last executing test programs: 5m2.235748387s ago: executing program 0 (id=449): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="aefdda9d240103005a90f57f02703aeff0f64eb9ee07962c220852f426072a00"/42, 0x2a}], 0x1) read(r0, 0x0, 0x70) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) 5m2.035570066s ago: executing program 0 (id=451): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000100)={[0x2b000, 0x200000, 0xfec00000, 0x5000], 0x9, 0xb8}) 5m1.698951976s ago: executing program 0 (id=453): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5m1.268483707s ago: executing program 0 (id=459): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x1}], 0x1, 0x10) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m0.378085083s ago: executing program 0 (id=466): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, &(0x7f0000002300), 0x4, &(0x7f0000000180)) write(r0, &(0x7f0000000000)='7', 0x1) 4m59.960173542s ago: executing program 0 (id=470): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) msgget(0x2, 0x601) r0 = msgget(0x0, 0x358) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 4m44.779469277s ago: executing program 32 (id=470): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) msgget(0x2, 0x601) r0 = msgget(0x0, 0x358) msgctl$IPC_RMID(r0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 3m45.30400195s ago: executing program 4 (id=782): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x59fc02, 0x0) write(r0, &(0x7f0000001640)="8b", 0x1) 3m44.804163851s ago: executing program 4 (id=783): r0 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x2a003) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x9) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE(r0, 0xab02, 0x80000000) 3m43.168620805s ago: executing program 4 (id=789): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m42.275841705s ago: executing program 4 (id=793): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x8) 3m41.644267495s ago: executing program 4 (id=795): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x4) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0080) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x8) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 3m40.65432887s ago: executing program 4 (id=798): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x12}, 0x0) 3m40.402145212s ago: executing program 33 (id=798): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "02"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x12}, 0x0) 1m58.051325365s ago: executing program 5 (id=1268): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000100)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000200)={0x40, 0x40, 0x1, "80"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m56.002097046s ago: executing program 5 (id=1273): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) 1m55.693281501s ago: executing program 5 (id=1277): mkdir(&(0x7f0000000000)='./mytrace\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mytrace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mytrace/events/xhci-hcd/xhci_address_ctrl_ctx/inject\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) write(r0, &(0x7f0000000680)='dr', 0x2) 1m55.499474261s ago: executing program 5 (id=1280): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a01000000010200010902190001010080320904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x4882, 0x119) 1m53.641860244s ago: executing program 5 (id=1289): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f0000000200)='S', 0x1) r2 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000100)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r3, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.368049007s ago: executing program 5 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='udp 20000\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) close(r1) 1m50.771773698s ago: executing program 3 (id=1302): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x18, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1m50.352853159s ago: executing program 3 (id=1306): syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x3ff, 0x2, 0x3, 0x8000000000000002, 0x4, 0x0, 0x7f, 0x80000002, 0x9, 0x0, 0x6, 0x1, 0x4, 0x4, 0x8, 0x1], 0x54000, 0x100204}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.300853922s ago: executing program 3 (id=1310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f00000007c0)={0x79, 0x0, 0xc}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000640)={0x81, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"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"}) 1m48.910121595s ago: executing program 3 (id=1311): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 1m48.6312161s ago: executing program 3 (id=1312): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac184d"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0x87, 0x2, &(0x7f00000000c0)={0x50, "fbebca3d813ebc66000000400000a8267d87000200"}}) 1m47.130971349s ago: executing program 3 (id=1314): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m46.589089197s ago: executing program 34 (id=1314): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m38.259273438s ago: executing program 35 (id=1291): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='udp 20000\n', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\n', 0x2) close(r1) 28.772284985s ago: executing program 1 (id=1618): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 28.192068757s ago: executing program 1 (id=1620): mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(r2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 27.808805786s ago: executing program 1 (id=1623): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0xb, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0xffffe, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0x800000c7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x6, 0x10000, 0x7, 0x5, 0xffdffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x100, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x10000d, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 27.387304121s ago: executing program 1 (id=1625): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/self/cwd\x00', &(0x7f0000000400)=""/100, 0x64) 27.276642947s ago: executing program 1 (id=1626): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r2}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x5) 26.761972036s ago: executing program 1 (id=1629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x1ff}]}) 26.283928528s ago: executing program 36 (id=1629): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000071, 0x0, 0x1ff}]}) 8.452145519s ago: executing program 6 (id=1705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003d80)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="c26d6d6d9d01954b3924fac24cf871cbb7", 0x11}], 0x1, 0x0, 0x0, 0x880}], 0x1, 0x4048845) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000003f00)=""/4096, 0xfed2}], 0x1}}], 0x1, 0x12102, 0x0) 8.071754307s ago: executing program 6 (id=1707): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) 4.777148826s ago: executing program 6 (id=1710): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x52, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x6, {0x6, 0xa, "c39aed3c"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 2.531021319s ago: executing program 2 (id=1713): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x2) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/schedstat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x4, 0x1, 0x7d8485a2, 0x0, 0x9, "6005a405f7dced38323e0058367fb23603a736"}) 2.512278489s ago: executing program 6 (id=1714): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) ioctl$VIDIOC_G_INPUT(0xffffffffffffffff, 0x80045626, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000200)={0x40, 0x0, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000380)={0x40, 0xf, 0x5, "85a2d8376d"}, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x2}, 0x0}) 1.687812489s ago: executing program 2 (id=1722): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000140)={0xfffdfff8, 0x80803, 0xfffffff2, 0x0, 0x4f, "144100", 0x9, 0x140220}) 1.642995063s ago: executing program 7 (id=1723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x44, r1, 0xb97534d5fe9704cf, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x462}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8}]}, 0x44}}, 0x0) 1.498922137s ago: executing program 7 (id=1724): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e9ecdcb0a336629600000000000000002001040000004b00000000000000000064010102000000000000000000000000000000050000000302002000000000f2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000000000040a00000000000000000000008040000000000000000008000000000000000001000003000000004400050000000000000000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local, 0x7, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)="610f05", 0x3}], 0x1}, 0x240280d1) 1.41044347s ago: executing program 2 (id=1726): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peekuser(0x3, r0, 0x370) 1.212062535s ago: executing program 7 (id=1727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r2, @ANYRES64=0x0], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.15077805s ago: executing program 8 (id=1728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x8000000, 0x20200000000000, {}, 0x1, 0xfffffffffffffffb}}) 1.057897288s ago: executing program 2 (id=1729): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000080)=0x80, 0x4) 947.419849ms ago: executing program 7 (id=1730): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x2, 0x0, &(0x7f00000001c0)) 864.181021ms ago: executing program 2 (id=1731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40003}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0xfff, @mcast2}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="6797f04cdb6f2c8ff1c922acb0da67dc73c026576fddc232ca696ae6c56d0800e17949d4adaf547b2baf73f4", 0x2c}], 0x1}, 0x3000cb08) 805.528765ms ago: executing program 8 (id=1732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 734.820286ms ago: executing program 6 (id=1733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "54cd"}]}, 0x30}, 0x1, 0x0, 0x0, 0x11}, 0x4044090) 732.144537ms ago: executing program 7 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x201, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x81}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 535.535118ms ago: executing program 6 (id=1735): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='mem\x00', 0x3) close(r0) 526.77321ms ago: executing program 7 (id=1736): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0x280, 0x1e0, 0x6, 0x3, [0x2], [0x80ffff], [0x0, 0x0, 0x0, 0x4], [0x400000000000000]}) 526.548192ms ago: executing program 2 (id=1737): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000000)='\x00', 0x1, 0x2000c001, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffe, @loopback, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x84, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x3}, 0xe) recvmmsg(r0, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x406, 0x0) 333.44259ms ago: executing program 8 (id=1738): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000e9ff00000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000040)="671723c202002c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00', 0x2}, {&(0x7f00000002c0)="33c436f9142d0b66736578", 0xb}], 0x4}, 0x0) 225.469091ms ago: executing program 8 (id=1739): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x1, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x800}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "e9c2"}]}, 0x44}, 0x1, 0x0, 0x0, 0x404c840}, 0x0) 107.91103ms ago: executing program 8 (id=1740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010400000000030004004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300000c00700005000600"], 0x34}, 0x1, 0x0, 0x0, 0x44040800}, 0x0) 0s ago: executing program 8 (id=1741): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="00007f00000009009197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0xfffffffe, 0x8, 0x4000004, 0x80500a}) kernel console output (not intermixed with test programs): ummy_hcd [ 410.979136][ T5693] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 410.982254][ T5693] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 410.982286][ T5693] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 410.982330][ T5693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.033542][ T5693] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 411.048821][ T5693] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 411.178722][T10365] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #108: comm syz.1.1482: No space for directory leaf checksum. Please run e2fsck -D. [ 411.178762][T10365] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #108: comm syz.1.1482: checksumming directory block 0 [ 411.479785][T10356] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 411.480161][T10356] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 411.480487][T10356] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 411.564585][ T1220] pegasus 3-1:1.0: can't reset MAC [ 411.564886][ T1220] pegasus 3-1:1.0: probe with driver pegasus failed with error -5 [ 411.594692][ T1220] usb 3-1: USB disconnect, device number 66 [ 411.617881][T10356] SPCP8x5 ttyUSB0: Set UART format 0x1209 failed (error = -32) [ 411.733968][ T5702] usb 7-1: USB disconnect, device number 9 [ 411.763659][ T5702] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 411.777190][ T5702] spcp8x5 7-1:1.0: device disconnected [ 412.227938][ T5765] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 412.391266][ T5765] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 412.391978][ T5765] usb 2-1: config 0 has no interfaces? [ 412.392017][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.395457][ T5765] usb 2-1: config 0 descriptor?? [ 412.694786][T10385] rust_binder: 10384:10385 failed to claim space for a BINDER_TYPE_PTR (offset: 128, limit: 4224, size: 18446744073709551545) [ 412.694821][T10385] rust_binder: 10384:10385 error while translating object: EINVAL [ 412.694958][T10385] rust_binder: Failure in copy_transaction_data: EINVAL [ 412.694992][T10385] rust_binder: 10384:10385 transaction call to 10384:0 failed EINVAL, code 0 size 104-24 [ 412.696166][ T5765] rust_binder: 10384: undelivered TRANSACTION_ERROR: 29201 [ 412.766978][T10385] syz.6.1490 (10385) used greatest stack depth: 10368 bytes left [ 412.834769][T10375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.835434][T10375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.857047][ T5765] usb 2-1: USB disconnect, device number 55 [ 413.397959][ T5765] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 413.568989][ T5765] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 413.570671][ T5765] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 413.570698][ T5765] usb 3-1: config 0 has no interface number 0 [ 413.570738][ T5765] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 413.573589][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.573618][ T5765] usb 3-1: Product: syz [ 413.573634][ T5765] usb 3-1: Manufacturer: syz [ 413.573651][ T5765] usb 3-1: SerialNumber: syz [ 413.577341][ T5765] usb 3-1: config 0 descriptor?? [ 413.640775][ T32] kauditd_printk_skb: 43 callbacks suppressed [ 413.640796][ T32] audit: type=1800 audit(1789469356.045:2752): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216572 res=0 errno=0 [ 413.647054][ T32] audit: type=1800 