000000000007c RSI: 00002000000023c0 RDI: 0000000000000004 [ 141.424772][ T6674] RBP: 00007f830a04d090 R08: 0000000000000000 R09: 0000000000000000 [ 141.424786][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.424800][ T6674] R13: 00007f8309426038 R14: 00007f8309425fa0 R15: 00007ffea0ef0318 [ 141.424837][ T6674] [ 141.479599][ T30] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 141.479645][ T30] em28xx 4-1:0.0: dvb set to bulk mode. [ 141.506364][ T5771] em28xx 4-1:0.0: Binding DVB extension [ 141.713449][ T30] usb 4-1: USB disconnect, device number 14 [ 141.730730][ T30] em28xx 4-1:0.0: Disconnecting em28xx [ 141.822007][ T5771] em28xx 4-1:0.0: Registering input extension [ 142.041227][ T6689] netlink: 28 bytes leftover after parsing attributes in process `syz.2.268'. [ 142.044918][ T5771] rc_core: IR keymap rc-pinnacle-pctv-hd not found [ 142.045085][ T5771] Registered IR keymap rc-empty [ 142.099390][ T5771] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 142.101935][ T5771] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 142.147461][ T5771] em28xx 4-1:0.0: Input extension successfully initialized [ 142.150496][ T30] em28xx 4-1:0.0: Closing input extension [ 142.206331][ T6692] openvswitch: netlink: Tunnel attr 16 has unexpected len 8 expected 0 [ 142.337724][ T30] em28xx: Freeing device [ 142.394328][ T6695] rust_binder: 6693:6695 got transaction to invalid handle 1 [ 142.394367][ T6695] rust_binder: 6693:6695 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 142.481262][ T6695] syz.0.270 (6695) used greatest stack depth: 17456 bytes left [ 142.557057][ T6698] FAULT_INJECTION: forcing a failure. [ 142.557057][ T6698] name failslab, interval 1, probability 0, space 0, times 0 [ 142.557094][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.2.273 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.557125][ T6698] Tainted: [L]=SOFTLOCKUP [ 142.557134][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.557148][ T6698] Call Trace: [ 142.557157][ T6698] [ 142.557167][ T6698] dump_stack_lvl+0xe8/0x150 [ 142.557204][ T6698] should_fail_ex+0x3eb/0x540 [ 142.557233][ T6698] ? ovs_flow_alloc+0x103/0x1f0 [ 142.557260][ T6698] should_failslab+0xa8/0x100 [ 142.557286][ T6698] ? ovs_flow_alloc+0x103/0x1f0 [ 142.557311][ T6698] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 142.557342][ T6698] ? ovs_flow_alloc+0x24/0x1f0 [ 142.557366][ T6698] ? kmem_cache_alloc_noprof+0x151/0x600 [ 142.557397][ T6698] ? ovs_flow_alloc+0x103/0x1f0 [ 142.557430][ T6698] ovs_flow_alloc+0x103/0x1f0 [ 142.557460][ T6698] ovs_flow_cmd_new+0x28b/0xea0 [ 142.557496][ T6698] ? __kasan_kmalloc+0x93/0xb0 [ 142.557522][ T6698] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 142.557607][ T6698] ? __kmalloc_noprof+0x387/0x710 [ 142.557643][ T6698] ? __nla_parse+0x40/0x60 [ 142.557677][ T6698] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 142.557700][ T6698] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 142.557731][ T6698] genl_family_rcv_msg_doit+0x233/0x340 [ 142.557775][ T6698] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 142.557824][ T6698] ? bpf_lsm_capable+0x9/0x20 [ 142.557854][ T6698] ? security_capable+0x7e/0x2c0 [ 142.557886][ T6698] genl_rcv_msg+0x614/0x7a0 [ 142.557928][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.557973][ T6698] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 142.558010][ T6698] ? __asan_memcpy+0x40/0x70 [ 142.558040][ T6698] ? __skb_clone+0x5c/0x6c0 [ 142.558073][ T6698] netlink_rcv_skb+0x226/0x4a0 [ 142.558102][ T6698] ? __pfx_genl_rcv_msg+0x10/0x10 [ 142.558139][ T6698] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.558184][ T6698] ? down_read+0x2b9/0x320 [ 142.558213][ T6698] genl_rcv+0x28/0x40 [ 142.558265][ T6698] netlink_unicast+0x7bd/0x940 [ 142.558302][ T6698] netlink_sendmsg+0x7c3/0xae0 [ 142.558338][ T6698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.558376][ T6698] ? apparmor_socket_sendmsg+0x18b/0x360 [ 142.558403][ T6698] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.558431][ T6698] sock_sendmsg_nosec+0x13a/0x180 [ 142.558467][ T6698] ____sys_sendmsg+0x54e/0x850 [ 142.558498][ T6698] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.558534][ T6698] ? import_iovec+0x73/0xa0 [ 142.558567][ T6698] ___sys_sendmsg+0x2a5/0x360 [ 142.558592][ T6698] ? __lock_acquire+0x747/0x2de0 [ 142.558629][ T6698] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.558693][ T6698] ? __fget_files+0x2a/0x420 [ 142.558721][ T6698] ? __fget_files+0x3a2/0x420 [ 142.558761][ T6698] __x64_sys_sendmsg+0x1b1/0x290 [ 142.558790][ T6698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.558839][ T6698] do_syscall_64+0x166/0x520 [ 142.558860][ T6698] ? trace_irq_disable+0x3b/0x140 [ 142.558892][ T6698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.558921][ T6698] ? clear_bhb_loop+0x70/0xc0 [ 142.558954][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.558978][ T6698] RIP: 0033:0x7f830919e159 [ 142.558999][ T6698] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.559018][ T6698] RSP: 002b:00007f830a04d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.559043][ T6698] RAX: ffffffffffffffda RBX: 00007f8309425fa0 RCX: 00007f830919e159 [ 142.559061][ T6698] RDX: 00000000200080c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 142.559076][ T6698] RBP: 00007f830a04d090 R08: 0000000000000000 R09: 0000000000000000 [ 142.559090][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.559103][ T6698] R13: 00007f8309426038 R14: 00007f8309425fa0 R15: 00007ffea0ef0318 [ 142.559138][ T6698] [ 142.725971][ T30] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 142.726008][ T6703] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 142.726044][ T6703] overlayfs: overlapping lowerdir path [ 142.907533][ T5710] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 142.912785][ T30] usb 4-1: device descriptor read/64, error -71 [ 143.068225][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.068288][ T5710] usb 2-1: New USB device found, idVendor=17cc, idProduct=1021, bcdDevice= 0.40 [ 143.077954][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.078042][ T5710] usb 2-1: Product: á … [ 143.078084][ T5710] usb 2-1: Manufacturer: à¡‹ [ 143.078129][ T5710] usb 2-1: SerialNumber: п [ 143.184910][ T30] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 143.318156][ T30] usb 4-1: device descriptor read/64, error -71 [ 143.354087][ T5710] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 143.371100][ T5710] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 143.393498][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.394050][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.396949][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.398731][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.404049][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.405342][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.407846][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.409041][ T5710] usb 2-1: unable to issue vendor read request (ret = -71) [ 143.459224][ T30] usb usb4-port1: attempt power cycle [ 143.519840][ T5710] usb 2-1: USB disconnect, device number 19 [ 143.566205][ T1236] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 143.568405][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.715708][ T1236] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.40 [ 143.716658][ T1236] usb 1-1: config 1 interface 0 has no altsetting 0 [ 143.719150][ T1236] usb 1-1: string descriptor 0 read error: -22 [ 143.719259][ T1236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.727862][ T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 143.825879][ T30] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 143.855561][ T30] usb 4-1: device descriptor read/8, error -71 [ 143.892695][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 143.892736][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 143.914558][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.914633][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.956610][ T9] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 144.095017][ T30] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 144.115673][ T30] usb 4-1: device descriptor read/8, error -71 [ 144.202473][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.202516][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.202548][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.202574][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.202608][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.202627][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.204150][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.204206][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.204235][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.204263][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 144.227529][ T30] usb usb4-port1: unable to enumerate USB device [ 144.316872][ T1236] aquacomputer_d5next 0003:0C70:F014.0005: hidraw0: USB HID v0.05 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 144.472044][ T6723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 144.557534][ T5725] usb 1-1: USB disconnect, device number 19 [ 144.767704][ T9] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 144.767776][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 144.772060][ T9] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 144.822473][ T9] usb 3-1: USB disconnect, device number 22 [ 145.254205][ T6745] device-mapper: ioctl: Invalid data size in the ioctl structure: 3041672136 [ 145.273134][ T5626] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 145.273163][ T5626] CPU: 1 UID: 0 PID: 5626 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.273194][ T5626] Tainted: [L]=SOFTLOCKUP [ 145.273203][ T5626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.273218][ T5626] Workqueue: hci3 hci_rx_work [ 145.273256][ T5626] Call Trace: [ 145.273266][ T5626] [ 145.273276][ T5626] dump_stack_lvl+0xe8/0x150 [ 145.273309][ T5626] sysfs_create_dir_ns+0x271/0x2a0 [ 145.273346][ T5626] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.273384][ T5626] ? do_raw_spin_unlock+0xf5/0x200 [ 145.273419][ T5626] kobject_add_internal+0x622/0xcd0 [ 145.273456][ T5626] kobject_add+0x163/0x240 [ 145.273493][ T5626] ? __pfx_kobject_add+0x10/0x10 [ 145.273526][ T5626] ? get_device_parent+0x366/0x3a0 [ 145.273559][ T5626] device_add+0x3fa/0xb80 [ 145.273599][ T5626] hci_conn_add_sysfs+0xd5/0x210 [ 145.273635][ T5626] le_conn_complete_evt+0x10b2/0x17a0 [ 145.273668][ T5626] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.273693][ T5626] ? __mutex_unlock_slowpath+0x731/0x900 [ 145.273721][ T5626] ? skb_pull_data+0xf0/0x200 [ 145.273755][ T5626] hci_le_conn_complete_evt+0x187/0x470 [ 145.273799][ T5626] hci_event_packet+0x67a/0xf10 [ 145.273838][ T5626] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.273873][ T5626] ? __pfx_hci_event_packet+0x10/0x10 [ 145.273912][ T5626] ? audit_tree_freeing_mark+0x670/0xb20 [ 145.273946][ T5626] ? hci_send_to_monitor+0xe2/0x590 [ 145.273978][ T5626] hci_rx_work+0x3ee/0x1020 [ 145.274019][ T5626] ? process_scheduled_works+0x97a/0x1630 [ 145.274046][ T5626] process_scheduled_works+0xc3d/0x1630 [ 145.274105][ T5626] ? __pfx_process_scheduled_works+0x10/0x10 [ 145.274139][ T5626] ? assign_work+0x3cf/0x5d0 [ 145.274170][ T5626] worker_thread+0xa47/0xfb0 [ 145.274224][ T5626] kthread+0x38b/0x480 [ 145.274258][ T5626] ? __pfx_worker_thread+0x10/0x10 [ 145.274283][ T5626] ? __pfx_kthread+0x10/0x10 [ 145.274317][ T5626] ret_from_fork+0x514/0xb70 [ 145.274354][ T5626] ? __pfx_ret_from_fork+0x10/0x10 [ 145.274386][ T5626] ? __switch_to+0xc89/0x1420 [ 145.274416][ T5626] ? __pfx_kthread+0x10/0x10 [ 145.274449][ T5626] ret_from_fork_asm+0x1a/0x30 [ 145.274499][ T5626] [ 145.274610][ T5626] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 145.274649][ T5626] Bluetooth: hci3: failed to register connection device [ 145.307144][ T5626] Bluetooth: hci3: link tx timeout [ 145.307405][ T5626] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 145.983203][ T6772] netlink: Conntrack attr type has unexpected length (type=0, length=2, expected=0) [ 145.983249][ T6772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.128143][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.297'. [ 146.389774][ T6789] bond0: option mode: unable to set because the bond device has slaves [ 147.005594][ T5725] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 147.166177][ T5725] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 147.167414][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.171299][ T5725] usb 3-1: config 0 descriptor?? [ 147.201639][ T5725] cp210x 3-1:0.0: cp210x converter detected [ 147.244975][ T1236] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 147.370519][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 147.407470][ T1236] usb 2-1: not running at top speed; connect to a high speed hub [ 147.407508][ T1236] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 147.410598][ T1236] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.410624][ T1236] usb 2-1: config 1 interface 0 has no altsetting 0 [ 147.413971][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.414022][ T1236] usb 2-1: Product: Ы [ 147.414039][ T1236] usb 2-1: Manufacturer: ᇠ[ 147.414056][ T1236] usb 2-1: SerialNumber: 댆㑀逵ढ撮ä¼é´î»­Ý”å‡àµ±á¡°ä’’äµ²æ°à¿†î¦­ì¶’蚨㌿ӳ鲚ሄ實ㄳ讟ë¿ä˜é¹®ë²ˆäš³é‹¸ážŽåˆƒâ«¨ç¹â¦­à·²ç…µî‰®á«¬åµ‘ㆻ쑅ì˜ë–‰ç€²äº¬ïº”䖃ꭡî€æ¾Žäª¬é£’⣪â’ⴶ孛ب㇮áíšï©§í€—뺮昴鉶ä”螋픮Ἶ憾栿é·å頜ꪺ蓶ꆣ츛䜆䷱좓펇佅ឺ셼廔Ɜ䯚锕ጎ헊﯄﹃鱥ꖬ曶♮ﯓ뿓탇ꨞ욶貼龨瞴雠뤥놽殒뒽ᶛ踬 [ 147.591337][ T5725] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 147.657318][ T5725] usb 3-1: cp210x converter now attached to ttyUSB0 [ 147.862240][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.862949][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.864503][ T6813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.894547][ T6813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.920100][ T1236] usbhid 2-1:1.0: can't add hid device: -71 [ 147.920181][ T1236] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 147.934020][ T1236] usb 2-1: USB disconnect, device number 20 [ 148.028120][ T6828] FAULT_INJECTION: forcing a failure. [ 148.028120][ T6828] name failslab, interval 1, probability 0, space 0, times 0 [ 148.028158][ T6828] CPU: 0 UID: 0 PID: 6828 Comm: syz.0.317 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.028194][ T6828] Tainted: [L]=SOFTLOCKUP [ 148.028203][ T6828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.028217][ T6828] Call Trace: [ 148.028226][ T6828] [ 148.028237][ T6828] dump_stack_lvl+0xe8/0x150 [ 148.028274][ T6828] should_fail_ex+0x3eb/0x540 [ 148.028307][ T6828] should_failslab+0xa8/0x100 [ 148.028335][ T6828] __kmalloc_cache_noprof+0x9e/0x600 [ 148.028373][ T6828] ? assoc_array_insert+0x90/0x2f60 [ 148.028403][ T6828] ? assoc_array_insert+0x90/0x2f60 [ 148.028439][ T6828] assoc_array_insert+0x90/0x2f60 [ 148.028477][ T6828] ? key_link+0xcd/0x360 [ 148.028510][ T6828] ? __pfx___mutex_lock+0x10/0x10 [ 148.028542][ T6828] ? __pfx_down_write+0x10/0x10 [ 148.028574][ T6828] __key_link_begin+0xd6/0x1f0 [ 148.028608][ T6828] key_link+0xdd/0x360 [ 148.028645][ T6828] look_up_user_keyrings+0x4f5/0x670 [ 148.028677][ T6828] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 148.028706][ T6828] ? futex_unqueue+0x22/0x240 [ 148.028729][ T6828] ? lookup_user_key+0xd4/0x1360 [ 148.028758][ T6828] lookup_user_key+0x36d/0x1360 [ 148.028784][ T6828] ? __futex_wait+0x3c7/0x470 [ 148.028822][ T6828] ? __pfx_lookup_user_key+0x10/0x10 [ 148.028860][ T6828] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 148.028897][ T6828] ? try_to_wake_up+0x8c5/0x14d0 [ 148.028926][ T6828] keyctl_get_persistent+0x23b/0x790 [ 148.028962][ T6828] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 148.028990][ T6828] ? futex_wait+0x2a2/0x390 [ 148.029023][ T6828] ? __pfx_futex_wait+0x10/0x10 [ 148.029073][ T6828] __se_sys_keyctl+0x83e/0xbc0 [ 148.029099][ T6828] ? __pfx___se_sys_keyctl+0x10/0x10 [ 148.029127][ T6828] ? __pfx_do_futex+0x10/0x10 [ 148.029152][ T6828] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.029184][ T6828] ? __se_sys_futex+0x3a8/0x450 [ 148.029222][ T6828] ? ksys_write+0x242/0x270 [ 148.029264][ T6828] ? __pfx___se_sys_futex+0x10/0x10 [ 148.029291][ T6828] ? __pfx_ksys_write+0x10/0x10 [ 148.029330][ T6828] ? __x64_sys_keyctl+0x20/0xc0 [ 148.029355][ T6828] do_syscall_64+0x166/0x520 [ 148.029377][ T6828] ? trace_irq_disable+0x3b/0x140 [ 148.029410][ T6828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.029434][ T6828] ? clear_bhb_loop+0x70/0xc0 [ 148.029463][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.029487][ T6828] RIP: 0033:0x7f390799e159 [ 148.029510][ T6828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.029531][ T6828] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 148.029558][ T6828] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 148.029576][ T6828] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 148.029593][ T6828] RBP: 00007f3907a3503b R08: 0000000000000000 R09: 0000000000000000 [ 148.029608][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.029622][ T6828] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 148.029661][ T6828] [ 148.234639][ T6820] syz.3.314 (6820) used greatest stack depth: 11936 bytes left [ 148.395784][ T5771] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 148.522972][ T6834] trusted_key: encrypted_key: master key parameter '' is invalid [ 148.527325][ T5771] usb 1-1: device descriptor read/64, error -71 [ 148.768736][ T5771] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 148.865360][ T6840] rust_binder: Write failure EFAULT in pid:235 [ 148.868988][ T6840] [U] [ 148.869040][ T6840] [U] [ 148.869079][ T6840] [U] [ 148.869126][ T6840] [U] [ 148.869297][ T6840] [U] [ 148.869337][ T6840] [U] [ 148.869376][ T6840] [U] [ 148.869415][ T6840] [U] [ 148.869584][ T6840] [U] [ 148.869626][ T6840] [U] [ 148.869668][ T6840] [U] [ 148.869709][ T6840] [U] [ 148.869867][ T6840] [U] [ 148.869909][ T6840] [U] [ 148.869951][ T6840] [U] [ 148.869992][ T6840] [U] [ 148.870159][ T6840] [U] [ 148.870202][ T6840] [U] [ 148.870251][ T6840] [U] [ 148.870293][ T6840] [U] [ 148.881618][ T6840] [U] [ 148.881668][ T6840] [U] [ 148.881726][ T6840] [U] [ 148.881836][ T6840] [U] [ 148.886078][ T6840] [U] [ 148.886197][ T6840] [U] [ 148.886306][ T6840] [U] [ 148.886415][ T6840] [U] [ 148.889977][ T6840] [U] [ 148.890095][ T6840] [U] [ 148.890146][ T6840] [U] [ 148.890185][ T6840] [U] [ 148.890625][ T6840] [U] [ 148.890725][ T6840] [U] [ 148.890828][ T6840] [U] [ 148.890910][ T6840] [U] [ 148.895709][ T5771] usb 1-1: device descriptor read/64, error -71 [ 148.901747][ T6840] [U] [ 148.901872][ T6840] [U] [ 148.901979][ T6840] [U] [ 148.902078][ T6840] [U] [ 148.904239][ T6840] [U] [ 148.904362][ T6840] [U] [ 148.904476][ T6840] [U] [ 148.904596][ T6840] [U] [ 148.906639][ T6840] [U] [ 148.906742][ T6840] [U] [ 148.906817][ T6840] [U] [ 148.906857][ T6840] [U] [ 148.907294][ T6840] [U] [ 148.907406][ T6840] [U] [ 148.907505][ T6840] [U] [ 148.907613][ T6840] [U] [ 148.913036][ T6840] [U] [ 148.913159][ T6840] [U] [ 148.913263][ T6840] [U] [ 148.913373][ T6840] [U] [ 148.918337][ T6840] [U] [ 148.918458][ T6840] [U] [ 148.918562][ T6840] [U] [ 148.918660][ T6840] [U] [ 148.922875][ T6840] [U] [ 148.922994][ T6840] [U] [ 148.923102][ T6840] [U] [ 148.923198][ T6840] [U] [ 148.923827][ T6840] [U] [ 148.923936][ T6840] [U] [ 148.924040][ T6840] [U] [ 148.924137][ T6840] [U] [ 148.937525][ T6840] [U] [ 148.937683][ T6840] [U] [ 148.937802][ T6840] [U] [ 148.937900][ T6840] [U] [ 148.977585][ T6840] [U] [ 148.977715][ T6840] [U] [ 148.977822][ T6840] [U] [ 148.977922][ T6840] [U] [ 148.980155][ T6840] [U] [ 148.980284][ T6840] [U] [ 148.980383][ T6840] [U] [ 148.980498][ T6840] [U] [ 148.984648][ T6840] [U] [ 148.984777][ T6840] [U] [ 148.984883][ T6840] [U] [ 148.984990][ T6840] [U] [ 148.989653][ T6840] [U] [ 148.989770][ T6840] [U] [ 148.989868][ T6840] [U] [ 148.989954][ T6840] [U] [ 148.993519][ T6840] [U] [ 148.993637][ T6840] [U] [ 148.993733][ T6840] [U] [ 148.993839][ T6840] [U] [ 148.998696][ T6840] [U] [ 148.998743][ T6840] [U] [ 148.998787][ T6840] [U] [ 148.998829][ T6840] [U] [ 149.001149][ T6840] [U] [ 149.001262][ T6840] [U] [ 149.001361][ T6840] [U] [ 149.001479][ T6840] [U] [ 149.012290][ T5771] usb usb1-port1: attempt power cycle [ 149.013439][ T6840] [U] [ 149.013547][ T6840] [U] [ 149.013653][ T6840] [U] [ 149.013745][ T6840] [U] [ 149.014182][ T6840] [U] [ 149.014290][ T6840] [U] [ 149.014395][ T6840] [U] [ 149.014505][ T6840] [U] [ 149.030138][ T6840] [U] [ 149.030252][ T6840] [U] [ 149.030375][ T6840] [U] [ 149.030484][ T6840] [U] [ 149.031001][ T6840] [U] [ 149.031106][ T6840] [U] [ 149.031213][ T6840] [U] [ 149.031314][ T6840] [U] [ 149.038372][ T6840] [U] [ 149.038507][ T6840] [U] [ 149.038614][ T6840] [U] [ 149.038721][ T6840] [U] [ 149.040984][ T6840] [U] [ 149.041110][ T6840] [U] [ 149.041222][ T6840] [U] [ 149.041331][ T6840] [U] [ 149.043372][ T6840] [U] [ 149.043487][ T6840] [U] [ 149.043591][ T6840] [U] [ 149.098049][ T6839] [U] [ 149.375271][ T5771] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 149.395932][ T5771] usb 1-1: device descriptor read/8, error -71 [ 149.552390][ T6847] netlink: 'syz.3.323': attribute type 1 has an invalid length. [ 149.552412][ T6847] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.323'. [ 149.634991][ T1236] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 149.635196][ T5771] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 149.668491][ T5771] usb 1-1: device descriptor read/8, error -71 [ 149.763067][ T5725] usb 3-1: USB disconnect, device number 23 [ 149.784709][ T5725] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.785018][ T1236] usb 2-1: Using ep0 maxpacket: 16 [ 149.785271][ T5771] usb usb1-port1: unable to enumerate USB device [ 149.805374][ T1236] usb 2-1: unable to get BOS descriptor or descriptor too short [ 149.805429][ T1236] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 149.808760][ T1236] usb 2-1: config index 0 descriptor too short (expected 48923, got 27) [ 149.808847][ T1236] usb 2-1: config 240 has too many interfaces: 234, using maximum allowed: 32 [ 149.808909][ T1236] usb 2-1: config 240 has an invalid descriptor of length 38, skipping remainder of the config [ 149.808972][ T1236] usb 2-1: config 240 has 0 interfaces, different from the descriptor's value: 234 [ 149.834611][ T1236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.834702][ T1236] usb 2-1: Product: syz [ 149.834881][ T1236] usb 2-1: Manufacturer: syz [ 149.834927][ T1236] usb 2-1: SerialNumber: syz [ 149.891913][ T5725] cp210x 3-1:0.0: device disconnected [ 150.134092][ T1236] usb 2-1: USB disconnect, device number 21 [ 150.207254][ T6859] kernel read not supported for file / œ7³ÏüâW)ës“§Ç!Qöì¥fsõl{T‡rÒ)r§ÖOš˜õ2:"ôÀT+ÍŸv|Õ²DvcŽ“ØÖ Å6Òxãc: (pid: 6859 comm: syz.2.326) [ 150.211251][ T31] audit: type=1800 audit(1789503609.218:3): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.326" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=12999 res=0 errno=0 [ 150.469336][ T6867] kvm: kvm [6866]: vcpu256, guest rIP: 0xfff0 Unhandled WRMSR(0x4000008c) = 0x52f [ 150.502190][ T6868] syzkaller1: entered promiscuous mode [ 150.502209][ T6868] syzkaller1: entered allmulticast mode [ 150.803751][ T6875] orangefs_devreq_open: device cannot be opened in blocking mode [ 150.814882][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 150.819280][ T6874] orangefs_devreq_open: device cannot be opened in blocking mode [ 150.945172][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.191824][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 151.315000][ T9] usb 3-1: device descriptor read/64, error -71 [ 151.425401][ T9] usb usb3-port1: attempt power cycle [ 151.687488][ T4935] Bluetooth: hci3: command 0x0406 tx timeout [ 151.764903][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 151.787478][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.035253][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 152.055562][ T9] usb 3-1: device descriptor read/8, error -71 [ 152.166109][ T9] usb usb3-port1: unable to enumerate USB device [ 152.370249][ T6926] syzkaller1: entered promiscuous mode [ 152.370277][ T6926] syzkaller1: entered allmulticast mode [ 152.754933][ T978] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 152.904898][ T978] usb 4-1: Using ep0 maxpacket: 32 [ 152.905789][ T978] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 152.908072][ T978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 152.908104][ T978] usb 4-1: SerialNumber: syz [ 152.911072][ T978] usb 4-1: config 0 descriptor?? [ 152.962605][ T978] as10x_usb: device has been detected [ 152.963612][ T978] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 152.993366][ T978] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 153.057123][ T978] as10x_usb: error during firmware upload part1 [ 153.057790][ T978] Registered device nBox DVB-T Dongle [ 153.125258][ T978] usb 4-1: USB disconnect, device number 19 [ 153.139442][ T6932] fuse: Unknown parameter 'fd‰0x0000000000000004' [ 153.142053][ T6932] netlink: 5 bytes leftover after parsing attributes in process `syz.1.342'. [ 153.190648][ T978] Unregistered device nBox DVB-T Dongle [ 153.193879][ T978] as10x_usb: device has been disconnected [ 153.233852][ T6932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.342'. [ 153.284979][ T52] Bluetooth: hci4: command 0x1003 tx timeout [ 153.285493][ T5626] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.324266][ T6936] FAULT_INJECTION: forcing a failure. [ 153.324266][ T6936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.324300][ T6936] CPU: 0 UID: 0 PID: 6936 Comm: syz.1.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.324328][ T6936] Tainted: [L]=SOFTLOCKUP [ 153.324335][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 153.324347][ T6936] Call Trace: [ 153.324356][ T6936] [ 153.324365][ T6936] dump_stack_lvl+0xe8/0x150 [ 153.324405][ T6936] should_fail_ex+0x3eb/0x540 [ 153.324434][ T6936] _copy_to_user+0x31/0xb0 [ 153.324475][ T6936] simple_read_from_buffer+0xe1/0x170 [ 153.324510][ T6936] proc_fail_nth_read+0x1bb/0x230 [ 153.324544][ T6936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.324576][ T6936] ? rw_verify_area+0x24a/0x4c0 [ 153.324607][ T6936] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 153.324636][ T6936] vfs_read+0x213/0xa80 [ 153.324670][ T6936] ? __pfx___mutex_lock+0x10/0x10 [ 153.324693][ T6936] ? __pfx_vfs_read+0x10/0x10 [ 153.324723][ T6936] ? __fget_files+0x2a/0x420 [ 153.324755][ T6936] ? __fget_files+0x3a2/0x420 [ 153.324781][ T6936] ? __fget_files+0x2a/0x420 [ 153.324816][ T6936] ksys_read+0x150/0x270 [ 153.324848][ T6936] ? __pfx_ksys_read+0x10/0x10 [ 153.324890][ T6936] do_syscall_64+0x166/0x520 [ 153.324911][ T6936] ? trace_irq_disable+0x3b/0x140 [ 153.324941][ T6936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.324963][ T6936] ? clear_bhb_loop+0x70/0xc0 [ 153.324990][ T6936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.325013][ T6936] RIP: 0033:0x7fcde9d5e98e [ 153.325032][ T6936] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 153.325049][ T6936] RSP: 002b:00007fcde7ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 153.325071][ T6936] RAX: ffffffffffffffda RBX: 00007fcde7ff66c0 RCX: 00007fcde9d5e98e [ 153.325086][ T6936] RDX: 000000000000000f RSI: 00007fcde7ff60a0 RDI: 0000000000000003 [ 153.325099][ T6936] RBP: 00007fcde7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.325113][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.325125][ T6936] R13: 00007fcdea026038 R14: 00007fcdea025fa0 R15: 00007ffd615e3338 [ 153.325159][ T6936] [ 153.645105][ T5771] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 153.747966][ T3382] IPVS: starting estimator thread 0... [ 153.797096][ T5771] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.797144][ T5771] usb 4-1: too many configurations: 13, using maximum allowed: 8 [ 153.799208][ T5771] usb 4-1: config 0 has no interfaces? [ 153.799860][ T5771] usb 4-1: config 0 has no interfaces? [ 153.800402][ T5771] usb 4-1: config 0 has no interfaces? [ 153.801016][ T5771] usb 4-1: config 0 has no interfaces? [ 153.801680][ T5771] usb 4-1: config 0 has no interfaces? [ 153.802223][ T5771] usb 4-1: config 0 has no interfaces? [ 153.802846][ T5771] usb 4-1: config 0 has no interfaces? [ 153.803672][ T6942] input: syz0 as /devices/virtual/input/input10 [ 153.806853][ T5771] usb 4-1: config 0 has no interfaces? [ 153.840528][ T5771] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.840611][ T5771] usb 4-1: Product: syz [ 153.840653][ T5771] usb 4-1: Manufacturer: syz [ 153.840698][ T5771] usb 4-1: SerialNumber: syz [ 153.904933][ T6943] IPVS: using max 34 ests per chain, 81600 per kthread [ 153.921275][ T5771] usb 4-1: config 0 descriptor?? [ 154.343282][ T5771] usb 4-1: USB disconnect, device number 20 [ 154.478810][ T6962] overlayfs: upper fs does not support file handles, falling back to index=off. [ 154.726621][ T978] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 154.775393][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 154.887369][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 154.890202][ T978] usb 2-1: unable to get BOS descriptor or descriptor too short [ 154.890249][ T978] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 154.923690][ T978] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 154.923715][ T978] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 154.923738][ T978] usb 2-1: config 14 has no interface number 0 [ 154.923755][ T978] usb 2-1: config 14 has no interface number 1 [ 154.923821][ T978] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 154.923848][ T978] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 154.923874][ T978] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 154.923904][ T978] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 154.923932][ T978] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 154.923974][ T978] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.924004][ T978] usb 2-1: config 14 interface 57 has no altsetting 0 [ 154.924025][ T978] usb 2-1: config 14 interface 228 has no altsetting 0 [ 154.965770][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 155.048105][ T9] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 155.073640][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.073666][ T978] usb 2-1: Product: syz [ 155.073710][ T978] usb 2-1: Manufacturer: syz [ 155.073727][ T978] usb 2-1: SerialNumber: syz [ 155.084106][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 155.084131][ T9] usb 4-1: SerialNumber: syz [ 155.114092][ T9] usb 4-1: config 0 descriptor?? [ 155.154038][ T9] as10x_usb: device has been detected [ 155.170764][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 155.202025][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 155.247947][ T9] as10x_usb: error during firmware upload part1 [ 155.248764][ T9] Registered device nBox DVB-T Dongle [ 155.314414][ T6969] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 155.397280][ T5771] usb 4-1: USB disconnect, device number 21 [ 155.538111][ T5771] Unregistered device nBox DVB-T Dongle [ 155.553221][ T5771] as10x_usb: device has been disconnected [ 155.592567][ T978] legousbtower 2-1:14.57: interrupt endpoints not found [ 155.752382][ T6971] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 155.992721][ T978] legousbtower 2-1:14.228: get version request failed: -121 [ 155.992913][ T978] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -121 [ 156.085231][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 156.475500][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.358'. [ 156.690174][ T6990] tipc: Started in network mode [ 156.690206][ T6990] tipc: Node identity 8a02d61d0511, cluster identity 4711 [ 156.709224][ T6990] tipc: Enabled bearer , priority 0 [ 156.709966][ T6990] D: renamed from syzkaller0 [ 156.732465][ T6990] tipc: Disabling bearer [ 157.267901][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 157.288819][ T7008] netlink: 558 bytes leftover after parsing attributes in process `syz.3.367'. [ 157.470383][ T7016] FAULT_INJECTION: forcing a failure. [ 157.470383][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 157.470415][ T7016] CPU: 1 UID: 0 PID: 7016 Comm: syz.0.369 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.470446][ T7016] Tainted: [L]=SOFTLOCKUP [ 157.470453][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.470466][ T7016] Call Trace: [ 157.470475][ T7016] [ 157.470486][ T7016] dump_stack_lvl+0xe8/0x150 [ 157.470526][ T7016] should_fail_ex+0x3eb/0x540 [ 157.470558][ T7016] should_failslab+0xa8/0x100 [ 157.470585][ T7016] __kmalloc_noprof+0xf9/0x710 [ 157.470619][ T7016] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 157.470643][ T7016] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 157.470675][ T7016] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 157.470708][ T7016] genl_family_rcv_msg_doit+0xda/0x340 [ 157.470752][ T7016] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 157.470798][ T7016] ? apparmor_capable+0x126/0x170 [ 157.470834][ T7016] ? bpf_lsm_capable+0x9/0x20 [ 157.470864][ T7016] ? security_capable+0x7e/0x2c0 [ 157.470896][ T7016] genl_rcv_msg+0x614/0x7a0 [ 157.470938][ T7016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.470973][ T7016] ? __pfx_netlbl_calipso_remove+0x10/0x10 [ 157.471027][ T7016] netlink_rcv_skb+0x226/0x4a0 [ 157.471059][ T7016] ? __pfx_genl_rcv_msg+0x10/0x10 [ 157.471096][ T7016] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 157.471142][ T7016] ? down_read+0x2b9/0x320 [ 157.471179][ T7016] genl_rcv+0x28/0x40 [ 157.471211][ T7016] netlink_unicast+0x7bd/0x940 [ 157.471250][ T7016] netlink_sendmsg+0x7c3/0xae0 [ 157.471287][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.471326][ T7016] ? apparmor_socket_sendmsg+0x98/0x360 [ 157.471352][ T7016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 157.471381][ T7016] sock_sendmsg_nosec+0x13a/0x180 [ 157.471416][ T7016] ____sys_sendmsg+0x54e/0x850 [ 157.471449][ T7016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 