last executing test programs: 12.51905847s ago: executing program 1 (id=1307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x777) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/kvm/parameters/nx_huge_pages_recovery_period_ms\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='10\x00', 0x3) 12.371162429s ago: executing program 1 (id=1308): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./nfsd/v4_end_grace\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 12.325143791s ago: executing program 1 (id=1309): syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401e09030000000000000109022700010100c0320904000003ff00000007058102400000070502024000000705830340"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000003200)={0xa0, 0x0, 0x0, {{0x5, 0x1, 0x4, 0x2, 0x1, 0x6b, {0x6, 0xffff, 0x5, 0x0, 0x0, 0x6, 0x7ff, 0x2, 0x4, 0x1000, 0xe43, 0x0, 0x0, 0x7fff, 0x80}}, {0x0, 0x11}}}, 0xa0) 9.035306484s ago: executing program 1 (id=1318): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10000, 0x1, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140)=0x8c93, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1) 5.988368288s ago: executing program 1 (id=1328): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10000, 0x1, 0x48, 0xfffffffe}}, 0x44) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000140)=0x8c93, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e21, 0x3, 'lc\x00', 0x34, 0x83, 0x5}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0x1bd, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1) 5.097187753s ago: executing program 0 (id=1341): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='10', 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x100000, 0x200000, 0xfffffffffffffffe}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) nanosleep(&(0x7f0000000180)={0x1}, 0x0) 4.479985494s ago: executing program 2 (id=1332): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x181441, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) 4.466973648s ago: executing program 2 (id=1333): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='\x00', 0x1) 4.408502867s ago: executing program 2 (id=1336): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0', 0x1) 4.191503389s ago: executing program 0 (id=1338): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x10}, {@multicast2, 0x4e20, 0x10000, 0x1, 0x48, 0xfffffffe}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1) 3.873626236s ago: executing program 2 (id=1340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syz_tun\x00', 0x1}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syz_tun\x00', 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='0\x00', 0x2) 3.840398925s ago: executing program 2 (id=1342): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) 3.767863043s ago: executing program 2 (id=1343): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) 3.005360547s ago: executing program 3 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write(r0, &(0x7f0000000040)="9ddc083d3b216c227917e2d26eb333ce7d8efc63cf20f11e52bb", 0x1a) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004c80), r3) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250600000008000d0008000000080001"], 0x24}}, 0x20028000) 2.835915818s ago: executing program 1 (id=1346): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x1) 2.631677787s ago: executing program 3 (id=1347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x18, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}}}, 0x26) 2.187689928s ago: executing program 3 (id=1348): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x777) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000003c0)='10', 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x100000, 0x200000, 0xfffffffffffffffe}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) nanosleep(&(0x7f0000000180)={0x1}, 0x0) 1.263492143s ago: executing program 3 (id=1349): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x181441, 0x0) write(r0, &(0x7f0000000300)='bfq', 0x3) 1.153161136s ago: executing program 0 (id=1350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x5a, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f639e60026f3fcd218590d2fd47a1803f67d8c3c5eb"}}, 0x68) 1.150727902s ago: executing program 3 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/control/extensions/xu.0/bNumControls\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='\x00', 0x1) 907.493411ms ago: executing program 3 (id=1352): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904"], 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='1', 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0', 0x1) 449.588425ms ago: executing program 0 (id=1353): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) 390.218542ms ago: executing program 0 (id=1354): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000600)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/sys/net/ipv6/conf/syz_tun/addr_gen_mode\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='0', 0x1) 0s ago: executing program 0 (id=1355): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='0', 0x1) kernel console output (not intermixed with test programs): hsr0' already exists in 'hsr' [ 82.479287][ T5597] Cannot create hsr debugfs directory [ 82.529703][ T5593] hsr_slave_0: entered promiscuous mode [ 82.530943][ T5593] hsr_slave_1: entered promiscuous mode [ 82.531907][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 82.531929][ T5593] Cannot create hsr debugfs directory [ 83.238973][ T5608] Bluetooth: hci2: command tx timeout [ 83.317299][ T5608] Bluetooth: hci0: command tx timeout [ 83.329934][ T5608] Bluetooth: hci1: command tx timeout [ 83.477416][ T5608] Bluetooth: hci3: command tx timeout [ 83.610899][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.671463][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.686377][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.723254][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.725311][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.762466][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.783896][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.821793][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.981512][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.022012][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.035105][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.065298][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.080691][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.124022][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.175467][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.203754][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.335577][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.381045][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.390380][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.437815][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.441141][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.471020][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.511029][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.552145][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.691882][ T5593] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.730695][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.754241][ T5593] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.791729][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.795882][ T5593] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.844307][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.856183][ T5593] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.881811][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.999979][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.119255][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.143148][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.174116][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.174354][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.234868][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.235030][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.293858][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.318962][ T5608] Bluetooth: hci2: command tx timeout [ 85.365127][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.365268][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.396849][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.397779][ T5608] Bluetooth: hci1: command tx timeout [ 85.397807][ T5608] Bluetooth: hci0: command tx timeout [ 85.444775][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.444886][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.538005][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.557187][ T5600] Bluetooth: hci3: command tx timeout [ 85.589263][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.598983][ T4265] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.599737][ T4265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.695247][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.695493][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.810815][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.879959][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.880122][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.947288][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.947386][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.654125][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.889074][ T37] cfg80211: failed to load regulatory.db [ 87.073122][ T5595] veth0_vlan: entered promiscuous mode [ 87.148200][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.182628][ T5595] veth1_vlan: entered promiscuous mode [ 87.398458][ T5600] Bluetooth: hci2: command tx timeout [ 87.478991][ T5600] Bluetooth: hci0: command tx timeout [ 87.479023][ T5600] Bluetooth: hci1: command tx timeout [ 87.554420][ T5595] veth0_macvtap: entered promiscuous mode [ 87.585205][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.605338][ T5594] veth0_vlan: entered promiscuous mode [ 87.615497][ T5595] veth1_macvtap: entered promiscuous mode [ 87.637241][ T5608] Bluetooth: hci3: command tx timeout [ 87.642748][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.684020][ T5594] veth1_vlan: entered promiscuous mode [ 87.719532][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.765326][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.834270][ T67] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.844683][ T67] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.851124][ T67] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.869650][ T67] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.950999][ T5597] veth0_vlan: entered promiscuous mode [ 87.972241][ T5594] veth0_macvtap: entered promiscuous mode [ 88.093826][ T5594] veth1_macvtap: entered promiscuous mode [ 88.108549][ T5593] veth0_vlan: entered promiscuous mode [ 88.223624][ T5597] veth1_vlan: entered promiscuous mode [ 88.333941][ T5593] veth1_vlan: entered promiscuous mode [ 88.388002][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.436023][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.436047][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.440707][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.506162][ T4305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.557434][ T4305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.565001][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.589287][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.624103][ T5597] veth0_macvtap: entered promiscuous mode [ 88.637671][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.637691][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.709331][ T5597] veth1_macvtap: entered promiscuous mode [ 88.726130][ T5593] veth0_macvtap: entered promiscuous mode [ 88.820295][ T5593] veth1_macvtap: entered promiscuous mode [ 89.084962][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.088058][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.088075][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.142891][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.150827][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.251639][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.281891][ T4265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.284574][ T4265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.284656][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.284669][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.326229][ T4265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.331379][ T4265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.391913][ T4265] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.412331][ T4265] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.423912][ T5748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.452539][ T4265] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.516333][ T5748] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.583850][ T4265] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.721821][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.721839][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.810954][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.810966][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.893870][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.893884][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.352261][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.352280][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.665997][ T5769] smpboot: CPU 1 is now offline [ 93.183297][ T5772] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 95.316758][ T5813] Bluetooth: MGMT ver 1.23 [ 95.455424][ T5812] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 95.455534][ T5812] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 95.700026][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.954113][ T5812] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 96.107330][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 96.249318][ T5812] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 96.249421][ T5812] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 96.866715][ T5812] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 97.043876][ T5812] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 97.044033][ T5812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.199033][ T5812] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 97.399340][ T5608] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.399990][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.491748][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.290483][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 98.309688][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 98.391116][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 98.391156][ T9] usb 3-1: can't read configurations, error -71 [ 99.091604][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.130520][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.379287][ T32] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 99.379332][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.379357][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.379377][ T32] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 99.380612][ T32] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 99.380636][ T32] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 99.380656][ T32] usb 4-1: Manufacturer: syz [ 99.560466][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 99.649381][ T32] usb 4-1: config 0 descriptor?? [ 99.938210][ T5877] vivid-000: unregistering video7 [ 99.945186][ T5877] vivid-000: unregistering video8 [ 99.946681][ T5877] vivid-000: unregistering vbi0 [ 99.974334][ T5877] vivid-000: unregistering vbi1 [ 99.978122][ T5877] vivid-000: unregistering swradio0 [ 99.992363][ T5877] vivid-000: unregistering radio0 [ 99.994474][ T5877] vivid-000: unregistering radio1 [ 99.996907][ T5877] vivid-000: unregistering video9 [ 100.016644][ T5877] vivid-000: unregistering video10 [ 100.031715][ T5877] vivid-000: unregistering v4l-touch0 [ 100.172734][ T5877] vivid-001: unregistering video11 [ 100.182289][ T5877] vivid-001: unregistering video12 [ 100.185390][ T5877] vivid-001: unregistering vbi2 [ 100.191051][ T5877] vivid-001: unregistering vbi3 [ 100.192851][ T5877] vivid-001: unregistering swradio1 [ 100.194576][ T5877] vivid-001: unregistering radio2 [ 100.196318][ T5877] vivid-001: unregistering radio3 [ 100.200289][ T5877] vivid-001: unregistering video13 [ 100.357110][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 100.388502][ T5877] vivid-001: unregistering video14 [ 100.470853][ T5877] vivid-001: unregistering v4l-touch1 [ 100.523083][ T5877] vivid-002: unregistering video15 [ 100.532256][ T5877] vivid-002: unregistering video16 [ 100.534764][ T5877] vivid-002: unregistering vbi4 [ 100.540626][ T5877] vivid-002: unregistering vbi5 [ 100.558914][ T5877] vivid-002: unregistering