audit(1789469356.085:2753): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=216604 res=0 errno=0 [ 413.647118][ T32] audit: type=1800 audit(1789469356.085:2754): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=216579 res=0 errno=0 [ 413.671167][ T32] audit: type=1800 audit(1789469356.115:2755): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=216580 res=0 errno=0 [ 413.704117][T10397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 413.749490][ T5765] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 413.768037][ T32] audit: type=1800 audit(1789469356.205:2756): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=216601 res=0 errno=0 [ 413.768094][ T32] audit: type=1800 audit(1789469356.205:2757): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=216602 res=0 errno=0 [ 413.768139][ T32] audit: type=1800 audit(1789469356.205:2758): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=216581 res=0 errno=0 [ 413.768183][ T32] audit: type=1800 audit(1789469356.205:2759): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=216603 res=0 errno=0 [ 413.885618][ T5765] usb 3-1: USB disconnect, device number 67 [ 413.897043][ T32] audit: type=1800 audit(1789469356.335:2760): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 413.921753][ T5765] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 414.051989][ T32] audit: type=1800 audit(1789469356.495:2761): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 414.580376][T10410] rust_binder: 10406:10410 BC_REQUEST_FREEZE_NOTIFICATION already set [ 414.580428][T10410] rust_binder: Write failure EINVAL in pid:77 [ 414.606681][T10409] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1500'. [ 414.606768][T10409] FAULT_INJECTION: forcing a failure. [ 414.606768][T10409] name failslab, interval 1, probability 0, space 0, times 0 [ 414.606856][T10409] CPU: 1 UID: 0 PID: 10409 Comm: syz.2.1500 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.606954][T10409] Tainted: [L]=SOFTLOCKUP [ 414.606977][T10409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.607006][T10409] Call Trace: [ 414.607029][T10409] [ 414.607060][T10409] dump_stack_lvl+0xe8/0x150 [ 414.607158][T10409] should_fail_ex+0x3eb/0x540 [ 414.607245][T10409] should_failslab+0xa8/0x100 [ 414.607327][T10409] __kmalloc_cache_noprof+0x9e/0x600 [ 414.607420][T10409] ? nfnetlink_rcv+0x1021/0x28c0 [ 414.607466][T10409] ? nfnetlink_rcv+0x1021/0x28c0 [ 414.607506][T10409] nfnetlink_rcv+0x1021/0x28c0 [ 414.607568][T10409] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 414.607614][T10409] ? ref_tracker_free+0x689/0x830 [ 414.607666][T10409] ? skb_clone+0x246/0x3a0 [ 414.607698][T10409] ? __netlink_deliver_tap+0x811/0x860 [ 414.607738][T10409] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.607766][T10409] ? netlink_deliver_tap+0x2e/0x1b0 [ 414.607803][T10409] netlink_unicast+0x7bd/0x940 [ 414.607839][T10409] netlink_sendmsg+0x7c3/0xae0 [ 414.607875][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.607913][T10409] ? apparmor_socket_sendmsg+0x98/0x360 [ 414.607939][T10409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.608032][T10409] sock_sendmsg_nosec+0x13a/0x180 [ 414.608132][T10409] ____sys_sendmsg+0x54e/0x850 [ 414.608228][T10409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.608322][T10409] ? import_iovec+0x73/0xa0 [ 414.608408][T10409] ___sys_sendmsg+0x2a5/0x360 [ 414.608475][T10409] ? __lock_acquire+0x747/0x2de0 [ 414.608586][T10409] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.608649][T10409] ? futex_wait+0x2a2/0x390 [ 414.608811][T10409] ? __fget_files+0x2a/0x420 [ 414.608889][T10409] ? __fget_files+0x3a2/0x420 [ 414.609002][T10409] __x64_sys_sendmsg+0x1b1/0x290 [ 414.609073][T10409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 414.609196][T10409] do_syscall_64+0x166/0x520 [ 414.609252][T10409] ? trace_irq_disable+0x3b/0x140 [ 414.609347][T10409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.609404][T10409] ? clear_bhb_loop+0x70/0xc0 [ 414.609509][T10409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.609592][T10409] RIP: 0033:0x7f5eb7b9e159 [ 414.609655][T10409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.609703][T10409] RSP: 002b:00007f5eb89dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.609777][T10409] RAX: ffffffffffffffda RBX: 00007f5eb7e25fa0 RCX: 00007f5eb7b9e159 [ 414.609830][T10409] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 414.609874][T10409] RBP: 00007f5eb7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 414.609910][T10409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.609953][T10409] R13: 00007f5eb7e26038 R14: 00007f5eb7e25fa0 R15: 00007ffc104ee508 [ 414.610045][T10409] [ 415.131441][T10413] FAULT_INJECTION: forcing a failure. [ 415.131441][T10413] name failslab, interval 1, probability 0, space 0, times 0 [ 415.131480][T10413] CPU: 1 UID: 0 PID: 10413 Comm: syz.2.1501 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.131514][T10413] Tainted: [L]=SOFTLOCKUP [ 415.131524][T10413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 415.131540][T10413] Call Trace: [ 415.131551][T10413] [ 415.131562][T10413] dump_stack_lvl+0xe8/0x150 [ 415.131601][T10413] should_fail_ex+0x3eb/0x540 [ 415.131635][T10413] should_failslab+0xa8/0x100 [ 415.131664][T10413] __kmalloc_cache_noprof+0x9e/0x600 [ 415.131703][T10413] ? fast_dput+0x481/0x690 [ 415.131732][T10413] ? __kmalloc_noprof+0x1a6/0x710 [ 415.131763][T10413] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 415.131795][T10413] ? kvm_create_vm_debugfs+0x325/0x8f0 [ 415.131837][T10413] kvm_create_vm_debugfs+0x325/0x8f0 [ 415.131879][T10413] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 415.131927][T10413] kvm_dev_ioctl+0x1362/0x1770 [ 415.131981][T10413] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 415.132013][T10413] ? __fget_files+0x2a/0x420 [ 415.132049][T10413] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.132079][T10413] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 415.132113][T10413] __se_sys_ioctl+0xfc/0x170 [ 415.132154][T10413] do_syscall_64+0x166/0x520 [ 415.132177][T10413] ? trace_irq_disable+0x3b/0x140 [ 415.132210][T10413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.132235][T10413] ? clear_bhb_loop+0x70/0xc0 [ 415.132264][T10413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.132288][T10413] RIP: 0033:0x7f5eb7b9e159 [ 415.132311][T10413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.132332][T10413] RSP: 002b:00007f5eb89dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.132364][T10413] RAX: ffffffffffffffda RBX: 00007f5eb7e25fa0 RCX: 00007f5eb7b9e159 [ 415.132383][T10413] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 415.132398][T10413] RBP: 00007f5eb7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 415.132413][T10413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.132428][T10413] R13: 00007f5eb7e26038 R14: 00007f5eb7e25fa0 R15: 00007ffc104ee508 [ 415.132464][T10413] [ 415.307318][ T1220] rust_binder: 10406: undelivered freeze notification, 0000000000000000 [ 415.459379][ T5702] usb 2-1: new low-speed USB device number 56 using dummy_hcd [ 415.615104][ T5702] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 415.617731][ T5702] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 415.617863][ T5702] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.617907][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.617937][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.617967][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.618017][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.618047][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.618075][ T5702] usb 2-1: config 168 interface 0 has no altsetting 0 [ 415.619596][ T5702] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 415.619638][ T5702] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.619684][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.619716][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.619751][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.619783][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.619813][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.619845][ T5702] usb 2-1: config 168 interface 0 has no altsetting 0 [ 415.621312][ T5702] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 415.621350][ T5702] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 415.621392][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 415.621423][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.621453][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 415.621484][ T5702] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 415.621515][ T5702] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 415.621546][ T5702] usb 2-1: config 168 interface 0 has no altsetting 0 [ 415.626084][ T5702] usb 2-1: string descriptor 0 read error: -22 [ 415.626232][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.943417][ T5702] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 416.043940][ T1220] usb 2-1: USB disconnect, device number 56 [ 418.252197][T10441] FAULT_INJECTION: forcing a failure. [ 418.252197][T10441] name failslab, interval 1, probability 0, space 0, times 0 [ 418.252235][T10441] CPU: 0 UID: 0 PID: 10441 Comm: syz.2.1511 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.252269][T10441] Tainted: [L]=SOFTLOCKUP [ 418.252279][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.252292][T10441] Call Trace: [ 418.252302][T10441] [ 418.252313][T10441] dump_stack_lvl+0xe8/0x150 [ 418.252353][T10441] should_fail_ex+0x3eb/0x540 [ 418.252386][T10441] should_failslab+0xa8/0x100 [ 418.252415][T10441] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 418.252449][T10441] ? __d_alloc+0x37/0x6f0 [ 418.252478][T10441] ? __d_alloc+0x37/0x6f0 [ 418.252515][T10441] __d_alloc+0x37/0x6f0 [ 418.252546][T10441] ? sprintf+0xe7/0x140 [ 418.252574][T10441] ? hashlen_string+0x54/0x110 [ 418.252605][T10441] d_alloc_name+0xba/0x270 [ 418.252643][T10441] ? __pfx_sprintf+0x10/0x10 [ 418.252673][T10441] ? __pfx_d_alloc_name+0x10/0x10 [ 418.252716][T10441] devpts_pty_new+0x2c4/0x5d0 [ 418.252759][T10441] ? __pfx_devpts_pty_new+0x10/0x10 [ 418.252792][T10441] ? do_raw_spin_unlock+0xf5/0x200 [ 418.252825][T10441] ptmx_open+0x1c8/0x2e0 [ 418.252863][T10441] chrdev_open+0x4d9/0x600 [ 418.252888][T10441] ? __pfx_chrdev_open+0x10/0x10 [ 418.252914][T10441] ? devcgroup_check_permission+0x31/0x8f0 [ 418.252952][T10441] ? __pfx_chrdev_open+0x10/0x10 [ 418.252974][T10441] do_dentry_open+0x80e/0x1360 [ 418.253011][T10441] vfs_open_consume+0x4a/0x350 [ 418.253034][T10441] ? path_openat+0x14bb/0x1e40 [ 418.253071][T10441] path_openat+0x14d7/0x1e40 [ 418.253124][T10441] do_file_open+0x23e/0x4a0 [ 418.253160][T10441] ? __pfx_do_file_open+0x10/0x10 [ 418.253217][T10441] ? _raw_spin_unlock+0x28/0x50 [ 418.253249][T10441] ? alloc_fd+0x651/0x6c0 [ 418.253286][T10441] do_sys_openat2+0x115/0x200 [ 418.253312][T10441] ? __se_sys_futex+0x3a8/0x450 [ 418.253340][T10441] ? __pfx_do_sys_openat2+0x10/0x10 [ 418.253373][T10441] ? rcu_is_watching+0x16/0xb0 [ 418.253402][T10441] __x64_sys_openat+0x138/0x170 [ 418.253435][T10441] do_syscall_64+0x166/0x520 [ 418.253455][T10441] ? trace_irq_disable+0x3b/0x140 [ 418.253488][T10441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.253512][T10441] ? clear_bhb_loop+0x70/0xc0 [ 418.253540][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.253563][T10441] RIP: 0033:0x7f5eb7b9e159 [ 418.253585][T10441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.253601][T10441] RSP: 002b:00007f5eb89dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 418.253627][T10441] RAX: ffffffffffffffda RBX: 00007f5eb7e25fa0 RCX: 00007f5eb7b9e159 [ 418.253643][T10441] RDX: 0000000000000100 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 418.253660][T10441] RBP: 00007f5eb7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 418.253674][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.253687][T10441] R13: 00007f5eb7e26038 R14: 00007f5eb7e25fa0 R15: 00007ffc104ee508 [ 418.253722][T10441] [ 418.807067][ T32] kauditd_printk_skb: 14 callbacks suppressed [ 418.807088][ T32] audit: type=1800 audit(1789469361.245:2776): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216942 res=0 errno=0 [ 418.861464][ T32] audit: type=1800 audit(1789469361.305:2777): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216952 res=0 errno=0 [ 421.749515][T10445] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 422.228026][ T5702] usb 3-1: new low-speed USB device number 68 using dummy_hcd [ 422.249337][ T32] audit: type=1800 audit(1789469364.695:2778): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 422.284211][ T5710] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 422.313515][ T32] audit: type=1800 audit(1789469364.755:2779): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1516" name="name" dev="sysfs" ino=1488 res=0 errno=0 [ 422.316009][ T32] audit: type=1800 audit(1789469364.755:2780): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1516" name="type" dev="sysfs" ino=1490 res=0 errno=0 [ 422.365633][ T32] audit: type=1800 audit(1789469364.795:2781): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 422.400203][ T5702] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 422.402784][ T5702] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 422.402825][ T5702] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 422.402866][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.402896][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.402924][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.402952][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.402982][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 422.403011][ T5702] usb 3-1: config 168 interface 0 has no altsetting 0 [ 422.404339][ T5702] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 422.404376][ T5702] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 422.404428][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.404459][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.404487][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.404517][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.404546][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 422.404574][ T5702] usb 3-1: config 168 interface 0 has no altsetting 0 [ 422.405898][ T5702] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 422.405935][ T5702] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 422.405986][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 422.406016][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 422.406044][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 422.406074][ T5702] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 422.406103][ T5702] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 422.406133][ T5702] usb 3-1: config 168 interface 0 has no altsetting 0 [ 422.483397][ T5710] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.498531][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.498570][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.498595][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 422.498642][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.502119][ T5710] usb 2-1: config 0 descriptor?? [ 422.534082][ T32] audit: type=1800 audit(1789469364.975:2782): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=216987 res=0 errno=0 [ 422.569794][ T5702] usb 3-1: string descriptor 0 read error: -22 [ 422.569967][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.583655][ T32] audit: type=1800 audit(1789469365.015:2783): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=217016 res=0 errno=0 [ 422.604271][ T32] audit: type=1800 