157.471485][ T7016] ? import_iovec+0x73/0xa0 [ 157.471519][ T7016] ___sys_sendmsg+0x2a5/0x360 [ 157.471544][ T7016] ? __lock_acquire+0x747/0x2de0 [ 157.471581][ T7016] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.471645][ T7016] ? __fget_files+0x2a/0x420 [ 157.471674][ T7016] ? __fget_files+0x3a2/0x420 [ 157.471714][ T7016] __x64_sys_sendmsg+0x1b1/0x290 [ 157.471812][ T7016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 157.471975][ T7016] do_syscall_64+0x166/0x520 [ 157.472048][ T7016] ? trace_irq_disable+0x3b/0x140 [ 157.472134][ T7016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.472207][ T7016] ? clear_bhb_loop+0x70/0xc0 [ 157.472283][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.472348][ T7016] RIP: 0033:0x7f390799e159 [ 157.472419][ T7016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.472472][ T7016] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.472531][ T7016] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 157.472577][ T7016] RDX: 0000000000008000 RSI: 0000200000000140 RDI: 0000000000000004 [ 157.472619][ T7016] RBP: 00007f39088f4090 R08: 0000000000000000 R09: 0000000000000000 [ 157.472662][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.472696][ T7016] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 157.472792][ T7016] [ 157.838351][ T978] usb 2-1: USB disconnect, device number 22 [ 158.111443][ T7026] sctp: [Deprecated]: syz.2.374 (pid 7026) Use of int in max_burst socket option. [ 158.111443][ T7026] Use struct sctp_assoc_value instead [ 158.337851][ T7026] vimc link validate: Sensor A:src:16x16 (0x33424752, 6, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 158.855018][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 159.019180][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 159.023861][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 159.024080][ T7055] kAFS: bad VL server IP address [ 159.025329][ T9] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 159.025354][ T9] usb 2-1: config 6 has no interface number 0 [ 159.025399][ T9] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 159.025424][ T9] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.025452][ T9] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.025480][ T9] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.106173][ T9] usb 2-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 159.106196][ T9] usb 2-1: Product: syz [ 159.106211][ T9] usb 2-1: Manufacturer: syz [ 159.106228][ T9] usb 2-1: SerialNumber: syz [ 159.147101][ T9] hso 2-1:6.2: Failed to find BULK eps [ 159.219227][ T7059] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 159.554597][ T7071] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(9) [ 159.554679][ T5771] usb 2-1: USB disconnect, device number 23 [ 159.815086][ T9] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 159.966247][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=007a, bcdDevice= 0.40 [ 159.970353][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.970376][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.970457][ T9] usb 1-1: config 1 interface 1 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 159.970488][ T9] usb 1-1: config 1 interface 1 has no altsetting 1 [ 159.973354][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.973377][ T9] usb 1-1: Product: syz [ 159.973393][ T9] usb 1-1: Manufacturer: syz [ 159.973410][ T9] usb 1-1: SerialNumber: syz [ 160.250905][ T7078] netlink: 156 bytes leftover after parsing attributes in process `syz.1.384'. [ 160.403757][ T7070] netlink: 400 bytes leftover after parsing attributes in process `syz.0.381'. [ 160.448029][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.467981][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.923748][ T9] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 160.964665][ T9] usb 1-1: USB disconnect, device number 24 [ 161.090333][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.124871][ C1] net_ratelimit: 78 callbacks suppressed [ 161.415084][ T31] audit: type=1400 audit(1789503620.418:4): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=7096 comm="syz.0.390" [ 161.634969][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.764888][ T9] usb 4-1: device descriptor read/64, error -71 [ 162.024571][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 162.165176][ T9] usb 4-1: device descriptor read/64, error -71 [ 162.194873][ T5771] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 162.285423][ T9] usb usb4-port1: attempt power cycle [ 162.325138][ T5771] usb 2-1: device descriptor read/64, error -71 [ 162.344874][ T30] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 162.425031][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 162.494872][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 162.495932][ T30] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 162.500603][ T30] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 162.500631][ T30] usb 1-1: config 0 has no interface number 0 [ 162.500711][ T30] usb 1-1: config 0 interface 12 has no altsetting 0 [ 162.504644][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.504694][ T30] usb 1-1: Product: syz [ 162.504713][ T30] usb 1-1: Manufacturer: syz [ 162.520270][ T30] usb 1-1: SerialNumber: syz [ 162.572954][ T30] usb 1-1: config 0 descriptor?? [ 162.624927][ T5771] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 162.634866][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 162.656746][ T9] usb 4-1: device descriptor read/8, error -71 [ 162.754939][ T5771] usb 2-1: device descriptor read/64, error -71 [ 162.865569][ T5771] usb usb2-port1: attempt power cycle [ 162.915947][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 162.937746][ T9] usb 4-1: device descriptor read/8, error -71 [ 163.046744][ T9] usb usb4-port1: unable to enumerate USB device [ 163.204979][ T5771] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 163.225839][ T5771] usb 2-1: device descriptor read/8, error -71 [ 163.464962][ T5771] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 163.486514][ T5771] usb 2-1: device descriptor read/8, error -71 [ 163.595441][ T5771] usb usb2-port1: unable to enumerate USB device [ 163.911932][ T7113] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 164.207530][ T30] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 164.207567][ T30] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 164.207580][ T30] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 164.207638][ T30] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 164.233419][ T30] usb 1-1: USB disconnect, device number 25 [ 164.504981][ T25] usb 3-1: device descriptor read/64, error -71 [ 164.714942][ T30] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.745960][ T25] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 164.776698][ T31] audit: type=1326 audit(1789503623.788:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.0.400" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f390799e159 code=0x0 [ 164.875611][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 164.876238][ T30] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 164.877431][ T30] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 164.877476][ T30] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 164.877518][ T30] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 164.877551][ T30] usb 4-1: config 168 interface 0 has no altsetting 0 [ 164.879074][ T30] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 164.879112][ T30] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 164.879153][ T30] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 164.879185][ T30] usb 4-1: config 168 interface 0 has no altsetting 0 [ 164.880336][ T30] usb 4-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 164.880374][ T30] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 164.880413][ T30] usb 4-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 164.880451][ T30] usb 4-1: config 168 interface 0 has no altsetting 0 [ 164.883785][ T30] usb 4-1: string descriptor 0 read error: -22 [ 164.883921][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.913465][ T25] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 164.947821][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.947895][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.948064][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.046223][ T25] usb 3-1: config 0 descriptor?? [ 165.056746][ T30] adutux 4-1:168.0: interrupt endpoints not found [ 165.191399][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.192399][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.223066][ T30] usb 4-1: USB disconnect, device number 26 [ 165.334946][ T5695] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 165.472665][ T25] hid_parser_main: 4007 callbacks suppressed [ 165.472686][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472717][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472747][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472774][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472803][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472831][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.472859][ T25] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 165.532020][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 165.532878][ T5695] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.549440][ T5695] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 165.549491][ T5695] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.549508][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.549526][ T5695] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.549544][ T5695] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.549630][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.617304][ T25] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 165.677512][ T25] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00 [ 165.849295][ T5695] usb 2-1: usb_control_msg returned -32 [ 165.849370][ T5695] usbtmc 2-1:16.0: can't read capabilities [ 166.006818][ T7133] smpboot: CPU 1 is now offline [ 166.282790][ T7141] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 166.294828][ C0] net_ratelimit: 56 callbacks suppressed [ 166.309437][ T7119] cp2112 0003:10C4:EA90.0006: Error starting transaction: -38 [ 166.313455][ T7134] overlayfs: failed to resolve './file0/file0': -2 [ 166.483844][ T9] usb 2-1: USB disconnect, device number 28 [ 166.624820][ T7144] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.12800.0), cmd(9) [ 166.901416][ T7148] vimc link validate: Sensor A:src:16x16 (0x33424752, 6, 2, 0, 0) Raw Capture 0:snk:640x480 (0x42474752, 8, 0, 0, 0) [ 167.336564][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 167.489107][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 167.495113][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.495135][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.495199][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.552504][ T9] usb 4-1: config 0 descriptor?? [ 167.730165][ T25] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71 [ 167.796588][ T25] usb 3-1: USB disconnect, device number 29 [ 168.070621][ T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 168.070642][ T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 168.070661][ T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 168.137953][ T9] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 168.178665][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.410'. [ 168.263221][ T9] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 168.307370][ T7160] fuse: Bad value for 'fd' [ 168.482426][ T7165] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10000 [ 168.482448][ T7165] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 168.482473][ T7165] raw: 00fff00000002000 ffffea0000400008 ffffea0000400008 0000000000000000 [ 168.482488][ T7165] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 168.482497][ T7165] page dumped because: unmovable page [ 168.482519][ T7165] page_owner info is not present (never set?) [ 168.526211][ T978] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 168.707422][ T978] usb 2-1: Using ep0 maxpacket: 16 [ 168.709405][ T978] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 168.743436][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.743456][ T978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.743498][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.800833][ T978] usb 2-1: config 0 descriptor?? [ 168.854104][ T31] audit: type=1326 audit(1789503627.858:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.2.413" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f830919e159 code=0x0 [ 168.890214][ T9] cp2112 0003:10C4:EA90.0007: error reading lock byte: -71 [ 168.948058][ T9] usb 4-1: USB disconnect, device number 27 [ 169.243791][ T7174] FAULT_INJECTION: forcing a failure. [ 169.243791][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 169.243821][ T7174] CPU: 0 UID: 0 PID: 7174 Comm: syz.2.