last executing test programs: 1m11.370830548s ago: executing program 3 (id=62): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r0) 1m11.283570091s ago: executing program 3 (id=63): openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x141042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) fallocate(r0, 0x10, 0x0, 0x8d) 1m11.228348792s ago: executing program 3 (id=64): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000680)={0xffffffffffffffff}, 0x111, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, r1, 0x1}}, 0x48) 1m11.154435643s ago: executing program 3 (id=65): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000c80)='my_tracefs\x00', &(0x7f0000000cc0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000011c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000001200)='.\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x0) umount2(&(0x7f0000001280)='./file0\x00', 0x9) 1m11.031639706s ago: executing program 3 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.727360654s ago: executing program 3 (id=70): r0 = socket(0x1f, 0x3, 0x1) bind(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000000c0)={0x20, 0x0, 0x2, "805f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m10.582937707s ago: executing program 32 (id=70): r0 = socket(0x1f, 0x3, 0x1) bind(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000040)={0x34, &(0x7f00000000c0)={0x20, 0x0, 0x2, "805f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.630587162s ago: executing program 1 (id=390): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) r2 = syz_open_dev$sg(&(0x7f0000000bc0), 0x0, 0x8002) readv(r2, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/128, 0x80}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) 6.737074984s ago: executing program 1 (id=402): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001400)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 6.322341934s ago: executing program 4 (id=409): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f0000000140)=0x1) 5.786466378s ago: executing program 5 (id=414): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x1111, @loopback}, 0x10) listen(r0, 0x1) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write(r1, &(0x7f0000000140)='nqn=test,transport=tcp,traddr=127.0.0.1,trsvcid=4369,hdr_digest,data_digest', 0x4b) r2 = accept$inet(r0, 0x0, 0x0) write(r2, &(0x7f00000001c0)="03008000800000000000000200004000110da706651361001e00000000000000000000000000000000000000000000000003000b000000000000000000de393d00bc00000000000000000005000040000000000000000000000000000000000000000000000000001000"/128, 0x80) 5.665024541s ago: executing program 5 (id=415): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x1a0001) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x183c81) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.730071243s ago: executing program 2 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x24008840}, 0x0) 4.317872623s ago: executing program 4 (id=422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'syzkaller1\x00', {0x2}, 0x3}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="000088f51280c2002003bbbbbbbbbbbb88a8000081"], 0x3a) 4.122726018s ago: executing program 4 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='/proc/self/cwd/test_file,', 0x19) 3.999477161s ago: executing program 1 (id=426): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dce, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x800003, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0xa, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x0, 0x9, 0xffffffff, 0x5, 0x81, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x4, 0x5, 0x491, 0x9, 0x8, 0x1, 0x400, 0x102, 0x1, 0x41, 0x5, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1001, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x1000, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xb, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.999149061s ago: executing program 4 (id=427): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0xfffffffffffffdf4}], 0x1, 0x3b, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000000000000000010000005c00018006000100020000000600020011000000140003007f000001"], 0x70}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x3ed, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.838449955s ago: executing program 2 (id=430): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000), 0x0, 0x20c202) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, 0x0, 0x4000) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xa8002, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x1000000, 0xa54820b2aab199de, r1, 0xfd337000) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)="dd950d1df66887159a5b8c78e7284b8e367eafd5f234955292c25651bbc945f3651852f46cad7b0fc91efcb99dc012c03392261dd9fe28672d49ec45e2ca161afb54965271c91b046a17f170fd60bc14490507443bf9ec8abe3980e61b47272de2adea602059a31a2ce80ca13e78c74f5b7690833a05959dea0d9600b0c08472bf6a811c3dc60d9c488fc5b27a4246bd5af0c7d8d569c2d8ce8077ba5551832549", 0xa1}, {&(0x7f00000004c0)="2e3c540b0546b15ebf28cd6a29c124709db201b10c5ad650cc411716580a4ba92f4af566a4416b51af27c69a2a9e7f4aba1cd07218bec33d1f8fe12d770aa97ec5944e6f49073be0b29aba2f29f8cd8a01234afcd366ca59a3a51b443e17533130910091d7fd7be492a4dbbcb80afa6b9b11ca56aa6b0970b824fab7de885540f8b4f9cb177fb7437fa4c3d48bd517dbeebe49bf9e58f6759aa7e90c93d9ebc972387dc795d422424a24df1e8af1", 0xae}, {0x0}, {0x0}, {0x0}], 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./gadget\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000bc0)="0000000008020900010100803212010002000000402505a0a4000100000002", 0x1f) sendmsg$NFT_BATCH(r0, &(0x7f0000000a80)={&(0x7f0000000940), 0xc, &(0x7f0000000a40)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040090) 3.663881279s ago: executing program 2 (id=432): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)="3c5c0f2397b4d84500b5f812365f00000000000000", 0xff40) 3.65169231s ago: executing program 5 (id=433): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracefs\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracefs/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)='p:p1 ./file0:0', 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000540)='p:-_st/event1 ./file0:0', 0x17) 3.591513572s ago: executing program 0 (id=434): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, 0xffffffffffffffff, 0x8001}}, 0x48) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffff9, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.496268974s ago: executing program 5 (id=435): syz_open_dev$hiddev(&(0x7f0000000040), 0x3754f0c4, 0x509002) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 3.341351427s ago: executing program 0 (id=436): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000140)=0x0) io_submit(r0, 0x2, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}, 0x0]) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) dup(r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000002c0)={{0x1, 0x0, 0xa63}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYRES16=r3], 0x70}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000640)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x3ed, 0x3, 0x1000045, 0xfffc, 0x9, 0xf, 0x6, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 3.011597486s ago: executing program 4 (id=437): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000100)={0x0, 0x0, 0x6, "5401471e4720"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x20, 0x11, 0x4, "77d56fb8"}, 0x0, 0x0, 0x0, 0x0}) 3.010442266s ago: executing program 0 (id=438): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) socket$packet(0x11, 0x3, 0x300) pipe2$9p(0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x411) 2.959321007s ago: executing program 1 (id=439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x2c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 2.921733208s ago: executing program 1 (id=440): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0xfd, 0x51, 0x5c, 0x8, 0x2013, 0x25c, 0xa4f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x5, 0x20, 0xb, "", [{{0x9, 0x4, 0x7e, 0x9, 0x0, 0xf0, 0x9e, 0x6a, 0x5}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) setpriority(0x2, 0xffffffffffffffff, 0x6) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000340)={0x0, 0x31, 0x1, "ad"}, 0x0, 0x0, 0x0, 0x0}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) listen(0xffffffffffffffff, 0x4bf) syz_open_dev$video4linux(0x0, 0xffffffffffffffff, 0x401) rt_tgsigqueueinfo(0x0, 0x0, 0x39, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x40000) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001580)={0x2c, &(0x7f0000001380)={0x0, 0x10, 0x9, "ae1d21c922be2cb763"}, 0x0, 0x0, 0x0, 0x0}) 2.871637999s ago: executing program 0 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='10', 0x2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000580)="308201", 0x3, 0xfffffffffffffffd) 2.463216989s ago: executing program 0 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x6}}, 0x6}, 0x1c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="f7790066baa00066b86b42460f22c7d466ba420000b8e20066ef0f29902cbb0000c4e2b1ba8c88d90000006666f6440f386b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x38, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0xf84, 0x8, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.61722949s ago: executing program 2 (id=443): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mount(0x0, &(0x7f0000000440)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000300)='configfs\x00', 0x2208800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='dummy_udc.0', 0xb) 1.467514624s ago: executing program 2 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x80, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000000740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002780)={0x50, 0x0, r1, {0x7, 0x29, 0x3, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002800)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f0000002840)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000004840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004900)={0x20, 0x0, 0x0, {0x0, 0x34}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 1.467171404s ago: executing program 0 (id=445): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x31, 0x2, "a6d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 640.652174ms ago: executing program 2 (id=446): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2c000000110005000100000000000000000000000000000000000000000000000c0003006261746164763000", 0x2c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000090024206d041cc340000001000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 247.788123ms ago: executing program 1 (id=447): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x5) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f00000001c0)="900100"/64) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000200)) 130.001656ms ago: executing program 5 (id=448): r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x40, 0x40000) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000500)=""/95) 47.610618ms ago: executing program 4 (id=449): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 5 (id=450): syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043ef50dc201f6fdfffffffffffffffa20b7249a4708cc75ce878b576d421801a8ef3ee831ecb080c2db29ba115d99abebacd9d8ba43296faa2d45da6c1c27d7395664503112d5d156d95be953d530d1fc292b02cce7fe5b6ebfd546560ec99114e506ddf0db33e7001cf3ce63e399d716d4b0e9cf1d559293dcbd70af8d310f44b10ee0ef6ded4c8c8196c1"], 0xf8) kernel console output (not intermixed with test programs): 8][ T4616] ? load_image+0x410/0x410 [ 80.335187][ T4616] ? __might_sleep+0xf0/0xf0 [ 80.339782][ T4616] ? __lock_acquire+0x7d40/0x7d40 [ 80.344810][ T4616] ? lockdep_hardirqs_on+0x94/0x140 [ 80.350015][ T4616] should_fail+0x383/0x4b0 [ 80.354439][ T4616] should_failslab+0x5/0x20 [ 80.358950][ T4616] slab_pre_alloc_hook+0x51/0xc0 [ 80.363905][ T4616] ? __d_alloc+0x27/0x6d0 [ 80.368244][ T4616] kmem_cache_alloc+0x3d/0x280 [ 80.373027][ T4616] __d_alloc+0x27/0x6d0 [ 80.377184][ T4616] ? d_alloc_pseudo+0xe/0x70 [ 80.381782][ T4616] d_alloc_pseudo+0x19/0x70 [ 80.386296][ T4616] alloc_file_pseudo+0xe0/0x200 [ 80.391156][ T4616] ? alloc_empty_file_noaccount+0x80/0x80 [ 80.396886][ T4616] ? alloc_fd+0x59e/0x650 [ 80.401222][ T4616] sock_alloc_file+0xb3/0x240 [ 80.405909][ T4616] __sys_socket+0x11d/0x170 [ 80.410420][ T4616] __x64_sys_socket+0x76/0x80 [ 80.415261][ T4616] do_syscall_64+0x4c/0xa0 [ 80.419691][ T4616] ? clear_bhb_loop+0x30/0x80 [ 80.424372][ T4616] ? clear_bhb_loop+0x30/0x80 [ 80.429059][ T4616] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 80.434960][ T4616] RIP: 0033:0x7f1d3b709559 [ 80.439382][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.458993][ T4616] RSP: 002b:00007f1d39961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 80.467416][ T4616] RAX: ffffffffffffffda RBX: 00007f1d3b990fa0 RCX: 00007f1d3b709559 [ 80.475394][ T4616] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 80.483364][ T4616] RBP: 00007f1d3b7a08b0 R08: 0000000000000000 R09: 0000000000000000 [ 80.491339][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.499311][ T4616] R13: 00007f1d3b991038 R14: 00007f1d3b990fa0 R15: 00007ffe234b4a18 [ 80.507308][ T4616] [ 80.545268][ T4266] pwc: recv_control_msg error -32 req 02 val 2b00 [ 80.595493][ T4266] pwc: recv_control_msg error -32 req 02 val 2700 [ 80.685465][ T4266] pwc: recv_control_msg error -32 req 02 val 2c00 [ 80.780908][ T4266] pwc: recv_control_msg error -32 req 04 val 1000 [ 80.867459][ T4266] pwc: recv_control_msg error -32 req 04 val 1300 [ 80.956159][ T4266] pwc: recv_control_msg error -32 req 04 val 1400 [ 81.035477][ T4266] pwc: recv_control_msg error -32 req 02 val 2000 [ 81.125342][ T4266] pwc: recv_control_msg error -32 req 02 val 2100 [ 81.205531][ T4266] pwc: recv_control_msg error -32 req 04 val 1500 [ 81.285963][ T4266] pwc: recv_control_msg error -32 req 02 val 2500 [ 81.347639][ T680] team0 (unregistering): Port device team_slave_1 removed [ 81.376565][ T4266] pwc: recv_control_msg error -32 req 02 val 2400 [ 81.445359][ T4266] pwc: recv_control_msg error -32 req 02 val 2600 [ 81.458838][ T1323] cfg80211: failed to load regulatory.db [ 81.555274][ T4266] pwc: recv_control_msg error -32 req 02 val 2900 [ 81.635221][ T4266] pwc: recv_control_msg error -32 req 02 val 2800 [ 81.705331][ T4266] pwc: recv_control_msg error -32 req 04 val 1100 [ 81.773901][ T4266] pwc: Registered as video103. [ 81.827511][ T4266] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 81.851238][ T680] team0 (unregistering): Port device team_slave_0 removed [ 81.969657][ T4174] usb 2-1: USB disconnect, device number 5 [ 82.042745][ T680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.227037][ T680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.334999][ T4259] Bluetooth: hci4: command 0x040f tx timeout [ 82.421033][ T4686] ======================================================= [ 82.421033][ T4686] WARNING: The mand mount option has been deprecated and [ 82.421033][ T4686] and is ignored by this kernel. Remove the mand [ 82.421033][ T4686] option from the mount to silence this warning. [ 82.421033][ T4686] ======================================================= [ 82.769707][ T4686] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 83.179165][ T4686] overlayfs: missing 'lowerdir' [ 83.310583][ T680] bond0 (unregistering): Released all slaves [ 84.415033][ T4259] Bluetooth: hci4: command 0x0419 tx timeout [ 86.279623][ T4706] netlink: 52 bytes leftover after parsing attributes in process `syz.2.103'. [ 91.944941][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 92.154937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.174939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.194936][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.214939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.234937][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.254938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.274940][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.294938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 