audit(1789469365.045:2784): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=216994 res=0 errno=0 [ 422.612011][ T32] audit: type=1800 audit(1789469365.055:2785): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=216995 res=0 errno=0 [ 422.769428][ T5702] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 422.966909][T10463] evm: overlay not supported [ 422.978876][T10463] Invalid ELF header magic: != ELF [ 423.021388][ T9973] usb 3-1: USB disconnect, device number 68 [ 423.137684][ T5710] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 423.187910][ T5702] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 423.339269][ T5702] usb 7-1: Using ep0 maxpacket: 16 [ 423.343032][ T5702] usb 7-1: unable to get BOS descriptor or descriptor too short [ 423.343083][ T5702] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 423.344612][ T5702] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 423.366877][ T5702] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.366967][ T5702] usb 7-1: Product: syz [ 423.367010][ T5702] usb 7-1: Manufacturer: syz [ 423.367064][ T5702] usb 7-1: SerialNumber: syz [ 423.450422][T10467] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.639743][ T5702] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 423.640320][ T5702] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 423.842485][T10461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.845168][T10461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.074680][ T5702] usb 7-1: 2:1 : bogus bTerminalLink 6 [ 424.188150][ T9973] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 424.338251][ T9973] usb 3-1: Using ep0 maxpacket: 8 [ 424.342372][ T9973] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 424.364581][ T9973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.364617][ T9973] usb 3-1: Product: syz [ 424.364665][ T9973] usb 3-1: Manufacturer: syz [ 424.364685][ T9973] usb 3-1: SerialNumber: syz [ 424.400724][ T9973] usb 3-1: config 0 descriptor?? [ 424.400822][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 424.400839][ T32] audit: type=1800 audit(1789469366.845:2810): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217487 res=0 errno=0 [ 424.487221][ T32] audit: type=1800 audit(1789469366.925:2811): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=217519 res=0 errno=0 [ 424.514595][ T32] audit: type=1800 audit(1789469366.955:2812): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=217494 res=0 errno=0 [ 424.538012][ T32] audit: type=1800 audit(1789469366.955:2813): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=217495 res=0 errno=0 [ 424.558266][ T32] audit: type=1800 audit(1789469366.995:2814): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=217333 res=0 errno=0 [ 424.592531][ T32] audit: type=1800 audit(1789469367.035:2815): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=217334 res=0 errno=0 [ 424.593781][ T32] audit: type=1800 audit(1789469367.035:2816): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=217313 res=0 errno=0 [ 424.595029][ T32] audit: type=1800 audit(1789469367.035:2817): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=217335 res=0 errno=0 [ 424.595818][ T5702] usb 7-1: USB disconnect, device number 10 [ 424.677656][ T9973] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 424.713313][ T32] audit: type=1800 audit(1789469367.155:2818): pid=5803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217557 res=0 errno=0 [ 424.744970][ T32] audit: type=1800 audit(1789469367.185:2819): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=217420 res=0 errno=0 [ 424.790348][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 425.448003][ T987] usb 2-1: reset high-speed USB device number 57 using dummy_hcd [ 425.619291][ T987] usb 2-1: device firmware changed [ 425.637741][ T5701] usb 2-1: USB disconnect, device number 57 [ 425.819164][ T5701] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 425.968918][ T5701] usb 2-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 0.00 [ 425.976249][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.976283][ T5701] usb 2-1: Product: syz [ 425.976302][ T5701] usb 2-1: Manufacturer: syz [ 425.976320][ T5701] usb 2-1: SerialNumber: syz [ 426.024761][ T5701] mos7840 2-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 426.242457][ T5701] mos7840 2-1:1.0: probe with driver mos7840 failed with error -71 [ 426.286269][ T5701] usb 2-1: USB disconnect, device number 58 [ 426.508985][ T9973] usb write operation failed. (-71) [ 426.512340][ T9973] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 426.514689][ T9973] dvbdev: DVB: registering new adapter (Terratec H7) [ 426.514747][ T9973] usb 3-1: media controller created [ 426.515181][ T9973] usb read operation failed. (-71) [ 426.515684][ T9973] usb write operation failed. (-71) [ 426.519662][ T987] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 426.565477][ T9973] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 426.582621][ T9973] usb 3-1: USB disconnect, device number 69 [ 426.684307][ T987] usb 7-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 426.688523][ T987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.973814][ T987] net1080 7-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.6-1, NetChip TurboCONNECT, 3a:ca:d3:65:d2:85 [ 427.824507][ T5765] usb 7-1: USB disconnect, device number 11 [ 427.845503][ T5765] net1080 7-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.6-1, NetChip TurboCONNECT [ 428.579796][ T987] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 428.616716][T10529] FAULT_INJECTION: forcing a failure. [ 428.616716][T10529] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 428.616761][T10529] CPU: 0 UID: 0 PID: 10529 Comm: syz.6.1539 Tainted: G L syzkaller #0 PREEMPT(full) [ 428.616798][T10529] Tainted: [L]=SOFTLOCKUP [ 428.616807][T10529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 428.616824][T10529] Call Trace: [ 428.616834][T10529] [ 428.616847][T10529] dump_stack_lvl+0xe8/0x150 [ 428.616888][T10529] should_fail_ex+0x3eb/0x540 [ 428.616923][T10529] prepare_alloc_pages+0x21e/0x5f0 [ 428.616973][T10529] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 428.617018][T10529] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 428.617067][T10529] ? policy_nodemask+0x2cc/0x8e0 [ 428.617101][T10529] alloc_pages_mpol+0x21e/0x390 [ 428.617135][T10529] folio_alloc_mpol_noprof+0x39/0x160 [ 428.617175][T10529] vma_alloc_folio_noprof+0xe1/0x1e0 [ 428.617214][T10529] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 428.617255][T10529] do_wp_page+0x1178/0x4b70 [ 428.617306][T10529] ? __pfx_do_wp_page+0x10/0x10 [ 428.617346][T10529] ? do_raw_spin_lock+0x12b/0x2f0 [ 428.617387][T10529] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 428.617429][T10529] handle_mm_fault+0x15d7/0x3750 [ 428.617472][T10529] ? handle_mm_fault+0xf1/0x3750 [ 428.617516][T10529] ? __pfx_handle_mm_fault+0x10/0x10 [ 428.617561][T10529] ? __lock_acquire+0x747/0x2de0 [ 428.617600][T10529] ? lock_mm_and_find_vma+0xa7/0x340 [ 428.617644][T10529] do_user_addr_fault+0x7f6/0x1480 [ 428.617698][T10529] exc_page_fault+0x6a/0xc0 [ 428.617751][T10529] asm_exc_page_fault+0x26/0x30 [ 428.617785][T10529] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 428.617816][T10529] Code: 71 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 428.617841][T10529] RSP: 0018:ffffc9000583f978 EFLAGS: 00050206 [ 428.617863][T10529] RAX: ffffffff84e6da01 RBX: ffff88800c1a8000 RCX: 0000000000000b80 [ 428.617880][T10529] RDX: 0000000000000000 RSI: ffff88800c1a8480 RDI: 000020000000a000 [ 428.617897][T10529] RBP: ffffc9000583fae8 R08: ffff88800c1a8fff R09: 1ffff110018351ff [ 428.617916][T10529] R10: dffffc0000000000 R11: ffffed1001835200 R12: dffffc0000000000 [ 428.617935][T10529] R13: 0000000000009b80 R14: ffffc9000583fdf0 R15: 0000000000001000 [ 428.617961][T10529] ? _copy_to_iter+0x421/0x1810 [ 428.617998][T10529] _copy_to_iter+0x49d/0x1810 [ 428.618044][T10529] ? __pfx__copy_to_iter+0x10/0x10 [ 428.618069][T10529] ? rcu_is_watching+0x16/0xb0 [ 428.618095][T10529] ? __up_read+0x29c/0x930 [ 428.618122][T10529] ? pin_user_pages_remote+0xdc/0x130 [ 428.618154][T10529] ? __pfx___up_read+0x10/0x10 [ 428.618185][T10529] copy_page_to_iter+0x23f/0x330 [ 428.618219][T10529] process_vm_rw+0x863/0xba0 [ 428.618264][T10529] ? __pfx_process_vm_rw+0x10/0x10 [ 428.618293][T10529] ? futex_wait+0x2a2/0x390 [ 428.618398][T10529] ? rcu_is_watching+0x16/0xb0 [ 428.618430][T10529] __x64_sys_process_vm_readv+0xe0/0x100 [ 428.618467][T10529] do_syscall_64+0x166/0x520 [ 428.618490][T10529] ? trace_irq_disable+0x3b/0x140 [ 428.618535][T10529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.618560][T10529] ? clear_bhb_loop+0x70/0xc0 [ 428.618592][T10529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.618616][T10529] RIP: 0033:0x7f3c1159e159 [ 428.618640][T10529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.618661][T10529] RSP: 002b:00007f3c1254c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 428.618686][T10529] RAX: ffffffffffffffda RBX: 00007f3c11825fa0 RCX: 00007f3c1159e159 [ 428.618705][T10529] RDX: 0000000000000002 RSI: 0000200000008400 RDI: 000000000000007c [ 428.618721][T10529] RBP: 00007f3c1163503b R08: 0000000000000286 R09: 0000000000000000 [ 428.618737][T10529] R10: 0000200000008640 R11: 0000000000000246 R12: 0000000000000000 [ 428.618754][T10529] R13: 00007f3c11826038 R14: 00007f3c11825fa0 R15: 00007fff1604ddd8 [ 428.618792][T10529] [ 428.745095][ T987] usb 2-1: Using ep0 maxpacket: 16 [ 428.844747][ T987] usb 2-1: unable to get BOS descriptor or descriptor too short [ 428.844905][ T987] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 428.864452][ T987] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 428.864576][ T987] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 428.986623][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.986708][ T987] usb 2-1: Product: syz [ 428.986759][ T987] usb 2-1: Manufacturer: syz [ 428.986811][ T987] usb 2-1: SerialNumber: syz [ 429.346918][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.348779][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.408236][ T987] cdc_ncm 2-1:1.0: bind() failure [ 429.456651][ T987] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 429.456703][ T987] cdc_ncm 2-1:1.1: bind() failure [ 429.487330][ T32] kauditd_printk_skb: 44 callbacks suppressed [ 429.487352][ T32] audit: type=1800 audit(1789469371.925:2864): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=218221 res=0 errno=0 [ 429.526039][ T987] usb 2-1: USB disconnect, device number 59 [ 429.557688][ T32] audit: type=1800 audit(1789469371.995:2865): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=218222 res=0 errno=0 [ 429.559908][ T32] audit: type=1800 audit(1789469372.005:2866): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=218201 res=0 errno=0 [ 429.580157][ T32] audit: type=1800 audit(1789469372.005:2867): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=218223 res=0 errno=0 [ 429.683975][ T32] audit: type=1800 audit(1789469372.125:2868): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218325 res=0 errno=0 [ 429.711679][ T32] audit: type=1800 audit(1789469372.155:2869): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=218330 res=0 errno=0 [ 429.717186][ T4934] Bluetooth: hci3: link tx timeout [ 429.721458][ T4934] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 429.798658][ T5620] Bluetooth: hci3: link tx timeout [ 429.798685][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 429.928300][ T5620] Bluetooth: hci3: link tx timeout [ 429.928325][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 430.011204][ T987] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 430.161405][ T987] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 430.163734][ T987] usb 2-1: config index 0 descriptor too short (expected 122, got 92) [ 430.163767][ T987] usb 2-1: config 1 has an invalid descriptor of length 127, skipping remainder of the config [ 430.163791][ T987] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 430.164058][ T987] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 3330, setting to 64 [ 430.182951][ T987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.183036][ T987] usb 2-1: Product: syz [ 430.183080][ T987] usb 2-1: Manufacturer: syz [ 430.183131][ T987] usb 2-1: SerialNumber: syz [ 430.265504][ T32] audit: type=1800 audit(1789469372.705:2870): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=218417 res=0 errno=0 [ 430.277154][T10526] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 430.299698][ T5620] Bluetooth: hci3: link tx timeout [ 430.299754][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 430.302479][ T32] audit: type=1800 audit(1789469372.745:2871): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=218449 res=0 errno=0 [ 430.305859][ T32] audit: type=1800 audit(1789469372.745:2872): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=218424 res=0 errno=0 [ 430.307127][ T32] audit: type=1800 audit(1789469372.745:2873): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=218425 res=0 errno=0 [ 430.625547][ T5620] Bluetooth: hci3: link tx timeout [ 430.625573][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 430.643858][ T5620] Bluetooth: hci3: link tx timeout [ 430.643882][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 430.755688][ T987] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 430.966550][ T987] usb 2-1: __uac_clock_find_source(): selector reported illegal value, id 0, ret 0 [ 430.966588][ T987] usb 2-1: __uac_clock_find_source(): clock selector control is not readable, id 0 [ 431.039965][T10563] team_slave_1: entered promiscuous mode [ 431.045716][T10562] team_slave_1: left promiscuous mode [ 431.362952][ T5620] Bluetooth: hci3: link tx timeout [ 431.362977][ T5620] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 431.389423][ T987] usb 2-1: USB disconnect, device number 60 [ 431.517002][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 431.535508][ T5765] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 431.691946][ T5765] usb 7-1: unable to get BOS descriptor or descriptor too short [ 431.692002][ T5765] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 431.694735][ T5765] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 431.728393][ T5765] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.728424][ T5765] usb 7-1: Product: syz [ 431.728441][ T5765] usb 7-1: Manufacturer: syz [ 431.728458][ T5765] usb 7-1: SerialNumber: syz [ 431.758648][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 431.916638][T10571] X25: diagnostic #0 - 00 00 00 [ 432.034530][ T5765] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 432.214088][T10579] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 432.226273][ T5765] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 432.226308][ T5765] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 432.276933][ T4934] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 432.277167][ T4934] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 432.635384][ T5765] usb 7-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 432.635420][ T5765] usb 7-1: found format II with max.bitrate = 4, frame size=7372 [ 432.790269][T10591] Value of "id" is too big. [ 432.840621][ T5765] usb 7-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 432.907960][ T5765] usb 7-1: USB disconnect, device number 12 [ 433.101533][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 433.391003][T10605] jffs2: notice: (10605) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 434.045025][T10621] FAULT_INJECTION: forcing a failure. [ 434.045025][T10621] name fail_futex, interval 