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.243850][ T7174] Tainted: [L]=SOFTLOCKUP [ 169.243856][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.243868][ T7174] Call Trace: [ 169.243875][ T7174] [ 169.243884][ T7174] dump_stack_lvl+0xe8/0x150 [ 169.243912][ T7174] should_fail_ex+0x3eb/0x540 [ 169.243946][ T7174] should_failslab+0xa8/0x100 [ 169.244060][ T7174] __kmalloc_cache_noprof+0x9e/0x600 [ 169.244091][ T7174] ? __kmalloc_cache_noprof+0x148/0x600 [ 169.244117][ T7174] ? kvm_dev_ioctl+0xbe9/0x1770 [ 169.244142][ T7174] ? kvm_dev_ioctl+0xbe9/0x1770 [ 169.244172][ T7174] kvm_dev_ioctl+0xbe9/0x1770 [ 169.244204][ T7174] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 169.244228][ T7174] ? __fget_files+0x2a/0x420 [ 169.244255][ T7174] ? bpf_lsm_file_ioctl+0x9/0x20 [ 169.244285][ T7174] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 169.244312][ T7174] __se_sys_ioctl+0xfc/0x170 [ 169.244344][ T7174] do_syscall_64+0x166/0x520 [ 169.244361][ T7174] ? trace_irq_disable+0x3b/0x140 [ 169.244399][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.244417][ T7174] ? clear_bhb_loop+0x70/0xc0 [ 169.244439][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.244459][ T7174] RIP: 0033:0x7f830919e159 [ 169.244480][ T7174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.244495][ T7174] RSP: 002b:00007f830a04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.244515][ T7174] RAX: ffffffffffffffda RBX: 00007f8309425fa0 RCX: 00007f830919e159 [ 169.244528][ T7174] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 169.244540][ T7174] RBP: 00007f830923503b R08: 0000000000000000 R09: 0000000000000000 [ 169.244552][ T7174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.244563][ T7174] R13: 00007f8309426038 R14: 00007f8309425fa0 R15: 00007ffea0ef0318 [ 169.244590][ T7174] [ 169.468825][ T7173] overlayfs: statfs failed on './file0' [ 169.536434][ T978] apple 0003:05AC:024B.0008: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.1-1/input0 [ 169.610844][ T978] usb 2-1: USB disconnect, device number 29 [ 169.801095][ T31] audit: type=1800 audit(1789503628.808:7): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.414" name="/" dev="fuse" ino=1 res=0 errno=0 [ 169.903512][ T7177] fido_id[7177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 170.239908][ T7184] xt_hashlimit: overflow, try lower: 0/0 [ 170.254851][ T7184] FAULT_INJECTION: forcing a failure. [ 170.254851][ T7184] name failslab, interval 1, probability 0, space 0, times 0 [ 170.254877][ T7184] CPU: 0 UID: 0 PID: 7184 Comm: syz.0.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.254899][ T7184] Tainted: [L]=SOFTLOCKUP [ 170.254906][ T7184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.254917][ T7184] Call Trace: [ 170.254924][ T7184] [ 170.254933][ T7184] dump_stack_lvl+0xe8/0x150 [ 170.254972][ T7184] should_fail_ex+0x3eb/0x540 [ 170.254995][ T7184] should_failslab+0xa8/0x100 [ 170.255015][ T7184] __kmalloc_cache_noprof+0x9e/0x600 [ 170.255042][ T7184] ? nfnetlink_rcv+0x1021/0x28c0 [ 170.255060][ T7184] ? nfnetlink_rcv+0x1021/0x28c0 [ 170.255084][ T7184] nfnetlink_rcv+0x1021/0x28c0 [ 170.255128][ T7184] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.255159][ T7184] ? ref_tracker_free+0x689/0x830 [ 170.255197][ T7184] ? skb_clone+0x246/0x3a0 [ 170.255220][ T7184] ? __netlink_deliver_tap+0x811/0x860 [ 170.255247][ T7184] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.255268][ T7184] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.255293][ T7184] netlink_unicast+0x7bd/0x940 [ 170.255320][ T7184] netlink_sendmsg+0x7c3/0xae0 [ 170.255346][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.255374][ T7184] ? apparmor_socket_sendmsg+0x98/0x360 [ 170.255393][ T7184] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.255414][ T7184] sock_sendmsg_nosec+0x13a/0x180 [ 170.255440][ T7184] ____sys_sendmsg+0x54e/0x850 [ 170.255463][ T7184] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.255489][ T7184] ? import_iovec+0x73/0xa0 [ 170.255512][ T7184] ___sys_sendmsg+0x2a5/0x360 [ 170.255530][ T7184] ? __lock_acquire+0x747/0x2de0 [ 170.255557][ T7184] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.255578][ T7184] ? futex_wait+0x2a2/0x390 [ 170.255621][ T7184] ? __fget_files+0x2a/0x420 [ 170.255642][ T7184] ? __fget_files+0x3a2/0x420 [ 170.255671][ T7184] __x64_sys_sendmsg+0x1b1/0x290 [ 170.255691][ T7184] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.255726][ T7184] do_syscall_64+0x166/0x520 [ 170.255742][ T7184] ? trace_irq_disable+0x3b/0x140 [ 170.255766][ T7184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.255783][ T7184] ? clear_bhb_loop+0x70/0xc0 [ 170.255804][ T7184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.255822][ T7184] RIP: 0033:0x7f390799e159 [ 170.255838][ T7184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.255853][ T7184] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.255871][ T7184] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 170.255883][ T7184] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 170.255894][ T7184] RBP: 00007f3907a3503b R08: 0000000000000000 R09: 0000000000000000 [ 170.255904][ T7184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.255914][ T7184] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 170.255946][ T7184] [ 170.820128][ T7184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 170.914995][ T5710] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 171.075642][ T5725] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 171.076233][ T5710] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 171.077665][ T5710] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 171.077681][ T5710] usb 2-1: config 0 has no interface number 0 [ 171.080596][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.080611][ T5710] usb 2-1: Product: syz [ 171.080622][ T5710] usb 2-1: Manufacturer: syz [ 171.080633][ T5710] usb 2-1: SerialNumber: syz [ 171.144683][ T5710] usb 2-1: config 0 descriptor?? [ 171.226909][ T5725] usb 4-1: Using ep0 maxpacket: 32 [ 171.230083][ T5725] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.230116][ T5725] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 171.263081][ T5725] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 171.284022][ T5725] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.284038][ T5725] usb 4-1: Product: syz [ 171.284048][ T5725] usb 4-1: Manufacturer: syz [ 171.284059][ T5725] usb 4-1: SerialNumber: syz [ 171.321010][ T7190] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.347305][ T5710] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 171.415597][ T5710] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 171.420420][ T5710] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 171.420483][ T5710] usb 2-1: media controller created [ 171.586591][ T5710] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.626443][ T7187] FAULT_INJECTION: forcing a failure. [ 171.626443][ T7187] name failslab, interval 1, probability 0, space 0, times 0 [ 171.626470][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.1.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.626492][ T7187] Tainted: [L]=SOFTLOCKUP [ 171.626499][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.626512][ T7187] Call Trace: [ 171.626520][ T7187] [ 171.626527][ T7187] dump_stack_lvl+0xe8/0x150 [ 171.626554][ T7187] should_fail_ex+0x3eb/0x540 [ 171.626577][ T7187] should_failslab+0xa8/0x100 [ 171.626597][ T7187] __kmalloc_cache_noprof+0x9e/0x600 [ 171.626623][ T7187] ? usb_control_msg+0x73/0x3e0 [ 171.626646][ T7187] ? usb_control_msg+0x73/0x3e0 [ 171.626670][ T7187] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 171.626698][ T7187] usb_control_msg+0x73/0x3e0 [ 171.626722][ T7187] ? msleep+0x39/0x100 [ 171.626746][ T7187] ec168_ctrl_msg+0x308/0x7c0 [ 171.626777][ T7187] ec168_i2c_xfer+0x339/0x630 [ 171.626805][ T7187] __i2c_transfer+0x7bf/0x1fe0 [ 171.626831][ T7187] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.626866][ T7187] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.626889][ T7187] ? rt_mutex_lock_nested+0x149/0x1c0 [ 171.626908][ T7187] ? i2c_transfer+0xc7/0x2d0 [ 171.626932][ T7187] i2c_transfer+0x1cb/0x2d0 [ 171.626957][ T7187] i2cdev_ioctl_rdwr+0x460/0x740 [ 171.626994][ T7187] i2cdev_ioctl+0x6a5/0x880 [ 171.627017][ T7187] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 171.627042][ T7187] ? __fget_files+0x3a2/0x420 [ 171.627063][ T7187] ? __fget_files+0x2a/0x420 [ 171.627085][ T7187] ? bpf_lsm_file_ioctl+0x9/0x20 [ 171.627107][ T7187] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 171.627130][ T7187] __se_sys_ioctl+0xfc/0x170 [ 171.627158][ T7187] do_syscall_64+0x166/0x520 [ 171.627173][ T7187] ? trace_irq_disable+0x3b/0x140 [ 171.627196][ T7187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.627213][ T7187] ? clear_bhb_loop+0x70/0xc0 [ 171.627233][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.627249][ T7187] RIP: 0033:0x7fcde9d9e159 [ 171.627265][ T7187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.627279][ T7187] RSP: 002b:00007fcde7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.627296][ T7187] RAX: ffffffffffffffda RBX: 00007fcdea025fa0 RCX: 00007fcde9d9e159 [ 171.627308][ T7187] RDX: 0000200000001a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 171.627318][ T7187] RBP: 00007fcde7ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.627329][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.627340][ T7187] R13: 00007fcdea026038 R14: 00007fcdea025fa0 R15: 00007ffd615e3338 [ 171.627365][ T7187] [ 171.689369][ C0] net_ratelimit: 57 callbacks suppressed [ 171.969514][ T5725] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.111021][ T7196] profile_transition: unconfined exec no attachment [ 172.117520][ T5710] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 172.351948][ T7199] profile_transition: unconfined exec no attachment [ 172.383755][ T5725] usb 4-1: USB disconnect, device number 28 [ 172.694337][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.828644][ T7206] FAULT_INJECTION: forcing a failure. [ 172.828644][ T7206] name failslab, interval 1, probability 0, space 0, times 0 [ 172.828679][ T7206] CPU: 0 UID: 0 PID: 7206 Comm: syz.2.