swradio2 [ 100.568728][ T5877] vivid-002: unregistering radio4 [ 100.571701][ T5877] vivid-002: unregistering radio5 [ 100.574438][ T5877] vivid-002: unregistering video17 [ 100.575809][ T5877] vivid-002: unregistering video18 [ 100.578987][ T5877] vivid-002: unregistering v4l-touch2 [ 100.702843][ T32] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 100.934735][ T5877] vivid-003: unregistering video19 [ 100.936294][ T5877] vivid-003: unregistering video20 [ 100.938218][ T5877] vivid-003: unregistering vbi6 [ 100.956914][ T5877] vivid-003: unregistering vbi7 [ 100.961345][ T5877] vivid-003: unregistering swradio3 [ 100.963149][ T5877] vivid-003: unregistering radio6 [ 100.964790][ T5877] vivid-003: unregistering radio7 [ 101.006815][ T5877] vivid-003: unregistering video21 [ 101.008503][ T5877] vivid-003: unregistering video22 [ 101.010149][ T5877] vivid-003: unregistering v4l-touch3 [ 101.058648][ T5877] vivid-004: unregistering video23 [ 101.060314][ T5877] vivid-004: unregistering video24 [ 101.062826][ T5877] vivid-004: unregistering vbi8 [ 101.066723][ T5877] vivid-004: unregistering vbi9 [ 101.070088][ T5877] vivid-004: unregistering swradio4 [ 101.078185][ T5877] vivid-004: unregistering radio8 [ 101.082639][ T5877] vivid-004: unregistering radio9 [ 101.084166][ T5877] vivid-004: unregistering video25 [ 101.085684][ T5877] vivid-004: unregistering video26 [ 101.087320][ T5877] vivid-004: unregistering v4l-touch4 [ 101.157157][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 101.182483][ T5877] vivid-005: unregistering video27 [ 101.185010][ T5877] vivid-005: unregistering video28 [ 101.195042][ T5877] vivid-005: unregistering vbi10 [ 101.200522][ T5877] vivid-005: unregistering vbi11 [ 101.205197][ T5877] vivid-005: unregistering swradio5 [ 101.207849][ T5877] vivid-005: unregistering radio10 [ 101.209544][ T5877] vivid-005: unregistering radio11 [ 101.212266][ T5877] vivid-005: unregistering video29 [ 101.216826][ T5877] vivid-005: unregistering video30 [ 101.220467][ T5877] vivid-005: unregistering v4l-touch5 [ 101.260400][ T5877] vivid-006: unregistering video31 [ 101.262119][ T5877] vivid-006: unregistering video32 [ 101.263885][ T5877] vivid-006: unregistering vbi12 [ 101.300094][ T5877] vivid-006: unregistering vbi13 [ 101.301987][ T5877] vivid-006: unregistering swradio6 [ 101.303494][ T5877] vivid-006: unregistering radio12 [ 101.304610][ T5877] vivid-006: unregistering radio13 [ 101.305697][ T5877] vivid-006: unregistering video33 [ 101.306772][ T5877] vivid-006: unregistering video34 [ 101.310527][ T5877] vivid-006: unregistering v4l-touch6 [ 101.433539][ T5877] vivid-007: unregistering video35 [ 101.447642][ T5877] vivid-007: unregistering video36 [ 101.454136][ T5877] vivid-007: unregistering vbi14 [ 101.462591][ T5877] vivid-007: unregistering vbi15 [ 101.464108][ T5877] vivid-007: unregistering swradio7 [ 101.465880][ T5877] vivid-007: unregistering radio14 [ 101.471247][ T5877] vivid-007: unregistering radio15 [ 101.473896][ T5877] vivid-007: unregistering video37 [ 101.477743][ T5877] vivid-007: unregistering video38 [ 101.513799][ T5877] vivid-007: unregistering v4l-touch7 [ 101.574866][ T5877] vivid-008: unregistering video39 [ 101.576447][ T5877] vivid-008: unregistering video40 [ 101.579564][ T5877] vivid-008: unregistering vbi16 [ 101.583604][ T5877] vivid-008: unregistering vbi17 [ 101.585281][ T5877] vivid-008: unregistering swradio8 [ 101.589734][ T5877] vivid-008: unregistering radio16 [ 101.613749][ T5877] vivid-008: unregistering radio17 [ 101.614744][ T5877] vivid-008: unregistering video41 [ 101.615615][ T5877] vivid-008: unregistering video42 [ 101.617197][ T5877] vivid-008: unregistering v4l-touch8 [ 101.638597][ T5608] Bluetooth: hci1: command 0x0c1a tx timeout [ 101.687054][ T5877] vivid-009: unregistering video43 [ 101.738859][ T5877] vivid-009: unregistering video44 [ 101.745880][ T5877] vivid-009: unregistering vbi18 [ 101.749680][ T5877] vivid-009: unregistering vbi19 [ 101.778017][ T5877] vivid-009: unregistering swradio9 [ 101.780747][ T5877] vivid-009: unregistering radio18 [ 101.786108][ T5877] vivid-009: unregistering radio19 [ 101.796561][ T5877] vivid-009: unregistering video45 [ 101.799371][ T5877] vivid-009: unregistering video46 [ 101.801334][ T5877] vivid-009: unregistering v4l-touch9 [ 101.864471][ T5877] vivid-010: unregistering video47 [ 101.866115][ T5877] vivid-010: unregistering video48 [ 101.867767][ T5877] vivid-010: unregistering vbi20 [ 101.872254][ T5877] vivid-010: unregistering vbi21 [ 101.875192][ T5877] vivid-010: unregistering swradio10 [ 101.883053][ T5877] vivid-010: unregistering radio20 [ 101.905529][ T5877] vivid-010: unregistering radio21 [ 101.907559][ T5877] vivid-010: unregistering video49 [ 101.909388][ T5877] vivid-010: unregistering video50 [ 101.911235][ T5877] vivid-010: unregistering v4l-touch10 [ 101.977960][ T5877] vivid-011: unregistering video51 [ 101.979031][ T5877] vivid-011: unregistering video52 [ 101.997254][ T5877] vivid-011: unregistering vbi22 [ 102.002822][ T5877] vivid-011: unregistering vbi23 [ 102.004799][ T5877] vivid-011: unregistering swradio11 [ 102.006337][ T5877] vivid-011: unregistering radio22 [ 102.029711][ T5877] vivid-011: unregistering radio23 [ 102.031185][ T5877] vivid-011: unregistering video53 [ 102.032817][ T5877] vivid-011: unregistering video54 [ 102.034483][ T5877] vivid-011: unregistering v4l-touch11 [ 102.099627][ T5877] vivid-012: unregistering video55 [ 102.100574][ T5877] vivid-012: unregistering video56 [ 102.101512][ T5877] vivid-012: unregistering vbi24 [ 102.103727][ T5877] vivid-012: unregistering vbi25 [ 102.104654][ T5877] vivid-012: unregistering swradio12 [ 102.107209][ T5877] vivid-012: unregistering radio24 [ 102.111325][ T5877] vivid-012: unregistering radio25 [ 102.114401][ T5877] vivid-012: unregistering video57 [ 102.118485][ T5877] vivid-012: unregistering video58 [ 102.133861][ T5877] vivid-012: unregistering v4l-touch12 [ 102.189530][ T5877] vivid-013: unregistering video59 [ 102.190639][ T5877] vivid-013: unregistering video60 [ 102.193327][ T5877] vivid-013: unregistering vbi26 [ 102.198326][ T5877] vivid-013: unregistering vbi27 [ 102.220353][ T32] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 102.223663][ T5877] vivid-013: unregistering swradio13 [ 102.226017][ T5877] vivid-013: unregistering radio26 [ 102.227200][ T5877] vivid-013: unregistering radio27 [ 102.257658][ T5877] vivid-013: unregistering video61 [ 102.261502][ T5877] vivid-013: unregistering video62 [ 102.268203][ T5877] vivid-013: unregistering v4l-touch13 [ 102.335112][ T5877] vivid-014: unregistering video63 [ 102.336754][ T5877] vivid-014: unregistering video64 [ 102.372357][ T5877] vivid-014: unregistering vbi28 [ 102.381312][ T5877] vivid-014: unregistering vbi29 [ 102.383330][ T5877] vivid-014: unregistering swradio14 [ 102.388400][ T5877] vivid-014: unregistering radio28 [ 102.400132][ T5877] vivid-014: unregistering radio29 [ 102.403178][ T5877] vivid-014: unregistering video65 [ 102.408398][ T5877] vivid-014: unregistering video66 [ 102.410265][ T5877] vivid-014: unregistering v4l-touch14 [ 102.437178][ T5608] Bluetooth: hci2: command 0x0c1a tx timeout [ 102.491535][ T5877] vivid-015: unregistering video67 [ 102.493466][ T5877] vivid-015: unregistering video68 [ 102.503692][ T5877] vivid-015: unregistering vbi30 [ 102.507824][ T5877] vivid-015: unregistering vbi31 [ 102.510059][ T5877] vivid-015: unregistering swradio15 [ 102.511783][ T5877] vivid-015: unregistering radio30 [ 102.513478][ T5877] vivid-015: unregistering radio31 [ 102.517364][ T5877] vivid-015: unregistering video69 [ 102.545086][ T5877] vivid-015: unregistering video70 [ 102.553180][ T5877] vivid-015: unregistering v4l-touch15 [ 102.594452][ T5877] vivid-016: unregistering video71 [ 102.596059][ T5877] vivid-016: unregistering video72 [ 102.597679][ T5877] vivid-016: unregistering vbi32 [ 102.607565][ T5877] vivid-016: unregistering vbi33 [ 102.624934][ T5877] vivid-016: unregistering swradio16 [ 102.626487][ T5877] vivid-016: unregistering radio32 [ 102.638880][ T5877] vivid-016: unregistering radio33 [ 102.643259][ T5877] vivid-016: unregistering video73 [ 102.644882][ T5877] vivid-016: unregistering video74 [ 102.646433][ T5877] vivid-016: unregistering v4l-touch16 [ 102.736388][ T5877] vivid-017: unregistering video75 [ 102.746277][ T5877] vivid-017: unregistering video76 [ 102.760788][ T5877] vivid-017: unregistering vbi34 [ 102.763330][ T5877] vivid-017: unregistering vbi35 [ 102.764459][ T5877] vivid-017: unregistering