1, probability 0, space 0, times 0 [ 434.045073][T10621] CPU: 0 UID: 0 PID: 10621 Comm: syz.7.1568 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.045107][T10621] Tainted: [L]=SOFTLOCKUP [ 434.045117][T10621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.045132][T10621] Call Trace: [ 434.045142][T10621] [ 434.045153][T10621] dump_stack_lvl+0xe8/0x150 [ 434.045193][T10621] should_fail_ex+0x3eb/0x540 [ 434.045226][T10621] get_futex_key+0x1b4/0x1580 [ 434.045264][T10621] ? __lock_acquire+0x747/0x2de0 [ 434.045310][T10621] ? __pfx_get_futex_key+0x10/0x10 [ 434.045344][T10621] ? __lock_acquire+0x747/0x2de0 [ 434.045394][T10621] futex_wake+0x119/0x5f0 [ 434.045429][T10621] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 434.045467][T10621] ? __pfx_futex_wake+0x10/0x10 [ 434.045501][T10621] ? reacquire_held_locks+0x117/0x1a0 [ 434.045526][T10621] ? __release_sock+0x2fe/0x390 [ 434.045575][T10621] do_futex+0x458/0x4e0 [ 434.045608][T10621] ? __pfx_do_futex+0x10/0x10 [ 434.045632][T10621] ? tipc_setsockopt+0x7a9/0x9a0 [ 434.045676][T10621] __se_sys_futex+0x3a8/0x450 [ 434.045711][T10621] ? __pfx___se_sys_futex+0x10/0x10 [ 434.045738][T10621] ? rcu_is_watching+0x16/0xb0 [ 434.045770][T10621] ? __x64_sys_futex+0x21/0xf0 [ 434.045801][T10621] do_syscall_64+0x166/0x520 [ 434.045824][T10621] ? trace_irq_disable+0x3b/0x140 [ 434.045869][T10621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.045896][T10621] ? clear_bhb_loop+0x70/0xc0 [ 434.045927][T10621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.045952][T10621] RIP: 0033:0x7fcd2679e159 [ 434.045976][T10621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.046004][T10621] RSP: 002b:00007fcd275c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 434.046032][T10621] RAX: ffffffffffffffda RBX: 00007fcd26a25fa8 RCX: 00007fcd2679e159 [ 434.046050][T10621] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd26a25fac [ 434.046068][T10621] RBP: 00007fcd26a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 434.046086][T10621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.046101][T10621] R13: 00007fcd26a26038 R14: 00007fffc905eaf0 R15: 00007fffc905ebd8 [ 434.046139][T10621] [ 434.209138][ T987] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 434.386979][ T987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 434.400426][ T987] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 434.400460][ T987] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 434.400487][ T987] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.451798][ T987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 434.451834][ T987] usb 7-1: Product: syz [ 434.451853][ T987] usb 7-1: Manufacturer: syz [ 434.451871][ T987] usb 7-1: SerialNumber: syz [ 434.517174][ T32] kauditd_printk_skb: 35 callbacks suppressed [ 434.517196][ T32] audit: type=1800 audit(1789469376.955:2909): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219024 res=0 errno=0 [ 434.540090][ T32] audit: type=1800 audit(1789469376.975:2910): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219056 res=0 errno=0 [ 434.574171][ T32] audit: type=1800 audit(1789469377.015:2911): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219031 res=0 errno=0 [ 434.589055][ T32] audit: type=1800 audit(1789469377.025:2912): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219032 res=0 errno=0 [ 434.765453][ T987] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.784012][ T32] audit: type=1800 audit(1789469377.225:2913): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=219053 res=0 errno=0 [ 434.784071][ T32] audit: type=1800 audit(1789469377.225:2914): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=219054 res=0 errno=0 [ 434.811605][ T32] audit: type=1800 audit(1789469377.255:2915): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219033 res=0 errno=0 [ 434.847226][ T32] audit: type=1800 audit(1789469377.275:2916): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=219055 res=0 errno=0 [ 434.886515][ T32] audit: type=1800 audit(1789469377.325:2917): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219076 res=0 errno=0 [ 434.951536][ T32] audit: type=1800 audit(1789469377.395:2918): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 435.013218][ T9974] usb 7-1: USB disconnect, device number 13 [ 435.029183][T10630] FAULT_INJECTION: forcing a failure. [ 435.029183][T10630] name fail_futex, interval 1, probability 0, space 0, times 0 [ 435.029225][T10630] CPU: 1 UID: 0 PID: 10630 Comm: syz.7.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.029261][T10630] Tainted: [L]=SOFTLOCKUP [ 435.029280][T10630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.029297][T10630] Call Trace: [ 435.029308][T10630] [ 435.029319][T10630] dump_stack_lvl+0xe8/0x150 [ 435.029361][T10630] should_fail_ex+0x3eb/0x540 [ 435.029396][T10630] get_futex_key+0x1b4/0x1580 [ 435.029450][T10630] ? __pfx_get_futex_key+0x10/0x10 [ 435.029487][T10630] ? kasan_save_free_info+0x40/0x50 [ 435.029518][T10630] ? __kasan_slab_free+0x5c/0x80 [ 435.029541][T10630] ? kfree+0x1c5/0x650 [ 435.029576][T10630] ? __se_sys_mount+0x3d6/0x420 [ 435.029605][T10630] ? do_syscall_64+0x166/0x520 [ 435.029626][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.029661][T10630] futex_wake+0x119/0x5f0 [ 435.029700][T10630] ? __pfx_futex_wake+0x10/0x10 [ 435.029755][T10630] do_futex+0x458/0x4e0 [ 435.029786][T10630] ? __pfx_do_futex+0x10/0x10 [ 435.029821][T10630] __se_sys_futex+0x3a8/0x450 [ 435.029852][T10630] ? __pfx___se_sys_futex+0x10/0x10 [ 435.029878][T10630] ? __pfx___se_sys_mount+0x10/0x10 [ 435.029913][T10630] ? __x64_sys_futex+0x21/0xf0 [ 435.029942][T10630] do_syscall_64+0x166/0x520 [ 435.029964][T10630] ? trace_irq_disable+0x3b/0x140 [ 435.029997][T10630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.030021][T10630] ? clear_bhb_loop+0x70/0xc0 [ 435.030050][T10630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.030073][T10630] RIP: 0033:0x7fcd2679e159 [ 435.030095][T10630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.030115][T10630] RSP: 002b:00007fcd275c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.030139][T10630] RAX: ffffffffffffffda RBX: 00007fcd26a25fa8 RCX: 00007fcd2679e159 [ 435.030156][T10630] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd26a25fac [ 435.030172][T10630] RBP: 00007fcd26a25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 435.030187][T10630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.030202][T10630] R13: 00007fcd26a26038 R14: 00007fffc905eaf0 R15: 00007fffc905ebd8 [ 435.030238][T10630] [ 435.064254][ T9974] usblp0: removed [ 435.124666][T10627] tipc: Enabled bearer , priority 0 [ 435.168649][T10627] D: renamed from syzkaller0 [ 435.309820][T10627] tipc: Disabling bearer [ 435.509256][T10632] FAULT_INJECTION: forcing a failure. [ 435.509256][T10632] name failslab, interval 1, probability 0, space 0, times 0 [ 435.509301][T10632] CPU: 0 UID: 0 PID: 10632 Comm: syz.1.1573 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.509336][T10632] Tainted: [L]=SOFTLOCKUP [ 435.509347][T10632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.509363][T10632] Call Trace: [ 435.509374][T10632] [ 435.509386][T10632] dump_stack_lvl+0xe8/0x150 [ 435.509425][T10632] should_fail_ex+0x3eb/0x540 [ 435.509462][T10632] should_failslab+0xa8/0x100 [ 435.509493][T10632] __kvmalloc_node_noprof+0x171/0x820 [ 435.509533][T10632] ? __kmalloc_cache_noprof+0x31c/0x600 [ 435.509571][T10632] ? alloc_netdev_mqs+0xd44/0x12a0 [ 435.509602][T10632] ? alloc_netdev_mqs+0xd44/0x12a0 [ 435.509642][T10632] alloc_netdev_mqs+0xd44/0x12a0 [ 435.509682][T10632] ip6_tnl_locate+0x686/0x840 [ 435.509729][T10632] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 435.509762][T10632] ? __might_fault+0xaf/0x130 [ 435.509792][T10632] ? ip6_tnl_siocdevprivate+0x601/0xad0 [ 435.509830][T10632] ip6_tnl_siocdevprivate+0x631/0xad0 [ 435.509869][T10632] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 435.509926][T10632] ? __pfx___mutex_lock+0x10/0x10 [ 435.509950][T10632] ? full_name_hash+0x92/0xe0 [ 435.509989][T10632] dev_ifsioc+0xb56/0x1360 [ 435.510022][T10632] dev_ioctl+0x84c/0x1150 [ 435.510051][T10632] sock_ioctl+0x753/0x7e0 [ 435.510101][T10632] ? __pfx_sock_ioctl+0x10/0x10 [ 435.510135][T10632] ? __fget_files+0x3a2/0x420 [ 435.510167][T10632] ? __fget_files+0x2a/0x420 [ 435.510212][T10632] ? bpf_lsm_file_ioctl+0x9/0x20 [ 435.510242][T10632] ? __pfx_sock_ioctl+0x10/0x10 [ 435.510275][T10632] __se_sys_ioctl+0xfc/0x170 [ 435.510318][T10632] do_syscall_64+0x166/0x520 [ 435.510342][T10632] ? trace_irq_disable+0x3b/0x140 [ 435.510378][T10632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.510404][T10632] ? clear_bhb_loop+0x70/0xc0 [ 435.510435][T10632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.510460][T10632] RIP: 0033:0x7f662dd9e159 [ 435.510486][T10632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.510508][T10632] RSP: 002b:00007f662ec65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 435.510536][T10632] RAX: ffffffffffffffda RBX: 00007f662e025fa0 RCX: 00007f662dd9e159 [ 435.510555][T10632] RDX: 0000200000000400 RSI: 00000000000089f1 RDI: 0000000000000004 [ 435.510572][T10632] RBP: 00007f662de3503b R08: 0000000000000000 R09: 0000000000000000 [ 435.510588][T10632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.510604][T10632] R13: 00007f662e026038 R14: 00007f662e025fa0 R15: 00007ffe6ecca328 [ 435.510642][T10632] [ 436.035679][T10644] Bluetooth: (null): Too short H5 packet [ 436.119478][ T5765] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 436.270750][T10650] gve 0000:00:00.0: Failed to map pci bar! [ 436.271845][T10650] gve 0000:00:00.0: probe with driver gve failed with error -12 [ 436.284843][ T5765] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 436.294346][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.294413][ T5765] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.327487][ T5765] usb 3-1: config 0 descriptor?? [ 436.341187][ T5765] pwc: Askey VC010 type 2 USB webcam detected. [ 436.594319][T10655] FAULT_INJECTION: forcing a failure. [ 436.594319][T10655] name fail_futex, interval 1, probability 0, space 0, times 0 [ 436.594362][T10655] CPU: 0 UID: 0 PID: 10655 Comm: syz.1.1583 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.594398][T10655] Tainted: [L]=SOFTLOCKUP [ 436.594408][T10655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 436.594424][T10655] Call Trace: [ 436.594435][T10655] [ 436.594446][T10655] dump_stack_lvl+0xe8/0x150 [ 436.594487][T10655] should_fail_ex+0x3eb/0x540 [ 436.594521][T10655] get_futex_key+0x1b4/0x1580 [ 436.594575][T10655] ? __pfx_get_futex_key+0x10/0x10 [ 436.594614][T10655] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 436.594663][T10655] futex_wake+0x119/0x5f0 [ 436.594702][T10655] ? __pfx_futex_wake+0x10/0x10 [ 436.594749][T10655] ? __pfx_vfs_writev+0x10/0x10 [ 436.594784][T10655] do_futex+0x458/0x4e0 [ 436.594818][T10655] ? __pfx_do_futex+0x10/0x10 [ 436.594856][T10655] __se_sys_futex+0x3a8/0x450 [ 436.594888][T10655] ? do_writev+0x2b1/0x2e0 [ 436.594913][T10655] ? __pfx___se_sys_futex+0x10/0x10 [ 436.594942][T10655] ? __pfx_do_writev+0x10/0x10 [ 436.594975][T10655] ? __x64_sys_futex+0x21/0xf0 [ 436.595006][T10655] do_syscall_64+0x166/0x520 [ 436.595029][T10655] ? trace_irq_disable+0x3b/0x140 [ 436.595065][T10655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.595092][T10655] ? clear_bhb_loop+0x70/0xc0 [ 436.595124][T10655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.595150][T10655] RIP: 0033:0x7f662dd9e159 [ 436.595178][T10655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.595201][T10655] RSP: 002b:00007f662ec650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 436.595229][T10655] RAX: ffffffffffffffda RBX: 00007f662e025fa8 RCX: 00007f662dd9e159 [ 436.595248][T10655] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f662e025fac [ 436.595266][T10655] RBP: 00007f662e025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 436.595284][T10655] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 436.595299][T10655] R13: 00007f662e026038 R14: 00007ffe6ecca240 R15: 00007ffe6ecca328 [ 436.595343][T10655] [ 436.780206][ T5765] pwc: recv_control_msg error -32 req 02 val 2b00 [ 436.825664][ T5765] pwc: recv_control_msg error -32 req 02 val 2700 [ 436.842777][ T5765] pwc: recv_control_msg error -32 req 02 val 2c00 [ 436.846377][ T5765] pwc: recv_control_msg error -32 req 04 val 1000 [ 436.847245][ T5765] pwc: recv_control_msg error -32 req 04 val 1300 [ 437.073816][ T5765] pwc: recv_control_msg error -71 req 02 val 2000 [ 437.075914][ T5765] pwc: recv_control_msg error -71 req 02 val 2100 [ 437.076388][ T5765] pwc: recv_control_msg error -71 req 04 val 1500 [ 437.076833][ T5765] pwc: recv_control_msg error -71 req 02 val 2500 [ 437.077267][ T5765] pwc: recv_control_msg error -71 req 02 val 2400 [ 437.077697][ T5765] pwc: recv_control_msg error -71 req 02 val 2600 [ 437.120026][ T5765] pwc: recv_control_msg error -71 req 02 val 2900 [ 437.127031][ T5765] pwc: recv_control_msg error -71 req 02 val 2800 [ 437.135019][ T5765] pwc: recv_control_msg error -71 req 04 val 1100 [ 437.135499][ T5765] pwc: recv_control_msg error -71 req 04 val 1200 [ 437.161785][ T5765] pwc: Registered as video103. [ 437.166150][ T5765] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input65 [ 437.186037][ T5765] usb 3-1: USB disconnect, device number 70 [ 438.726706][T10690] block2mtd: error: cannot open device /dev/ram0 [ 438.867274][T10694] syzkaller1: entered promiscuous mode [ 438.867300][T10694] syzkaller1: entered allmulticast mode [ 439.697975][ T1220] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 439.821241][ T32] kauditd_printk_skb: 36 callbacks suppressed [ 439.821265][ T32] audit: type=1800 audit(1789469382.265:2955): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219656 res=0 errno=0 [ 439.869785][ T1220] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 439.871291][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.895363][ T1220] usb 3-1: config 0 descriptor?? [ 439.908143][ T1220] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 439.935747][ T32] audit: type=1800 audit(1789469382.375:2956): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 439.940635][ T32] audit: type=1800 audit(1789469382.385:2957): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219675 res=0 errno=0 [ 439.967596][ T32] audit: type=1800 audit(1789469382.395:2958): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219704 res=0 errno=0 [ 439.996234][ T32] audit: type=1800 audit(1789469382.415:2959): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=219682 res=0 errno=0 [ 440.033209][ T32] audit: type=1800 audit(1789469382.475:2960): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=219683 res=0 errno=0 [ 440.033275][ T32] audit: type=1800 audit(1789469382.475:2961): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=219684 res=0 errno=0 [ 440.037267][ T32] audit: type=1800 audit(1789469382.475:2962): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219724 res=0 errno=0 [ 440.245686][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.358248][ T31] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 440.528175][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 440.529928][ T31] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 440.532411][ T31] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 440.532450][ T31] usb 7-1: config 0 has no interface number 0 [ 440.532523][ T31] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 440.532552][ T31] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 440.532581][ T31] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 440.532612][ T31] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 440.532686][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.537103][ T31] usb 7-1: config 0 descriptor?? [ 440.543806][ T32] audit: type=1800 audit(1789469382.985:2963): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=219750 res=0 errno=0 [ 440.644965][ T32] audit: type=1800 audit(1789469383.085:2964): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=219779 res=0 errno=0 [ 440.676380][ T31] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 440.926000][ T5701] usb 7-1: USB disconnect, device number 14 [ 440.943409][ T5701] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 441.125649][ T1220] gspca_stv06xx: I2C: Read error writing address: -71 [ 441.148451][ T1220] usb 3-1: USB disconnect, device number 71 [ 441.660409][T10736] syzkaller1: entered promiscuous mode [ 441.660439][T10736] syzkaller1: entered allmulticast mode [ 441.891019][T10738] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 442.094944][T10746] FAULT_INJECTION: forcing a failure. [ 442.094944][T10746] name failslab, interval 1, probability 0, space 0, times 0 [ 442.094983][T10746] CPU: 1 UID: 60928 PID: 10746 Comm: syz.7.1617 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.095015][T10746] Tainted: [L]=SOFTLOCKUP [ 442.095025][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.095040][T10746] Call Trace: [ 442.095049][T10746] [ 442.095060][T10746] dump_stack_lvl+0xe8/0x150 [ 442.095095][T10746] should_fail_ex+0x3eb/0x540 [ 442.095126][T10746] should_failslab+0xa8/0x100 [ 442.095162][T10746] __kmalloc_cache_noprof+0x9e/0x600 [ 442.095197][T10746] ? __pfx_inc_ucount+0x10/0x10 [ 442.095231][T10746] ? copy_ipcs+0x1fd/0x6c0 [ 442.095252][T10746] ? copy_ipcs+0x1fd/0x6c0 [ 442.095275][T10746] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 442.095312][T10746] copy_ipcs+0x1fd/0x6c0 [ 442.095340][T10746] create_new_namespaces+0x210/0x6b0 [ 442.095370][T10746] ? security_capable+0x7e/0x2c0 [ 442.095402][T10746] unshare_nsproxy_namespaces+0x144/0x190 [ 442.095432][T10746] ksys_unshare+0x5a7/0x950 [ 442.095469][T10746] ? __pfx_ksys_unshare+0x10/0x10 [ 442.095498][T10746] ? rcu_is_watching+0x16/0xb0 [ 442.095533][T10746] __x64_sys_unshare+0x38/0x50 [ 442.095563][T10746] do_syscall_64+0x166/0x520 [ 442.095586][T10746] ? trace_irq_disable+0x3b/0x140 [ 442.095620][T10746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.095646][T10746] ? clear_bhb_loop+0x70/0xc0 [ 442.095675][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.095699][T10746] RIP: 0033:0x7fcd2679e159 [ 442.095721][T10746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.095742][T10746] RSP: 002b:00007fcd275c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.095767][T10746] RAX: ffffffffffffffda RBX: 00007fcd26a25fa0 RCX: 00007fcd2679e159 [ 442.095785][T10746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 442.095801][T10746] RBP: 00007fcd2683503b R08: 0000000000000000 R09: 0000000000000000 [ 442.095816][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.095831][T10746] R13: 00007fcd26a26038 R14: 00007fcd26a25fa0 R15: 00007fffc905ebd8 [ 442.095869][T10746] [ 442.168745][ T9974] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 442.349157][ T9974] usb 3-1: Using ep0 maxpacket: 16 [ 442.350291][ T9974] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 442.351669][ T9974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.351752][ T9974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 442.351783][ T9974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 442.351808][ T9974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 442.351832][ T9974] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.354090][ T9974] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 442.354117][ T9974] usb 3-1: Manufacturer: syz [ 442.357449][ T9974] usb 3-1: config 0 descriptor?? [ 442.697888][ T9974] rc_core: IR keymap rc-hauppauge not found [ 442.697926][ T9974] Registered IR keymap rc-empty [ 442.698088][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.727858][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.749550][ T9974] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 442.767121][ T9974] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input66 [ 442.795662][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.808057][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.844317][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.863658][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.878474][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.883727][T10756] overlayfs: workdir and upperdir must reside under the same mount [ 442.905316][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.918100][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.939456][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.959629][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 442.978956][ T9974] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 443.014477][ T9974] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 443.014508][ T9974] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 443.108943][ T9974] usb 3-1: USB disconnect, device number 72 [ 443.578022][ T5701] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 443.730249][ T5701] usb 7-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 443.731773][ T5701] usb 7-1: config 4 has an invalid interface number: 44 but max is 0 [ 443.731803][ T5701] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 443.731825][ T5701] usb 7-1: config 4 has no interface number 0 [ 443.731874][ T5701] usb 7-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.789418][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.789514][ T5701] usb 7-1: Product: syz [ 443.789592][ T5701] usb 7-1: Manufacturer: syz [ 443.789635][ T5701] usb 7-1: SerialNumber: syz [ 443.928587][T10772] gve 0000:00:00.0: Failed to map pci bar! [ 443.928689][T10772] gve 0000:00:00.0: probe with driver gve failed with error -12 [ 444.286279][ T5701] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 444.320684][ T5701] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 444.323412][ T5701] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 444.323478][ T5701] usb 7-1: media controller created [ 444.326080][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.416403][ T5701] DVB: Unable to find symbol dib7000p_attach() [ 444.416418][ T5701] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 444.498348][ T5701] rc_core: IR keymap rc-dib0700-rc5 not found [ 444.498371][ T5701] Registered IR keymap rc-empty [ 444.565378][ T5701] dvb-usb: could not initialize remote control. [ 444.565398][ T5701] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 444.593341][ T5701] usb 7-1: USB disconnect, device number 15 [ 444.663977][ T5701] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 444.718482][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 444.723836][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 444.742582][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 444.755580][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 444.766650][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 445.078715][T10788] FAULT_INJECTION: forcing a failure. [ 445.078715][T10788] name failslab, interval 1, probability 0, space 0, times 0 [ 445.078755][T10788] CPU: 1 UID: 0 PID: 10788 Comm: syz.2.1632 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.078788][T10788] Tainted: [L]=SOFTLOCKUP [ 445.078798][T10788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.078812][T10788] Call Trace: [ 445.078822][T10788] [ 445.078833][T10788] dump_stack_lvl+0xe8/0x150 [ 445.078871][T10788] should_fail_ex+0x3eb/0x540 [ 445.078904][T10788] should_failslab+0xa8/0x100 [ 445.078932][T10788] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 445.078967][T10788] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 445.079000][T10788] ? xas_split_alloc+0x19c/0x4c0 [ 445.079023][T10788] ? xas_split_alloc+0x19c/0x4c0 [ 445.079054][T10788] xas_split_alloc+0x19c/0x4c0 [ 445.079092][T10788] __folio_split+0x8dd/0x1a40 [ 445.079141][T10788] ? __pfx___folio_split+0x10/0x10 [ 445.079175][T10788] ? __up_read+0x29c/0x930 [ 445.079205][T10788] ? folio_alloc_swap+0x2cc/0x12e0 [ 445.079242][T10788] shmem_writeout+0x571/0x17a0 [ 445.079280][T10788] ? lock_acquire+0x115/0x350 [ 445.079318][T10788] ? __pfx_shmem_writeout+0x10/0x10 [ 445.079343][T10788] ? folio_mapping+0x16f/0x1f0 [ 445.079370][T10788] ? folio_clear_dirty_for_io+0x162/0x820 [ 445.079415][T10788] ? try_to_unmap_flush_dirty+0x96/0x100 [ 445.079453][T10788] shrink_folio_list+0x33ee/0x5270 [ 445.079513][T10788] ? trace_sched_exit_tp+0x3a/0x130 [ 445.079547][T10788] ? __pfx_shrink_folio_list+0x10/0x10 [ 445.079590][T10788] ? __lock_acquire+0x747/0x2de0 [ 445.079662][T10788] ? __css_rstat_updated+0x237/0x540 [ 445.079708][T10788] ? __lock_acquire+0x747/0x2de0 [ 445.079759][T10788] reclaim_folio_list+0x100/0x430 [ 445.079812][T10788] ? __pfx_reclaim_folio_list+0x10/0x10 [ 445.079866][T10788] reclaim_pages+0x452/0x530 [ 445.079911][T10788] ? __pfx_reclaim_pages+0x10/0x10 [ 445.079951][T10788] ? do_raw_spin_unlock+0xf5/0x200 [ 445.079984][T10788] madvise_cold_or_pageout_pte_range+0x184d/0x2340 [ 445.080026][T10788] ? __kernel_text_address+0xd/0x30 [ 445.080083][T10788] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 445.080126][T10788] ? __lock_acquire+0x747/0x2de0 [ 445.080177][T10788] walk_pgd_range+0x102d/0x1dc0 [ 445.080243][T10788] ? __pfx_walk_pgd_range+0x10/0x10 [ 445.080279][T10788] __walk_page_range+0x16d/0x720 [ 445.080310][T10788] ? __rb_reserve_next+0x79f/0xdd0 [ 445.080360][T10788] walk_page_range_vma_unsafe+0x309/0x410 [ 445.080404][T10788] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 445.080439][T10788] ? mlock_drain_local+0x79/0x490 [ 445.080479][T10788] ? walk_page_range_vma+0x6b/0x90 [ 445.080508][T10788] madvise_vma_behavior+0x2831/0x41c0 [ 445.080541][T10788] ? __lock_acquire+0x747/0x2de0 [ 445.080575][T10788] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 445.080610][T10788] ? __lock_acquire+0x747/0x2de0 [ 445.080656][T10788] ? lock_acquire+0x115/0x350 [ 445.080700][T10788] ? ktime_get+0x45/0x220 [ 445.080736][T10788] ? ktime_get+0x45/0x220 [ 445.080767][T10788] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 445.080803][T10788] ? ktime_get+0x1f5/0x220 [ 445.080837][T10788] ? lapic_next_event+0x11/0x20 [ 445.080871][T10788] ? clockevents_program_event+0x491/0x630 [ 445.080901][T10788] ? __pfx_clockevents_program_event+0x10/0x10 [ 445.080929][T10788] ? hrtimer_start_range_ns_common+0x812/0xb90 [ 445.080986][T10788] ? mas_prev_slot+0xb76/0xbf0 [ 445.081041][T10788] ? find_vma_prev+0x123/0x1b0 [ 445.081072][T10788] ? __pfx_find_vma_prev+0x10/0x10 [ 445.081122][T10788] madvise_walk_vmas+0x576/0xb00 [ 445.081159][T10788] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 445.081190][T10788] ? blk_start_plug+0x6e/0x1b0 [ 445.081218][T10788] madvise_do_behavior+0x385/0x540 [ 445.081249][T10788] ? __pfx_madvise_do_behavior+0x10/0x10 [ 445.081280][T10788] ? down_read+0x2b9/0x320 [ 445.081313][T10788] do_madvise+0x327/0x3a0 [ 445.081351][T10788] ? __pfx_do_madvise+0x10/0x10 [ 445.081407][T10788] ? __se_sys_futex+0x3a8/0x450 [ 445.081444][T10788] ? rcu_is_watching+0x16/0xb0 [ 445.081478][T10788] __x64_sys_madvise+0xa6/0xc0 [ 445.081503][T10788] do_syscall_64+0x166/0x520 [ 445.081524][T10788] ? trace_irq_disable+0x3b/0x140 [ 445.081557][T10788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.081582][T10788] ? clear_bhb_loop+0x70/0xc0 [ 445.081612][T10788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.081636][T10788] RIP: 0033:0x7f5eb7b9e159 [ 445.081659][T10788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.081679][T10788] RSP: 002b:00007f5eb89dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 445.081705][T10788] RAX: ffffffffffffffda RBX: 00007f5eb7e25fa0 RCX: 00007f5eb7b9e159 [ 445.081723][T10788] RDX: 0000000000000015 RSI: 7fffffffffffffff RDI: 0000200000000000 [ 445.081740][T10788] RBP: 00007f5eb7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 445.081756][T10788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.081771][T10788] R13: 00007f5eb7e26038 R14: 00007f5eb7e25fa0 R15: 00007ffc104ee508 [ 445.081808][T10788] [ 445.673136][ T32] kauditd_printk_skb: 45 callbacks suppressed [ 445.673159][ T32] audit: type=1800 audit(1789469388.115:3010): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 445.856933][ T32] audit: type=1800 audit(1789469388.295:3011): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 445.968812][ T32] audit: type=1800 audit(1789469388.415:3012): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220497 res=0 errno=0 [ 446.088375][T10798] sd 0:0:1:0: PR command failed: 1026 [ 446.088429][T10798] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 446.088475][T10798] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 446.230149][T10782] lo speed is unknown, defaulting to 1000 [ 446.332004][ T32] audit: type=1800 audit(1789469388.775:3013): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 446.377280][ T32] audit: type=1800 audit(1789469388.815:3014): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 446.425566][ T32] audit: type=1800 audit(1789469388.865:3015): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=220986 res=0 errno=0 [ 446.795193][ T32] audit: type=1800 audit(1789469389.235:3016): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 446.877954][ T4934] Bluetooth: hci1: command tx timeout [ 446.925675][T10812] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 446.925698][T10812] rust_binder: Read failure Err(EFAULT) in pid:150 [ 446.927129][T10812] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 446.927147][T10812] rust_binder: Read failure Err(EFAULT) in pid:150 [ 447.049352][ T32] audit: type=1800 audit(1789469389.495:3017): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 447.174493][ T32] audit: type=1800 audit(1789469389.605:3018): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 447.345240][T10818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.363717][ T32] audit: type=1800 audit(1789469389.805:3019): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223371 res=0 errno=0 [ 448.144465][T10833] rust_binder: Error in use_page_slow: ESRCH [ 448.144491][T10833] rust_binder: use_range failure ESRCH [ 448.144513][T10833] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 448.144530][T10833] rust_binder: Failure in copy_transaction_data: ESRCH [ 448.144564][T10833] rust_binder: 10824:10833 transaction call to 10824:0 failed ESRCH, code 0 size 0-0 [ 448.278780][ T31] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 448.329919][ T9973] rust_binder: 10824: undelivered TRANSACTION_ERROR: 29201 [ 448.461539][ T31] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.463089][ T31] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.463146][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.466812][ T31] usb 7-1: config 0 descriptor?? [ 448.533364][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 448.614156][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.615911][T10782] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.616262][T10782] bridge_slave_0: entered allmulticast mode [ 448.637755][T10782] bridge_slave_0: entered promiscuous mode [ 448.654457][T10782] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.656668][T10782] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.656836][T10782] bridge_slave_1: entered allmulticast mode [ 448.684976][T10782] bridge_slave_1: entered promiscuous mode [ 448.825962][T10782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.839327][T10782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.909313][T10782] team0: Port device team_slave_0 added [ 448.913857][T10782] team0: Port device team_slave_1 added [ 448.964555][T10782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.964577][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.964605][T10782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.967220][T10782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.967238][T10782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.967269][T10782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.967964][ T4934] Bluetooth: hci1: command tx timeout [ 449.046466][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 449.075132][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 449.086765][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 449.100660][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 449.105599][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 449.242636][T10782] hsr_slave_0: entered promiscuous mode [ 449.246023][T10782] hsr_slave_1: entered promiscuous mode [ 449.260562][T10782] debugfs: 'hsr0' already exists in 'hsr' [ 449.260614][T10782] Cannot create hsr debugfs directory [ 449.310558][ T31] pwc: recv_control_msg error -71 req 02 val 2000 [ 449.313165][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 449.313629][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 449.314065][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 449.314623][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 449.315061][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 449.316102][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 449.316565][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 449.324461][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 449.337964][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 449.428764][ T31] pwc: Registered as video103. [ 449.431298][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input68 [ 449.435794][ T31] usb 7-1: USB disconnect, device number 16 [ 450.125380][T10782] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 450.144679][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 450.146965][T10782] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 450.174660][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 450.192668][T10782] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 450.208410][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 450.209420][T10782] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 450.214567][T10782] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 450.626901][T10782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.678053][T10782] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.708646][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.708767][ T8775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.756752][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.756862][ T6426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.847360][ T32] kauditd_printk_skb: 26 callbacks suppressed [ 450.847382][ T32] audit: type=1800 audit(1789469393.285:3046): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 451.048341][ T4934] Bluetooth: hci1: command tx timeout [ 451.153834][ T32] audit: type=1800 audit(1789469393.595:3047): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 451.312557][ T32] audit: type=1800 audit(1789469393.735:3048): pid=10884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1657" name="c_srate" dev="configfs" ino=41276 res=0 errno=0 [ 451.527701][ T32] audit: type=1800 audit(1789469393.965:3049): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 452.044112][ T32] audit: type=1800 audit(1789469394.485:3050): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 452.114930][T10782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.325736][T10905] FAULT_INJECTION: forcing a failure. [ 452.325736][T10905] name failslab, interval 1, probability 0, space 0, times 0 [ 452.325775][T10905] CPU: 1 UID: 0 PID: 10905 Comm: syz.2.1660 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.325807][T10905] Tainted: [L]=SOFTLOCKUP [ 452.325817][T10905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.325832][T10905] Call Trace: [ 452.325841][T10905] [ 452.325852][T10905] dump_stack_lvl+0xe8/0x150 [ 452.325888][T10905] should_fail_ex+0x3eb/0x540 [ 452.325919][T10905] should_failslab+0xa8/0x100 [ 452.325947][T10905] __kmalloc_cache_noprof+0x9e/0x600 [ 452.325982][T10905] ? __se_sys_mincore+0x10a/0x660 [ 452.326016][T10905] ? __se_sys_mincore+0x10a/0x660 [ 452.326075][T10905] __se_sys_mincore+0x10a/0x660 [ 452.326118][T10905] do_syscall_64+0x166/0x520 [ 452.326141][T10905] ? trace_irq_disable+0x3b/0x140 [ 452.326174][T10905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.326199][T10905] ? clear_bhb_loop+0x70/0xc0 [ 452.326228][T10905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.326253][T10905] RIP: 0033:0x7f5eb7b9e159 [ 452.326274][T10905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.326302][T10905] RSP: 002b:00007f5eb89dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 452.326328][T10905] RAX: ffffffffffffffda RBX: 00007f5eb7e25fa0 RCX: 00007f5eb7b9e159 [ 452.326346][T10905] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000000ef000 [ 452.326362][T10905] RBP: 00007f5eb7c3503b R08: 0000000000000000 R09: 0000000000000000 [ 452.326378][T10905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.326392][T10905] R13: 00007f5eb7e26038 R14: 00007f5eb7e25fa0 R15: 00007ffc104ee508 [ 452.326434][T10905] [ 452.739464][ T32] audit: type=1800 audit(1789469395.185:3051): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 453.123740][ T4934] Bluetooth: hci1: command tx timeout [ 453.151212][ T32] audit: type=1800 audit(1789469395.595:3052): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 453.202799][ T32] audit: type=1800 audit(1789469395.645:3053): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 453.359912][ T32] audit: type=1800 audit(1789469395.805:3054): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 453.652583][T10926] FAULT_INJECTION: forcing a failure. [ 453.652583][T10926] name failslab, interval 1, probability 0, space 0, times 0 [ 453.652629][T10926] CPU: 0 UID: 0 PID: 10926 Comm: syz.6.1669 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.652662][T10926] Tainted: [L]=SOFTLOCKUP [ 453.652672][T10926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 453.652687][T10926] Call Trace: [ 453.652697][T10926] [ 453.652708][T10926] dump_stack_lvl+0xe8/0x150 [ 453.652746][T10926] should_fail_ex+0x3eb/0x540 [ 453.652779][T10926] should_failslab+0xa8/0x100 [ 453.652808][T10926] __kmalloc_noprof+0xf9/0x710 [ 453.652844][T10926] ? tomoyo_supervisor+0xc4e/0x1550 [ 453.652874][T10926] ? tomoyo_supervisor+0xc4e/0x1550 [ 453.652912][T10926] tomoyo_supervisor+0xc4e/0x1550 [ 453.652956][T10926] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 453.653000][T10926] ? snprintf+0xe8/0x140 [ 453.653036][T10926] ? __pfx_snprintf+0x10/0x10 [ 453.653069][T10926] ? tomoyo_check_acl+0x386/0x400 [ 453.653114][T10926] tomoyo_path_number_perm+0x463/0x5f0 [ 453.653140][T10926] ? tomoyo_path_number_perm+0x219/0x5f0 [ 453.653166][T10926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 453.653209][T10926] ? hook_file_ioctl+0x1f2/0x600 [ 453.653257][T10926] ? __fget_files+0x2a/0x420 [ 453.653291][T10926] ? __fget_files+0x2a/0x420 [ 453.653319][T10926] ? __fget_files+0x3a2/0x420 [ 453.653348][T10926] ? __fget_files+0x2a/0x420 [ 453.653382][T10926] security_file_ioctl+0xc3/0x2a0 [ 453.653421][T10926] __se_sys_ioctl+0x47/0x170 [ 453.653460][T10926] do_syscall_64+0x166/0x520 [ 453.653481][T10926] ? trace_irq_disable+0x3b/0x140 [ 453.653515][T10926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.653539][T10926] ? clear_bhb_loop+0x70/0xc0 [ 453.653569][T10926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.653593][T10926] RIP: 0033:0x7f3c1159e159 [ 453.653623][T10926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.653644][T10926] RSP: 002b:00007f3c1254c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.653670][T10926] RAX: ffffffffffffffda RBX: 00007f3c11825fa0 RCX: 00007f3c1159e159 [ 453.653689][T10926] RDX: 0000000000000000 RSI: 00000000810c9365 RDI: 0000000000000003 [ 453.653704][T10926] RBP: 00007f3c1163503b R08: 0000000000000000 R09: 0000000000000000 [ 453.653720][T10926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.653734][T10926] R13: 00007f3c11826038 R14: 00007f3c11825fa0 R15: 00007fff1604ddd8 [ 453.653775][T10926] [ 453.816859][T10782] veth0_vlan: entered promiscuous mode [ 453.955087][T10782] veth1_vlan: entered promiscuous mode [ 453.993879][ T32] audit: type=1800 audit(1789469396.435:3055): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 454.257310][T10782] veth0_macvtap: entered promiscuous mode [ 454.282086][T10782] veth1_macvtap: entered promiscuous mode [ 454.356590][T10782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.440118][T10782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.497007][ T8775] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.497259][ T8775] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.497328][ T8775] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.499117][ T6371] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.940957][ T8775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.940984][ T8775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.106443][ T6371] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.106468][ T6371] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.258049][ T1220] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 455.326492][ T4934] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 455.326526][ T4934] CPU: 0 UID: 0 PID: 4934 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 455.326563][ T4934] Tainted: [L]=SOFTLOCKUP [ 455.326573][ T4934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 455.326590][ T4934] Workqueue: hci3 hci_rx_work [ 455.326632][ T4934] Call Trace: [ 455.326643][ T4934] [ 455.326655][ T4934] dump_stack_lvl+0xe8/0x150 [ 455.326691][ T4934] sysfs_create_dir_ns+0x271/0x2a0 [ 455.326733][ T4934] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 455.326774][ T4934] ? do_raw_spin_unlock+0xf5/0x200 [ 455.326810][ T4934] kobject_add_internal+0x622/0xcd0 [ 455.326849][ T4934] kobject_add+0x163/0x240 [ 455.326883][ T4934] ? __pfx_kobject_add+0x10/0x10 [ 455.326919][ T4934] ? get_device_parent+0x366/0x3a0 [ 455.326954][ T4934] device_add+0x3fa/0xb80 [ 455.326987][ T4934] hci_conn_add_sysfs+0xd5/0x210 [ 455.327025][ T4934] le_conn_complete_evt+0x10b2/0x17a0 [ 455.327070][ T4934] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 455.327100][ T4934] ? __mutex_unlock_slowpath+0x731/0x900 [ 455.327130][ T4934] ? skb_pull_data+0xf0/0x200 [ 455.327167][ T4934] hci_le_enh_conn_complete_evt+0x189/0x490 [ 455.327195][ T4934] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 455.327227][ T4934] hci_event_packet+0x67a/0xf10 [ 455.327272][ T4934] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 455.327311][ T4934] ? __pfx_hci_event_packet+0x10/0x10 [ 455.327353][ T4934] ? audit_tree_freeing_mark+0x670/0xb20 [ 455.327390][ T4934] ? hci_send_to_monitor+0xe2/0x590 [ 455.327430][ T4934] hci_rx_work+0x3ee/0x1020 [ 455.327474][ T4934] ? process_scheduled_works+0x97a/0x1630 [ 455.327504][ T4934] process_scheduled_works+0xc3d/0x1630 [ 455.327568][ T4934] ? __pfx_process_scheduled_works+0x10/0x10 [ 455.327606][ T4934] ? assign_work+0x3cf/0x5d0 [ 455.327641][ T4934] worker_thread+0xa47/0xfb0 [ 455.327686][ T4934] ? __kthread_parkme+0x71/0x1f0 [ 455.327730][ T4934] kthread+0x38b/0x480 [ 455.327771][ T4934] ? __pfx_worker_thread+0x10/0x10 [ 455.327795][ T4934] ? __pfx_kthread+0x10/0x10 [ 455.327832][ T4934] ret_from_fork+0x514/0xb70 [ 455.327872][ T4934] ? __pfx_ret_from_fork+0x10/0x10 [ 455.327907][ T4934] ? __switch_to+0xc89/0x1420 [ 455.327941][ T4934] ? __pfx_kthread+0x10/0x10 [ 455.327979][ T4934] ret_from_fork_asm+0x1a/0x30 [ 455.328032][ T4934] [ 455.341423][ T4934] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 455.341568][ T4934] Bluetooth: hci3: failed to register connection device [ 455.524253][ T1220] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.559306][ T1220] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.559341][ T1220] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.559387][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.705301][T10947] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 455.706007][T10947] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 455.706170][T10947] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.706226][T10947] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 455.871384][ T32] kauditd_printk_skb: 15 callbacks suppressed [ 455.871409][ T32] audit: type=1800 audit(1789469398.315:3071): pid=10950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1630" name="op_timeout_secs" dev="sysfs" ino=5329 res=0 errno=0 [ 456.106756][ T32] audit: type=1800 audit(1789469398.545:3072): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 456.262767][T10947] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 456.314707][T10947] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 456.314847][T10947] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 456.365058][T10952] FAULT_INJECTION: forcing a failure. [ 456.365058][T10952] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 456.365103][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.8.