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.828700][ T7206] Tainted: [L]=SOFTLOCKUP [ 172.828707][ T7206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 172.828717][ T7206] Call Trace: [ 172.828724][ T7206] [ 172.828731][ T7206] dump_stack_lvl+0xe8/0x150 [ 172.828757][ T7206] should_fail_ex+0x3eb/0x540 [ 172.828779][ T7206] should_failslab+0xa8/0x100 [ 172.828799][ T7206] __kmalloc_cache_noprof+0x9e/0x600 [ 172.828825][ T7206] ? vga_arb_read+0x7b/0x550 [ 172.828843][ T7206] ? vga_arb_read+0x7b/0x550 [ 172.828866][ T7206] vga_arb_read+0x7b/0x550 [ 172.828886][ T7206] ? rw_verify_area+0x24a/0x4c0 [ 172.828913][ T7206] ? __pfx_vga_arb_read+0x10/0x10 [ 172.828932][ T7206] vfs_read+0x213/0xa80 [ 172.828960][ T7206] ? __pfx_vfs_read+0x10/0x10 [ 172.828983][ T7206] ? __fget_files+0x2a/0x420 [ 172.829006][ T7206] ? __fget_files+0x2a/0x420 [ 172.829025][ T7206] ? __fget_files+0x3a2/0x420 [ 172.829044][ T7206] ? __fget_files+0x2a/0x420 [ 172.829070][ T7206] ksys_read+0x150/0x270 [ 172.829094][ T7206] ? __pfx_ksys_read+0x10/0x10 [ 172.829124][ T7206] do_syscall_64+0x166/0x520 [ 172.829140][ T7206] ? trace_irq_disable+0x3b/0x140 [ 172.829164][ T7206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.829181][ T7206] ? clear_bhb_loop+0x70/0xc0 [ 172.829201][ T7206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.829217][ T7206] RIP: 0033:0x7f830919e159 [ 172.829232][ T7206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.829246][ T7206] RSP: 002b:00007f830a04d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.829263][ T7206] RAX: ffffffffffffffda RBX: 00007f8309425fa0 RCX: 00007f830919e159 [ 172.829275][ T7206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 172.829285][ T7206] RBP: 00007f830a04d090 R08: 0000000000000000 R09: 0000000000000000 [ 172.829295][ T7206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.829305][ T7206] R13: 00007f8309426038 R14: 00007f8309425fa0 R15: 00007ffea0ef0318 [ 172.829329][ T7206] [ 173.159173][ T5710] usb 2-1: USB disconnect, device number 30 [ 173.237820][ T7210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.579167][ T7213] rust_binder: Read failure Err(EAGAIN) in pid:310 [ 173.991383][ T7218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 174.062993][ T7229] profile_transition: unconfined exec no attachment [ 174.088915][ T31] audit: type=1800 audit(1789503633.098:8): pid=7208 uid=0 auid=4294967295 ses=4294967295 subj=_unconfined op=collect_data cause=failed comm="syz.3.427" name="syzkaller0" dev="sda1" ino=2045 res=0 errno=0 [ 174.248705][ T7232] profile_transition: unconfined exec no attachment [ 174.451035][ T7233] profile_transition: unconfined exec no attachment [ 174.637049][ T7239] profile_transition: unconfined exec no attachment [ 175.406136][ T7255] profile_transition: unconfined exec no attachment [ 175.491720][ T7257] rust_binder: 7250:7257 got reply transaction with no transaction stack [ 175.491741][ T7257] rust_binder: 7250:7257 transaction reply to 0:0 failed EINVAL, code 0 size 104-24 [ 175.516072][ T9] rust_binder: 7250: undelivered TRANSACTION_ERROR: 29201 [ 175.599176][ T7258] profile_transition: unconfined exec no attachment [ 175.717937][ T7259] rust_binder: 7250:7259 got transaction to invalid handle 1 [ 175.717962][ T7259] rust_binder: 7250:7259 transaction call to 0:0 failed ENOENT, code 0 size 72-24 [ 175.718801][ T7261] profile_transition: unconfined exec no attachment [ 175.720174][ T7259] netlink: 16 bytes leftover after parsing attributes in process `syz.2.439'. [ 175.749782][ T5725] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 175.821537][ T7262] mmap: syz.1.442 (7262) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 175.882603][ T7264] profile_transition: unconfined exec no attachment [ 175.918062][ T5725] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 175.919463][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.919517][ T5725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.945296][ T5725] usb 4-1: config 0 descriptor?? [ 176.010599][ T7265] FAULT_INJECTION: forcing a failure. [ 176.010599][ T7265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.010623][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.0.443 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.010645][ T7265] Tainted: [L]=SOFTLOCKUP [ 176.010652][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.010662][ T7265] Call Trace: [ 176.010669][ T7265] [ 176.010677][ T7265] dump_stack_lvl+0xe8/0x150 [ 176.010703][ T7265] should_fail_ex+0x3eb/0x540 [ 176.010725][ T7265] _copy_from_user+0x2d/0xb0 [ 176.010748][ T7265] ___sys_sendmsg+0x1c6/0x360 [ 176.010767][ T7265] ? __lock_acquire+0x747/0x2de0 [ 176.010794][ T7265] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.010838][ T7265] ? __fget_files+0x2a/0x420 [ 176.010859][ T7265] ? __fget_files+0x3a2/0x420 [ 176.010887][ T7265] __x64_sys_sendmsg+0x1b1/0x290 [ 176.010908][ T7265] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 176.010941][ T7265] do_syscall_64+0x166/0x520 [ 176.010957][ T7265] ? trace_irq_disable+0x3b/0x140 [ 176.010981][ T7265] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.010998][ T7265] ? clear_bhb_loop+0x70/0xc0 [ 176.011045][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.011061][ T7265] RIP: 0033:0x7f390799e159 [ 176.011078][ T7265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.011093][ T7265] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.011111][ T7265] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 176.011124][ T7265] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 176.011134][ T7265] RBP: 00007f39088f4090 R08: 0000000000000000 R09: 0000000000000000 [ 176.011145][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.011155][ T7265] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 176.011179][ T7265] [ 176.109514][ T5725] pwc: Askey VC010 type 2 USB webcam detected. [ 176.196504][ T5710] rust_binder: 7250: undelivered TRANSACTION_ERROR: 29201 [ 176.500080][ T5725] pwc: recv_control_msg error -32 req 02 val 2b00 [ 176.501573][ T5725] pwc: recv_control_msg error -32 req 02 val 2700 [ 176.502764][ T5725] pwc: recv_control_msg error -32 req 02 val 2c00 [ 176.518842][ T5725] pwc: recv_control_msg error -32 req 04 val 1000 [ 176.548968][ T5725] pwc: recv_control_msg error -32 req 04 val 1300 [ 176.549790][ T5725] pwc: recv_control_msg error -32 req 04 val 1400 [ 176.752288][ T7270] ubi: bad wear-leveling threshold 813332851 [ 176.945047][ T978] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 177.063063][ T5725] pwc: recv_control_msg error -71 req 04 val 1500 [ 177.073226][ T5725] pwc: recv_control_msg error -71 req 02 val 2500 [ 177.085224][ T5725] pwc: recv_control_msg error -71 req 02 val 2400 [ 177.098263][ T5725] pwc: recv_control_msg error -71 req 02 val 2600 [ 177.098761][ T978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.098895][ T5725] pwc: recv_control_msg error -71 req 02 val 2900 [ 177.099412][ T5725] pwc: recv_control_msg error -71 req 02 val 2800 [ 177.099895][ T978] usb 3-1: not running at top speed; connect to a high speed hub [ 177.099917][ T978] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=59.3e [ 177.112630][ T978] usb 3-1: config 9 has an invalid interface number: 202 but max is 0 [ 177.112655][ T978] usb 3-1: config 9 has no interface number 0 [ 177.112681][ T978] usb 3-1: config 9 interface 202 has no altsetting 0 [ 177.121390][ T5725] pwc: recv_control_msg error -71 req 04 val 1100 [ 177.130199][ T5725] pwc: recv_control_msg error -71 req 04 val 1200 [ 177.203211][ T7276] net_ratelimit: 53 callbacks suppressed [ 177.230477][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.230493][ T978] usb 3-1: Product: syz [ 177.230504][ T978] usb 3-1: Manufacturer: syz [ 177.230516][ T978] usb 3-1: SerialNumber: syz [ 177.318784][ T7279] FAULT_INJECTION: forcing a failure. [ 177.318784][ T7279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.318809][ T7279] CPU: 0 UID: 0 PID: 7279 Comm: syz.1.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.318830][ T7279] Tainted: [L]=SOFTLOCKUP [ 177.318837][ T7279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 177.318847][ T7279] Call Trace: [ 177.318855][ T7279] [ 177.318862][ T7279] dump_stack_lvl+0xe8/0x150 [ 177.318891][ T7279] should_fail_ex+0x3eb/0x540 [ 177.318913][ T7279] _copy_from_user+0x2d/0xb0 [ 177.318935][ T7279] copy_from_sockptr+0x5e/0x90 [ 177.318964][ T7279] packet_setsockopt+0xbeb/0x1510 [ 177.318990][ T7279] ? __pfx_packet_setsockopt+0x10/0x10 [ 177.319017][ T7279] ? ksys_write+0x1e6/0x270 [ 177.319044][ T7279] ? aa_sk_perm+0x6ff/0x8f0 [ 177.319069][ T7279] ? __pfx_aa_sk_perm+0x10/0x10 [ 177.319088][ T7279] ? aa_sock_opt_perm+0x142/0x1e0 [ 177.319111][ T7279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 177.319130][ T7279] ? __pfx_packet_setsockopt+0x10/0x10 [ 177.319155][ T7279] do_sock_setsockopt+0x17c/0x1b0 [ 177.319176][ T7279] __x64_sys_setsockopt+0x13d/0x1b0 [ 177.319198][ T7279] do_syscall_64+0x166/0x520 [ 177.319217][ T7279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.319234][ T7279] ? clear_bhb_loop+0x70/0xc0 [ 177.319255][ T7279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.319271][ T7279] RIP: 0033:0x7fcde9d9e159 [ 177.319286][ T7279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.319301][ T7279] RSP: 002b:00007fcde7ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.319319][ T7279] RAX: ffffffffffffffda RBX: 00007fcdea025fa0 RCX: 00007fcde9d9e159 [ 177.319331][ T7279] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000004 [ 177.319342][ T7279] RBP: 00007fcde7ff6090 R08: 0000000000000004 R09: 0000000000000000 [ 177.319352][ T7279] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.319363][ T7279] R13: 00007fcdea026038 R14: 00007fcdea025fa0 R15: 00007ffd615e3338 [ 177.319387][ T7279] [ 177.599659][ T7280] profile_transition: unconfined exec no attachment [ 177.621663][ T5725] pwc: Registered as video103. [ 177.640903][ T5725] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11 [ 177.963230][ T5725] usb 4-1: USB disconnect, device number 29 [ 178.220522][ T978] usb 3-1: USB disconnect, device number 30 [ 178.312661][ T7289] FAULT_INJECTION: forcing a failure. [ 178.312661][ T7289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.312687][ T7289] CPU: 0 UID: 0 PID: 7289 Comm: syz.0.452 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.312713][ T7289] Tainted: [L]=SOFTLOCKUP [ 178.312720][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 178.312731][ T7289] Call Trace: [ 178.312737][ T7289] [ 178.312745][ T7289] dump_stack_lvl+0xe8/0x150 [ 178.312771][ T7289] should_fail_ex+0x3eb/0x540 [ 178.312793][ T7289] _copy_from_user+0x2d/0xb0 [ 178.312816][ T7289] ___sys_sendmsg+0x1c6/0x360 [ 178.312834][ T7289] ? __lock_acquire+0x747/0x2de0 [ 178.312862][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 178.312905][ T7289] ? __fget_files+0x2a/0x420 [ 178.312926][ T7289] ? __fget_files+0x3a2/0x420 [ 178.312953][ T7289] __x64_sys_sendmsg+0x1b1/0x290 [ 