92.314939][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 94.797561][ T4813] netlink: 52 bytes leftover after parsing attributes in process `syz.4.107'. [ 95.618698][ T4813] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 96.378723][ T4819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.638344][ T4819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.868352][ T4819] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 98.047231][ T4819] bond0 (unregistering): Released all slaves [ 100.265895][ T4879] FAULT_INJECTION: forcing a failure. [ 100.265895][ T4879] name failslab, interval 1, probability 0, space 0, times 0 [ 100.520201][ T4879] CPU: 1 PID: 4879 Comm: syz.0.111 Not tainted syzkaller #0 [ 100.527530][ T4879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 100.537583][ T4879] Call Trace: [ 100.540862][ T4879] [ 100.543796][ T4879] dump_stack_lvl+0x188/0x250 [ 100.548489][ T4879] ? __lock_acquire+0x7d40/0x7d40 [ 100.553520][ T4879] ? show_regs_print_info+0x20/0x20 [ 100.558715][ T4879] ? load_image+0x410/0x410 [ 100.563213][ T4879] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 100.569204][ T4879] ? lock_chain_count+0x20/0x20 [ 100.574054][ T4879] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 100.580048][ T4879] should_fail+0x383/0x4b0 [ 100.584475][ T4879] should_failslab+0x5/0x20 [ 100.588979][ T4879] slab_pre_alloc_hook+0x51/0xc0 [ 100.593918][ T4879] ? dst_alloc+0x101/0x160 [ 100.598333][ T4879] kmem_cache_alloc+0x3d/0x280 [ 100.603103][ T4879] dst_alloc+0x101/0x160 [ 100.607347][ T4879] ip_route_output_key_hash_rcu+0x15b9/0x24f0 [ 100.613428][ T4879] ip_route_output_key_hash+0x1c6/0x300 [ 100.618976][ T4879] ? ip_route_input_rcu+0x30e0/0x30e0 [ 100.624355][ T4879] ? __lock_acquire+0x7d40/0x7d40 [ 100.629389][ T4879] ip_route_output_flow+0x26/0x150 [ 100.634501][ T4879] ? security_sk_classify_flow+0x77/0x90 [ 100.640140][ T4879] udp_sendmsg+0x15b5/0x2350 [ 100.644746][ T4879] ? ip_skb_dst_mtu+0x860/0x860 [ 100.649599][ T4879] ? udp_cmsg_send+0x350/0x350 [ 100.654377][ T4879] ? mark_lock+0x94/0x320 [ 100.658720][ T4879] ? finish_lock_switch+0x12d/0x290 [ 100.663935][ T4879] udpv6_sendmsg+0xac3/0x2520 [ 100.668630][ T4879] ? aa_sk_perm+0x910/0x910 [ 100.673137][ T4879] ? udp_v6_early_demux+0xe10/0xe10 [ 100.678358][ T4879] ? rcu_lock_release+0x5/0x20 [ 100.683137][ T4879] ? aa_af_perm+0x340/0x340 [ 100.687643][ T4879] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 100.694064][ T4879] ? sock_rps_record_flow+0x17/0x3b0 [ 100.699352][ T4879] ? inet_send_prepare+0x57/0x250 [ 100.704379][ T4879] ? inet6_sendmsg+0x5b/0xd0 [ 100.708972][ T4879] sock_write_iter+0x2a6/0x3a0 [ 100.713740][ T4879] ? sock_read_iter+0x380/0x380 [ 100.718600][ T4879] ? memset+0x1e/0x40 [ 100.722583][ T4879] ? iov_iter_init+0xb4/0x170 [ 100.727269][ T4879] vfs_write+0x748/0xd70 [ 100.731523][ T4879] ? file_end_write+0x250/0x250 [ 100.736382][ T4879] ? __fget_files+0x402/0x470 [ 100.741069][ T4879] ? __fdget_pos+0x1e2/0x370 [ 100.745658][ T4879] ? ksys_write+0x70/0x260 [ 100.750081][ T4879] ksys_write+0x153/0x260 [ 100.754412][ T4879] ? __ia32_sys_read+0x80/0x80 [ 100.759179][ T4879] ? lockdep_hardirqs_on+0x94/0x140 [ 100.764381][ T4879] do_syscall_64+0x4c/0xa0 [ 100.768800][ T4879] ? clear_bhb_loop+0x30/0x80 [ 100.773479][ T4879] ? clear_bhb_loop+0x30/0x80 [ 100.778156][ T4879] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 100.784053][ T4879] RIP: 0033:0x7f1d3b709559 [ 100.788470][ T4879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.808073][ T4879] RSP: 002b:00007f1d39961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.816487][ T4879] RAX: ffffffffffffffda RBX: 00007f1d3b990fa0 RCX: 00007f1d3b709559 [ 100.824469][ T4879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 100.832449][ T4879] RBP: 00007f1d3b7a08b0 R08: 0000000000000000 R09: 0000000000000000 [ 100.840526][ T4879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.848506][ T4879] R13: 00007f1d3b991038 R14: 00007f1d3b990fa0 R15: 00007ffe234b4a18 [ 100.856502][ T4879] [ 101.403147][ T4519] chnl_net:caif_netlink_parms(): no params data found [ 101.815155][ T4192] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.225178][ T4192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.304117][ T4192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 102.464720][ T4192] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 102.623220][ T4192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.842165][ T4192] usb 5-1: config 0 descriptor?? [ 103.076000][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.150278][ T4519] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.158408][ T4519] device bridge_slave_0 entered promiscuous mode [ 103.175541][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.182614][ T4519] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.190946][ T4519] device bridge_slave_1 entered promiscuous mode [ 103.353428][ T4519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.374700][ T4906] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.117' sets config #0 [ 103.431510][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 103.480316][ T4519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.625262][ T4192] Bluetooth: Can't get version to change to load ram patch err [ 103.646738][ T4192] Bluetooth: Loading sysconfig file failed [ 103.672581][ T4192] ath3k: probe of 5-1:0.0 failed with error -71 [ 103.725314][ T4192] usb 5-1: USB disconnect, device number 5 [ 103.735869][ T4519] team0: Port device team_slave_0 added [ 103.811436][ T4519] team0: Port device team_slave_1 added [ 103.955624][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.974753][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.027731][ T4519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.040354][ T4519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.047392][ T4519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.075851][ T4519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.331433][ T4519] device hsr_slave_0 entered promiscuous mode [ 104.380847][ T4519] device hsr_slave_1 entered promiscuous mode [ 104.404016][ T4519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.440760][ T4519] Cannot create hsr debugfs directory [ 104.592715][ T4966] FAULT_INJECTION: forcing a failure. [ 104.592715][ T4966] name failslab, interval 1, probability 0, space 0, times 0 [ 104.683145][ T4966] CPU: 1 PID: 4966 Comm: syz.4.133 Not tainted syzkaller #0 [ 104.690474][ T4966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.700540][ T4966] Call Trace: [ 104.703828][ T4966] [ 104.706765][ T4966] dump_stack_lvl+0x188/0x250 [ 104.711456][ T4966] ? show_regs_print_info+0x20/0x20 [ 104.716666][ T4966] ? load_image+0x410/0x410 [ 104.721184][ T4966] ? __might_sleep+0xf0/0xf0 [ 104.725788][ T4966] ? __lock_acquire+0x7d40/0x7d40 [ 104.730830][ T4966] should_fail+0x383/0x4b0 [ 104.735264][ T4966] should_failslab+0x5/0x20 [ 104.739778][ T4966] slab_pre_alloc_hook+0x51/0xc0 [ 104.744731][ T4966] __kmalloc_node+0x6d/0x3a0 [ 104.749326][ T4966] ? memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 104.755322][ T4966] memcg_alloc_page_obj_cgroups+0x7d/0x120 [ 104.761140][ T4966] slab_post_alloc_hook+0xba/0x380 [ 104.766265][ T4966] kmem_cache_alloc_trace+0x165/0x290 [ 104.771646][ T4966] ? alloc_fs_context+0x63/0x7d0 [ 104.776606][ T4966] alloc_fs_context+0x63/0x7d0 [ 104.781469][ T4966] ? kfree+0xef/0x2a0 [ 104.785466][ T4966] __se_sys_fsopen+0x111/0x320 [ 104.790249][ T4966] do_syscall_64+0x4c/0xa0 [ 104.794673][ T4966] ? clear_bhb_loop+0x30/0x80 [ 104.799362][ T4966] ? clear_bhb_loop+0x30/0x80 [ 104.804053][ T4966] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.809953][ T4966] RIP: 0033:0x7f9bdeb5a559 [ 104.814374][ T4966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.833981][ T4966] RSP: 002b:00007f9bdcdb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 104.842401][ T4966] RAX: ffffffffffffffda RBX: 00007f9bdede1fa0 RCX: 00007f9bdeb5a559 [ 104.850372][ T4966] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00002000000000c0 [ 104.858338][ T4966] RBP: 00007f9bdebf18b0 R08: 0000000000000000 R09: 0000000000000000 [ 104.866299][ T4966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.874257][ T4966] R13: 00007f9bdede2038 R14: 00007f9bdede1fa0 R15: 00007ffd3bb7de18 [ 104.882227][ T4966] [ 105.087747][ T4519] netdevsim netdevsim5 netdevsim4: renamed from eth5 [ 105.179182][ T4519] netdevsim netdevsim5 netdevsim5: renamed from eth6 [ 105.262385][ T4519] netdevsim netdevsim5 netdevsim6: renamed from eth7 [ 105.280357][ T4972] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 105.324252][ T4519] netdevsim netdevsim5 netdevsim7: renamed from eth8 [ 105.565099][ T4299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.762082][ T4519] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.780701][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.801028][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.853023][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.872252][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.901573][ T4755] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.908711][ T4755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.922256][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.960136][ T4299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.972177][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.990684][ T4299] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.992974][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.012025][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.025321][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.032448][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.056086][ T4299] usb 1-1: config 0 descriptor?? [ 106.099374][ T4299] pwc: Askey VC010 type 2 USB webcam detected. [ 106.118071][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.143750][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.180509][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.199632][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.210393][ T4609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.245377][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.261246][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.307663][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.315850][ T4299] pwc: send_video_command error -71 [ 106.322172][ T4299] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 106.331658][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.339797][ T4342] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 106.347756][ T4299] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 106.406379][ T4299] usb 1-1: USB disconnect, device number 4 [ 106.412491][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.431052][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.472937][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.640214][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.648261][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.674166][ T4519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.714192][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 106.715323][ T4342] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.729018][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 106.742196][ T4342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 106.746171][ T7] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 106.752741][ T4342] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.814639][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 106.828746][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 106.840050][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 106.849948][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 106.861965][ T4519] device veth0_vlan entered promiscuous mode [ 106.875170][ T4299] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 106.875405][ T4519] device veth1_vlan entered promiscuous mode [ 106.895720][ T4342] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 106.905096][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 106.913089][ T4342] usb 5-1: Product: syz [ 106.918514][ T4342] usb 5-1: Manufacturer: syz [ 106.945420][ T4998] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 106.978655][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 106.987468][ T4342] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 106.988539][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 107.004104][ T4342] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 107.005681][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 107.020887][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 107.034402][ T4519] device veth0_macvtap entered promiscuous mode [ 107.067060][ T4519] device veth1_macvtap entered promiscuous mode [ 107.096577][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 107.167534][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.183847][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.211967][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.225375][ T4263] usb 5-1: USB disconnect, device number 6 [ 107.228971][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.234267][ T4263] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 107.242792][ T4299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.257259][ T4263] garmin_gps 5-1:1.0: device disconnected [ 107.268554][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.278652][ T4299] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 107.285980][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.288409][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.299496][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.317431][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.334680][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.336772][ T4299] usb 1-1: config 0 descriptor?? [ 107.358899][ T7] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 107.375933][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.383373][ T7] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 107.404551][ T7] usb 2-1: Product: syz [ 107.409376][ T7] usb 2-1: Manufacturer: syz [ 107.409521][ T4299] pwc: Askey VC010 type 2 USB webcam detected. [ 107.422230][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 107.430559][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 107.439455][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 107.451747][ T7] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 107.453250][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 107.470666][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.483220][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.493406][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.504524][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.514357][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.526108][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.541447][ T4519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.551993][ T4519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.572237][ T4519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.584300][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 107.593257][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 107.604338][ T4519] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.613624][ T4519] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.623209][ T4519] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.631535][ T4519] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.639843][ T4519] netdevsim netdevsim5 netdevsim4: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.648768][ T4519] netdevsim netdevsim5 netdevsim5: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.658186][ T4519] netdevsim netdevsim5 netdevsim6: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.667108][ T4519] netdevsim netdevsim5 netdevsim7: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.682399][ T7] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 107.727253][ T7] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 107.740177][ T7] uvcvideo 2-1:1.1: Failed to initialize the device (-5). [ 107.820701][ T7] usb 2-1: USB disconnect, device number 6 [ 107.835453][ T4299] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.875202][ T4299] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.880279][ T5020] FAULT_INJECTION: forcing a failure. [ 107.880279][ T5020] name failslab, interval 1, probability 0, space 0, times 0 [ 107.915121][ T4299] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.917221][ T5021] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 107.931832][ T5020] CPU: 0 PID: 5020 Comm: syz.2.151 Not tainted syzkaller #0 [ 107.934035][ T4747] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.939136][ T5020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.939151][ T5020] Call Trace: [ 107.939158][ T5020] [ 107.939165][ T5020] dump_stack_lvl+0x188/0x250 [ 107.939192][ T5020] ? show_regs_print_info+0x20/0x20 [ 107.939211][ T5020] ? load_image+0x410/0x410 [ 107.939233][ T5020] ? __might_sleep+0xf0/0xf0 [ 107.939257][ T5020] ? __lock_acquire+0x7d40/0x7d40 [ 107.939278][ T5020] ? do_new_mount+0x380/0xa40 [ 107.939296][ T5020] ? do_syscall_64+0x4c/0xa0 [ 107.939315][ T5020] should_fail+0x383/0x4b0 [ 107.939339][ T5020] should_failslab+0x5/0x20 [ 107.939355][ T5020] slab_pre_alloc_hook+0x51/0xc0 [ 107.939376][ T5020] kmem_cache_alloc_trace+0x47/0x290 [ 107.939392][ T5020] ? get_mountpoint+0x205/0x440 [ 107.939415][ T5020] get_mountpoint+0x205/0x440 [ 107.939436][ T5020] attach_recursive_mnt+0x17a/0x1610 [ 107.939457][ T5020] ? get_mountpoint+0x1be/0x440 [ 107.939476][ T5020] ? rcu_is_watching+0x11/0xa0 [ 107.939493][ T5020] ? kfree+0x4a/0x2a0 [ 107.939511][ T5020] ? graft_tree+0x1b0/0x1b0 [ 107.939531][ T5020] ? get_mountpoint+0x1be/0x440 [ 107.939551][ T5020] ? lock_mount+0xf7/0x2a0 [ 107.939567][ T5020] ? mnt_warn_timestamp_expiry+0x12f/0x2c0 [ 107.939590][ T5020] do_new_mount+0x837/0xa40 [ 107.939615][ T5020] __se_sys_mount+0x2e3/0x3d0 [ 107.939638][ T5020] ? __x64_sys_mount+0xc0/0xc0 [ 107.955279][ T4299] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.957475][ T5020] ? lockdep_hardirqs_on+0x94/0x140 [ 107.973504][ T5020] ? __x64_sys_mount+0x1c/0xc0 [ 107.973533][ T5020] do_syscall_64+0x4c/0xa0 [ 107.973549][ T5020] ? clear_bhb_loop+0x30/0x80 [ 107.990973][ T4747] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.992381][ T5020] ? clear_bhb_loop+0x30/0x80 [ 107.992409][ T5020] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.018009][ T4299] pwc: recv_control_msg error -32 req 04 val 1300 [ 108.020863][ T5020] RIP: 0033:0x7f143879f559 [ 108.020883][ T5020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.033097][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.035640][ T5020] RSP: 002b:00007f14369f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 108.035663][ T5020] RAX: ffffffffffffffda RBX: 00007f1438a26fa0 RCX: 00007f143879f559 [ 108.035676][ T5020] RDX: 0000200000000440 RSI: 0000200000000400 RDI: 0000000000000000 [ 108.035687][ T5020] RBP: 00007f14388368b0 R08: 0000000000000000 R09: 0000000000000000 [ 108.035698][ T5020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.035708][ T5020] R13: 00007f1438a27038 R14: 00007f1438a26fa0 R15: 00007ffebfda7ea8 [ 108.035736][ T5020] [ 108.232011][ T4747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.255275][ T4299] pwc: recv_control_msg error -32 req 04 val 1400 [ 108.288538][ T4747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.295269][ T4299] pwc: recv_control_msg error -32 req 02 val 2000 [ 108.304735][ T680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.335427][ T4299] pwc: recv_control_msg error -32 req 02 val 2100 [ 108.385216][ T4299] pwc: recv_control_msg error -32 req 04 val 1500 [ 108.425031][ T4299] pwc: recv_control_msg error -32 req 02 val 2500 [ 108.465623][ T4299] pwc: recv_control_msg error -32 req 02 val 2400 [ 108.506261][ T4299] pwc: recv_control_msg error -32 req 02 val 2600 [ 108.556290][ T4299] pwc: recv_control_msg error -32 req 02 val 2900 [ 108.595034][ T4299] pwc: recv_control_msg error -32 req 02 val 2800 [ 108.615480][ T5044] kvm: pic: non byte write [ 108.634451][ T5044] kvm: pic: level sensitive irq not supported [ 108.636206][ T4299] pwc: recv_control_msg error -32 req 04 val 1100 [ 108.639442][ T5044] kvm: pic: level sensitive irq not supported [ 108.678824][ T4299] pwc: Registered as video103. [ 108.697299][ T4299] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 108.865101][ T4299] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 108.890350][ T4263] usb 1-1: USB disconnect, device number 5 [ 109.206540][ T4266] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 109.235272][ T4299] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 109.250032][ T4299] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.261613][ T4299] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.278213][ T4299] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 109.287370][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.342727][ T4299] usb 6-1: invalid MIDI out EP 0 [ 109.416248][ T4299] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 109.476653][ T4869] udevd[4869]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.570275][ T2300] usb 6-1: USB disconnect, device number 2 [ 109.610507][ T4266] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.627757][ T4266] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.656319][ T4266] usb 5-1: config 0 interface 0 has no altsetting 0 [ 109.673146][ T4266] usb 5-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00 [ 109.692555][ T4266] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.717131][ T4266] usb 5-1: config 0 descriptor?? [ 109.785025][ T4342] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.823255][ T5088] FAULT_INJECTION: forcing a failure. [ 109.823255][ T5088] name failslab, interval 1, probability 0, space 0, times 0 [ 109.841675][ T5088] CPU: 1 PID: 5088 Comm: syz.2.175 Not tainted syzkaller #0 [ 109.848984][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.859045][ T5088] Call Trace: [ 109.862341][ T5088] [ 109.865273][ T5088] dump_stack_lvl+0x188/0x250 [ 109.869963][ T5088] ? show_regs_print_info+0x20/0x20 [ 109.875176][ T5088] ? load_image+0x410/0x410 [ 109.879693][ T5088] ? __lock_acquire+0x7d40/0x7d40 [ 109.884738][ T5088] should_fail+0x383/0x4b0 [ 109.889172][ T5088] should_failslab+0x5/0x20 [ 109.893735][ T5088] slab_pre_alloc_hook+0x51/0xc0 [ 109.898686][ T5088] __kmalloc+0x6b/0x340 [ 109.902849][ T5088] ? security_sk_alloc+0x47/0x130 [ 109.907892][ T5088] security_sk_alloc+0x47/0x130 [ 109.912761][ T5088] sk_prot_alloc+0x101/0x210 [ 109.917362][ T5088] ? sk_alloc+0x1d/0x310 [ 109.921611][ T5088] sk_alloc+0x2f/0x310 [ 109.925683][ T5088] ? pppol2tp_create+0x12/0x1f0 [ 109.930544][ T5088] pppol2tp_create+0x2e/0x1f0 [ 109.935237][ T5088] pppox_create+0x127/0x1a0 [ 109.939750][ T5088] __sock_create+0x473/0x910 [ 109.944357][ T5088] __sys_socket+0xe2/0x170 [ 109.948785][ T5088] __x64_sys_socket+0x76/0x80 [ 109.953476][ T5088] do_syscall_64+0x4c/0xa0 [ 109.957899][ T5088] ? clear_bhb_loop+0x30/0x80 [ 109.962590][ T5088] ? clear_bhb_loop+0x30/0x80 [ 109.967278][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 109.973181][ T5088] RIP: 0033:0x7f143879f559 [ 109.977600][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.997211][ T5088] RSP: 002b:00007f14369f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.005635][ T5088] RAX: ffffffffffffffda RBX: 00007f1438a26fa0 RCX: 00007f143879f559 [ 110.013617][ T5088] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 110.021600][ T5088] RBP: 00007f14388368b0 R08: 0000000000000000 R09: 0000000000000000 [ 110.029587][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.037567][ T5088] R13: 00007f1438a27038 R14: 00007f1438a26fa0 R15: 00007ffebfda7ea8 [ 110.045567][ T5088] [ 110.125136][ T4299] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.209029][ T4266] input: HID 04d9:a072 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:04D9:A072.0004/input/input13 [ 110.294886][ T4266] holtek_mouse 0003:04D9:A072.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.4-1/input0 [ 110.300370][ T4342] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 110.329055][ T4342] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 110.375026][ T4263] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.413622][ T4266] usb 5-1: USB disconnect, device number 7 [ 110.497574][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.513951][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.524200][ T4342] usb 2-1: New USB device found, idVendor=05c6, idProduct=9211, bcdDevice= 0.00 [ 110.538588][ T4299] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 110.549144][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.561648][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.582105][ T4342] usb 2-1: Product: syz [ 110.591497][ T4342] usb 2-1: Manufacturer: syz [ 110.609169][ T4299] usb 1-1: config 0 descriptor?? [ 110.614289][ T4342] usb 2-1: SerialNumber: syz [ 110.676881][ T4342] qcserial 2-1:1.0: Qualcomm USB modem converter detected [ 110.775317][ T4263] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.788380][ T4263] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 110.801556][ T4263] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 110.813439][ T4263] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.833604][ T4263] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 110.842689][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.882521][ T4342] usb 2-1: USB disconnect, device number 7 [ 110.890759][ T4342] qcserial 2-1:1.0: device disconnected [ 111.305128][ T4299] usb 1-1: string descriptor 0 read error: -22 [ 111.568266][ T4299] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0005/input/input14 [ 111.668828][ T4299] uclogic 0003:256C:006D.0005: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 111.773450][ T4266] usb 1-1: USB disconnect, device number 6 [ 111.995225][ T4263] gud 3-1:1.0: HDMI-A-1: Failed to add properties (ret=-71) [ 112.006210][ T4263] gud 3-1:1.0: Failed to get connectors (error=-71) [ 112.013664][ T4263] gud: probe of 3-1:1.0 failed with error -71 [ 112.052533][ T4263] usb 3-1: USB disconnect, device number 6 [ 113.493696][ T5121] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 113.509576][ T5148] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 113.615283][ T5315] phram: illegal start address [ 114.299890][ T4264] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.315104][ T4192] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.564986][ T4264] usb 3-1: Using ep0 maxpacket: 16 [ 114.637727][ T5390] Zero length message leads to an empty skb [ 114.675133][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.695313][ T4264] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.706488][ T4264] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 114.716624][ T4192] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 114.716987][ T4264] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 114.735961][ T4264] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 114.755003][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.764411][ T5401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.215'. [ 114.801479][ T5397] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.804095][ T4192] usb 2-1: config 0 descriptor?? [ 114.815336][ T5397] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.846245][ T4264] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 114.865831][ T4264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 114.874460][ T4264] usb 3-1: SerialNumber: syz [ 114.925434][ T5349] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.942707][ T5349] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 114.986907][ T4264] hub 3-1:1.0: bad descriptor, ignoring hub [ 114.992884][ T4264] hub: probe of 3-1:1.0 failed with error -5 [ 115.056037][ T5417] FAULT_INJECTION: forcing a failure. [ 115.056037][ T5417] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 115.071547][ T5417] CPU: 0 PID: 5417 Comm: syz.5.220 Not tainted syzkaller #0 [ 115.078859][ T5417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.088903][ T5417] Call Trace: [ 115.092171][ T5417] [ 115.095116][ T5417] dump_stack_lvl+0x188/0x250 [ 115.099802][ T5417] ? show_regs_print_info+0x20/0x20 [ 115.105001][ T5417] ? load_image+0x410/0x410 [ 115.109507][ T5417] ? __lock_acquire+0x7d40/0x7d40 [ 115.114522][ T5417] ? __kasan_kmalloc+0xc6/0xe0 [ 115.119274][ T5417] ? __kasan_kmalloc+0xaf/0xe0 [ 115.124041][ T5417] should_fail+0x383/0x4b0 [ 115.128462][ T5417] prepare_alloc_pages+0x1e3/0x5b0 [ 115.133570][ T5417] __alloc_pages+0x11b/0x480 [ 115.138148][ T5417] ? zone_statistics+0x170/0x170 [ 115.143083][ T5417] ? alloc_pages+0x452/0x560 [ 115.147664][ T5417] alloc_pages_exact+0x35/0x70 [ 115.152420][ T5417] snd_pcm_attach_substream+0x61b/0xac0 [ 115.157962][ T5417] snd_pcm_open_substream+0xb7/0x2570 [ 115.163324][ T5417] ? lockdep_softirqs_off+0x430/0x430 [ 115.168689][ T5417] ? lockdep_softirqs_off+0x430/0x430 [ 115.174140][ T5417] ? snd_pcm_drop+0x250/0x250 [ 115.178804][ T5417] ? __raw_spin_lock_init+0x41/0x100 [ 115.184106][ T5417] snd_pcm_oss_open+0x1084/0x1e60 [ 115.189136][ T5417] ? snd_pcm_oss_mmap+0x440/0x440 [ 115.194144][ T5417] ? soundcore_open+0x270/0x4b0 [ 115.198983][ T5417] ? __lock_acquire+0x7d40/0x7d40 [ 115.203997][ T5417] ? sched_dynamic_update+0x210/0x210 [ 115.209364][ T5417] ? do_raw_spin_unlock+0x11d/0x230 [ 115.214556][ T5417] chrdev_open+0x585/0x5f0 [ 115.218962][ T5417] ? cd_forget+0x160/0x160 [ 115.223371][ T5417] ? fsnotify_perm+0x3a7/0x560 [ 115.228120][ T5417] ? cd_forget+0x160/0x160 [ 115.232546][ T5417] do_dentry_open+0x7f7/0xf90 [ 115.237212][ T5417] ? vfs_open+0x2b/0x80 [ 115.241359][ T5417] path_openat+0x2718/0x2fb0 [ 115.245949][ T5417] ? __kasan_slab_alloc+0xa9/0xc0 [ 115.250966][ T5417] ? do_filp_open+0x400/0x400 [ 115.255641][ T5417] do_filp_open+0x1df/0x400 [ 115.260133][ T5417] ? vfs_tmpfile+0x300/0x300 [ 115.264725][ T5417] ? _raw_spin_unlock+0x24/0x40 [ 115.269560][ T5417] ? alloc_fd+0x59e/0x650 [ 115.273880][ T5417] do_sys_openat2+0x14b/0x500 [ 115.278540][ T5417] ? __lock_acquire+0x7d40/0x7d40 [ 115.283552][ T5417] ? do_sys_open+0xe0/0xe0 [ 115.287952][ T5417] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 115.293922][ T5417] ? lock_chain_count+0x20/0x20 [ 115.298763][ T5417] __x64_sys_openat+0x135/0x160 [ 115.303601][ T5417] do_syscall_64+0x4c/0xa0 [ 115.308003][ T5417] ? clear_bhb_loop+0x30/0x80 [ 115.312683][ T5417] ? clear_bhb_loop+0x30/0x80 [ 115.317346][ T5417] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 115.323226][ T5417] RIP: 0033:0x7f0577951559 [ 115.327627][ T5417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.347247][ T5417] RSP: 002b:00007f0575ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.355658][ T5417] RAX: ffffffffffffffda RBX: 00007f0577bd8fa0 RCX: 00007f0577951559 [ 115.363650][ T5417] RDX: 0000000000129202 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 115.371625][ T5417] RBP: 00007f05779e88b0 R08: 0000000000000000 R09: 0000000000000000 [ 115.379586][ T5417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.387554][ T5417] R13: 00007f0577bd9038 R14: 00007f0577bd8fa0 R15: 00007ffeaea41258 [ 115.395524][ T5417] [ 115.409282][ T5349] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.435087][ T5349] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 115.510100][ T4192] usbhid 2-1:0.0: can't add hid device: -71 [ 115.530121][ T4192] usbhid: probe of 2-1:0.0 failed with error -71 [ 115.544701][ T5429] loop0: detected capacity change from 0 to 1 [ 115.557251][ T4192] usb 2-1: USB disconnect, device number 8 [ 115.631081][ T5429] ldm_validate_privheads(): Disk read failed. [ 115.647919][ T5429] loop0: [ 115.651123][ T5429] loop0: partition table partially beyond EOD, truncated [ 115.677691][ T3557] ldm_validate_privheads(): Disk read failed. [ 115.693784][ T3557] loop0: [ 115.706665][ T3557] loop0: partition table partially beyond EOD, truncated [ 115.811392][ T4266] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.975420][ T4264] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 115.995174][ T4192] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.017167][ T4264] usb 3-1: USB disconnect, device number 7 [ 116.085088][ T4263] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 