swradio17 [ 102.769148][ T5877] vivid-017: unregistering radio34 [ 102.795321][ T5877] vivid-017: unregistering radio35 [ 102.796386][ T5877] vivid-017: unregistering video77 [ 102.797502][ T5877] vivid-017: unregistering video78 [ 102.801477][ T5877] vivid-017: unregistering v4l-touch17 [ 102.845231][ T5877] vivid-018: unregistering video79 [ 102.846280][ T5877] vivid-018: unregistering video80 [ 102.849054][ T5877] vivid-018: unregistering vbi36 [ 102.852784][ T5877] vivid-018: unregistering vbi37 [ 102.873695][ T5877] vivid-018: unregistering swradio18 [ 102.874888][ T5877] vivid-018: unregistering radio36 [ 102.875979][ T5877] vivid-018: unregistering radio37 [ 102.879306][ T5877] vivid-018: unregistering video81 [ 102.881028][ T5877] vivid-018: unregistering video82 [ 102.900564][ T5877] vivid-018: unregistering v4l-touch18 [ 102.955994][ T5877] vivid-019: unregistering video83 [ 102.961917][ T5877] vivid-019: unregistering video84 [ 102.969319][ T32] usb 4-1: USB disconnect, device number 2 [ 102.969787][ T5877] vivid-019: unregistering vbi38 [ 102.973069][ T5877] vivid-019: unregistering vbi39 [ 102.974657][ T5877] vivid-019: unregistering swradio19 [ 102.976299][ T5877] vivid-019: unregistering radio38 [ 102.977643][ T5877] vivid-019: unregistering radio39 [ 103.016380][ T5877] vivid-019: unregistering video85 [ 103.028843][ T5877] vivid-019: unregistering video86 [ 103.038120][ T5877] vivid-019: unregistering v4l-touch19 [ 103.093229][ T5877] vivid-020: unregistering video87 [ 103.123558][ T5877] vivid-020: unregistering video88 [ 103.124681][ T5877] vivid-020: unregistering vbi40 [ 103.127582][ T5877] vivid-020: unregistering vbi41 [ 103.145117][ T5877] vivid-020: unregistering swradio20 [ 103.146374][ T5877] vivid-020: unregistering radio40 [ 103.160850][ T5877] vivid-020: unregistering radio41 [ 103.162938][ T5877] vivid-020: unregistering video89 [ 103.164114][ T5877] vivid-020: unregistering video90 [ 103.170907][ T5877] vivid-020: unregistering v4l-touch20 [ 103.216440][ T5877] vivid-021: unregistering video91 [ 103.222484][ T5877] vivid-021: unregistering video92 [ 103.227410][ T5877] vivid-021: unregistering vbi42 [ 103.233292][ T5877] vivid-021: unregistering vbi43 [ 103.234277][ T5877] vivid-021: unregistering swradio21 [ 103.241427][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.242707][ T5877] vivid-021: unregistering radio42 [ 103.244244][ T5877] vivid-021: unregistering radio43 [ 103.245762][ T5877] vivid-021: unregistering video93 [ 103.247282][ T5877] vivid-021: unregistering video94 [ 103.263050][ T5877] vivid-021: unregistering v4l-touch21 [ 103.299539][ T5877] vivid-022: unregistering video95 [ 103.302553][ T5877] vivid-022: unregistering video96 [ 103.318013][ T5877] vivid-022: unregistering vbi44 [ 103.324029][ T5877] vivid-022: unregistering vbi45 [ 103.325321][ T5877] vivid-022: unregistering swradio22 [ 103.326497][ T5877] vivid-022: unregistering radio44 [ 103.349848][ T5877] vivid-022: unregistering radio45 [ 103.352932][ T5877] vivid-022: unregistering video97 [ 103.354000][ T5877] vivid-022: unregistering video98 [ 103.354991][ T5877] vivid-022: unregistering v4l-touch22 [ 103.429922][ T5877] vivid-023: unregistering video99 [ 103.434492][ T5877] vivid-023: unregistering video100 [ 103.437380][ T5877] vivid-023: unregistering vbi46 [ 103.448990][ T5877] vivid-023: unregistering vbi47 [ 103.450901][ T5877] vivid-023: unregistering swradio23 [ 103.452742][ T5877] vivid-023: unregistering radio46 [ 103.456091][ T5877] vivid-023: unregistering radio47 [ 103.457909][ T5877] vivid-023: unregistering video101 [ 103.459476][ T5877] vivid-023: unregistering video102 [ 103.461249][ T5877] vivid-023: unregistering v4l-touch23 [ 104.090437][ T5705] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.138940][ T5914] file system registered [ 104.243927][ T5705] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 104.243956][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.511094][ T5912] gadgetfs: bound to dummy_udc driver [ 104.574024][ T5705] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 104.663442][ T5597] ffs_data_put(): freeing [ 104.665251][ T5705] usb 1-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 104.665276][ T5705] usb 1-1: Falling back to sysfs fallback for: emi26/loader.fw [ 104.852748][ T5705] usb 1-1: emi26_load_firmware - request_firmware() failed [ 104.852774][ T5705] usb 1-1: emi26_load_firmware - error loading firmware: error = -12 [ 104.852832][ T5705] emi26 - firmware loader 1-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 104.928573][ T32] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 104.930076][ C1] gadgetfs: connected [ 104.930832][ T32] gadgetfs: disconnected [ 105.127298][ C1] gadgetfs: connected [ 105.130742][ T32] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 105.130782][ T32] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 105.130803][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.132949][ T5705] usb 1-1: USB disconnect, device number 2 [ 105.390099][ T5911] gadgetfs: suspended from state 3 [ 105.390325][ T5911] gadgetfs: disconnected [ 105.534953][ T5927] fido_id[5927]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 105.588980][ T32] usb 2-1: can't set config #1, error -71 [ 105.714454][ T32] usb 2-1: USB disconnect, device number 2 [ 106.091933][ T5933] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 106.132114][ T5933] se_dev->se_dev_ptr already set for storage object [ 107.598753][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.624066][ T5945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 107.624826][ T5945] block device autoloading is deprecated and will be removed. [ 107.756521][ T5956] Config c/1 of g1 needs at least one function. [ 107.810144][ T5956] udc dummy_udc.0: failed to start g1: -22 [ 107.810173][ T5956] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 107.840175][ T32] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 107.840205][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.840232][ T32] usb 2-1: Product: syz [ 107.840245][ T32] usb 2-1: Manufacturer: syz [ 107.840259][ T32] usb 2-1: SerialNumber: syz [ 108.130848][ T5956] UDC core: g1: couldn't find an available UDC or it's busy [ 108.498790][ T32] hackrf 2-1:1.0: Board ID: 00 [ 108.498812][ T32] hackrf 2-1:1.0: Firmware version: [ 108.565693][ T32] hackrf 2-1:1.0: Registered as swradio0 [ 108.736318][ T32] hackrf 2-1:1.0: Registered as swradio1 [ 108.736339][ T32] hackrf 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 109.219889][ T5981] 9p: Bad value for 'rfdno' [ 109.698308][ T5608] Bluetooth: Wrong link type (-71) [ 109.983163][ T6006] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 110.638353][ T5705] usb 2-1: USB disconnect, device number 3 [ 110.985793][ T6027] 9pnet_virtio: no channels available for device syz [ 111.072109][ T6031] ======================================================= [ 111.072109][ T6031] WARNING: The mand mount option has been deprecated and [ 111.072109][ T6031] and is ignored by this kernel. Remove the mand [ 111.072109][ T6031] option from the mount to silence this warning. [ 111.072109][ T6031] ======================================================= [ 112.640818][ T6078] block2mtd: illegal erase size [ 113.576700][ T6094] Zero length message leads to an empty skb [ 113.578090][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 113.578122][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 113.926564][ T6103] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 113.926725][ T6103] udc dummy_udc.0: failed to start g1: -19 [ 113.987446][ T6103] UDC core: g1: couldn't find an available UDC or it's busy [ 114.007084][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.157186][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 114.159360][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.159398][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.159478][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.159503][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.159540][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.159564][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.159589][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.159614][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 114.160828][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.160862][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.160898][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.160924][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.160948][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.160971][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.160995][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.161019][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 