178.312974][ T7289] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 178.313007][ T7289] do_syscall_64+0x166/0x520 [ 178.313022][ T7289] ? trace_irq_disable+0x3b/0x140 [ 178.313047][ T7289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.313064][ T7289] ? clear_bhb_loop+0x70/0xc0 [ 178.313084][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.313101][ T7289] RIP: 0033:0x7f390799e159 [ 178.313116][ T7289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.313131][ T7289] RSP: 002b:00007f39088f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.313149][ T7289] RAX: ffffffffffffffda RBX: 00007f3907c25fa0 RCX: 00007f390799e159 [ 178.313161][ T7289] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 178.313172][ T7289] RBP: 00007f39088f4090 R08: 0000000000000000 R09: 0000000000000000 [ 178.313183][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.313193][ T7289] R13: 00007f3907c26038 R14: 00007f3907c25fa0 R15: 00007ffc3bd394b8 [ 178.313217][ T7289] [ 178.441774][ T5710] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 178.686481][ T5710] usb 2-1: unable to get BOS descriptor or descriptor too short [ 178.686514][ T5710] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 178.691024][ T5710] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 178.732951][ T5710] usb 2-1: string descriptor 0 read error: -22 [ 178.733056][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.897047][ T5710] usb 2-1: unit 101 not found! [ 178.897066][ T5710] usb 2-1: unit 102 not found! [ 179.063325][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.202/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.325101][ T978] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 179.478836][ T978] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 179.500093][ T978] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.500109][ T978] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 179.500177][ T978] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 179.602404][ T978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.602420][ T978] usb 3-1: Product: syz [ 179.602431][ T978] usb 3-1: Manufacturer: syz [ 179.602443][ T978] usb 3-1: SerialNumber: syz [ 179.973655][ T7307] FAULT_INJECTION: forcing a failure. [ 179.973655][ T7307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.973678][ T7307] CPU: 0 UID: 0 PID: 7307 Comm: syz.3.459 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.973701][ T7307] Tainted: [L]=SOFTLOCKUP [ 179.973707][ T7307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.973718][ T7307] Call Trace: [ 179.973725][ T7307] [ 179.973733][ T7307] dump_stack_lvl+0xe8/0x150 [ 179.973761][ T7307] should_fail_ex+0x3eb/0x540 [ 179.973784][ T7307] set_fd_set+0x3a/0xa0 [ 179.973803][ T7307] core_sys_select+0x9f7/0xb40 [ 179.973832][ T7307] ? __pfx_core_sys_select+0x10/0x10 [ 179.973868][ T7307] ? __pfx_set_user_sigmask+0x10/0x10 [ 179.973889][ T7307] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 179.973912][ T7307] __se_sys_pselect6+0x267/0x320 [ 179.973936][ T7307] ? __pfx___se_sys_pselect6+0x10/0x10 [ 179.973961][ T7307] ? __x64_sys_pselect6+0x21/0xf0 [ 179.973982][ T7307] do_syscall_64+0x166/0x520 [ 179.973998][ T7307] ? trace_irq_disable+0x3b/0x140 [ 179.974022][ T7307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.974046][ T7307] ? clear_bhb_loop+0x70/0xc0 [ 179.974067][ T7307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.974084][ T7307] RIP: 0033:0x7fe9d039e159 [ 179.974100][ T7307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.974116][ T7307] RSP: 002b:00007fe9d1226028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 179.974134][ T7307] RAX: ffffffffffffffda RBX: 00007fe9d0625fa0 RCX: 00007fe9d039e159 [ 179.974147][ T7307] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.974158][ T7307] RBP: 00007fe9d043503b R08: 0000200000000340 R09: 0000000000000000 [ 179.974169][ T7307] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 179.974180][ T7307] R13: 00007fe9d0626038 R14: 00007fe9d0625fa0 R15: 00007ffe3ab86778 [ 179.974204][ T7307] [ 180.609742][ T5710] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 180.689740][ T5710] usb 2-1: USB disconnect, device number 31 [ 180.923540][ T7319] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 180.923580][ T7319] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 181.288800][ T978] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 181.288831][ T978] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 181.288847][ T978] usb 3-1: 1:1 : sample bitwidth 128 in over sample bytes 2 [ 181.288867][ T978] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 181.289468][ T978] usb 3-1: 0:2 : does not exist [ 181.651608][ T978] usb 3-1: USB disconnect, device number 31 [ 181.797882][ T7320] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 181.823416][ T7326] FAULT_INJECTION: forcing a failure. [ 181.823416][ T7326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.823454][ T7326] CPU: 0 UID: 0 PID: 7326 Comm: syz.3.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.823477][ T7326] Tainted: [L]=SOFTLOCKUP [ 181.823483][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.823493][ T7326] Call Trace: [ 181.823500][ T7326] [ 181.823508][ T7326] dump_stack_lvl+0xe8/0x150 [ 181.823536][ T7326] should_fail_ex+0x3eb/0x540 [ 181.823558][ T7326] copy_fpstate_to_sigframe+0xa83/0xd20 [ 181.823583][ T7326] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 181.823608][ T7326] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 181.823632][ T7326] ? ktime_get+0x45/0x220 [ 181.823657][ T7326] ? ktime_get+0x45/0x220 [ 181.823679][ T7326] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 181.823703][ T7326] ? ktime_get+0x1f5/0x220 [ 181.823730][ T7326] ? fpu__alloc_mathframe+0xac/0x130 [ 181.823752][ T7326] get_sigframe+0x603/0x830 [ 181.823778][ T7326] ? __pfx_get_sigframe+0x10/0x10 [ 181.823808][ T7326] x64_setup_rt_frame+0x163/0xc50 [ 181.823835][ T7326] ? _raw_spin_unlock_irq+0x2e/0x50 [ 181.823858][ T7326] ? get_signal+0x10d8/0x12c0 [ 181.823890][ T7326] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 181.823919][ T7326] arch_do_signal_or_restart+0x456/0x860 [ 181.823943][ T7326] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 181.823978][ T7326] exit_to_user_mode_loop+0x10e/0x770 [ 181.824002][ T7326] ? rcu_is_watching+0x16/0xb0 [ 181.824022][ T7326] do_syscall_64+0x328/0x520 [ 181.824038][ T7326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.824055][ T7326] ? clear_bhb_loop+0x70/0xc0 [ 181.824075][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.824091][ T7326] RIP: 0033:0x7fe9d039e157 [ 181.824106][ T7326] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 181.824121][ T7326] RSP: 002b:00007fe9d12260e8 EFLAGS: 00000246 [ 181.824136][ T7326] RAX: 00000000000000ca RBX: 00007fe9d0625fa8 RCX: 00007fe9d039e159 [ 181.824148][ T7326] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe9d0625fa8 [ 181.824158][ T7326] RBP: 00007fe9d0625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 181.824169][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.824179][ T7326] R13: 00007fe9d0626038 R14: 00007ffe3ab86690 R15: 00007ffe3ab86778 [ 181.824203][ T7326] [ 182.244886][ C0] net_ratelimit: 485 callbacks suppressed [ 182.381763][ T7202] udevd[7202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.554785][ C0] sched: DL replenish lagged too much [ 187.258086][ T5700] net_ratelimit: 10 callbacks suppressed [ 192.649943][ T5722] net_ratelimit: 10 callbacks suppressed [ 194.966195][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.976247][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.497272][ T153] net_ratelimit: 11 callbacks suppressed [ 203.527135][ C0] net_ratelimit: 27 callbacks suppressed [ 209.171818][ T5627] Bluetooth: hci1: command 0x0406 tx timeout [ 209.171858][ T5627] Bluetooth: hci2: command 0x0406 tx timeout [ 210.367509][ T3382] net_ratelimit: 20 callbacks suppressed [ 220.600044][ T3382] net_ratelimit: 20 callbacks suppressed [ 241.286681][ C0] net_ratelimit: 20 callbacks suppressed [ 256.105093][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115314][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.448100][ C0] net_ratelimit: 14 callbacks suppressed [ 317.547272][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.558337][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.798455][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 317.805415][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7336/1:b..l P7333/1:b..l P5612/1:b..l P4985/1:b..l [ 317.816776][ C0] rcu: (detected by 0, t=10502 jiffies, g=33973, q=1138 ncpus=1) [ 317.824600][ C0] task:udevd state:R running task stack:21672 pid:4985 tgid:4985 ppid:1 task_flags:0x400140 flags:0x00080000 [ 317.838221][ C0] Call Trace: [ 317.841526][ C0] [ 317.844478][ C0] __schedule+0x17dd/0x5940 [ 317.849038][ C0] ? __lock_acquire+0x747/0x2de0 [ 317.854021][ C0] ? __lock_acquire+0x747/0x2de0 [ 317.858980][ C0] ? __pfx___schedule+0x10/0x10 [ 317.863868][ C0] ? __lock_acquire+0x747/0x2de0 [ 317.868854][ C0] preempt_schedule_irq+0x4b/0x90 [ 317.873939][ C0] irqentry_exit+0x14f/0x910 [ 317.878573][ C0] ? trace_irq_disable+0x3b/0x140 [ 317.883636][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 317.889642][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 317.894962][ C0] Code: ff ff ff e8 90 f9 52 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 e2 f4 18 12 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 ff 05 56 0a cc 48 8d 3d 27 8f fb [ 317.914598][ C0] RSP: 0018:ffffc900025c7168 EFLAGS: 00000282 [ 317.920945][ C0] RAX: 6da0793d44d50000 RBX: 0000000000000000 RCX: 0000000000000046 [ 317.929022][ C0] RDX: 00000000825cbb49 RSI: ffffffff8e82b24f RDI: ffffffff8c6f0580 [ 317.937018][ C0] RBP: ffff88807e6b0000 R08: ffffffff817821df R09: 0000000000000000 [ 317.945017][ C0] R10: ffffc900025c72f8 R11: fffff520004b8e61 R12: ffffffff8ef5c7a0 [ 317.952997][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 317.961022][ C0] ? unwind_next_frame+0x8f/0x2550 [ 317.966262][ C0] ? arch_stack_walk+0xe3/0x150 [ 317.971142][ C0] ? unwind_next_frame+0x8f/0x2550 [ 317.976496][ C0] unwind_next_frame+0xac/0x2550 [ 317.981450][ C0] ? unwind_next_frame+0x8f/0x2550 [ 317.986595][ C0] ? __unwind_start+0xed/0x660 [ 317.991368][ C0] ? unwind_next_frame+0x8f/0x2550 [ 317.996510][ C0] __unwind_start+0x514/0x660 [ 318.001199][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.007394][ C0] arch_stack_walk+0xe3/0x150 [ 318.012105][ C0] ? arch_stack_walk+0xe3/0x150 [ 318.016987][ C0] stack_trace_save+0xa9/0x100 [ 318.021797][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.027210][ C0] save_stack+0x122/0x230 [ 318.031555][ C0] ? __pfx_save_stack+0x10/0x10 [ 318.036434][ C0] ? page_ext_put+0x97/0xc0 [ 318.040951][ C0] __reset_page_owner+0x71/0x1f0 [ 318.045921][ C0] __free_frozen_pages+0xc93/0xd90 [ 318.051058][ C0] __slab_free+0x274/0x2c0 [ 318.055502][ C0] qlist_free_all+0x99/0x100 [ 318.060202][ C0] kasan_quarantine_reduce+0x148/0x160 [ 318.065690][ C0] __kasan_kmalloc+0x22/0xb0 [ 318.070310][ C0] __kmalloc_noprof+0x366/0x710 [ 318.075277][ C0] ? __kmalloc_noprof+0x1a6/0x710 [ 318.080322][ C0] ? tomoyo_encode+0x2ad/0x570 [ 318.085098][ C0] ? tomoyo_encode+0x2ad/0x570 [ 318.089977][ C0] tomoyo_encode+0x2ad/0x570 [ 318.094614][ C0] tomoyo_realpath_from_path+0x5fa/0x640 [ 318.100380][ C0] tomoyo_path_perm+0x283/0x560 [ 318.105253][ C0] ? tomoyo_path_perm+0x251/0x560 [ 318.110303][ C0] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 318.115754][ C0] security_inode_getattr+0x12b/0x310 [ 318.121181][ C0] vfs_getattr+0x23/0x70 [ 318.125463][ C0] vfs_statx_path+0x2b/0x230 [ 318.130073][ C0] ? vfs_statx+0x107/0x200 [ 318.134545][ C0] vfs_statx+0x12e/0x200 [ 318.138806][ C0] ? __pfx_vfs_statx+0x10/0x10 [ 318.143589][ C0] ? strncpy_from_user+0x150/0x2c0 [ 318.148806][ C0] ? do_getname+0x151/0x250 [ 318.153329][ C0] vfs_fstatat+0x11b/0x170 [ 318.157761][ C0] __se_sys_newfstatat+0x118/0x3a0 [ 318.162897][ C0] ? __pfx___se_sys_newfstatat+0x10/0x10 [ 318.168551][ C0] ? __pfx_ep_autoremove_wake_function+0x10/0x10 [ 318.174914][ C0] ? rcu_is_watching+0x16/0xb0 [ 318.179720][ C0] do_syscall_64+0x166/0x520 [ 318.184336][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.190440][ C0] ? clear_bhb_loop+0x70/0xc0 [ 318.195175][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.201084][ C0] RIP: 0033:0x7f098a111b0a [ 318.205509][ C0] RSP: 002b:00007ffddbe8e918 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 318.213929][ C0] RAX: ffffffffffffffda RBX: 0000562fc25c0418 RCX: 00007f098a111b0a [ 318.221997][ C0] RDX: 00007ffddbe8e920 RSI: 0000562fc25aeef3 RDI: 00000000ffffff9c [ 318.229981][ C0] RBP: 0000562fdfeb2198 R08: 00065b8b3ff1fb8e R09: 3fffffffffffffff [ 318.237991][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.246012][ C0] R13: 00007ffddbe8e920 R14: 0000000000000000 R15: 00065b8b3ff1fb8e [ 318.254051][ C0] [ 318.257116][ C0] task:syz-executor state:R running task stack:24296 pid:5612 tgid:5612 ppid:5606 task_flags:0x40050c flags:0x00080002 [ 318.270612][ C0] Call Trace: [ 318.273907][ C0] [ 318.276872][ C0] __schedule+0x17dd/0x5940 [ 318.281434][ C0] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 318.287472][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 318.293847][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.298985][ C0] ? __pfx___schedule+0x10/0x10 [ 318.303865][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 318.309265][ C0] preempt_schedule_common+0x7f/0xd0 [ 318.314670][ C0] preempt_schedule_thunk+0x16/0x40 [ 318.319902][ C0] _raw_spin_unlock+0x41/0x50 [ 318.324608][ C0] __zap_vma_range+0x40e1/0x4f70 [ 318.329633][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 318.334952][ C0] ? mas_find+0x6d6/0xcb0 [ 318.339297][ C0] unmap_vmas+0x38b/0x550 [ 318.343742][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 318.348617][ C0] ? mas_next_slot+0xc91/0xd70 [ 318.353631][ C0] exit_mmap+0x293/0x9f0 [ 318.357900][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 318.362710][ C0] ? __pfx_exit_aio+0x10/0x10 [ 318.367415][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 318.372836][ C0] __mmput+0x118/0x420 [ 318.376915][ C0] exit_mm+0x221/0x2d0 [ 318.381020][ C0] do_exit+0x6cd/0x2360 [ 318.385198][ C0] ? __pfx_do_exit+0x10/0x10 [ 318.389819][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.394880][ C0] do_group_exit+0x22d/0x2f0 [ 318.399617][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.404855][ C0] get_signal+0x1216/0x12c0 [ 318.409416][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 318.414979][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 318.420355][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.425593][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.431878][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 318.437284][ C0] ? rcu_is_watching+0x16/0xb0 [ 318.442078][ C0] do_syscall_64+0x328/0x520 [ 318.446675][ C0] ? trace_irq_disable+0x3b/0x140 [ 318.451711][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.457802][ C0] ? clear_bhb_loop+0x70/0xc0 [ 318.462679][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.468636][ C0] RIP: 0033:0x7f39079592d7 [ 318.473080][ C0] RSP: 002b:00007ffc3bd399a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 318.481618][ C0] RAX: fffffffffffffe00 RBX: 00005555889a5500 RCX: 00007f39079592d7 [ 318.489628][ C0] RDX: 0000000040000000 RSI: 00007ffc3bd399fc RDI: ffffffffffffffff [ 318.497646][ C0] RBP: 00007ffc3bd399fc R08: 0000000000000000 R09: 0000000000000000 [ 318.505819][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 318.513823][ C0] R13: 0000000000000003 R14: 00007ffc3bd39c58 R15: 0000000000000000 [ 318.521940][ C0] [ 318.524986][ C0] task:syz.3.469 state:R running task stack:26888 pid:7333 tgid:7331 ppid:5618 task_flags:0x40044c flags:0x00080002 [ 318.538822][ C0] Call Trace: [ 318.542220][ C0] [ 318.545187][ C0] __schedule+0x17dd/0x5940 [ 318.549766][ C0] ? __lock_acquire+0x747/0x2de0 [ 318.554786][ C0] ? __lock_acquire+0x747/0x2de0 [ 318.559752][ C0] ? __pfx___schedule+0x10/0x10 [ 318.564636][ C0] preempt_schedule_irq+0x4b/0x90 [ 318.569684][ C0] irqentry_exit+0x14f/0x910 [ 318.574333][ C0] ? trace_irq_disable+0x3b/0x140 [ 318.579394][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 318.585428][ C0] RIP: 0010:unwind_next_frame+0x4f8/0x2550 [ 318.591281][ C0] Code: f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe 49 8d 1c 47 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 <48> 63 03 48 01 d8 48 8d 4b 04 48 39 e8 4c 0f 46 f9 48 8d 43 fc 4c [ 318.611024][ C0] RSP: 0018:ffffc9000382f0e0 EFLAGS: 00000246 [ 318.617117][ C0] RAX: 0000000000000000 RBX: ffffffff91281048 RCX: dffffc0000000000 [ 318.625125][ C0] RDX: ffffffff91281044 RSI: ffffffff91e14a28 RDI: ffffffff8c6f0520 [ 318.633141][ C0] RBP: ffffffff8bf5d3d7 R08: 0000000000000003 R09: 0000000000000000 [ 318.641162][ C0] R10: ffffc9000382f1d8 R11: ffffffff81b2b760 R12: ffffffff9128104c [ 318.649243][ C0] R13: ffffffff91281044 R14: ffffc9000382f188 R15: ffffffff91281044 [ 318.657297][ C0] ? do_syscall_64+0x327/0x520 [ 318.662099][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.668290][ C0] ? do_syscall_64+0x328/0x520 [ 318.673671][ C0] ? unwind_next_frame+0x8f/0x2550 [ 318.678881][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 318.685137][ C0] arch_stack_walk+0x11b/0x150 [ 318.689955][ C0] ? do_syscall_64+0x328/0x520 [ 318.694908][ C0] stack_trace_save+0xa9/0x100 [ 318.699708][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 318.705150][ C0] kasan_save_track+0x3e/0x80 [ 318.709846][ C0] ? kasan_save_track+0x3e/0x80 [ 318.714709][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 318.719474][ C0] ? __kmalloc_cache_noprof+0x31c/0x600 [ 318.725044][ C0] ? kmem_cache_free+0x156/0x650 [ 318.730051][ C0] ? __put_anon_vma+0x126/0x2d0 [ 318.734945][ C0] ? unlink_anon_vmas+0x544/0x720 [ 318.740038][ C0] ? free_pgtables+0x836/0xb70 [ 318.744986][ C0] ? exit_mmap+0x4aa/0x9f0 [ 318.749450][ C0] ? __mmput+0x118/0x420 [ 318.753738][ C0] ? exit_mm+0x221/0x2d0 [ 318.758056][ C0] ? do_exit+0x6cd/0x2360 [ 318.762419][ C0] ? do_group_exit+0x22d/0x2f0 [ 318.767212][ C0] ? get_signal+0x1216/0x12c0 [ 318.772381][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 318.778134][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 318.783706][ C0] ? do_syscall_64+0x328/0x520 [ 318.788506][ C0] ? rcu_is_watching+0x16/0xb0 [ 318.793294][ C0] __kasan_kmalloc+0x93/0xb0 [ 318.797891][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 318.803296][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 318.808858][ C0] ? kmem_cache_free+0x156/0x650 [ 318.813805][ C0] ? kmem_cache_free+0x156/0x650 [ 318.818755][ C0] ? __put_anon_vma+0x126/0x2d0 [ 318.823699][ C0] kmem_cache_free+0x156/0x650 [ 318.828498][ C0] __put_anon_vma+0x126/0x2d0 [ 318.833204][ C0] unlink_anon_vmas+0x544/0x720 [ 318.838097][ C0] free_pgtables+0x836/0xb70 [ 318.842706][ C0] ? lock_acquire+0x115/0x350 [ 318.847406][ C0] ? __pfx_free_pgtables+0x10/0x10 [ 318.852551][ C0] ? __pfx_down_write+0x10/0x10 [ 318.857421][ C0] exit_mmap+0x4aa/0x9f0 [ 318.861685][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 318.866491][ C0] ? __pfx_exit_aio+0x10/0x10 [ 318.871212][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 318.876423][ C0] __mmput+0x118/0x420 [ 318.880499][ C0] exit_mm+0x221/0x2d0 [ 318.884596][ C0] do_exit+0x6cd/0x2360 [ 318.888802][ C0] ? __pfx_do_exit+0x10/0x10 [ 318.893413][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.898544][ C0] do_group_exit+0x22d/0x2f0 [ 318.903153][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.908384][ C0] get_signal+0x1216/0x12c0 [ 318.912920][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 318.918485][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.924657][ C0] ? __fget_files+0x2a/0x420 [ 318.929285][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 318.934686][ C0] ? rcu_is_watching+0x16/0xb0 [ 318.939481][ C0] do_syscall_64+0x328/0x520 [ 318.944099][ C0] ? trace_irq_disable+0x3b/0x140 [ 318.949145][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.955225][ C0] ? clear_bhb_loop+0x70/0xc0 [ 318.959916][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.965848][ C0] RIP: 0033:0x7fe9d039ddeb [ 318.970287][ C0] RSP: 002b:00007fe9d1223f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 318.978795][ C0] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007fe9d039ddeb [ 318.986799][ C0] RDX: 00007fe9d1224fd0 RSI: 0000000080085502 RDI: 0000000000000004 [ 318.994804][ C0] RBP: 00007fe9d1224fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 319.002955][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 319.010950][ C0] R13: 0000000800000000 R14: 0000000000000000 R15: 00007fe9d045393f [ 319.018945][ C0] [ 319.021972][ C0] task:syz.2.470 state:R running task stack:26760 pid:7336 tgid:7332 ppid:5617 task_flags:0x40044c flags:0x00080002 [ 319.035481][ C0] Call Trace: [ 319.038868][ C0] [ 319.041834][ C0] __schedule+0x17dd/0x5940 [ 319.046397][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.051444][ C0] ? __pfx___schedule+0x10/0x10 [ 319.056342][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 319.061734][ C0] preempt_schedule_common+0x7f/0xd0 [ 319.067062][ C0] preempt_schedule_thunk+0x16/0x40 [ 319.072304][ C0] _raw_spin_unlock+0x41/0x50 [ 319.077007][ C0] __zap_vma_range+0x40e1/0x4f70 [ 319.082022][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 319.087343][ C0] ? mas_find+0x6d6/0xcb0 [ 319.091737][ C0] unmap_vmas+0x38b/0x550 [ 319.096096][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 319.101001][ C0] ? mas_next_slot+0xc91/0xd70 [ 319.105831][ C0] exit_mmap+0x293/0x9f0 [ 319.110109][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 319.114907][ C0] ? __pfx_exit_aio+0x10/0x10 [ 319.119648][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 319.124913][ C0] __mmput+0x118/0x420 [ 319.129014][ C0] exit_mm+0x221/0x2d0 [ 319.133102][ C0] do_exit+0x6cd/0x2360 [ 319.137288][ C0] ? __pfx_do_exit+0x10/0x10 [ 319.141921][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.146962][ C0] do_group_exit+0x22d/0x2f0 [ 319.151568][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.156817][ C0] get_signal+0x1216/0x12c0 [ 319.161353][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 319.166913][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 319.173102][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 319.179296][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.184343][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 319.189733][ C0] ? rcu_is_watching+0x16/0xb0 [ 319.194548][ C0] ret_from_fork+0x593/0xb70 [ 319.199183][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 319.204308][ C0] ? __switch_to+0xc89/0x1420 [ 319.209104][ C0] ret_from_fork_asm+0x1a/0x30 [ 319.214025][ C0]