116.105186][ T4174] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 116.236336][ T4192] usb 2-1: Using ep0 maxpacket: 16 [ 116.236641][ T4266] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.252591][ T4266] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.265998][ T4266] usb 1-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 116.275521][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.365236][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.376329][ T4192] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 116.385516][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.408177][ T4192] usb 2-1: config 0 descriptor?? [ 116.475272][ T4174] usb 5-1: not running at top speed; connect to a high speed hub [ 116.495749][ T4263] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.513875][ T4263] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 116.532023][ T4263] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 116.551781][ T4263] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 116.561349][ T4263] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.575091][ T4174] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 116.576910][ T5487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.583788][ T4174] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.583809][ T4174] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 116.606079][ T5487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.634235][ T5489] netlink: 60 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.648040][ T4174] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 116.651224][ T5487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.227'. [ 116.658339][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.727637][ T4174] uvcvideo 5-1:1.0: Found multiple Units with ID 1 [ 116.736833][ T4174] usb 5-1: Found UVC 71.01 device (0000:0000) [ 116.743839][ T4174] usb 5-1: No streaming interface found for terminal 2. [ 116.865227][ T4266] rtsx_usb: probe of 1-1:1.0 failed with error -71 [ 116.888535][ T4266] usb 1-1: USB disconnect, device number 7 [ 116.896247][ T4192] hid-generic 0003:04D8:00DF.0006: hidraw0: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.1-1/input0 [ 116.941144][ T4264] usb 5-1: USB disconnect, device number 8 [ 117.115240][ T4263] cxacru 6-1:1.0: send of cm 0x91 failed (-71) [ 117.121823][ T4263] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 117.131248][ T4263] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 117.138292][ T4174] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.151891][ T4263] cxacru: probe of 6-1:1.0 failed with error -71 [ 117.170638][ T4263] usb 6-1: USB disconnect, device number 3 [ 117.293595][ T4259] usb 2-1: USB disconnect, device number 9 [ 117.481154][ T5535] FAULT_INJECTION: forcing a failure. [ 117.481154][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 117.510062][ T5535] CPU: 0 PID: 5535 Comm: syz.0.231 Not tainted syzkaller #0 [ 117.517380][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.527438][ T5535] Call Trace: [ 117.530720][ T5535] [ 117.533656][ T5535] dump_stack_lvl+0x188/0x250 [ 117.538347][ T5535] ? show_regs_print_info+0x20/0x20 [ 117.543553][ T5535] ? load_image+0x410/0x410 [ 117.548070][ T5535] ? __might_sleep+0xf0/0xf0 [ 117.552667][ T5535] ? __lock_acquire+0x7d40/0x7d40 [ 117.557705][ T5535] should_fail+0x383/0x4b0 [ 117.562136][ T5535] should_failslab+0x5/0x20 [ 117.566646][ T5535] slab_pre_alloc_hook+0x51/0xc0 [ 117.571591][ T5535] kmem_cache_alloc_trace+0x47/0x290 [ 117.576883][ T5535] ? __se_sys_fsopen+0x19c/0x320 [ 117.581834][ T5535] __se_sys_fsopen+0x19c/0x320 [ 117.586610][ T5535] do_syscall_64+0x4c/0xa0 [ 117.591039][ T5535] ? clear_bhb_loop+0x30/0x80 [ 117.595721][ T5535] ? clear_bhb_loop+0x30/0x80 [ 117.600409][ T5535] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.606314][ T5535] RIP: 0033:0x7f1d3b709559 [ 117.610736][ T5535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.630347][ T5535] RSP: 002b:00007f1d39961028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 117.638766][ T5535] RAX: ffffffffffffffda RBX: 00007f1d3b990fa0 RCX: 00007f1d3b709559 [ 117.646743][ T5535] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000000 [ 117.654714][ T5535] RBP: 00007f1d3b7a08b0 R08: 0000000000000000 R09: 0000000000000000 [ 117.662691][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.670666][ T5535] R13: 00007f1d3b991038 R14: 00007f1d3b990fa0 R15: 00007ffe234b4a18 [ 117.678653][ T5535] [ 117.695455][ T4174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.714888][ T4174] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 117.725138][ T4174] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.739058][ T5544] jffs2: notice: (5544) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 117.875189][ T4174] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 117.891354][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 117.919926][ T4174] usb 3-1: Product: syz [ 117.924128][ T4174] usb 3-1: Manufacturer: syz [ 117.971116][ T5500] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 117.996215][ T4174] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 118.024354][ T4174] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 118.195744][ T4299] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.250529][ T4259] usb 3-1: USB disconnect, device number 8 [ 118.271399][ T4259] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 118.287563][ T4259] garmin_gps 3-1:1.0: device disconnected [ 118.445042][ T4299] usb 2-1: Using ep0 maxpacket: 32 [ 118.508748][ T5591] xt_bpf: check failed: parse error [ 118.565218][ T4299] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.589163][ T4299] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.604567][ T4299] usb 2-1: config 0 interface 0 has no altsetting 0 [ 118.775057][ T4299] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 118.784129][ T4299] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.794993][ T4192] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 118.812736][ T4299] usb 2-1: Product: syz [ 118.830097][ T4299] usb 2-1: Manufacturer: syz [ 118.851408][ T4299] usb 2-1: SerialNumber: syz [ 118.871077][ T4299] usb 2-1: config 0 descriptor?? [ 118.885282][ T4342] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 118.955049][ T4259] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 119.045107][ T4192] usb 1-1: Using ep0 maxpacket: 8 [ 119.135384][ T4342] usb 5-1: Using ep0 maxpacket: 16 [ 119.165094][ T4192] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 119.255552][ T4342] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.267961][ T4342] usb 5-1: config 0 interface 0 has no altsetting 0 [ 119.325156][ T4192] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 119.337100][ T4192] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 119.345131][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.345941][ T4192] usb 1-1: Product: syz [ 119.360632][ T4192] usb 1-1: Manufacturer: syz [ 119.365676][ T4192] usb 1-1: SerialNumber: syz [ 119.369652][ T4259] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.425174][ T4342] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 119.434356][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.443031][ T4342] usb 5-1: Product: syz [ 119.447766][ T4342] usb 5-1: Manufacturer: syz [ 119.452468][ T4342] usb 5-1: SerialNumber: syz [ 119.465784][ T4259] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 119.466230][ T4342] usb 5-1: config 0 descriptor?? [ 119.487534][ T4259] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 119.498127][ T4259] usb 6-1: Manufacturer: syz [ 119.511210][ T4259] usb 6-1: config 0 descriptor?? [ 119.635052][ T4192] usb 1-1: palm_os_3_probe - error -71 getting connection information [ 119.643540][ T4192] visor: probe of 1-1:1.0 failed with error -71 [ 119.667847][ T4192] usb 1-1: USB disconnect, device number 8 [ 119.757641][ T4342] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input15 [ 119.775065][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 119.805188][ T4342] imon:send_packet: packet tx failed (-71) [ 119.825183][ T4342] imon 5-1:0.0: panel buttons/knobs setup failed [ 119.865951][ T4263] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 119.894979][ T4342] rc_core: IR keymap rc-imon-pad not found [ 119.900821][ T4342] Registered IR keymap rc-empty [ 119.911643][ T4342] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 119.922567][ T4342] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 119.942568][ T4299] Bluetooth: hci0: command 0x2016 tx timeout [ 119.958840][ T4342] imon:send_packet: packet tx failed (-71) [ 119.985120][ T4342] imon 5-1:0.0: remote input dev register failed [ 119.998850][ T4342] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 120.028790][ T4342] imon 5-1:0.0: unable to initialize intf0, err 0 [ 120.038804][ T4342] imon:imon_probe: failed to initialize context! [ 120.047678][ T4342] imon 5-1:0.0: unable to register, err -19 [ 120.060461][ T4342] usb 5-1: USB disconnect, device number 9 [ 120.068953][ T4192] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 120.235215][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.254089][ T4263] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.264268][ T4263] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 120.278895][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.296757][ T4263] usb 3-1: config 0 descriptor?? [ 120.325034][ T4192] usb 1-1: Using ep0 maxpacket: 8 [ 120.418381][ T4259] input: syz Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0007/input/input17 [ 120.445284][ T4192] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 120.455244][ T4342] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 120.509006][ T4259] input: syz Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.0007/input/input18 [ 120.524487][ T4259] uclogic 0003:256C:006D.0007: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 120.609401][ T4192] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 120.619748][ T4259] usb 6-1: USB disconnect, device number 4 [ 120.625682][ T4192] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 120.625722][ T4192] usb 1-1: Product: syz [ 120.625735][ T4192] usb 1-1: Manufacturer: syz [ 120.651501][ T5726] fido_id[5726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 120.666388][ T4192] usb 1-1: SerialNumber: syz [ 120.718724][ T4342] usb 5-1: Using ep0 maxpacket: 16 [ 120.777846][ T4263] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 120.790460][ T4263] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 120.799609][ T4263] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 120.811665][ T4263] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 120.824519][ T4263] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 120.835261][ T4342] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.838405][ T4263] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 120.859157][ T4342] usb 5-1: config 0 interface 0 has no altsetting 0 [ 120.937127][ T4192] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 120.942065][ T4174] usb 2-1: USB disconnect, device number 10 [ 120.957300][ T4192] usb 1-1: Handspring Visor / Palm OS: port 29, is for unknown use [ 120.977049][ T4192] usb 1-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 120.994078][ T4192] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 121.005237][ T4263] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 20 got 0 [ 121.016612][ T4263] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense pairing info: -22 [ 121.027044][ T4263] playstation 0003:054C:0DF2.0008: Failed to get MAC address from DualSense [ 121.028848][ T4342] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 121.038010][ T4263] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 121.054762][ T4263] playstation: probe of 0003:054C:0DF2.0008 failed with error -22 [ 121.062306][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.076424][ T4342] usb 5-1: Product: syz [ 121.080602][ T4342] usb 5-1: Manufacturer: syz [ 121.089564][ T4342] usb 5-1: SerialNumber: syz [ 121.097891][ T4342] usb 5-1: config 0 descriptor?? [ 121.155158][ T4192] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 121.163448][ T4192] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 121.191591][ T4192] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 121.213345][ T4192] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 121.238674][ T4259] usb 3-1: USB disconnect, device number 9 [ 121.244658][ T4192] usb 1-1: USB disconnect, device number 9 [ 121.271711][ T4192] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 121.297637][ T4192] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 121.299223][ T5757] FAULT_INJECTION: forcing a failure. [ 121.299223][ T5757] name failslab, interval 1, probability 0, space 0, times 0 [ 121.310590][ T4192] visor 1-1:1.0: device disconnected [ 121.333778][ T5757] CPU: 1 PID: 5757 Comm: syz.5.259 Not tainted syzkaller #0 [ 121.341082][ T5757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.351141][ T5757] Call Trace: [ 121.354425][ T5757] [ 121.357365][ T5757] dump_stack_lvl+0x188/0x250 [ 121.362057][ T5757] ? show_regs_print_info+0x20/0x20 [ 121.367267][ T5757] ? load_image+0x410/0x410 [ 121.371786][ T5757] ? __might_sleep+0xf0/0xf0 [ 121.376389][ T5757] ? __lock_acquire+0x7d40/0x7d40 [ 121.381437][ T5757] should_fail+0x383/0x4b0 [ 121.385333][ T4174] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.385867][ T5757] should_failslab+0x5/0x20 [ 121.385891][ T5757] slab_pre_alloc_hook+0x51/0xc0 [ 121.402834][ T5757] ? __kernfs_new_node+0xe3/0x6b0 [ 121.407878][ T5757] kmem_cache_alloc+0x3d/0x280 [ 121.412656][ T5757] __kernfs_new_node+0xe3/0x6b0 [ 121.417535][ T5757] ? __lock_acquire+0x7d40/0x7d40 [ 121.422570][ T5757] ? kernfs_new_node+0x250/0x250 [ 121.427560][ T5757] ? rwsem_write_trylock+0x135/0x1c0 [ 121.432876][ T5757] kernfs_new_node+0x148/0x250 [ 121.437661][ T5757] __kernfs_create_file+0x47/0x2e0 [ 121.442786][ T5757] cgroup_addrm_files+0xac3/0x1020 [ 121.447926][ T5757] ? rcu_lock_release+0x20/0x20 [ 121.452792][ T5757] ? __debug_object_init+0x253/0xc80 [ 121.458126][ T5757] ? css_next_descendant_pre+0x179/0x250 [ 121.463775][ T5757] css_populate_dir+0x1cd/0x350 [ 121.468647][ T5757] cgroup_mkdir+0xc9f/0xeb0 [ 121.473173][ T5757] ? css_task_iter_end+0x280/0x280 [ 121.478386][ T5757] ? do_raw_spin_unlock+0x11d/0x230 [ 121.483598][ T5757] ? kernfs_iop_permission+0x22d/0x310 [ 121.489067][ T5757] ? css_task_iter_end+0x280/0x280 [ 121.494191][ T5757] kernfs_iop_mkdir+0x23d/0x3d0 [ 121.499101][ T5757] vfs_mkdir+0x386/0x570 [ 121.503361][ T5757] do_mkdirat+0x1dd/0x5c0 [ 121.507704][ T5757] ? vfs_mkdir+0x570/0x570 [ 121.512145][ T5757] __x64_sys_mkdirat+0x85/0x90 [ 121.516918][ T5757] do_syscall_64+0x4c/0xa0 [ 121.521341][ T5757] ? clear_bhb_loop+0x30/0x80 [ 121.526028][ T5757] ? clear_bhb_loop+0x30/0x80 [ 121.530720][ T5757] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.536631][ T5757] RIP: 0033:0x7f0577951559 [ 121.541053][ T5757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.560661][ T5757] RSP: 002b:00007f0575ba9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 121.569079][ T5757] RAX: ffffffffffffffda RBX: 00007f0577bd8fa0 RCX: 00007f0577951559 [ 121.577063][ T5757] RDX: 00000000000001ff RSI: 0000200000000300 RDI: ffffffffffffff9c [ 121.585039][ T5757] RBP: 00007f05779e88b0 R08: 0000000000000000 R09: 0000000000000000 [ 121.593014][ T5757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.600990][ T5757] R13: 00007f0577bd9038 R14: 00007f0577bd8fa0 R15: 00007ffeaea41258 [ 121.608983][ T5757] [ 121.615944][ T5757] cgroup: cgroup_addrm_files: failed to add cgroup.stat, err=-12 [ 121.647874][ T4342] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input19 [ 121.821168][ T5784] FAULT_INJECTION: forcing a failure. [ 121.821168][ T5784] name fail_futex, interval 1, probability 0, space 0, times 0 [ 121.864658][ T5784] CPU: 1 PID: 5784 Comm: syz.5.263 Not tainted syzkaller #0 [ 121.871989][ T5784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.882051][ T5784] Call Trace: [ 121.885336][ T5784] [ 121.888271][ T5784] dump_stack_lvl+0x188/0x250 [ 121.892960][ T5784] ? show_regs_print_info+0x20/0x20 [ 121.898169][ T5784] ? load_image+0x410/0x410 [ 121.902681][ T5784] ? rcu_read_lock_sched_held+0x86/0x110 [ 121.908333][ T5784] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 121.914330][ T5784] should_fail+0x383/0x4b0 [ 121.918761][ T5784] get_futex_key+0x1a1/0x12d0 [ 121.919220][ T4174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 236, changing to 11 [ 121.923445][ T5784] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.923472][ T5784] ? futex_wait_restart+0x250/0x250 [ 121.944091][ T4174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2015, setting to 1024 [ 121.945709][ T5784] ? lock_chain_count+0x20/0x20 [ 121.945740][ T5784] futex_wait_setup+0x4b/0x520 [ 121.945762][ T5784] ? lockdep_hardirqs_on+0x94/0x140 [ 121.971530][ T5784] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 121.974863][ T4174] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 121.977431][ T5784] futex_wait+0x22f/0x680 [ 121.977458][ T5784] ? __lock_acquire+0x13b3/0x7d40 [ 121.977481][ T5784] ? do_futex+0x12b0/0x12b0 [ 121.998523][ T4174] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.001168][ T5784] ? verify_lock_unused+0x140/0x140 [ 122.019269][ T5784] ? verify_lock_unused+0x140/0x140 [ 122.024490][ T5784] do_futex+0xdc2/0x12b0 [ 122.028760][ T5784] ? futex_exit_release+0x1c0/0x1c0 [ 122.033971][ T5784] ? __context_tracking_exit+0x4c/0x80 [ 122.039442][ T5784] __se_sys_futex+0x389/0x420 [ 122.044129][ T5784] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 122.050121][ T5784] ? __x64_sys_futex+0xf0/0xf0 [ 122.054898][ T5784] ? __x64_sys_futex+0x1d/0xf0 [ 122.059666][ T5784] do_syscall_64+0x4c/0xa0 [ 122.064094][ T5784] ? clear_bhb_loop+0x30/0x80 [ 122.068777][ T5784] ? clear_bhb_loop+0x30/0x80 [ 122.073460][ T5784] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.079359][ T5784] RIP: 0033:0x7f0577951559 [ 122.083775][ T5784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.103384][ T5784] RSP: 002b:00007f0575ba90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 122.111810][ T5784] RAX: ffffffffffffffda RBX: 00007f0577bd8fa8 RCX: 00007f0577951559 [ 122.119789][ T5784] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0577bd8fa8 [ 122.127767][ T5784] RBP: 00007f0577bd8fa0 R08: 0000000000000000 R09: 0000000000000000 [ 122.135740][ T5784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.143714][ T5784] R13: 00007f0577bd9038 R14: 00007ffeaea41170 R15: 00007ffeaea41258 [ 122.151719][ T5784] [ 122.180192][ T4174] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.198040][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 122.220068][ T4174] usb 2-1: SerialNumber: syz [ 122.252293][ T5795] jffs2: notice: (5795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 122.272477][ T5744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.296678][ T5744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.324993][ T4342] rc_core: IR keymap rc-imon-pad not found [ 122.330836][ T4342] Registered IR keymap rc-empty [ 122.345326][ T4342] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 122.362893][ T4342] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 122.404960][ C1] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 122.412049][ T4342] imon:send_packet: packet tx failed (-71) [ 122.435036][ T4342] imon 5-1:0.0: remote input dev register failed [ 122.449719][ T4342] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 122.473155][ T4342] imon 5-1:0.0: unable to initialize intf0, err 0 [ 122.481822][ T4342] imon:imon_probe: failed to initialize context! [ 122.488506][ T4342] imon 5-1:0.0: unable to register, err -19 [ 122.498711][ T4342] usb 5-1: USB disconnect, device number 10 [ 122.522095][ T5744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.539575][ T5744] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 122.725867][ T4263] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 122.767571][ T5825] device syzkaller1 entered promiscuous mode [ 123.051959][ T4174] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 123.147487][ T4263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 123.171998][ T4263] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 123.330691][ T4192] usb 2-1: USB disconnect, device number 11 [ 123.346568][ T4192] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 123.371708][ T4263] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 123.391951][ T4263] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.406943][ T4263] usb 6-1: Product: syz [ 123.415195][ T4263] usb 6-1: Manufacturer: syz [ 123.419803][ T4263] usb 6-1: SerialNumber: syz [ 123.438263][ T4263] usb 6-1: config 0 descriptor?? [ 123.465310][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.481331][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.722865][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.753527][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 124.205136][ T4263] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 124.213124][ T4264] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 124.345381][ T4174] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 124.435267][ T4263] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 124.464001][ T4263] usb 6-1: USB disconnect, device number 5 [ 124.470191][ T4264] usb 2-1: Using ep0 maxpacket: 8 [ 124.560260][ T5899] fido_id[5899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 124.665049][ T4342] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 124.707759][ T4174] usb 3-1: not running at top speed; connect to a high speed hub [ 124.815414][ T4264] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.825056][ T4174] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.836012][ T4264] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.844010][ T4264] usb 2-1: Product: syz [ 124.849037][ T4264] usb 2-1: Manufacturer: syz [ 124.853649][ T4264] usb 2-1: SerialNumber: syz [ 124.871716][ T4264] usb 2-1: config 0 descriptor?? [ 124.987352][ T4174] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 124.997486][ T4174] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 125.006282][ T4174] usb 3-1: Product: syz [ 125.010677][ T4174] usb 3-1: Manufacturer: syz [ 125.037057][ T4342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 125.058128][ T4342] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 125.069707][ T5924] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1963084399 (1963084399 ns) > initial count (378178347 ns). Using initial count to start timer. [ 125.083791][ T4342] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.089669][ T4174] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 125.105414][ T4174] usb 3-1: No streaming interface found for terminal 2. [ 125.123423][ T4342] usb 5-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 125.145049][ T4264] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.145472][ T4342] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.186996][ T5893] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 125.194065][ T5893] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 125.206310][ T4342] pl2303 5-1:1.0: pl2303 converter detected [ 125.217462][ T4342] usb 5-1: pl2303 converter now attached to ttyUSB0 [ 125.294663][ T4174] usb 3-1: USB disconnect, device number 10 [ 125.555143][ T5893] pl2303 5-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 125.585273][ T5893] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 125.618272][ T5893] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 125.645112][ T5893] pl2303 5-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 125.665482][ T5893] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 125.703342][ T5819] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.945290][ T5893] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 125.969209][ T5978] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 125.989123][ T5970] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 126.004970][ T5978] netlink: 152 bytes leftover after parsing attributes in process `syz.0.286'. [ 126.015399][ T5970] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.038712][ T5893] pl2303 ttyUSB0: error sending break = -32 [ 126.057260][ T5978] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 126.078505][ T4174] usb 5-1: USB disconnect, device number 11 [ 126.091185][ T4174] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 126.108179][ T4174] pl2303 5-1:1.0: device disconnected [ 126.374749][ T6009] FAULT_INJECTION: forcing a failure. [ 126.374749][ T6009] name failslab, interval 1, probability 0, space 0, times 0 [ 126.405094][ T6009] CPU: 0 PID: 6009 Comm: syz.0.295 Not tainted syzkaller #0 [ 126.412420][ T6009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.422484][ T6009] Call Trace: [ 126.425770][ T6009] [ 126.428703][ T6009] dump_stack_lvl+0x188/0x250 [ 126.433483][ T6009] ? show_regs_print_info+0x20/0x20 [ 126.438694][ T6009] ? load_image+0x410/0x410 [ 126.443210][ T6009] ? __might_sleep+0xf0/0xf0 [ 126.447807][ T6009] ? __lock_acquire+0x7d40/0x7d40 [ 126.452850][ T6009] should_fail+0x383/0x4b0 [ 126.457280][ T6009] should_failslab+0x5/0x20 [ 126.461795][ T6009] slab_pre_alloc_hook+0x51/0xc0 [ 126.466744][ T6009] ? v9fs_session_init+0xf7/0x1770 [ 126.471866][ T6009] __kmalloc_track_caller+0x69/0x330 [ 126.477159][ T6009] ? v9fs_session_init+0xf7/0x1770 [ 126.482307][ T6009] kstrdup+0x32/0x70 [ 126.486197][ T6009] v9fs_session_init+0xf7/0x1770 [ 126.491138][ T6009] ? v9fs_show_options+0x610/0x610 [ 126.496289][ T6009] v9fs_mount+0x72/0x850 [ 126.500526][ T6009] legacy_get_tree+0xe6/0x180 [ 126.505197][ T6009] ? trace_xrep_findroot_block+0x1f0/0x1f0 [ 126.511003][ T6009] vfs_get_tree+0x88/0x270 [ 126.515427][ T6009] do_new_mount+0x247/0xa40 [ 126.519924][ T6009] __se_sys_mount+0x2e3/0x3d0 [ 126.524590][ T6009] ? __x64_sys_mount+0xc0/0xc0 [ 126.529346][ T6009] ? lockdep_hardirqs_on+0x94/0x140 [ 126.534618][ T6009] ? __x64_sys_mount+0x1c/0xc0 [ 126.539372][ T6009] do_syscall_64+0x4c/0xa0 [ 126.543775][ T6009] ? clear_bhb_loop+0x30/0x80 [ 126.548445][ T6009] ? clear_bhb_loop+0x30/0x80 [ 126.553116][ T6009] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 126.559000][ T6009] RIP: 0033:0x7f1d3b709559 [ 126.563409][ T6009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.583001][ T6009] RSP: 002b:00007f1d39961028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.591410][ T6009] RAX: ffffffffffffffda RBX: 00007f1d3b990fa0 RCX: 00007f1d3b709559 [ 126.599368][ T6009] RDX: 0000200000000840 RSI: 0000200000000800 RDI: 0000000000000000 [ 126.607331][ T6009] RBP: 00007f1d3b7a08b0 R08: 0000200000002980 R09: 0000000000000000 [ 126.615288][ T6009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.623243][ T6009] R13: 00007f1d3b991038 R14: 00007f1d3b990fa0 R15: 00007ffe234b4a18 [ 126.631213][ T6009] [ 126.843626][ T6034] netlink: 32 bytes leftover after parsing attributes in process `syz.4.302'. [ 127.065103][ T4299] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 127.175140][ T4303] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.265213][ T4264] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 127.317327][ T4264] usb 2-1: USB disconnect, device number 12 [ 127.545092][ T4303] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 127.595173][ T4299] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.043053][ T4303] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.053238][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.061352][ T4299] usb 1-1: Product: syz [ 128.065588][ T4303] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.074559][ T4299] usb 1-1: Manufacturer: syz [ 128.084975][ T4299] usb 1-1: SerialNumber: syz [ 128.090292][ T4303] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.102644][ T4299] usb 1-1: config 0 descriptor?? [ 128.227553][ T4303] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 128.243987][ T4303] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.260315][ T4303] usb 5-1: Product: syz [ 128.264505][ T4303] usb 5-1: Manufacturer: syz [ 128.316037][ T4303] cdc_wdm 5-1:1.0: skipping garbage [ 128.321278][ T4303] cdc_wdm 5-1:1.0: skipping garbage [ 128.339334][ T4303] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 128.354346][ T4303] cdc_wdm 5-1:1.0: Unknown control protocol [ 128.365348][ T4299] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.486191][ T6100] FAULT_INJECTION: forcing a failure. [ 128.486191][ T6100] name fail_futex, interval 1, probability 0, space 0, times 0 [ 128.499919][ T6100] CPU: 1 PID: 6100 Comm: syz.2.320 Not tainted syzkaller #0 [ 128.507226][ T6100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 128.517291][ T6100] Call Trace: [ 128.520566][ T6100] [ 128.523490][ T6100] dump_stack_lvl+0x188/0x250 [ 128.528163][ T6100] ? rcu_lock_release+0x5/0x20 [ 128.532916][ T6100] ? show_regs_print_info+0x20/0x20 [ 128.538099][ T6100] ? load_image+0x410/0x410 [ 128.542609][ T6100] should_fail+0x383/0x4b0 [ 128.547040][ T6100] futex_lock_pi_atomic+0x415/0x10f0 [ 128.552320][ T6100] ? __rwlock_init+0x140/0x140 [ 128.557081][ T6100] futex_lock_pi+0x37b/0xbf0 [ 128.561675][ T6100] ? futex_requeue+0x1920/0x1920 [ 128.566605][ T6100] ? __lock_acquire+0x13b3/0x7d40 [ 128.571632][ T6100] ? futex_wait+0x680/0x680 [ 128.576123][ T6100] ? verify_lock_unused+0x140/0x140 [ 128.581308][ T6100] ? verify_lock_unused+0x140/0x140 [ 128.586495][ T6100] do_futex+0xdda/0x12b0 [ 128.590732][ T6100] ? vfs_write+0xaa6/0xd70 [ 128.595154][ T6100] ? futex_exit_release+0x1c0/0x1c0 [ 128.600351][ T6100] ? __context_tracking_exit+0x4c/0x80 [ 128.605803][ T6100] __se_sys_futex+0x389/0x420 [ 128.610471][ T6100] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 128.616440][ T6100] ? __x64_sys_futex+0xf0/0xf0 [ 128.621199][ T6100] ? __x64_sys_futex+0x1d/0xf0 [ 128.625960][ T6100] do_syscall_64+0x4c/0xa0 [ 128.630362][ T6100] ? clear_bhb_loop+0x30/0x80 [ 128.635028][ T6100] ? clear_bhb_loop+0x30/0x80 [ 128.639704][ T6100] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.645585][ T6100] RIP: 0033:0x7f143879f559 [ 128.649990][ T6100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.669676][ T6100] RSP: 002b:00007f14369f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 128.678075][ T6100] RAX: ffffffffffffffda RBX: 00007f1438a26fa0 RCX: 00007f143879f559 [ 128.686034][ T6100] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000000 [ 128.694074][ T6100] RBP: 00007f14388368b0 R08: 0000000000000000 R09: 0000000034fffffd [ 128.702029][ T6100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.709987][ T6100] R13: 00007f1438a27038 R14: 00007f1438a26fa0 R15: 00007ffebfda7ea8 [ 128.718043][ T6100] [ 128.739267][ T4192] usb 5-1: USB disconnect, device number 12 [ 128.790218][ T4263] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.051057][ T6122] FAULT_INJECTION: forcing a failure. [ 129.051057][ T6122] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 129.065361][ T6122] CPU: 0 PID: 6122 Comm: syz.2.326 Not tainted syzkaller #0 [ 129.072665][ T6122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.082728][ T6122] Call Trace: [ 129.086014][ T6122] [ 129.088947][ T6122] dump_stack_lvl+0x188/0x250 [ 129.093629][ T6122] ? verify_lock_unused+0x140/0x140 [ 129.098834][ T6122] ? show_regs_print_info+0x20/0x20 [ 129.104041][ T6122] ? load_image+0x410/0x410 [ 129.108559][ T6122] ? mark_lock+0x94/0x320 [ 129.112896][ T6122] should_fail+0x383/0x4b0 [ 129.117325][ T6122] prepare_alloc_pages+0x1e3/0x5b0 [ 129.122451][ T6122] __alloc_pages+0x11b/0x480 [ 129.127050][ T6122] ? zone_statistics+0x170/0x170 [ 129.132002][ T6122] ? rcu_lock_acquire+0x30/0x30 [ 129.136858][ T6122] ? alloc_pages+0x452/0x560 [ 129.141457][ T6122] __get_free_pages+0x8/0x30 [ 129.146055][ T6122] __tlb_remove_page_size+0x1f2/0x3f0 [ 129.151440][ T6122] unmap_page_range+0xfcf/0x2410 [ 129.156413][ T6122] unmap_vmas+0x131/0x250 [ 129.160750][ T6122] ? unmap_page_range+0x2410/0x2410 [ 129.165955][ T6122] ? __mutex_lock_common+0x435/0x2400 [ 129.171333][ T6122] ? exit_mm_release+0x16/0x30 [ 129.176109][ T6122] exit_mmap+0x3b9/0x640 [ 129.180365][ T6122] ? vm_brk+0x20/0x20 [ 129.184365][ T6122] ? uprobe_clear_state+0x2f6/0x460 [ 129.189578][ T6122] __mmput+0x115/0x390 [ 129.193658][ T6122] exit_mm+0x632/0x7b0 [ 129.197739][ T6122] ? perf_pmu_migrate_context+0xb70/0xb70 [ 129.203476][ T6122] ? do_exit+0x2110/0x2110 [ 129.207899][ T6122] ? __ia32_sys_timer_delete+0x40/0x40 [ 129.213368][ T6122] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 129.218853][ T6122] ? tty_audit_exit+0x149/0x1f0 [ 129.223716][ T6122] do_exit+0x5b8/0x2110 [ 129.227890][ T6122] ? put_task_struct+0x80/0x80 [ 129.232666][ T6122] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.238672][ T6122] ? _raw_spin_lock_irq+0xb7/0xf0 [ 129.243717][ T6122] do_group_exit+0x12c/0x2f0 [ 129.248314][ T6122] ? lockdep_hardirqs_on+0x94/0x140 [ 129.253524][ T6122] get_signal+0x7eb/0x12e0 [ 129.257965][ T6122] arch_do_signal_or_restart+0xe6/0x12a0 [ 129.263829][ T6122] ? futex_exit_release+0x1c0/0x1c0 [ 129.269077][ T6122] ? get_sigframe_size+0x10/0x10 [ 129.274025][ T6122] ? __context_tracking_exit+0x4c/0x80 [ 129.279505][ T6122] ? exit_to_user_mode_loop+0x3b/0x130 [ 129.284971][ T6122] exit_to_user_mode_loop+0x9e/0x130 [ 129.290349][ T6122] exit_to_user_mode_prepare+0xee/0x180 [ 129.295899][ T6122] syscall_exit_to_user_mode+0x16/0x40 [ 129.301362][ T6122] do_syscall_64+0x58/0xa0 [ 129.305780][ T6122] ? clear_bhb_loop+0x30/0x80 [ 129.310464][ T6122] ? clear_bhb_loop+0x30/0x80 [ 129.315146][ T6122] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.321048][ T6122] RIP: 0033:0x7f143879f559 [ 129.325465][ T6122] Code: Unable to access opcode bytes at RIP 0x7f143879f52f. [ 129.329949][ T4192] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 129.332828][ T6122] RSP: 002b:00007f14369f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.348838][ T6122] RAX: 0000000000000001 RBX: 00007f1438a26fa8 RCX: 00007f143879f559 [ 129.356819][ T6122] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1438a26fac [ 129.364794][ T6122] RBP: 00007f1438a26fa0 R08: 0000743acdf9963b R09: 0000000000000000 [ 129.372772][ T6122] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 129.380748][ T6122] R13: 00007f1438a27038 R14: 00007ffebfda7dc0 R15: 00007ffebfda7ea8 [ 129.388739][ T6122] [ 129.525279][ T4263] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.539875][ T4263] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 129.564332][ T6147] capability: warning: `syz.2.331' uses deprecated v2 capabilities in a way that may be insecure [ 129.569520][ T4263] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.646941][ T4263] usb 2-1: Found UVC 1.00 device (046d:0825) [ 129.660728][ T4263] usb 2-1: No streaming interface found for terminal 2. [ 129.703801][ T4192] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.718054][ T4192] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.732116][ T4192] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.742280][ T4192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.842571][ T4342] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.864902][ T4263] usb 2-1: USB disconnect, device number 13 [ 129.875067][ T4192] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.889121][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.899136][ T4192] usb 5-1: Product: syz [ 129.903560][ T4192] usb 5-1: Manufacturer: syz [ 129.964743][ T4192] cdc_wdm 5-1:1.0: skipping garbage [ 129.976754][ T4192] cdc_wdm 5-1:1.0: skipping garbage [ 130.005609][ T4192] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 130.015177][ T4192] cdc_wdm 5-1:1.0: Unknown control protocol [ 130.035707][ T4192] usb 5-1: USB disconnect, device number 13 [ 130.102407][ T6175] FAULT_INJECTION: forcing a failure. [ 130.102407][ T6175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 130.138749][ T6175] CPU: 0 PID: 6175 Comm: syz.4.336 Not tainted syzkaller #0 [ 130.146060][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.156100][ T6175] Call Trace: [ 130.159368][ T6175] [ 130.162292][ T6175] dump_stack_lvl+0x188/0x250 [ 130.166983][ T6175] ? show_regs_print_info+0x20/0x20 [ 130.172174][ T6175] ? load_image+0x410/0x410 [ 130.176689][ T6175] ? __lock_acquire+0x7d40/0x7d40 [ 130.181731][ T6175] should_fail+0x383/0x4b0 [ 130.186154][ T6175] prepare_alloc_pages+0x1e3/0x5b0 [ 130.191270][ T6175] __alloc_pages+0x11b/0x480 [ 130.195865][ T6175] ? zone_statistics+0x170/0x170 [ 130.199803][ T4342] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.200797][ T6175] ? alloc_pages+0x452/0x560 [ 130.215456][ T6175] __pmd_alloc+0xa6/0x750 [ 130.216594][ T4342] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 130.219790][ T6175] ? __lock_acquire+0x7d40/0x7d40 [ 130.219815][ T6175] ? do_raw_spin_lock+0x128/0x2f0 [ 130.219833][ T6175] ? __pud_alloc+0x140/0x140 [ 130.219851][ T6175] ? __rwlock_init+0x140/0x140 [ 130.239749][ T4342] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 130.240513][ T6175] ? count_memcg_event_mm+0x324/0x370 [ 130.240539][ T6175] ? do_raw_spin_unlock+0x11d/0x230 [ 130.245375][ T4342] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 130.249866][ T6175] ? _raw_spin_unlock+0x24/0x40 [ 130.249890][ T6175] ? __pud_alloc+0x122/0x140 [ 130.249910][ T6175] handle_mm_fault+0xbd3/0x4440 [ 130.249940][ T6175] ? get_page+0xe0/0xe0 [ 130.249963][ T6175] ? follow_page_mask+0x272/0x12b0 [ 130.249987][ T6175] ? vma_is_secretmem+0x9/0x40 [ 130.250004][ T6175] ? check_vma_flags+0x359/0x470 [ 130.250024][ T6175] __get_user_pages+0x952/0x11e0 [ 130.250055][ T6175] ? populate_vma_page_range+0x290/0x290 [ 130.250079][ T6175] ? __might_sleep+0xf0/0xf0 [ 130.269893][ T4342] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.273417][ T6175] ? read_lock_is_recursive+0x10/0x10 [ 130.273449][ T6175] __get_user_pages_remote+0x1c2/0x730 [ 130.273476][ T6175] ? get_user_pages_remote+0x55/0xa0 [ 130.354817][ T6175] get_arg_page+0x11b/0x350 [ 130.359326][ T6175] ? copy_string_kernel+0x280/0x280 [ 130.364527][ T6175] ? up_write+0x1b6/0x410 [ 130.368865][ T6175] copy_string_kernel+0x14d/0x280 [ 130.373907][ T6175] do_execveat_common+0x360/0x6b0 [ 130.378952][ T6175] __x64_sys_execveat+0xc0/0xe0 [ 130.383823][ T6175] do_syscall_64+0x4c/0xa0 [ 130.388249][ T6175] ? clear_bhb_loop+0x30/0x80 [ 130.392938][ T6175] ? clear_bhb_loop+0x30/0x80 [ 130.397628][ T6175] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.403531][ T6175] RIP: 0033:0x7f9bdeb5a559 [ 130.407949][ T6175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.427579][ T6175] RSP: 002b:00007f9bdcdb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 130.435995][ T6175] RAX: ffffffffffffffda RBX: 00007f9bdede1fa0 RCX: 00007f9bdeb5a559 [ 130.443955][ T6175] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 130.451932][ T6175] RBP: 00007f9bdebf18b0 R08: 0000000000000000 R09: 0000000000000000 [ 130.459911][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.467888][ T6175] R13: 00007f9bdede2038 R14: 00007f9bdede1fa0 R15: 00007ffd3bb7de18 [ 130.475882][ T6175] [ 130.725507][ T6199] FAULT_INJECTION: forcing a failure. [ 130.725507][ T6199] name failslab, interval 1, probability 0, space 0, times 0 [ 130.748704][ T6199] CPU: 0 PID: 6199 Comm: syz.1.342 Not tainted syzkaller #0 [ 130.756015][ T6199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.766076][ T6199] Call Trace: [ 130.769360][ T6199] [ 130.772295][ T6199] dump_stack_lvl+0x188/0x250 [ 130.776985][ T6199] ? show_regs_print_info+0x20/0x20 [ 130.782191][ T6199] ? load_image+0x410/0x410 [ 130.786707][ T6199] ? __might_sleep+0xf0/0xf0 [ 130.791307][ T6199] ? __lock_acquire+0x7d40/0x7d40 [ 130.796352][ T6199] should_fail+0x383/0x4b0 [ 130.800872][ T6199] should_failslab+0x5/0x20 [ 130.805385][ T6199] slab_pre_alloc_hook+0x51/0xc0 [ 130.809755][ T4342] cxacru 3-1:1.0: send of cm 0x91 failed (-71) [ 130.810329][ T6199] kmem_cache_alloc_trace+0x47/0x290 [ 130.820154][ T4342] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 130.821834][ T6199] ? snd_card_file_add+0x54/0x240 [ 130.821864][ T6199] snd_card_file_add+0x54/0x240 [ 130.839415][ T6199] snd_pcm_oss_open+0x160/0x1e60 [ 130.844367][ T6199] ? kfree+0xef/0x2a0 [ 130.848367][ T6199] ? snd_pcm_oss_mmap+0x440/0x440 [ 130.848725][ T4342] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 130.853393][ T6199] ? soundcore_open+0x270/0x4b0 [ 130.853419][ T6199] ? __lock_acquire+0x7d40/0x7d40 [ 130.853447][ T6199] ? do_raw_spin_unlock+0x11d/0x230 [ 130.853474][ T6199] chrdev_open+0x585/0x5f0 [ 130.879560][ T6199] ? cd_forget+0x160/0x160 [ 130.883130][ T4342] cxacru: probe of 3-1:1.0 failed with error -71 [ 130.883983][ T6199] ? fsnotify_perm+0x3a7/0x560 [ 130.884009][ T6199] ? cd_forget+0x160/0x160 [ 130.899462][ T6199] do_dentry_open+0x7f7/0xf90 [ 130.904149][ T6199] ? vfs_open+0x2b/0x80 [ 130.908321][ T6199] path_openat+0x2718/0x2fb0 [ 130.912940][ T6199] ? __kasan_slab_alloc+0xa9/0xc0 [ 130.917988][ T6199] ? do_filp_open+0x400/0x400 [ 130.919706][ T4342] usb 3-1: USB disconnect, device number 11 [ 130.922716][ T6199] do_filp_open+0x1df/0x400 [ 130.922746][ T6199] ? vfs_tmpfile+0x300/0x300 [ 130.922779][ T6199] ? _raw_spin_unlock+0x24/0x40 [ 130.942522][ T6199] ? alloc_fd+0x59e/0x650 [ 130.946863][ T6199] do_sys_openat2+0x14b/0x500 [ 130.951546][ T6199] ? __lock_acquire+0x7d40/0x7d40 [ 130.956582][ T6199] ? do_sys_open+0xe0/0xe0 [ 130.961005][ T6199] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.967001][ T6199] ? lock_chain_count+0x20/0x20 [ 130.971883][ T6199] __x64_sys_openat+0x135/0x160 [ 130.976746][ T6199] do_syscall_64+0x4c/0xa0 [ 130.981170][ T6199] ? clear_bhb_loop+0x30/0x80 [ 130.985855][ T6199] ? clear_bhb_loop+0x30/0x80 [ 130.990542][ T6199] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.996447][ T6199] RIP: 0033:0x7fbb47d33559 [ 131.000863][ T6199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.020469][ T6199] RSP: 002b:00007fbb45f8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.028903][ T6199] RAX: ffffffffffffffda RBX: 00007fbb47fbafa0 RCX: 00007fbb47d33559 [ 131.036883][ T6199] RDX: 00000000000a0201 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 131.044858][ T6199] RBP: 00007fbb47dca8b0 R08: 0000000000000000 R09: 0000000000000000 [ 131.052835][ T6199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.060807][ T6199] R13: 00007fbb47fbb038 R14: 00007fbb47fbafa0 R15: 00007ffc322b6a98 [ 131.068792][ T6199] [ 131.093013][ T4192] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 131.147975][ T4263] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 131.340945][ T4192] usb 6-1: Using ep0 maxpacket: 16 [ 131.460048][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.479807][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.489546][ T4192] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 131.505461][ T4192] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 131.514629][ T4192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.536238][ T4192] usb 6-1: config 0 descriptor?? [ 131.584527][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.596535][ T4263] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 131.606140][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.619818][ T4263] usb 5-1: config 0 descriptor?? [ 131.817473][ T4299] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 131.836926][ T4299] usb 1-1: USB disconnect, device number 10 [ 131.970858][ T4263] usbhid 5-1:0.0: can't add hid device: -71 [ 131.977925][ T4263] usbhid: probe of 5-1:0.0 failed with error -71 [ 132.003772][ T4263] usb 5-1: USB disconnect, device number 14 [ 132.030998][ T4192] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input21 [ 132.138299][ T4192] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 132.194453][ T4299] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 132.229074][ T4192] usb 6-1: USB disconnect, device number 6 [ 132.256143][ T6271] fido_id[6271]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 132.393214][ T4174] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 132.442504][ T4263] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 132.561637][ T4299] usb 1-1: config 1 has an invalid interface number: 27 but max is 1 [ 132.570424][ T4299] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.583456][ T4299] usb 1-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 132.592497][ T4299] usb 1-1: config 1 has no interface number 2 [ 132.598594][ T4299] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 132.608459][ T4299] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.621274][ T4299] usb 1-1: config 1 interface 1 has no altsetting 0 [ 132.649501][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.655821][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.780088][ T4299] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 132.789519][ T4299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.798240][ T4299] usb 1-1: Product: syz [ 132.802681][ T4299] usb 1-1: Manufacturer: syz [ 132.807348][ T4299] usb 1-1: SerialNumber: syz [ 132.814834][ T4174] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 132.834954][ T4174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.855058][ T4174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 132.864490][ T4263] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.889433][ T4174] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.905649][ T4263] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 132.918187][ T4263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.954598][ T4263] usb 5-1: config 0 descriptor?? [ 133.038337][ T4174] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 133.047414][ T4174] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 133.063558][ T4174] usb 2-1: Product: syz [ 133.067742][ T4174] usb 2-1: Manufacturer: syz [ 133.134923][ T4174] cdc_wdm 2-1:1.0: skipping garbage [ 133.142800][ T4174] cdc_wdm 2-1:1.0: skipping garbage [ 133.162032][ T4174] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 133.181950][ T4174] cdc_wdm 2-1:1.0: Unknown control protocol [ 133.279492][ T6251] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 133.368842][ T4192] usb 2-1: USB disconnect, device number 14 [ 133.633026][ T6345] udc-core: couldn't find an available UDC or it's busy [ 133.892026][ T4263] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 133.910293][ T4263] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 133.951466][ T4299] ATM dev 0: failed to start ADSL synchronisation: -71 [ 133.971353][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3be800 failed (-71)! [ 133.979317][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3be900 failed (-71)! [ 133.987257][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3beb00 failed (-71)! [ 133.995230][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3bea00 failed (-71)! [ 134.040697][ T4299] speedtch 1-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 134.071901][ T4299] speedtch 1-1:1.27: usbatm_usb_probe: bind failed: -16! [ 134.078988][ T4299] speedtch: probe of 1-1:1.27 failed with error -16 [ 134.100135][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3be800 failed (-71)! [ 134.108101][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3be900 failed (-71)! [ 134.116037][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3beb00 failed (-71)! [ 134.123971][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805f3bea00 failed (-71)! [ 134.159477][ T4299] usb 1-1: USB disconnect, device number 11 [ 134.289463][ T4192] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 134.420182][ T4263] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 134.624514][ T6373] Set syz1 is full, maxelem 6117 reached [ 134.658400][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.676090][ T4263] usb 6-1: Using ep0 maxpacket: 8 [ 134.701252][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.743302][ T4192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 134.794837][ T4192] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.805655][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.819199][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.830727][ T4263] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.845704][ T4192] usb 2-1: config 0 descriptor?? [ 134.892499][ T4299] usb 5-1: USB disconnect, device number 15 [ 134.904301][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 134.951269][ T4263] usb 6-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 134.960865][ T4263] usb 6-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0 [ 134.969645][ T4263] usb 6-1: Manufacturer: syz [ 134.979062][ T4263] usb 6-1: config 0 