114.162228][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 114.162261][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 114.162297][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 114.162323][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.162346][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.162369][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.162393][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 114.162417][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 114.461194][ T9] usb 2-1: string descriptor 0 read error: -22 [ 114.461338][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.461360][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.563317][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.169666][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.397363][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 115.402109][ T9] usb 4-1: config 0 has no interfaces? [ 115.447633][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.447662][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.447832][ T9] usb 4-1: Product: syz [ 115.447846][ T9] usb 4-1: Manufacturer: syz [ 115.447859][ T9] usb 4-1: SerialNumber: syz [ 115.500212][ T9] usb 4-1: config 0 descriptor?? [ 115.748710][ T6111] gadgetfs: bound to dummy_udc driver [ 115.885783][ T32] usb 4-1: USB disconnect, device number 3 [ 116.790338][ T9] usb 2-1: USB disconnect, device number 4 [ 116.972712][ T5608] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 117.525633][ T5608] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 118.745379][ T6064] Set syz1 is full, maxelem 65536 reached [ 119.049200][ T6175] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.392948][ T6180] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.767327][ T37] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 119.919521][ T37] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 119.919573][ T37] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 119.919597][ T37] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.920637][ T37] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 119.920687][ T37] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 119.920712][ T37] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.922163][ T37] usb 2-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 119.922213][ T37] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 119.922237][ T37] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.924688][ T37] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 119.924715][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.924744][ T37] usb 2-1: Product: syz [ 119.924757][ T37] usb 2-1: Manufacturer: syz [ 119.924771][ T37] usb 2-1: SerialNumber: syz [ 120.210010][ T6205] syz.0.143 uses obsolete (PF_INET,SOCK_PACKET) [ 121.823931][ T37] adutux 2-1:168.0: interrupt endpoints not found [ 121.871064][ T37] usb 2-1: USB disconnect, device number 5 [ 123.173107][ T6251] capability: warning: `syz.1.153' uses 32-bit capabilities (legacy support in use) [ 123.173499][ T6251] VFS: file-max limit 0 reached [ 123.741020][ T6258] syz.2.155 (6258) used greatest stack depth: 19240 bytes left [ 123.767963][ T5780] IPVS: starting estimator thread 0... [ 123.859074][ T6270] IPVS: using max 9 ests per chain, 21600 per kthread [ 124.285291][ T6283] overlayfs: failed to clone upperpath [ 124.669945][ T6296] CIFS: bad ip= option (127.0.0. [ 124.669945][ T6296] RjHB,*z}) [ 124.670203][ T6296] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 124.713755][ T1005] netdevsim netdevsim100 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.730178][ T6296] CIFS: Attempting to mount (null) [ 125.117706][ T6296] CIFS: VFS: Error connecting to socket. Aborting operation. [ 125.117895][ T6296] CIFS: VFS: cifs_mount failed w/return code = -111 [ 126.428889][ T6332] zram0: detected capacity change from 0 to 8 [ 126.909267][ T6345] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 126.909425][ T6345] udc dummy_udc.0: failed to start g1: -19 [ 126.915982][ T32] playstation 0003:054C:05C4.0002: reserved main item tag 0xe [ 126.916093][ T32] playstation 0003:054C:05C4.0002: unbalanced collection at end of report description [ 126.916898][ T32] playstation 0003:054C:05C4.0002: Parse failed [ 126.918571][ T6345] UDC core: g1: couldn't find an available UDC or it's busy [ 126.981674][ T32] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22 [ 127.033883][ T6351] tipc: Enabling of bearer rejected, failed to enable media [ 127.917717][ T5606] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 128.076541][ T5606] usb 4-1: not running at top speed; connect to a high speed hub [ 128.079833][ T5606] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 128.105614][ T5606] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 128.105639][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.105657][ T5606] usb 4-1: Product: syz [ 128.105674][ T5606] usb 4-1: Manufacturer: syz [ 128.105687][ T5606] usb 4-1: SerialNumber: syz [ 128.279998][ T5606] oti6858 4-1:1.0: oti6858 converter detected [ 128.409997][ T5606] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 128.502250][ T6390] syz.2.191 (6390) used greatest stack depth: 19104 bytes left [ 128.684877][ T6399] fuse: fd is not a fuse device [ 129.061334][ T37] usb 4-1: USB disconnect, device number 4 [ 129.169417][ T37] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 129.172848][ T37] oti6858 4-1:1.0: device disconnected [ 129.927056][ T37] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 130.018404][ T6419] fuse: fd is not a fuse device [ 130.078576][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 130.083789][ T37] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 130.083822][ T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.083839][ T37] usb 2-1: config 0 has no interfaces? [ 130.085626][ T37] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 130.085654][ T37] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 130.085674][ T37] usb 2-1: Product: syz [ 130.085687][ T37] usb 2-1: SerialNumber: syz [ 130.158899][ T37] usb 2-1: config 0 descriptor?? [ 130.753684][ T38] audit: type=1804 audit(1785248653.174:2): pid=6431 uid=0 auid=4294967295 ses=4294967295 op=invalid_pcr cause=open_writers comm="syz.0.206" name="/newroot/55/myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate" dev="configfs" ino=11863 res=1 errno=0 [ 130.835751][ T38] audit: type=1800 audit(1785248653.324:3): pid=6431 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.206" name="c_srate" dev="configfs" ino=11863 res=0 errno=0 [ 130.839104][ T37] usb 2-1: USB disconnect, device number 6 [ 131.037982][ T5608] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 131.569847][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.569972][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.637206][ T5600] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.390254][ T6455] fuse: fd is not a fuse device [ 132.800635][ T6459] netlink: 48 bytes leftover after parsing attributes in process `syz.2.218'. [ 132.972942][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 132.973006][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 135.812657][ T5608] Bluetooth: hci3: command 0x0c1a tx timeout [ 136.507246][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.659528][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.659582][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.665981][ T9] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 136.666011][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.666029][ T9] usb 2-1: Product: syz [ 136.666043][ T9] usb 2-1: Manufacturer: syz [ 136.666056][ T9] usb 2-1: SerialNumber: syz [ 137.194803][ T9] hackrf 2-1:1.0: Board ID: 00 [ 137.194825][ T9] hackrf 2-1:1.0: Firmware version: [ 137.247289][ T9] hackrf 2-1:1.0: Registered as swradio0 [ 137.276625][ T9] hackrf 2-1:1.0: Registered as swradio1 [ 137.276646][ T9] hackrf 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 137.403425][ T5606] usb 2-1: USB disconnect, device number 7 [ 138.877221][ T6414] Set syz1 is full, maxelem 65536 reached [ 139.004351][ T6530] overlayfs: failed to clone upperpath [ 139.140232][ T6534] fuse: fd is not a fuse device [ 139.510451][ T6550] overlayfs: failed to clone upperpath [ 139.597769][ T5606] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.749536][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 139.758375][ T5606] usb 2-1: config 0 has an invalid interface number: 17 but max is 0 [ 139.758403][ T5606] usb 2-1: config 0 has no interface number 0 [ 139.761338][ T5606] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=8f.cb [ 139.761365][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.761383][ T5606] usb 2-1: Product: syz [ 139.761396][ T5606] usb 2-1: Manufacturer: syz [ 139.761409][ T5606] usb 2-1: SerialNumber: syz [ 139.819802][ T5606] usb 2-1: config 0 descriptor?? [ 140.071646][ T5606] mdc800 2-1:0.17: probe fails -> wrong Interface [ 140.087522][ T5606] usb 2-1: USB disconnect, device number 8 [ 140.238503][ T6576] overlayfs: failed to clone upperpath [ 141.107686][ T5780] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 141.309897][ T5780] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 141.309927][ T5780] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.309940][ T5780] usb 2-1: Product: syz [ 141.309947][ T5780] usb 2-1: Manufacturer: syz [ 141.309954][ T5780] usb 2-1: SerialNumber: syz [ 141.367118][ T5705] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 141.434990][ T6615] fuse: fd is not a fuse device [ 141.525548][ T5705] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.525642][ T5705] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 141.525662][ T5705] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 141.525701][ T5705] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.525722][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.785471][ T5780] rtl8150 2-1:1.0: couldn't reset the device [ 141.785856][ T5780] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 141.812507][ T5705] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 141.856371][ T5780] usb 2-1: USB disconnect, device number 9 [ 142.149127][ T6624] overlayfs: failed to clone upperpath [ 142.179013][ T5606] IPVS: starting estimator thread 0... [ 142.181768][ T6605] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 142.279898][ T6625] IPVS: using max 15 ests per chain, 36000 per kthread [ 142.501558][ T6627] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 143.018189][ T5705] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 143.062598][ T5705] usb 4-1: USB disconnect, device number 5 [ 143.313744][ T6646] fuse: fd is not a fuse device [ 143.899271][ T6657] overlayfs: failed to clone upperpath [ 144.101891][ T6667] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 144.267096][ T5606] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.419043][ T5606] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 144.419077][ T5606] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.419097][ T5606] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 144.419119][ T5606] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 144.419131][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.457104][ T32] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 144.503461][ T5606] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 144.640614][ T32] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 144.640644][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.640663][ T32] usb 2-1: Product: syz [ 144.640677][ T32] usb 2-1: Manufacturer: syz [ 144.640690][ T32] usb 2-1: SerialNumber: syz [ 144.704122][ T6663] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 144.705757][ T5780] IPVS: starting estimator thread 0... [ 144.808214][ T6672] fuse: fd is not a fuse device [ 144.828684][ T6670] IPVS: using max 9 ests per chain, 21600 per kthread [ 145.097330][ T5600] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 145.151181][ T32] rtl8150 2-1:1.0: couldn't reset the device [ 145.151488][ T32] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 145.223091][ T32] usb 2-1: USB disconnect, device number 10 [ 145.529455][ T5606] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 145.552116][ T5606] usb 1-1: USB disconnect, device number 3 [ 145.623446][ T6692] fuse: fd is not a fuse device [ 145.735434][ T6697] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 146.358015][ T32] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 146.379839][ T6713] overlayfs: failed to clone upperpath [ 146.520423][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 146.521560][ T32] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 146.521613][ T32] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 146.521635][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.576836][ T32] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 146.644370][ T32] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 146.857181][ T5705] usb 1-1: USB disconnect, device number 4 [ 146.906008][ T5705] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 146.931663][ T5705] garmin_gps 1-1:1.0: device disconnected [ 147.155744][ T6728] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 147.417125][ T37] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 147.581102][ T37] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 147.581131][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.581200][ T37] usb 4-1: Product: syz [ 147.581214][ T37] usb 4-1: Manufacturer: syz [ 147.581227][ T37] usb 4-1: SerialNumber: syz [ 147.827945][ T6738] overlayfs: failed to clone upperpath [ 147.868956][ T37] rtl8150 4-1:1.0: couldn't reset the device [ 147.869204][ T37] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 147.897899][ T37] usb 4-1: USB disconnect, device number 6 [ 149.830793][ T6781] overlayfs: failed to clone upperpath [ 150.205623][ T6796] netlink: 72 bytes leftover after parsing attributes in process `syz.2.347'. [ 151.827470][ T37] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.981862][ T37] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 151.981892][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.981909][ T37] usb 4-1: Product: syz [ 151.981916][ T37] usb 4-1: Manufacturer: syz [ 151.981923][ T37] usb 4-1: SerialNumber: syz [ 152.107146][ T200] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 152.274838][ T200] usb 2-1: config 0 interface 0 has no altsetting 0 [ 152.274881][ T200] usb 2-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 152.274902][ T200] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.289338][ T37] rtl8150 4-1:1.0: couldn't reset the device [ 152.289694][ T37] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 152.330218][ T200] usb 2-1: config 0 descriptor?? [ 152.493092][ T37] usb 4-1: USB disconnect, device number 7 [ 152.846426][ T200] lenovo 0003:17EF:6067.0003: global environment stack underflow [ 152.846454][ T200] lenovo 0003:17EF:6067.0003: item 0 2 1 11 parsing failed [ 152.864730][ T200] lenovo 0003:17EF:6067.0003: hid_parse failed [ 152.864806][ T200] lenovo 0003:17EF:6067.0003: probe with driver lenovo failed with error -22 [ 153.021071][ T37] usb 2-1: USB disconnect, device number 11 [ 153.255229][ T6836] fuse: fd is not a fuse device [ 155.217162][ T5780] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.371387][ T5780] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.371580][ T5780] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.371618][ T5780] usb 1-1: config 0 interface 0 has no altsetting 0 [ 155.371656][ T5780] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 155.371685][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.459003][ T5780] usb 1-1: config 0 descriptor?? [ 155.677839][ T6890] 9p: Bad value for 'rfdno' [ 156.073889][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.074401][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.098613][ T5780] usbhid 1-1:0.0: can't add hid device: -71 [ 156.098733][ T5780] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 156.135051][ T5780] usb 1-1: USB disconnect, device number 5 [ 156.238875][ T6900] fuse: fd is not a fuse device [ 156.478499][ T6909] overlayfs: failed to resolve './file2': -2 [ 156.618668][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.390'. [ 157.331178][ T6942] overlayfs: failed to resolve './file2': -2 [ 158.942771][ T6968] overlayfs: failed to resolve './file2': -2 [ 159.059966][ T6972] fuse: fd is not a fuse device [ 159.977845][ T6994] overlayfs: failed to clone upperpath [ 160.065442][ T6997] 9p: Bad value for 'rfdno' [ 161.068069][ T7023] overlayfs: failed to clone upperpath [ 161.363989][ T7029] tls_set_device_offload_rx: netdev not found [ 161.710056][ T7046] fuse: fd is not a fuse device [ 162.300504][ T7068] fuse: fd