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.365139][T10952] Tainted: [L]=SOFTLOCKUP [ 456.365149][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 456.365165][T10952] Call Trace: [ 456.365176][T10952] [ 456.365188][T10952] dump_stack_lvl+0xe8/0x150 [ 456.365227][T10952] should_fail_ex+0x3eb/0x540 [ 456.365261][T10952] prepare_alloc_pages+0x21e/0x5f0 [ 456.365307][T10952] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 456.365351][T10952] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 456.365396][T10952] ? __pfx_do_futex+0x10/0x10 [ 456.365435][T10952] alloc_pages_mpol+0x21e/0x390 [ 456.365470][T10952] ___kmalloc_large_node+0x7b/0x170 [ 456.365510][T10952] __kmalloc_large_noprof+0x1a/0x90 [ 456.365549][T10952] ksys_ioperm+0x15e/0x670 [ 456.365593][T10952] do_syscall_64+0x166/0x520 [ 456.365617][T10952] ? trace_irq_disable+0x3b/0x140 [ 456.365658][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.365685][T10952] ? clear_bhb_loop+0x70/0xc0 [ 456.365717][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.365743][T10952] RIP: 0033:0x7f5e1fd9e159 [ 456.365766][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.365788][T10952] RSP: 002b:00007f5e20d33028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ad [ 456.365817][T10952] RAX: ffffffffffffffda RBX: 00007f5e20025fa0 RCX: 00007f5e1fd9e159 [ 456.365837][T10952] RDX: 0000000000000005 RSI: 0000000000000008 RDI: 0000000000000004 [ 456.365857][T10952] RBP: 00007f5e1fe3503b R08: 0000000000000000 R09: 0000000000000000 [ 456.365874][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.365889][T10952] R13: 00007f5e20026038 R14: 00007f5e20025fa0 R15: 00007ffdf3a715b8 [ 456.365927][T10952] [ 456.606527][T10947] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 456.639106][T10947] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 456.641174][T10947] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.645947][T10947] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 456.894959][ T32] audit: type=1800 audit(1789469399.335:3073): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 457.078623][ T32] audit: type=1800 audit(1789469399.525:3074): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 457.133374][ T1220] usb 3-1: usb_control_msg returned -32 [ 457.133426][ T1220] usbtmc 3-1:16.0: can't read capabilities [ 457.145957][ T32] audit: type=1800 audit(1789469399.585:3075): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230519 res=0 errno=0 [ 457.310201][ T32] audit: type=1800 audit(1789469399.755:3076): pid=10960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1679" name="nx_huge_pages_recovery_period_ms" dev="sysfs" ino=54006 res=0 errno=0 [ 457.410413][ T1220] usb 3-1: USB disconnect, device number 73 [ 457.481950][ T32] audit: type=1800 audit(1789469399.925:3077): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 457.699538][ T32] audit: type=1800 audit(1789469400.135:3078): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 457.758048][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.758094][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 457.758124][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 457.795292][ T32] audit: type=1800 audit(1789469400.235:3079): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 457.839963][ T32] audit: type=1800 audit(1789469400.285:3080): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=230586 res=0 errno=0 [ 458.021489][T10969] tpm_tis pcspkr: no memory resource defined [ 458.267248][T10972] loop8: detected capacity change from 0 to 524288000 [ 458.328639][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 458.718206][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 459.136252][T10989] FAULT_INJECTION: forcing a failure. [ 459.136252][T10989] name failslab, interval 1, probability 0, space 0, times 0 [ 459.136289][T10989] CPU: 0 UID: 0 PID: 10989 Comm: syz.6.1692 Tainted: G L syzkaller #0 PREEMPT(full) [ 459.136321][T10989] Tainted: [L]=SOFTLOCKUP [ 459.136331][T10989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.136347][T10989] Call Trace: [ 459.136357][T10989] [ 459.136368][T10989] dump_stack_lvl+0xe8/0x150 [ 459.136407][T10989] should_fail_ex+0x3eb/0x540 [ 459.136438][T10989] should_failslab+0xa8/0x100 [ 459.136466][T10989] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 459.136503][T10989] ? kobject_set_name_vargs+0x61/0x110 [ 459.136530][T10989] ? kobject_set_name_vargs+0x61/0x110 [ 459.136566][T10989] kstrdup+0x42/0x100 [ 459.136603][T10989] kobject_set_name_vargs+0x61/0x110 [ 459.136642][T10989] dev_set_name+0xe2/0x140 [ 459.136687][T10989] ? __pfx_dev_set_name+0x10/0x10 [ 459.136724][T10989] ? __init_waitqueue_head+0xa8/0x150 [ 459.136756][T10989] ? device_initialize+0x394/0x470 [ 459.136787][T10989] netdev_register_kobject+0xb7/0x350 [ 459.136826][T10989] register_netdevice+0x142e/0x1eb0 [ 459.136873][T10989] ? __pfx_register_netdevice+0x10/0x10 [ 459.136902][T10989] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 459.136937][T10989] ? idr_alloc+0x89/0xd0 [ 459.136962][T10989] ppp_dev_configure+0x806/0xaa0 [ 459.136991][T10989] ? alloc_netdev_mqs+0xef9/0x12a0 [ 459.137029][T10989] ppp_ioctl+0xaff/0x1c00 [ 459.137063][T10989] ? __pfx_ppp_ioctl+0x10/0x10 [ 459.137096][T10989] ? __fget_files+0x2a/0x420 [ 459.137125][T10989] ? __fget_files+0x3a2/0x420 [ 459.137154][T10989] ? __fget_files+0x2a/0x420 [ 459.137187][T10989] ? bpf_lsm_file_ioctl+0x9/0x20 [ 459.137216][T10989] ? __pfx_ppp_ioctl+0x10/0x10 [ 459.137248][T10989] __se_sys_ioctl+0xfc/0x170 [ 459.137288][T10989] do_syscall_64+0x166/0x520 [ 459.137310][T10989] ? trace_irq_disable+0x3b/0x140 [ 459.137345][T10989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.137371][T10989] ? clear_bhb_loop+0x70/0xc0 [ 459.137400][T10989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.137425][T10989] RIP: 0033:0x7f3c1159e159 [ 459.137448][T10989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.137469][T10989] RSP: 002b:00007f3c1254c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.137496][T10989] RAX: ffffffffffffffda RBX: 00007f3c11825fa0 RCX: 00007f3c1159e159 [ 459.137514][T10989] RDX: 00002000000000c0 RSI: 00000000c004743e RDI: 0000000000000004 [ 459.137531][T10989] RBP: 00007f3c1163503b R08: 0000000000000000 R09: 0000000000000000 [ 459.137547][T10989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.137561][T10989] R13: 00007f3c11826038 R14: 00007f3c11825fa0 R15: 00007fff1604ddd8 [ 459.137599][T10989] [ 459.150799][ T9974] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 459.339422][ T9974] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.415807][ T9974] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.448313][ T9974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.448398][ T9974] usb 9-1: Product: syz [ 459.448442][ T9974] usb 9-1: Manufacturer: syz [ 459.448470][ T9974] usb 9-1: SerialNumber: syz [ 459.676875][T10994] syzkaller1: entered promiscuous mode [ 459.676904][T10994] syzkaller1: entered allmulticast mode [ 459.838978][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 459.919608][T10996] IPVS: Scheduler module ip_vs_ not found [ 460.397957][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 460.584087][T11003] FAULT_INJECTION: forcing a failure. [ 460.584087][T11003] name fail_futex, interval 1, probability 0, space 0, times 0 [ 460.584129][T11003] CPU: 1 UID: 0 PID: 11003 Comm: syz.7.1697 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.584162][T11003] Tainted: [L]=SOFTLOCKUP [ 460.584173][T11003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.584189][T11003] Call Trace: [ 460.584200][T11003] [ 460.584211][T11003] dump_stack_lvl+0xe8/0x150 [ 460.584251][T11003] should_fail_ex+0x3eb/0x540 [ 460.584285][T11003] get_futex_key+0x1b4/0x1580 [ 460.584325][T11003] ? __lock_acquire+0x747/0x2de0 [ 460.584378][T11003] ? __pfx_get_futex_key+0x10/0x10 [ 460.584426][T11003] ? update_se+0x90/0x1020 [ 460.584461][T11003] futex_wait_setup+0x4a/0x590 [ 460.584496][T11003] ? trace_save_cmdline+0x350/0x500 [ 460.584533][T11003] ? __futex_wait+0xdb/0x470 [ 460.584572][T11003] __futex_wait+0x175/0x470 [ 460.584604][T11003] ? update_protect_slice+0x128/0x210 [ 460.584644][T11003] ? __pfx___futex_wait+0x10/0x10 [ 460.584692][T11003] ? __pfx_futex_wake_mark+0x10/0x10 [ 460.584732][T11003] ? try_to_wake_up+0x8c5/0x14d0 [ 460.584772][T11003] futex_wait+0x121/0x390 [ 460.584809][T11003] ? __pfx_futex_wait+0x10/0x10 [ 460.584863][T11003] do_futex+0x3e7/0x4e0 [ 460.584898][T11003] ? __pfx_do_futex+0x10/0x10 [ 460.584923][T11003] ? kmem_cache_free+0x182/0x650 [ 460.584968][T11003] __se_sys_futex+0x3a8/0x450 [ 460.585002][T11003] ? __pfx___se_sys_futex+0x10/0x10 [ 460.585028][T11003] ? do_user_addr_fault+0xd3f/0x1480 [ 460.585068][T11003] ? __x64_sys_futex+0x21/0xf0 [ 460.585097][T11003] do_syscall_64+0x166/0x520 [ 460.585119][T11003] ? trace_irq_disable+0x3b/0x140 [ 460.585151][T11003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.585175][T11003] ? clear_bhb_loop+0x70/0xc0 [ 460.585205][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.585228][T11003] RIP: 0033:0x7fcd2679e159 [ 460.585250][T11003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.585271][T11003] RSP: 002b:00007fcd275c20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 460.585299][T11003] RAX: ffffffffffffffda RBX: 00007fcd26a25fa8 RCX: 00007fcd2679e159 [ 460.585317][T11003] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcd26a25fa8 [ 460.585333][T11003] RBP: 00007fcd26a25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 460.585348][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.585363][T11003] R13: 00007fcd26a26038 R14: 00007fffc905eaf0 R15: 00007fffc905ebd8 [ 460.585399][T11003] [ 460.783815][ T9974] cdc_ncm 9-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 460.783892][ T9974] cdc_ncm 9-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 460.783948][ T9974] cdc_ncm 9-1:1.0: setting rx_max = 2048 [ 460.809647][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 460.908740][ T32] kauditd_printk_skb: 24 callbacks suppressed [ 460.908761][ T32] audit: type=1800 audit(1789469403.355:3105): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 461.042769][ T32] audit: type=1800 audit(1789469403.485:3106): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 461.080977][ T32] audit: type=1800 audit(1789469403.525:3107): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 461.162667][ T32] audit: type=1800 audit(1789469403.605:3108): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4842 res=0 errno=0 [ 461.229335][ T9974] cdc_ncm 9-1:1.0: setting tx_max = 88 [ 461.233347][ T32] audit: type=1800 audit(1789469403.675:3109): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31628 res=0 errno=0 [ 461.271648][ T32] audit: type=1800 audit(1789469403.715:3110): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31651 res=0 errno=0 [ 461.324053][ T9974] cdc_ncm 9-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.8-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 461.344772][T11008] FAULT_INJECTION: forcing a failure. [ 461.344772][T11008] name failslab, interval 1, probability 0, space 0, times 0 [ 461.344813][T11008] CPU: 0 UID: 0 PID: 11008 Comm: syz.7.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.344847][T11008] Tainted: [L]=SOFTLOCKUP [ 461.344857][T11008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 461.344873][T11008] Call Trace: [ 461.344883][T11008] [ 461.344895][T11008] dump_stack_lvl+0xe8/0x150 [ 461.344941][T11008] should_fail_ex+0x3eb/0x540 [ 461.344974][T11008] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 461.345016][T11008] should_failslab+0xa8/0x100 [ 461.345046][T11008] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 461.345078][T11008] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 461.345112][T11008] ? __drm_gem_shmem_create+0x7b/0x2e0 [ 461.345150][T11008] ? drm_mode_create_dumb_ioctl+0x211/0x2a0 [ 461.345179][T11008] ? shmem_alloc_inode+0x28/0x40 [ 461.345210][T11008] ? shmem_alloc_inode+0x28/0x40 [ 461.345248][T11008] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 461.345280][T11008] shmem_alloc_inode+0x28/0x40 [ 461.345313][T11008] alloc_inode+0x6a/0x1b0 [ 461.345350][T11008] new_inode+0x1f/0x170 [ 461.345379][T11008] ? shmem_get_inode+0x29a/0x1030 [ 461.345415][T11008] shmem_get_inode+0x3a4/0x1030 [ 461.345457][T11008] ? __pfx_shmem_get_inode+0x10/0x10 [ 461.345499][T11008] __shmem_file_setup+0x20b/0x370 [ 461.345530][T11008] ? __pfx___shmem_file_setup+0x10/0x10 [ 461.345557][T11008] ? __rwlock_init+0x44/0x150 [ 461.345593][T11008] drm_gem_object_init+0x8d/0xe0 [ 461.345623][T11008] __drm_gem_shmem_create+0x176/0x2e0 [ 461.345664][T11008] drm_gem_shmem_dumb_create+0x72/0x120 [ 461.345706][T11008] drm_mode_create_dumb_ioctl+0x211/0x2a0 [ 461.345739][T11008] drm_ioctl_kernel+0x2df/0x3b0 [ 461.345777][T11008] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 461.345803][T11008] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 461.345838][T11008] ? __might_fault+0xaf/0x130 [ 461.345876][T11008] drm_ioctl+0x70e/0xba0 [ 461.345919][T11008] ? __pfx_drm_mode_create_dumb_ioctl+0x10/0x10 [ 461.345946][T11008] ? __pfx_drm_ioctl+0x10/0x10 [ 461.346001][T11008] ? __fget_files+0x2a/0x420 [ 461.346038][T11008] ? bpf_lsm_file_ioctl+0x9/0x20 [ 461.346070][T11008] ? __pfx_drm_ioctl+0x10/0x10 [ 461.346103][T11008] __se_sys_ioctl+0xfc/0x170 [ 461.346145][T11008] do_syscall_64+0x166/0x520 [ 461.346168][T11008] ? trace_irq_disable+0x3b/0x140 [ 461.346204][T11008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.346231][T11008] ? clear_bhb_loop+0x70/0xc0 [ 461.346263][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.346288][T11008] RIP: 0033:0x7fcd2679e159 [ 461.346312][T11008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.346334][T11008] RSP: 002b:00007fcd275c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.346361][T11008] RAX: ffffffffffffffda RBX: 00007fcd26a25fa0 RCX: 00007fcd2679e159 [ 461.346380][T11008] RDX: 0000200000000080 RSI: 00000000c02064b2 RDI: 0000000000000004 [ 461.346397][T11008] RBP: 00007fcd2683503b R08: 0000000000000000 R09: 0000000000000000 [ 461.346413][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.346428][T11008] R13: 00007fcd26a26038 R14: 00007fcd26a25fa0 R15: 00007fffc905ebd8 [ 461.346466][T11008] [ 461.502393][ T32] audit: type=1800 audit(1789469403.945:3111): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=230687 res=0 errno=0 [ 461.604728][ T9974] usb 9-1: USB disconnect, device number 2 [ 461.666000][ T9974] cdc_ncm 9-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.8-1, CDC NCM (NO ZLP) [ 461.833118][ T32] audit: type=1800 audit(1789469404.275:3112): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15828 res=0 errno=0 [ 461.862281][ T32] audit: type=1800 audit(1789469404.305:3113): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=230688 res=0 errno=0 [ 461.867179][ T32] audit: type=1800 audit(1789469404.305:3114): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=230667 res=0 errno=0 [ 461.918098][ T4934] Bluetooth: hci3: command 0x0406 tx timeout [ 462.267399][T11017] FAULT_INJECTION: forcing a failure. [ 462.267399][T11017] name failslab, interval 1, probability 0, space 0, times 0 [ 462.267437][T11017] CPU: 0 UID: 0 PID: 11017 Comm: syz.8.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.267470][T11017] Tainted: [L]=SOFTLOCKUP [ 462.267487][T11017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.267502][T11017] Call Trace: [ 462.267512][T11017] [ 462.267522][T11017] dump_stack_lvl+0xe8/0x150 [ 462.267561][T11017] should_fail_ex+0x3eb/0x540 [ 462.267595][T11017] should_failslab+0xa8/0x100 [ 462.267619][T11017] ? key_alloc+0x318/0x1020 [ 462.267645][T11017] kmem_cache_alloc_noprof+0x9c/0x600 [ 462.267681][T11017] ? key_alloc+0x318/0x1020 [ 462.267713][T11017] key_alloc+0x318/0x1020 [ 462.267754][T11017] keyring_alloc+0x45/0xb0 [ 462.267791][T11017] look_up_user_keyrings+0x376/0x670 [ 462.267824][T11017] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 462.267853][T11017] ? __pfx_futex_wait+0x10/0x10 [ 462.267885][T11017] ? lookup_user_key+0xd4/0x1360 [ 462.267915][T11017] lookup_user_key+0x36d/0x1360 [ 462.267950][T11017] ? __pfx_lookup_user_key+0x10/0x10 [ 462.267986][T11017] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 462.268021][T11017] ? strncpy_from_user+0x150/0x2c0 [ 462.268051][T11017] __se_sys_add_key+0x315/0x420 [ 462.268087][T11017] ? __pfx___se_sys_add_key+0x10/0x10 [ 462.268130][T11017] ? __x64_sys_add_key+0x20/0xc0 [ 462.268166][T11017] do_syscall_64+0x166/0x520 [ 462.268188][T11017] ? trace_irq_disable+0x3b/0x140 [ 462.268220][T11017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.268253][T11017] ? clear_bhb_loop+0x70/0xc0 [ 462.268286][T11017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.268312][T11017] RIP: 0033:0x7f5e1fd9e159 [ 462.268336][T11017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.268358][T11017] RSP: 002b:00007f5e20d33028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 462.268385][T11017] RAX: ffffffffffffffda RBX: 00007f5e20025fa0 RCX: 00007f5e1fd9e159 [ 462.268404][T11017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 462.268420][T11017] RBP: 00007f5e1fe3503b R08: fffffffffffffffd R09: 0000000000000000 [ 462.268437][T11017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.268453][T11017] R13: 00007f5e20026038 R14: 00007f5e20025fa0 R15: 00007ffdf3a715b8 [ 462.268501][T11017] [ 462.393634][T11020] lo: entered allmulticast mode [ 462.481837][ T4934] Bluetooth: hci5: command 0x0c1a tx timeout [ 462.530977][T11020] lo: left allmulticast mode [ 462.878087][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 462.947975][ T9974] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 463.067906][ T1220] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 463.077937][ T5702] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 463.102239][ T9974] usb 9-1: unable to get BOS descriptor or descriptor too short [ 463.102294][ T9974] usb 9-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 463.102993][ T9974] usb 9-1: config 0 has no interfaces? [ 463.106989][ T9974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.107018][ T9974] usb 9-1: Product: syz [ 463.107035][ T9974] usb 9-1: Manufacturer: syz [ 463.107052][ T9974] usb 9-1: SerialNumber: syz [ 463.126425][ T9974] usb 9-1: config 0 descriptor?? [ 463.239268][ T1220] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 463.241326][ T1220] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.241358][ T1220] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 463.245702][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.245733][ T1220] usb 3-1: Product: syz [ 463.245752][ T1220] usb 3-1: Manufacturer: syz [ 463.245771][ T1220] usb 3-1: SerialNumber: syz [ 463.314688][ T5702] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 463.318146][ T5702] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 463.318283][ T5702] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 463.318381][ T5702] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.374961][T11024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.375929][ T5702] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 463.397195][T11024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.414750][ T31] usb 9-1: USB disconnect, device number 3 [ 463.469865][ T5702] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 463.541672][ T1220] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 74 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 463.746687][ C0] usblp0: nonzero read bulk status received: -71 [ 463.756381][T11027] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 463.756740][T11027] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 463.764736][T11027] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 463.801697][ T9974] usb 3-1: USB disconnect, device number 74 [ 463.870781][T11027] SPCP8x5 ttyUSB0: Set UART format 0x1 failed (error = -32) [ 463.958487][ T5702] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 463.983896][T11025] usblp0: removed [ 464.138455][ T5702] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 464.141056][ T5702] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 464.141086][ T5702] usb 9-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 464.141109][ T5702] usb 9-1: config 220 has an invalid descriptor of length 9, skipping remainder of the config [ 464.141162][ T5702] usb 9-1: config 220 has no interface number 2 [ 464.141229][ T5702] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 464.141261][ T5702] usb 9-1: config 220 interface 0 has no altsetting 0 [ 464.141310][ T5702] usb 9-1: config 220 interface 76 has no altsetting 0 [ 464.141332][ T5702] usb 9-1: config 220 interface 1 has no altsetting 0 [ 464.145041][ T5702] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.145070][ T5702] usb 9-1: Product: syz [ 464.145089][ T5702] usb 9-1: Manufacturer: syz [ 464.145107][ T5702] usb 9-1: SerialNumber: syz [ 464.421898][ T5702] uvcvideo 9-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 464.422035][ T5702] uvcvideo 9-1:220.0: No valid video chain found. [ 464.422185][ T5702] usb 9-1: selecting invalid altsetting 0 [ 464.474347][ T5702] usb 9-1: selecting invalid altsetting 0 [ 464.474414][ T5702] usbtest 9-1:220.1: probe with driver usbtest failed with error -22 [ 464.482640][ T5702] usb 9-1: USB disconnect, device number 4 [ 465.836901][ T5702] usb 7-1: USB disconnect, device number 17 [ 465.895292][ T5702] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 465.896543][ T5702] spcp8x5 7-1:1.0: device disconnected [ 466.096413][ T32] kauditd_printk_skb: 52 callbacks suppressed [ 466.096444][ T32] audit: type=1800 audit(1789469408.535:3167): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15705 res=0 errno=0 [ 466.187174][ T32] audit: type=1800 audit(1789469408.625:3168): pid=4984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15951 res=0 errno=0 [ 466.491269][ T9973] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 466.507969][ T5702] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 466.638074][ T9973] usb 7-1: Using ep0 maxpacket: 16 [ 466.642260][ T9973] usb 7-1: unable to get BOS descriptor or descriptor too short [ 466.642321][ T9973] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 466.643975][ T9973] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.644059][ T9973] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 466.644104][ T9973] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 466.647580][ T9973] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.647611][ T9973] usb 7-1: Product: syz [ 466.647629][ T9973] usb 7-1: Manufacturer: syz [ 466.647647][ T9973] usb 7-1: SerialNumber: syz [ 466.726369][ T5702] usb 9-1: Using ep0 maxpacket: 8 [ 466.737667][ T5702] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 466.751481][ T5702] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.751540][ T5702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.758955][ T32] audit: type=1800 audit(1789469409.205:3169): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231556 res=0 errno=0 [ 466.800478][ T5702] usb 9-1: config 0 descriptor?? [ 466.803551][ T32] audit: type=1800 audit(1789469409.245:3170): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=231606 res=0 errno=0 [ 466.835795][ T5702] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 466.837712][ T32] audit: type=1800 audit(1789469409.285:3171): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231588 res=0 errno=0 [ 466.862324][ T32] audit: type=1800 audit(1789469409.285:3172): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=231635 res=0 errno=0 [ 466.887085][ T32] audit: type=1800 audit(1789469409.335:3173): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231563 res=0 errno=0 [ 466.888228][ T32] audit: type=1800 audit(1789469409.335:3174): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=231613 res=0 errno=0 [ 466.924661][ T32] audit: type=1800 audit(1789469409.355:3175): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=231614 res=0 errno=0 [ 466.941058][ T32] audit: type=1800 audit(1789469409.375:3176): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=231615 res=0 errno=0 [ 467.023391][ T9973] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 467.024084][ T9973] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 467.425929][ T9973] usb 7-1: 2:1 : bogus bTerminalLink 6 [ 467.702280][ T9973] usb 7-1: USB disconnect, device number 18 [ 467.817544][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 468.038451][ T5702] gspca_vc032x: reg_w err -71 [ 468.038638][ T5702] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 468.065577][ T5702] usb 9-1: USB disconnect, device number 5 [ 468.628749][ T1220] usb 7-1: new full-speed USB device number 19 using dummy_hcd [ 468.791327][ T1220] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 468.797303][ T1220] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.832190][ T1220] usb 7-1: config 0 descriptor?? [ 468.854944][ T1220] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 469.463135][ T1220] gp8psk: usb out operation failed. [ 469.463285][ T1220] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 469.463324][ T1220] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 469.505121][ T1220] usb 7-1: USB disconnect, device number 19 [ 469.568547][T11071] futex_wake_op: syz.8.1725 tries to shift op by -1; fix this program [ 469.756999][T11073] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1727'. [ 470.322753][T11089] PM: suspend entry (deep) [ 470.498263][ T6425] Filesystems sync: 0.170 seconds [ 471.118931][ T9974] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 471.141478][T11089] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.141871][T11089] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.142077][T11089] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.142254][T11089] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 471.142414][T11089] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.193964][T11089] Freezing user space processes [ 471.197381][T11089] ------------[ cut here ]------------ [ 471.197394][T11089] debug_locks && p->lockdep_depth [ 471.197407][T11089] WARNING: kernel/freezer.c:139 at __set_task_frozen+0x260/0x340, CPU#1: syz.6.1735/11089 [ 471.222708][T11089] Modules linked in: [ 471.226632][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.6.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.237601][T11089] Tainted: [L]=SOFTLOCKUP [ 471.241938][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.252012][T11089] RIP: 0010:__set_task_frozen+0x260/0x340 [ 471.257747][T11089] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 95 b8 46 0a cc e8 1f 5c 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 11 5c 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 471.277358][T11089] RSP: 0018:ffffc900036af9f0 EFLAGS: 00010083 [ 471.283439][T11089] RAX: ffffffff81b2a8df RBX: ffff88807a905dc0 RCX: 0000000000080000 [ 471.291423][T11089] RDX: ffffc9000de71000 RSI: 000000000000f44e RDI: 000000000000f44f [ 471.299413][T11089] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 471.307397][T11089] R10: dffffc0000000000 R11: ffffffff81b2a680 R12: ffff88807a905dd8 [ 471.315404][T11089] R13: 1ffff1100f520bbb R14: 0000000000000000 R15: ffff88807a906960 [ 471.323408][T11089] FS: 00007f3c1254c6c0(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 471.332349][T11089] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.338942][T11089] CR2: 0000001b3282421c CR3: 000000007cbb2000 CR4: 00000000003526f0 [ 471.346929][T11089] DR0: 0000000000000000 DR1: 6085f59d27ae5551 DR2: 0000000000000000 [ 471.354904][T11089] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 471.362881][T11089] Call Trace: [ 471.366255][T11089] [ 471.369201][T11089] ? __pfx___set_task_frozen+0x10/0x10 [ 471.374694][T11089] task_call_func+0x1aa/0x260 [ 471.379389][T11089] freeze_task+0x229/0x3b0 [ 471.383822][T11089] ? __pfx_freeze_task+0x10/0x10 [ 471.388783][T11089] try_to_freeze_tasks+0x190/0x620 [ 471.393913][T11089] freeze_processes+0xd0/0x1f0 [ 471.398707][T11089] pm_suspend+0x2f1/0x760 [ 471.403066][T11089] state_store+0x206/0x290 [ 471.407504][T11089] ? __pfx_sysfs_kf_write+0x10/0x10 [ 471.412711][T11089] kernfs_fop_write_iter+0x3a4/0x540 [ 471.418011][T11089] vfs_write+0x612/0xba0 [ 471.422277][T11089] ? __pfx_vfs_write+0x10/0x10 [ 471.427062][T11089] ? __fget_files+0x2a/0x420 [ 471.431683][T11089] ksys_write+0x150/0x270 [ 471.436042][T11089] ? __pfx_ksys_write+0x10/0x10 [ 471.440923][T11089] do_syscall_64+0x166/0x520 [ 471.445550][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.451647][T11089] ? clear_bhb_loop+0x70/0xc0 [ 471.456511][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.462673][T11089] RIP: 0033:0x7f3c1159e159 [ 471.467133][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.486748][T11089] RSP: 002b:00007f3c1254c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.495175][T11089] RAX: ffffffffffffffda RBX: 00007f3c11825fa0 RCX: 00007f3c1159e159 [ 471.503156][T11089] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 471.511147][T11089] RBP: 00007f3c1163503b R08: 0000000000000000 R09: 0000000000000000 [ 471.519141][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.527129][T11089] R13: 00007f3c11826038 R14: 00007f3c11825fa0 R15: 00007fff1604ddd8 [ 471.535157][T11089] [ 471.538194][T11089] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 471.545480][T11089] CPU: 1 UID: 0 PID: 11089 Comm: syz.6.1735 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.556420][T11089] Tainted: [L]=SOFTLOCKUP [ 471.560751][T11089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.570828][T11089] Call Trace: [ 471.574125][T11089] [ 471.577075][T11089] vpanic+0x56d/0xa70 [ 471.581092][T11089] ? __pfx__printk+0x10/0x10 [ 471.585699][T11089] ? __pfx_vpanic+0x10/0x10 [ 471.590223][T11089] ? is_bpf_text_address+0x292/0x2b0 [ 471.595538][T11089] ? is_bpf_text_address+0x26/0x2b0 [ 471.600761][T11089] panic+0xc5/0xd0 [ 471.604506][T11089] ? __pfx_panic+0x10/0x10 [ 471.608958][T11089] __warn+0x315/0x4c0 [ 471.612961][T11089] ? __set_task_frozen+0x260/0x340 [ 471.618102][T11089] ? __set_task_frozen+0x260/0x340 [ 471.623253][T11089] __report_bug+0x276/0x570 [ 471.627783][T11089] ? __set_task_frozen+0x260/0x340 [ 471.632914][T11089] ? __pfx___report_bug+0x10/0x10 [ 471.637961][T11089] ? __lock_acquire+0x747/0x2de0 [ 471.642964][T11089] ? __set_task_frozen+0x260/0x340 [ 471.648103][T11089] report_bug+0x16b/0x220 [ 471.652570][T11089] ? __set_task_frozen+0x260/0x340 [ 471.657698][T11089] ? __set_task_frozen+0x262/0x340 [ 471.662828][T11089] handle_bug+0x9c/0x200 [ 471.667087][T11089] exc_invalid_op+0x1a/0x50 [ 471.671613][T11089] asm_exc_invalid_op+0x1a/0x20 [ 471.676474][T11089] RIP: 0010:__set_task_frozen+0x260/0x340 [ 471.682227][T11089] Code: 00 80 00 00 89 e8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 95 b8 46 0a cc e8 1f 5c 15 00 90 0f 0b 90 e9 f7 fe ff ff e8 11 5c 15 00 90 <0f> 0b 90 eb 93 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c c3 fd ff ff [ 471.701847][T11089] RSP: 0018:ffffc900036af9f0 EFLAGS: 00010083 [ 471.707930][T11089] RAX: ffffffff81b2a8df RBX: ffff88807a905dc0 RCX: 0000000000080000 [ 471.715911][T11089] RDX: ffffc9000de71000 RSI: 000000000000f44e RDI: 000000000000f44f [ 471.723892][T11089] RBP: 0000000000000003 R08: 0000000000000003 R09: 0000000000000004 [ 471.731893][T11089] R10: dffffc0000000000 R11: ffffffff81b2a680 R12: ffff88807a905dd8 [ 471.739873][T11089] R13: 1ffff1100f520bbb R14: 0000000000000000 R15: ffff88807a906960 [ 471.747865][T11089] ? __pfx___set_task_frozen+0x10/0x10 [ 471.753346][T11089] ? __set_task_frozen+0x25f/0x340 [ 471.758487][T11089] ? __pfx___set_task_frozen+0x10/0x10 [ 471.763964][T11089] task_call_func+0x1aa/0x260 [ 471.768678][T11089] freeze_task+0x229/0x3b0 [ 471.773126][T11089] ? __pfx_freeze_task+0x10/0x10 [ 471.778095][T11089] try_to_freeze_tasks+0x190/0x620 [ 471.783237][T11089] freeze_processes+0xd0/0x1f0 [ 471.788016][T11089] pm_suspend+0x2f1/0x760 [ 471.792364][T11089] state_store+0x206/0x290 [ 471.796806][T11089] ? __pfx_sysfs_kf_write+0x10/0x10 [ 471.802020][T11089] kernfs_fop_write_iter+0x3a4/0x540 [ 471.807327][T11089] vfs_write+0x612/0xba0 [ 471.811618][T11089] ? __pfx_vfs_write+0x10/0x10 [ 471.816434][T11089] ? __fget_files+0x2a/0x420 [ 471.821069][T11089] ksys_write+0x150/0x270 [ 471.825421][T11089] ? __pfx_ksys_write+0x10/0x10 [ 471.830303][T11089] do_syscall_64+0x166/0x520 [ 471.834904][T11089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.841003][T11089] ? clear_bhb_loop+0x70/0xc0 [ 471.845715][T11089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.851623][T11089] RIP: 0033:0x7f3c1159e159 [ 471.856575][T11089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.876195][T11089] RSP: 002b:00007f3c1254c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 471.884629][T11089] RAX: ffffffffffffffda RBX: 00007f3c11825fa0 RCX: 00007f3c1159e159 [ 471.892625][T11089] RDX: 0000000000000003 RSI: 0000200000000300 RDI: 0000000000000003 [ 471.900625][T11089] RBP: 00007f3c1163503b R08: 0000000000000000 R09: 0000000000000000 [ 471.908610][T11089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.916593][T11089] R13: 00007f3c11826038 R14: 00007f3c11825fa0 R15: 00007fff1604ddd8 [ 471.924596][T11089] [ 473.103706][T11089] Shutting down cpus with NMI [ 473.109077][T11089] Kernel Offset: disabled [ 473.113425][T11089] Rebooting in 86400 seconds..