descriptor?? [ 135.043670][ T6403] rxe_eth0 speed is unknown, defaulting to 1000 [ 135.152580][ T4259] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 135.243682][ T4299] usb 6-1: USB disconnect, device number 7 [ 135.333835][ T4192] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 135.353808][ T4192] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 135.388175][ T6420] size and base must be multiples of 4 kiB [ 135.400858][ T4259] usb 3-1: Using ep0 maxpacket: 8 [ 135.410573][ T6420] CPU: 1 PID: 6420 Comm: syz.4.372 Not tainted syzkaller #0 [ 135.417876][ T6420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.427941][ T6420] Call Trace: [ 135.431222][ T6420] [ 135.434162][ T6420] dump_stack_lvl+0x188/0x250 [ 135.438846][ T6420] ? __might_sleep+0xf0/0xf0 [ 135.443444][ T6420] ? show_regs_print_info+0x20/0x20 [ 135.448652][ T6420] ? load_image+0x410/0x410 [ 135.453171][ T6420] mtrr_del+0x81/0xb0 [ 135.457174][ T6420] mtrr_ioctl+0x998/0x1140 [ 135.461611][ T6420] ? mtrr_close+0x1f0/0x1f0 [ 135.466143][ T6420] ? mtrr_close+0x1f0/0x1f0 [ 135.470657][ T6420] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 135.476130][ T6420] ? proc_reg_poll+0x280/0x280 [ 135.480904][ T6420] __se_sys_ioctl+0xfa/0x170 [ 135.485501][ T6420] do_syscall_64+0x4c/0xa0 [ 135.489923][ T6420] ? clear_bhb_loop+0x30/0x80 [ 135.494606][ T6420] ? clear_bhb_loop+0x30/0x80 [ 135.499293][ T6420] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.505194][ T6420] RIP: 0033:0x7f9bdeb5a559 [ 135.509640][ T6420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.529250][ T6420] RSP: 002b:00007f9bdcdb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.537669][ T6420] RAX: ffffffffffffffda RBX: 00007f9bdede1fa0 RCX: 00007f9bdeb5a559 [ 135.545646][ T6420] RDX: 0000200000000240 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 135.553623][ T6420] RBP: 00007f9bdebf18b0 R08: 0000000000000000 R09: 0000000000000000 [ 135.561598][ T6420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.569570][ T6420] R13: 00007f9bdede2038 R14: 00007f9bdede1fa0 R15: 00007ffd3bb7de18 [ 135.577561][ T6420] [ 135.589482][ T4303] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 135.629325][ T4259] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 135.646218][ T4259] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.657303][ T4259] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.673313][ T4259] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.685394][ T4259] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.716322][ T4259] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.734244][ T4259] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.847587][ T4303] usb 1-1: Using ep0 maxpacket: 32 [ 136.006574][ T4303] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.016653][ T4259] usb 3-1: usb_control_msg returned -32 [ 136.024334][ T4259] usbtmc 3-1:16.0: can't read capabilities [ 136.047122][ T4174] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 136.085922][ T4303] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 136.094118][ T4303] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 136.115682][ T4303] usb 1-1: config 14 has no interface number 0 [ 136.121839][ T4303] usb 1-1: config 14 has no interface number 1 [ 136.129380][ T4303] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 136.145644][ T4303] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 136.161811][ T4303] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 136.173829][ T4303] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.189859][ T4303] usb 1-1: config 14 interface 57 has no altsetting 0 [ 136.199250][ T4303] usb 1-1: config 14 interface 228 has no altsetting 0 [ 136.244879][ T4264] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 136.314535][ T4174] usb 5-1: Using ep0 maxpacket: 16 [ 136.364217][ T4303] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 136.373295][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.393784][ T4303] usb 1-1: Product: syz [ 136.397985][ T4303] usb 1-1: Manufacturer: syz [ 136.402579][ T4303] usb 1-1: SerialNumber: syz [ 136.457001][ T4174] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.474048][ T4174] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.485909][ T4174] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.499200][ T4174] usb 5-1: config 0 interface 0 has no altsetting 0 [ 136.506179][ T4174] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 136.515663][ T4264] usb 6-1: Using ep0 maxpacket: 32 [ 136.520975][ T4174] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.543749][ T4174] usb 5-1: config 0 descriptor?? [ 136.661954][ T4264] usb 6-1: config 0 has an invalid interface number: 171 but max is 0 [ 136.673630][ T4264] usb 6-1: config 0 has no interface number 0 [ 136.686584][ T4264] usb 6-1: config 0 interface 171 has no altsetting 0 [ 136.881645][ T4264] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= c.81 [ 136.898892][ T4264] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.901449][ T4303] legousbtower 1-1:14.57: interrupt endpoints not found [ 136.923172][ T4264] usb 6-1: Product: syz [ 136.947543][ T4264] usb 6-1: Manufacturer: syz [ 136.957581][ T4264] usb 6-1: SerialNumber: syz [ 136.972934][ T4264] usb 6-1: config 0 descriptor?? [ 137.017257][ T4174] prodikeys 0003:041E:2801.000B: collection stack underflow [ 137.026485][ T4174] prodikeys 0003:041E:2801.000B: item 0 2 0 12 parsing failed [ 137.037956][ T4174] prodikeys 0003:041E:2801.000B: hid parse failed [ 137.048873][ T4174] prodikeys: probe of 0003:041E:2801.000B failed with error -22 [ 137.111348][ T4303] legousbtower 1-1:14.228: interrupt endpoints not found [ 137.212585][ T4303] usb 5-1: USB disconnect, device number 16 [ 137.304324][ T4264] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.171/input/input24 [ 137.347079][ T3542] bcm5974 6-1:0.171: could not read from device [ 137.361202][ T4264] usb 6-1: USB disconnect, device number 8 [ 137.372833][ T3542] bcm5974 6-1:0.171: could not read from device [ 137.540958][ T4263] usb 2-1: USB disconnect, device number 15 [ 137.870951][ T4264] usb 3-1: USB disconnect, device number 12 [ 138.186664][ T6519] FAULT_INJECTION: forcing a failure. [ 138.186664][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 138.243826][ T6519] CPU: 0 PID: 6519 Comm: syz.4.384 Not tainted syzkaller #0 [ 138.251152][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.261215][ T6519] Call Trace: [ 138.264500][ T6519] [ 138.267440][ T6519] dump_stack_lvl+0x188/0x250 [ 138.272136][ T6519] ? show_regs_print_info+0x20/0x20 [ 138.277348][ T6519] ? load_image+0x410/0x410 [ 138.281866][ T6519] ? __might_sleep+0xf0/0xf0 [ 138.286464][ T6519] ? __lock_acquire+0x7d40/0x7d40 [ 138.291517][ T6519] should_fail+0x383/0x4b0 [ 138.295952][ T6519] should_failslab+0x5/0x20 [ 138.300463][ T6519] slab_pre_alloc_hook+0x51/0xc0 [ 138.305417][ T6519] __kmalloc+0x6b/0x340 [ 138.309586][ T6519] ? asymmetric_key_generate_id+0x52/0xd0 [ 138.315312][ T6519] ? x509_cert_parse+0x7a0/0x7a0 [ 138.320262][ T6519] ? x509_fabricate_name+0x446/0x810 [ 138.325560][ T6519] asymmetric_key_generate_id+0x52/0xd0 [ 138.331120][ T6519] x509_process_extension+0x1d6/0x3a0 [ 138.336520][ T6519] asn1_ber_decoder+0x9c2/0x21b0 [ 138.341472][ T6519] ? __kasan_kmalloc+0xaf/0xe0 [ 138.346283][ T6519] ? init_stack_slab+0x100/0x100 [ 138.351264][ T6519] x509_cert_parse+0x1ae/0x7a0 [ 138.356051][ T6519] x509_key_preparse+0x60/0x5d0 [ 138.361011][ T6519] ? down_read+0x1aa/0x2e0 [ 138.365445][ T6519] asymmetric_key_preparse+0xa5/0x140 [ 138.370841][ T6519] key_create_or_update+0x432/0xa40 [ 138.376052][ T6519] ? security_key_permission+0x7c/0xa0 [ 138.381540][ T6519] ? key_type_put+0x20/0x20 [ 138.386059][ T6519] ? lookup_user_key_possessed+0x40/0x40 [ 138.391719][ T6519] ? __might_fault+0xb3/0x110 [ 138.396413][ T6519] __se_sys_add_key+0x34b/0x410 [ 138.401282][ T6519] ? __x64_sys_add_key+0xc0/0xc0 [ 138.406239][ T6519] ? lockdep_hardirqs_on+0x94/0x140 [ 138.411445][ T6519] ? __x64_sys_add_key+0x1c/0xc0 [ 138.416395][ T6519] do_syscall_64+0x4c/0xa0 [ 138.420827][ T6519] ? clear_bhb_loop+0x30/0x80 [ 138.425517][ T6519] ? clear_bhb_loop+0x30/0x80 [ 138.430216][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.436117][ T6519] RIP: 0033:0x7f9bdeb5a559 [ 138.440537][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.460150][ T6519] RSP: 002b:00007f9bdcdb2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 138.468571][ T6519] RAX: ffffffffffffffda RBX: 00007f9bdede1fa0 RCX: 00007f9bdeb5a559 [ 138.476551][ T6519] RDX: 0000200000000480 RSI: 0000000000000000 RDI: 0000200000000280 [ 138.484531][ T6519] RBP: 00007f9bdebf18b0 R08: fffffffffffffffd R09: 0000000000000000 [ 138.492512][ T6519] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 138.500488][ T6519] R13: 00007f9bdede2038 R14: 00007f9bdede1fa0 R15: 00007ffd3bb7de18 [ 138.508490][ T6519] [ 138.866535][ T4303] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 139.059274][ T4192] usb 1-1: USB disconnect, device number 12 [ 139.114841][ T4303] usb 6-1: Using ep0 maxpacket: 16 [ 139.235005][ T4303] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.262218][ T4303] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.298321][ T4303] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.298354][ T4303] usb 6-1: config 0 interface 0 has no altsetting 0 [ 139.298386][ T4303] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 139.298410][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.310425][ T4303] usb 6-1: config 0 descriptor?? [ 139.729039][ T6568] device veth1_virt_wifi entered promiscuous mode [ 139.788900][ T4303] input: HID 041e:2801 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:2801.000C/input/input25 [ 139.888825][ T4303] prodikeys 0003:041E:2801.000C: input,hidraw0: USB HID v0.00 Joystick [HID 041e:2801] on usb-dummy_hcd.5-1/input0 [ 139.915212][ T4174] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 139.998485][ T4303] usb 6-1: USB disconnect, device number 9 [ 140.178045][ T4174] usb 2-1: Using ep0 maxpacket: 16 [ 140.297238][ T4174] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.305866][ T4174] usb 2-1: config 0 has no interface number 0 [ 140.316961][ T4174] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.340640][ T4174] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.366594][ T4174] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.396299][ T4174] usb 2-1: config 0 interface 1 has no altsetting 0 [ 140.402957][ T4174] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 140.414327][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.422688][ T4264] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 140.432993][ T4174] usb 2-1: config 0 descriptor?? [ 140.499124][ T4174] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 140.604942][ T4263] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 140.619882][ T6618] nvme_tcp: queue 0: bad type returned 3 [ 140.843655][ T4264] usb 1-1: config 0 has no interfaces? [ 140.850299][ T4264] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 140.864785][ T4264] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.877090][ T4263] usb 5-1: Using ep0 maxpacket: 8 [ 140.890921][ T4264] usb 1-1: config 0 descriptor?? [ 140.936085][ T4174] elan 0003:04F3:074D.000D: failed to start in urb: -90 [ 140.972741][ T4259] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 140.992730][ T4263] usb 5-1: config 0 has no interfaces? [ 141.163375][ T4263] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 141.186019][ T4263] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.194802][ T4263] usb 5-1: Product: syz [ 141.199166][ T4263] usb 5-1: Manufacturer: syz [ 141.204229][ T4263] usb 5-1: SerialNumber: syz [ 141.220306][ T4263] usb 5-1: config 0 descriptor?? [ 141.357273][ T4174] elan 0003:04F3:074D.000D: Get report error for parm 6: 0 [ 141.432902][ T6594] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 141.459414][ T6594] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 141.487696][ T4192] usb 5-1: USB disconnect, device number 17 [ 141.551004][ T4303] usb 1-1: USB disconnect, device number 13 [ 141.559165][ T4259] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 141.568652][ T4259] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 141.595650][ T4259] usb 6-1: Product: syz [ 141.606748][ T4259] usb 6-1: SerialNumber: syz [ 141.634600][ T4259] usb 6-1: config 0 descriptor?? [ 141.774637][ T4174] elan 0003:04F3:074D.000D: Get report error for parm 7: -71 [ 141.785837][ T4174] elan 0003:04F3:074D.000D: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 141.803011][ T4174] elan 0003:04F3:074D.000D: Input device is not registered [ 141.812468][ T4174] elan: probe of 0003:04F3:074D.000D failed with error -119 [ 141.829546][ T4174] usb 2-1: USB disconnect, device number 16 [ 141.894376][ T6691] fido_id[6691]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 141.895574][ T4259] hso 6-1:0.0: Failed to find BULK IN ep [ 142.134793][ T4259] usb 6-1: USB disconnect, device number 10 [ 142.441486][ T6722] kvm: pic: non byte read [ 142.452261][ T6722] kvm: pic: single mode not supported [ 142.452277][ T6722] kvm: pic: level sensitive irq not supported [ 142.468667][ T6722] kvm: pic: non byte read [ 142.506782][ T6722] kvm: pic: non byte read [ 142.534708][ T6722] kvm: pic: non byte read [ 142.549178][ T6722] kvm: pic: non byte read [ 142.562708][ T6722] kvm: pic: single mode not supported [ 142.562767][ T6722] kvm: pic: non byte read [ 142.607517][ T6722] kvm: pic: single mode not supported [ 142.607533][ T6722] kvm: pic: level sensitive irq not supported [ 142.614082][ T6722] kvm: pic: non byte read [ 142.656206][ T6722] kvm: pic: non byte read [ 142.674274][ T6722] kvm: pic: single mode not supported [ 142.674335][ T6722] kvm: pic: non byte read [ 142.999505][ T4259] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 143.198283][ T4303] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 143.446944][ T4259] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 143.460501][ T4259] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 143.472452][ T6771] FAULT_INJECTION: forcing a failure. [ 143.472452][ T6771] name failslab, interval 1, probability 0, space 0, times 0 [ 143.481027][ T4259] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.515834][ T6771] CPU: 1 PID: 6771 Comm: syz.0.441 Not tainted syzkaller #0 [ 143.523171][ T6771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.533238][ T6771] Call Trace: [ 143.536529][ T6771] [ 143.539463][ T6771] dump_stack_lvl+0x188/0x250 [ 143.544154][ T6771] ? show_regs_print_info+0x20/0x20 [ 143.549358][ T6771] ? load_image+0x410/0x410 [ 143.553875][ T6771] ? __lock_acquire+0x7d40/0x7d40 [ 143.558912][ T6771] ? keyring_search_rcu+0x280/0x280 [ 143.564122][ T6771] ? stack_trace_save+0xa6/0xf0 [ 143.568986][ T6771] should_fail+0x383/0x4b0 [ 143.573424][ T6771] should_failslab+0x5/0x20 [ 143.577933][ T6771] slab_pre_alloc_hook+0x51/0xc0 [ 143.582881][ T6771] ? prepare_creds+0x3c/0x610 [ 143.587567][ T6771] kmem_cache_alloc+0x3d/0x280 [ 143.592704][ T6771] prepare_creds+0x3c/0x610 [ 143.597225][ T6771] join_session_keyring+0x17/0x440 [ 143.602362][ T6771] lookup_user_key+0x512/0x1160 [ 143.607242][ T6771] ? lookup_user_key_possessed+0x40/0x40 [ 143.612895][ T6771] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 143.618901][ T6771] ? __might_fault+0xb3/0x110 [ 143.623603][ T6771] ? _copy_from_user+0x111/0x170 [ 143.628568][ T6771] __se_sys_add_key+0x311/0x410 [ 143.633445][ T6771] ? __x64_sys_add_key+0xc0/0xc0 [ 143.638404][ T6771] ? lockdep_hardirqs_on+0x94/0x140 [ 143.643626][ T6771] ? __x64_sys_add_key+0x1c/0xc0 [ 143.648631][ T6771] do_syscall_64+0x4c/0xa0 [ 143.653066][ T6771] ? clear_bhb_loop+0x30/0x80 [ 143.657758][ T6771] ? clear_bhb_loop+0x30/0x80 [ 143.662446][ T6771] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 143.668356][ T6771] RIP: 0033:0x7f1d3b709559 [ 143.672782][ T6771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.692395][ T6771] RSP: 002b:00007f1d39961028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 143.700824][ T6771] RAX: ffffffffffffffda RBX: 00007f1d3b990fa0 RCX: 00007f1d3b709559 [ 143.708810][ T6771] RDX: 0000200000000580 RSI: 0000000000000000 RDI: 0000200000000040 [ 143.716793][ T6771] RBP: 00007f1d3b7a08b0 R08: fffffffffffffffd R09: 0000000000000000 [ 143.724778][ T6771] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 143.732762][ T6771] R13: 00007f1d3b991038 R14: 00007f1d3b990fa0 R15: 00007ffe234b4a18 [ 143.740760][ T6771] [ 143.745165][ T4263] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 143.767651][ T4259] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 143.787175][ T4303] usb 6-1: config 0 has no interfaces? [ 143.789007][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 143.792677][ T4303] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.811397][ T4259] usb 3-1: Product: syz [ 143.814710][ T4303] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.828348][ T4192] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 143.839852][ T4259] usb 3-1: Manufacturer: syz [ 143.855227][ T4303] usb 6-1: config 0 descriptor?? [ 143.894105][ T6737] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 143.940222][ T4259] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 143.951222][ T4259] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 144.100323][ T6749] udc-core: couldn't find an available UDC or it's busy [ 144.121179][ T6749] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.137913][ T4259] usb 6-1: USB disconnect, device number 11 [ 144.172170][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 144.197038][ T4192] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 144.207611][ T4192] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 144.224975][ T4263] usb 2-1: not running at top speed; connect to a high speed hub [ 144.228121][ T4342] usb 3-1: USB disconnect, device number 13 [ 144.260703][ T4342] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 144.277283][ T4342] garmin_gps 3-1:1.0: device disconnected [ 144.311378][ T4263] usb 2-1: config 12 has an invalid interface number: 126 but max is 0 [ 144.324379][ T4263] usb 2-1: config 12 has no interface number 0 [ 144.337426][ T4263] usb 2-1: config 12 interface 126 has no altsetting 0 [ 144.396612][ T4192] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 144.425442][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.433986][ T4192] usb 5-1: Product: syz [ 144.438170][ T4192] usb 5-1: Manufacturer: syz [ 144.466762][ T4192] usb 5-1: SerialNumber: syz [ 144.475462][ T4192] usb 5-1: config 0 descriptor?? [ 144.510226][ T6763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.517278][ T6763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.649213][ T4263] usb 2-1: string descriptor 0 read error: -22 [ 144.656468][ T4263] usb 2-1: New USB device found, idVendor=2013, idProduct=025c, bcdDevice=a4.f9 [ 144.672536][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.755380][ T6763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.763948][ T6810] Need at least one configuration in g1. [ 144.778364][ T4259] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 144.785131][ T6763] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 144.802690][ T6810] udc dummy_udc.0: failed to start g1: -22 [ 144.947468][ T4263] dvb-usb: found a 'PCTV 2002e' in warm state. [ 144.960905][ T4263] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 144.987411][ T4263] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 144.995043][ T4263] usb 2-1: media controller created [ 145.008719][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.022228][ T4259] usb 6-1: Using ep0 maxpacket: 8 [ 145.067844][ T4263] DVB: Unable to find symbol dib7000p_attach() [ 145.074039][ T4263] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 145.086927][ T4263] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 145.107968][ T4263] dvbdev: DVB: registering new adapter (PCTV 2002e) [ 145.115679][ T4263] usb 2-1: media controller created [ 145.127823][ T4263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.165575][ T4263] DVB: Unable to find symbol dib7000p_attach() [ 145.172215][ T4263] dvb-usb: no frontend was attached by 'PCTV 2002e' [ 145.195813][ T4264] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 145.250272][ T4263] rc_core: IR keymap rc-dib0700-rc5 not found [ 145.256754][ T4263] Registered IR keymap rc-empty [ 145.261915][ T4263] dvb-usb: could not initialize remote control. [ 145.285329][ T4263] dvb-usb: PCTV 2002e successfully initialized and connected. [ 145.325027][ T4259] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 145.334086][ T4259] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 145.386548][ T4259] usb 6-1: Product: syz [ 145.390748][ T4259] usb 6-1: Manufacturer: syz [ 145.401028][ T4259] usb 6-1: SerialNumber: syz [ 145.465961][ T4259] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 145.538289][ T4174] usb 2-1: USB disconnect, device number 17 [ 145.576524][ T4174] dvb-usb: PCTV 2002e successfully deinitialized and disconnected. [ 145.673178][ T4259] vp7045: USB control message 'out' went wrong. [ 145.682372][ T4259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.722893][ T4259] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 145.735948][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.737044][ T4259] usb 6-1: media controller created [ 145.747858][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.758050][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.765544][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.771610][ T4259] vp7045: USB control message 'out' went wrong. [ 145.779098][ T4259] dvb-usb: MAC address reading failed. [ 145.785431][ T4264] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.806473][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.816684][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.826631][ T4264] usb 1-1: Product: syz [ 145.830796][ T4264] usb 1-1: Manufacturer: syz [ 145.842407][ T4264] usb 1-1: SerialNumber: syz [ 145.845048][ T4192] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 145.857915][ T4264] usb 1-1: config 0 descriptor?? [ 145.863067][ T4259] vp7045: USB control message 'out' went wrong. [ 145.878544][ T4192] dm9601 5-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet, 54:01:47:1e:47:20 [ 145.892600][ T4259] vp7045: USB control message 'out' went wrong. [ 145.899927][ T4192] usb 5-1: USB disconnect, device number 18 [ 145.916697][ T4192] dm9601 5-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.4-1, Davicom DM96xx USB 10/100 Ethernet [ 145.931401][ T4259] vp7045: USB control message 'out' went wrong. [ 145.948646][ T4259] usb 6-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 145.960089][ T4259] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 146.070393][ T4259] rc_core: IR keymap rc-twinhan1027 not found [ 146.076498][ T4259] Registered IR keymap rc-empty [ 146.089526][ T4259] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 146.102952][ T4259] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input28 [ 146.122118][ T4259] dvb-usb: schedule remote query interval to 400 msecs. [ 146.131826][ T4264] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 146.144408][ T4259] vp7045: USB control message 'out' went wrong. [ 146.150819][ T4263] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 146.158520][ T4259] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 146.206667][ T4259] usb 6-1: USB disconnect, device number 12 [ 146.305935][ T4259] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 146.348768][ T4197] Bluetooth: hci4: Unknown advertising packet type: 0xc196 [ 146.349033][ T4197] ================================================================== [ 146.364952][ T4197] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12ea/0x3ca0 [ 146.372745][ T4197] Read of size 1 at addr ffff88805ab23c09 by task kworker/u5:3/4197 [ 146.380700][ T4197] [ 146.383007][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 146.390529][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.400569][ T4197] Workqueue: hci4 hci_rx_work [ 146.405237][ T4197] Call Trace: [ 146.408506][ T4197] [ 146.411428][ T4197] dump_stack_lvl+0x188/0x250 [ 146.416093][ T4197] ? show_regs_print_info+0x20/0x20 [ 146.421275][ T4197] ? load_image+0x410/0x410 [ 146.425760][ T4197] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 146.431208][ T4197] print_address_description+0x60/0x2d0 [ 146.436740][ T4197] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 146.441838][ T4197] kasan_report+0xdf/0x130 [ 146.446255][ T4197] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 146.451352][ T4197] hci_le_meta_evt+0x12ea/0x3ca0 [ 146.456363][ T4197] ? hci_event_packet+0x363/0x1310 [ 146.461460][ T4197] ? __lock_acquire+0x7d40/0x7d40 [ 146.466478][ T4197] ? hci_remote_host_features_evt+0x240/0x240 [ 146.472527][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 146.478142][ T4197] ? mark_lock+0x94/0x320 [ 146.482452][ T4197] ? mutex_unlock+0x10/0x10 [ 146.486942][ T4197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 146.492909][ T4197] ? lock_chain_count+0x20/0x20 [ 146.497753][ T4197] ? __rwlock_init+0x140/0x140 [ 146.502502][ T4197] hci_event_packet+0xe0b/0x1310 [ 146.507433][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 146.512270][ T4197] ? rcu_lock_release+0x20/0x20 [ 146.517107][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 146.522293][ T4197] hci_rx_work+0x255/0xa10 [ 146.526703][ T4197] process_one_work+0x867/0xff0 [ 146.531552][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 146.537168][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 146.542443][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 146.547458][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 146.552992][ T4197] ? wq_worker_running+0x97/0x170 [ 146.558001][ T4197] worker_thread+0xad7/0x12a0 [ 146.562683][ T4197] kthread+0x42e/0x520 [ 146.566735][ T4197] ? rcu_lock_release+0x20/0x20 [ 146.571568][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 146.576143][ T4197] ret_from_fork+0x1f/0x30 [ 146.580552][ T4197] [ 146.583552][ T4197] [ 146.585860][ T4197] Allocated by task 6882: [ 146.590179][ T4197] __kasan_kmalloc+0xaf/0xe0 [ 146.594777][ T4197] __alloc_skb+0x22c/0x750 [ 146.599176][ T4197] vhci_write+0xbd/0x440 [ 146.603399][ T4197] vfs_write+0x748/0xd70 [ 146.607624][ T4197] ksys_write+0x153/0x260 [ 146.611939][ T4197] do_syscall_64+0x4c/0xa0 [ 146.616339][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.622215][ T4197] [ 146.624520][ T4197] The buggy address belongs to the object at ffff88805ab23800 [ 146.624520][ T4197] which belongs to the cache kmalloc-1k of size 1024 [ 146.638551][ T4197] The buggy address is located 9 bytes to the right of [ 146.638551][ T4197] 1024-byte region [ffff88805ab23800, ffff88805ab23c00) [ 146.652238][ T4197] The buggy address belongs to the page: [ 146.657856][ T4197] page:ffffea00016ac800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ab20 [ 146.667993][ T4197] head:ffffea00016ac800 order:3 compound_mapcount:0 compound_pincount:0 [ 146.676294][ T4197] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 146.684267][ T4197] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017841dc0 [ 146.692832][ T4197] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 146.701390][ T4197] page dumped because: kasan: bad access detected [ 146.707790][ T4197] page_owner tracks the page as allocated [ 146.713481][ T4197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 4608, ts 96239274420, free_ts 96067577326 [ 146.731862][ T4197] get_page_from_freelist+0x24f6/0x2670 [ 146.737396][ T4197] __alloc_pages+0x1ee/0x480 [ 146.741974][ T4197] new_slab+0xc0/0x4b0 [ 146.746026][ T4197] ___slab_alloc+0x807/0xdd0 [ 146.750596][ T4197] __kmalloc+0x11d/0x340 [ 146.754825][ T4197] ieee802_11_parse_elems_crc+0xb3/0x1090 [ 146.760529][ T4197] ieee80211_bss_info_update+0x74d/0xa80 [ 146.766144][ T4197] ieee80211_ibss_rx_queued_mgmt+0x1763/0x2b50 [ 146.772280][ T4197] ieee80211_iface_work+0x714/0xc50 [ 146.777459][ T4197] cfg80211_wiphy_work+0x224/0x260 [ 146.782555][ T4197] process_one_work+0x867/0xff0 [ 146.787390][ T4197] worker_thread+0xad7/0x12a0 [ 146.792047][ T4197] kthread+0x42e/0x520 [ 146.796097][ T4197] ret_from_fork+0x1f/0x30 [ 146.800497][ T4197] page last free stack trace: [ 146.805150][ T4197] free_unref_page_prepare+0x637/0x6c0 [ 146.810589][ T4197] free_unref_page+0x8f/0x2a0 [ 146.815249][ T4197] __unfreeze_partials+0x188/0x1e0 [ 146.820339][ T4197] put_cpu_partial+0x12d/0x190 [ 146.825085][ T4197] qlist_free_all+0x35/0x90 [ 146.829568][ T4197] kasan_quarantine_reduce+0x150/0x160 [ 146.835006][ T4197] __kasan_slab_alloc+0x2f/0xc0 [ 146.839841][ T4197] slab_post_alloc_hook+0x4c/0x380 [ 146.844931][ T4197] kmem_cache_alloc+0x15d/0x280 [ 146.849762][ T4197] copy_mm+0x8b6/0x13d0 [ 146.853901][ T4197] copy_process+0x17a7/0x3e70 [ 146.858578][ T4197] kernel_clone+0x23f/0x990 [ 146.863065][ T4197] __x64_sys_clone+0x19a/0x210 [ 146.867812][ T4197] do_syscall_64+0x4c/0xa0 [ 146.872211][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.878093][ T4197] [ 146.880398][ T4197] Memory state around the buggy address: [ 146.886029][ T4197] ffff88805ab23b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.894079][ T4197] ffff88805ab23b80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 146.902127][ T4197] >ffff88805ab23c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.910174][ T4197] ^ [ 146.914488][ T4197] ffff88805ab23c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.922536][ T4197] ffff88805ab23d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.930573][ T4197] ================================================================== [ 146.938610][ T4197] Disabling lock debugging due to kernel taint [ 146.950528][ T4342] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.958480][ T4197] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.965675][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:3 Tainted: G B syzkaller #0 [ 146.974778][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.984828][ T4197] Workqueue: hci4 hci_rx_work [ 146.989511][ T4197] Call Trace: [ 146.992789][ T4197] [ 146.995719][ T4197] dump_stack_lvl+0x188/0x250 [ 147.000403][ T4197] ? show_regs_print_info+0x20/0x20 [ 147.005601][ T4197] ? load_image+0x410/0x410 [ 147.010112][ T4197] panic+0x2f8/0x850 [ 147.014013][ T4197] ? bpf_jit_dump+0xd0/0xd0 [ 147.018520][ T4197] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 147.024503][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 147.029364][ T4197] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 147.034476][ T4197] check_panic_on_warn+0x80/0xa0 [ 147.039412][ T4197] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 147.044523][ T4197] end_report+0x6d/0xf0 [ 147.048677][ T4197] kasan_report+0x102/0x130 [ 147.053186][ T4197] ? hci_le_meta_evt+0x12ea/0x3ca0 [ 147.058297][ T4197] hci_le_meta_evt+0x12ea/0x3ca0 [ 147.063238][ T4197] ? hci_event_packet+0x363/0x1310 [ 147.068354][ T4197] ? __lock_acquire+0x7d40/0x7d40 [ 147.073491][ T4197] ? hci_remote_host_features_evt+0x240/0x240 [ 147.079559][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 147.085193][ T4197] ? mark_lock+0x94/0x320 [ 147.089520][ T4197] ? mutex_unlock+0x10/0x10 [ 147.094021][ T4197] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.100003][ T4197] ? lock_chain_count+0x20/0x20 [ 147.104857][ T4197] ? __rwlock_init+0x140/0x140 [ 147.109629][ T4197] hci_event_packet+0xe0b/0x1310 [ 147.114566][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 147.119420][ T4197] ? rcu_lock_release+0x20/0x20 [ 147.124270][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 147.129470][ T4197] hci_rx_work+0x255/0xa10 [ 147.133901][ T4197] process_one_work+0x867/0xff0 [ 147.138795][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 147.144429][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 147.149729][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 147.154765][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 147.160315][ T4197] ? wq_worker_running+0x97/0x170 [ 147.165336][ T4197] worker_thread+0xad7/0x12a0 [ 147.170022][ T4197] kthread+0x42e/0x520 [ 147.174090][ T4197] ? rcu_lock_release+0x20/0x20 [ 147.178940][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 147.183527][ T4197] ret_from_fork+0x1f/0x30 [ 147.187950][ T4197] [ 147.191069][ T4197] Kernel Offset: disabled [ 147.195392][ T4197] Rebooting in 86400 seconds..