is not a fuse device [ 162.789193][ T5600] Bluetooth: hci3: unexpected event for opcode 0x0004 [ 163.203388][ T7092] vhci_hcd: not connected 4 [ 165.343141][ T7167] cgroup: none used incorrectly [ 165.960355][ T7176] fuse: fd is not a fuse device [ 166.167234][ T5705] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 166.363480][ T5705] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.363510][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.363528][ T5705] usb 1-1: Product: syz [ 166.363541][ T5705] usb 1-1: Manufacturer: syz [ 166.363554][ T5705] usb 1-1: SerialNumber: syz [ 166.391634][ T5705] usb 1-1: config 0 descriptor?? [ 166.653757][ T5705] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 166.859385][ T5600] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 166.867835][ T5600] Bluetooth: hci3: Injecting HCI hardware error event [ 166.868641][ T5600] Bluetooth: hci3: hardware error 0x00 [ 167.042032][ T7207] netlink: 'syz.2.499': attribute type 21 has an invalid length. [ 167.042058][ T7207] IPv6: NLM_F_CREATE should be specified when creating new route [ 167.042452][ T7207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 167.042460][ T7207] IPv6: NLM_F_CREATE should be set when creating new route [ 167.042492][ T7207] IPv6: NLM_F_CREATE should be set when creating new route [ 167.042511][ T7207] IPv6: NLM_F_CREATE should be set when creating new route [ 167.154613][ T7213] CIFS: VFS: UNC: path must begin with // or \\ [ 167.154628][ T7213] Malformed UNC in devname [ 167.154628][ T7213] [ 167.154787][ T7213] CIFS: VFS: Malformed UNC in devname [ 167.224488][ T5705] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 167.243786][ T5705] usb 1-1: USB disconnect, device number 6 [ 167.282596][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037b93800: rx timeout, send abort [ 167.783546][ C1] vcan0: j1939_tp_rxtimer: 0xffff888037b93800: abort rx timeout. Force session deactivation [ 167.941762][ T7230] fuse: fd is not a fuse device [ 168.736735][ T7255] FAULT_INJECTION: forcing a failure. [ 168.736735][ T7255] name failslab, interval 1, probability 0, space 0, times 1 [ 168.736782][ T7255] CPU: 0 UID: 0 PID: 7255 Comm: syz.3.517 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.736806][ T7255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 168.736827][ T7255] Call Trace: [ 168.736835][ T7255] [ 168.736845][ T7255] dump_stack_lvl+0xe8/0x150 [ 168.736877][ T7255] should_fail_ex+0x467/0x600 [ 168.736908][ T7255] should_failslab+0xa8/0x100 [ 168.736933][ T7255] __kmalloc_noprof+0xfb/0x790 [ 168.736958][ T7255] ? tomoyo_encode+0x2ad/0x570 [ 168.736982][ T7255] ? tomoyo_encode+0x2ad/0x570 [ 168.737012][ T7255] tomoyo_encode+0x2ad/0x570 [ 168.737042][ T7255] tomoyo_realpath_from_path+0x5fa/0x640 [ 168.737080][ T7255] tomoyo_mount_permission+0x927/0x9e0 [ 168.737104][ T7255] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 168.737132][ T7255] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 168.737154][ T7255] ? kasan_save_track+0x4f/0x80 [ 168.737219][ T7255] ? kasan_quarantine_put+0xbb/0x1f0 [ 168.737248][ T7255] security_sb_mount+0xda/0x2d0 [ 168.737280][ T7255] path_mount+0xbc/0x1050 [ 168.737304][ T7255] ? user_path_at+0xd4/0x160 [ 168.737330][ T7255] __se_sys_mount+0x31d/0x420 [ 168.737357][ T7255] ? __pfx___se_sys_mount+0x10/0x10 [ 168.737383][ T7255] ? __x64_sys_mount+0x20/0xc0 [ 168.737406][ T7255] do_syscall_64+0x17b/0x530 [ 168.737428][ T7255] ? irqentry_exit+0x10f/0x8f0 [ 168.737447][ T7255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.737469][ T7255] ? clear_bhb_loop+0x40/0x90 [ 168.737494][ T7255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.737514][ T7255] RIP: 0033:0x7f00a9b2de99 [ 168.737543][ T7255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.737560][ T7255] RSP: 002b:00007f00a7d86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 168.737587][ T7255] RAX: ffffffffffffffda RBX: 00007f00a9db5fa0 RCX: 00007f00a9b2de99 [ 168.737603][ T7255] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000200000000080 [ 168.737626][ T7255] RBP: 00007f00a7d86090 R08: 0000000000000000 R09: 0000000000000000 [ 168.737639][ T7255] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 168.737653][ T7255] R13: 00007f00a9db6038 R14: 00007f00a9db5fa0 R15: 00007ffc624a0398 [ 168.737684][ T7255] [ 168.739194][ T7255] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.997155][ T5600] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 169.064602][ T7258] fuse: Bad value for 'fd' [ 169.149788][ T7260] overlayfs: failed to clone upperpath [ 169.908453][ T7281] tipc: Started in network mode [ 169.908492][ T7281] tipc: Node identity ac14140f, cluster identity 4711 [ 169.912431][ T7281] tipc: New replicast peer: 255.255.255.255 [ 169.926796][ T7281] tipc: Enabled bearer , priority 10 [ 170.007487][ T7283] fuse: Bad value for 'fd' [ 170.732718][ T7312] fuse: Bad value for 'fd' [ 171.031991][ T200] tipc: Node number set to 2886997007 [ 171.262466][ T7322] FAULT_INJECTION: forcing a failure. [ 171.262466][ T7322] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 171.262499][ T7322] CPU: 0 UID: 0 PID: 7322 Comm: syz.0.542 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.262521][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 171.262532][ T7322] Call Trace: [ 171.262540][ T7322] [ 171.262548][ T7322] dump_stack_lvl+0xe8/0x150 [ 171.262578][ T7322] should_fail_ex+0x467/0x600 [ 171.262607][ T7322] _copy_to_iter+0x404/0x1810 [ 171.262650][ T7322] ? __pfx__copy_to_iter+0x10/0x10 [ 171.262684][ T7322] ? igmp6_mcf_seq_stop+0x15d/0x190 [ 171.262712][ T7322] seq_read_iter+0xaaf/0xcb0 [ 171.262754][ T7322] seq_read+0x36a/0x490 [ 171.262779][ T7322] ? kstrtoull+0x137/0x1d0 [ 171.262809][ T7322] ? __pfx_seq_read+0x10/0x10 [ 171.262847][ T7322] ? __import_iovec+0x5d7/0x7e0 [ 171.262886][ T7322] ? __pfx_seq_read+0x10/0x10 [ 171.262910][ T7322] proc_reg_read+0x1f6/0x2f0 [ 171.262939][ T7322] vfs_readv+0x588/0x850 [ 171.262969][ T7322] ? __pfx_proc_reg_read+0x10/0x10 [ 171.262997][ T7322] ? __pfx_vfs_readv+0x10/0x10 [ 171.263039][ T7322] ? __fget_files+0x2a/0x420 [ 171.263064][ T7322] ? __fget_files+0x3a8/0x420 [ 171.263083][ T7322] ? __fget_files+0x2a/0x420 [ 171.263112][ T7322] __x64_sys_preadv+0x19f/0x2c0 [ 171.263140][ T7322] ? __pfx___x64_sys_preadv+0x10/0x10 [ 171.263179][ T7322] do_syscall_64+0x17b/0x530 [ 171.263199][ T7322] ? irqentry_exit+0x10f/0x8f0 [ 171.263218][ T7322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.263238][ T7322] ? clear_bhb_loop+0x40/0x90 [ 171.263263][ T7322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.263282][ T7322] RIP: 0033:0x7f1dfe9fde99 [ 171.263301][ T7322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.263317][ T7322] RSP: 002b:00007f1dfcc56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 171.263338][ T7322] RAX: ffffffffffffffda RBX: 00007f1dfec85fa0 RCX: 00007f1dfe9fde99 [ 171.263352][ T7322] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000004 [ 171.263365][ T7322] RBP: 00007f1dfcc56090 R08: 0000000000000000 R09: 0000000000000000 [ 171.263378][ T7322] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 171.263390][ T7322] R13: 00007f1dfec86038 R14: 00007f1dfec85fa0 R15: 00007ffdc9fd95b8 [ 171.263421][ T7322] [ 171.855246][ T7345] overlayfs: failed to clone upperpath [ 172.127438][ T38] audit: type=1326 audit(1785248694.644:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7355 comm="syz.2.555" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbcfd8fde99 code=0x0 [ 173.016015][ T7378] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 173.016037][ T7378] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 173.625493][ T7397] overlayfs: failed to resolve './file2': -2 [ 173.820170][ T7404] smc: net device xfrm0 applied user defined pnetid SYZ2 [ 174.653978][ T7423] overlayfs: failed to resolve './file2': -2 [ 175.680724][ T7447] overlayfs: failed to resolve './file2': -2 [ 177.604868][ T7498] fuse: Bad value for 'fd' [ 177.903242][ T7504] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 177.903312][ T7504] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 178.093974][ T38] audit: type=1326 audit(1785248700.604:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=7509 comm="syz.2.612" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcfd8fde99 code=0x0 [ 178.194501][ T7515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.612'. [ 178.346366][ T5606] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 178.386424][ T5600] Bluetooth: hci1: unexpected event for opcode 0x5217 [ 178.447499][ T7519] fuse: Bad value for 'fd' [ 178.520754][ T5606] usb 1-1: unable to get BOS descriptor or descriptor too short [ 178.522460][ T5606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.522483][ T5606] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.522529][ T5606] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 178.522567][ T5606] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 178.522605][ T5606] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 178.522629][ T5606] usb 1-1: config 1 interface 1 has no altsetting 0 [ 178.597982][ T5606] usb 1-1: string descriptor 0 read error: -22 [ 178.598126][ T5606] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 178.598150][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.127115][ T9] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 179.284098][ T9] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 179.284128][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.284147][ T9] usb 2-1: Product: syz [ 179.284161][ T9] usb 2-1: Manufacturer: syz [ 179.284174][ T9] usb 2-1: SerialNumber: syz [ 179.685579][ T7535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.703010][ T7535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.110784][ T7550] fuse: Bad value for 'fd' [ 181.134550][ T5606] usb 1-1: Warning! Unlikely big volume step count (=11021), linear volume or wrong cval->res? [ 181.134576][ T5606] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/11021/1 [ 181.419439][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.430683][ T5606] usb 1-1: USB disconnect, device number 7 [ 181.626431][ T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 181.755469][ T9] usb 2-1: USB disconnect, device number 12 [ 181.996620][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 182.074249][ T7577] fuse: fd is not a fuse device [ 182.076836][ T7569] FAULT_INJECTION: forcing a failure. [ 182.076836][ T7569] name failslab, interval 1, probability 0, space 0, times 0 [ 182.076883][ T7569] CPU: 1 UID: 0 PID: 7569 Comm: syz.0.631 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.076906][ T7569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 182.076924][ T7569] Call Trace: [ 182.076931][ T7569] [ 182.076938][ T7569] dump_stack_lvl+0xe8/0x150 [ 182.076968][ T7569] should_fail_ex+0x467/0x600 [ 182.076994][ T7569] should_failslab+0xa8/0x100 [ 182.077010][ T7569] __kmalloc_noprof+0xfb/0x790 [ 182.077029][ T7569] ? vkms_crtc_atomic_check+0x3ff/0x760 [ 182.077047][ T7569] ? vkms_crtc_atomic_check+0x3ff/0x760 [ 182.077073][ T7569] vkms_crtc_atomic_check+0x3ff/0x760 [ 182.077101][ T7569] drm_atomic_helper_check_planes+0x581/0x800 [ 182.077131][ T7569] drm_atomic_helper_check+0xa0/0x190 [ 182.077152][ T7569] ? __pfx_vkms_atomic_check+0x10/0x10 [ 182.077168][ T7569] drm_atomic_check_only+0x1639/0x2ff0 [ 182.077200][ T7569] drm_atomic_commit+0x16a/0x2b0 [ 182.077221][ T7569] ? __pfx_drm_atomic_commit+0x10/0x10 [ 182.077237][ T7569] ? __pfx___drm_printfn_info+0x10/0x10 [ 182.077260][ T7569] ? __pfx_drm_framebuffer_free+0x10/0x10 [ 182.077282][ T7569] ? drm_mode_object_put+0x103/0x170 [ 182.077307][ T7569] ? drm_atomic_set_fb_for_plane+0x1f0/0x280 [ 182.077331][ T7569] drm_atomic_helper_update_plane+0x248/0x3b0 [ 182.077357][ T7569] drm_mode_cursor_common+0xe23/0x15e0 [ 182.077397][ T7569] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 182.077422][ T7569] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.077454][ T7569] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 182.077470][ T7569] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 182.077492][ T7569] ? drm_mode_cursor_ioctl+0xbb/0x130 [ 182.077515][ T7569] drm_mode_cursor_ioctl+0xd4/0x130 [ 182.077536][ T7569] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 182.077560][ T7569] ? rt_spin_unlock+0x163/0x200 [ 182.077581][ T7569] ? drm_is_current_master+0x1a2/0x210 [ 182.077604][ T7569] drm_ioctl_kernel+0x2e2/0x3b0 [ 182.077625][ T7569] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 182.077644][ T7569] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 182.077671][ T7569] drm_ioctl+0x713/0xba0 [ 182.077696][ T7569] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 182.077729][ T7569] ? __pfx_drm_ioctl+0x10/0x10 [ 182.077757][ T7569] ? __fget_files+0x3a8/0x420 [ 182.077773][ T7569] ? __fget_files+0x2a/0x420 [ 182.077792][ T7569] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.077816][ T7569] ? __pfx_drm_ioctl+0x10/0x10 [ 182.077833][ T7569] __se_sys_ioctl+0xff/0x170 [ 182.077855][ T7569] do_syscall_64+0x17b/0x530 [ 182.077873][ T7569] ? irqentry_exit+0x10f/0x8f0 [ 182.077890][ T7569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.077907][ T7569] ? clear_bhb_loop+0x40/0x90 [ 182.077930][ T7569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.077947][ T7569] RIP: 0033:0x7f1dfe9fde99 [ 182.077964][ T7569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.077980][ T7569] RSP: 002b:00007f1dfcc35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.077999][ T7569] RAX: ffffffffffffffda RBX: 00007f1dfec86090 RCX: 00007f1dfe9fde99 [ 182.078013][ T7569] RDX: 0000200000001880 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 182.078025][ T7569] RBP: 00007f1dfcc35090 R08: 0000000000000000 R09: 0000000000000000 [ 182.078035][ T7569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.078046][ T7569] R13: 00007f1dfec86128 R14: 00007f1dfec86090 R15: 00007ffdc9fd95b8 [ 182.078075][ T7569] [ 182.437819][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 182.622535][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.624189][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.624233][ T9] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 182.624256][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.672099][ T9] usb 2-1: config 0 descriptor?? [ 183.127388][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 183.127423][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 183.127448][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 183.127471][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 183.127495][ T9] hid-steam 0003:28DE:1142.0004: unknown main item tag 0x0 [ 183.193288][ T7594] fuse: fd is not a fuse device [ 183.247898][ T9] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 183.292643][ T9] usb 2-1: USB disconnect, device number 13 [ 183.407865][ T7595] fido_id[7595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 183.518582][ T7601] fuse: fd is not a fuse device [ 183.592102][ T7603] mmap: syz.2.644 (7603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 183.636379][ T7605] netlink: 80 bytes leftover after parsing attributes in process `syz.2.645'. [ 183.677150][ T200] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 183.844798][ T200] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 183.844830][ T200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.844849][ T200] usb 4-1: Product: syz [ 183.844862][ T200] usb 4-1: Manufacturer: syz [ 183.844876][ T200] usb 4-1: SerialNumber: syz [ 183.892858][ T200] usb 4-1: config 0 descriptor?? [ 184.115061][ T200] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 184.152942][ T7624] netlink: 'syz.2.653': attribute type 16 has an invalid length. [ 184.152964][ T7624] netlink: 'syz.2.653': attribute type 3 has an invalid length. [ 184.152978][ T7624] netlink: 31362 bytes leftover after parsing attributes in process `syz.2.653'. [ 184.737448][ T200] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 184.763920][ T200] usb 4-1: USB disconnect, device number 8 [ 184.774402][ T7642] overlayfs: missing 'lowerdir' [ 185.101237][ T7655] fuse: fd is not a fuse device [ 185.861120][ T7662] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.441283][ T7671] fuse: Unknown parameter 'fd0x0000000000000004' [ 186.616889][ T7675] fuse: Bad value for 'user_id' [ 186.616908][ T7675] fuse: Bad value for 'user_id' [ 186.630789][ T7659] syz.3.665 (7659) used greatest stack depth: 18944 bytes left [ 187.297135][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 187.302697][ T7692] fuse: fd is not a fuse device [ 187.349990][ T7694] overlayfs: missing 'lowerdir' [ 187.447606][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 187.456014][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 187.456040][ T9] usb 2-1: config 0 has no interface number 0 [ 187.477652][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 187.477681][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.477698][ T9] usb 2-1: Product: syz [ 187.477709][ T9] usb 2-1: Manufacturer: syz [ 187.477721][ T9] usb 2-1: SerialNumber: syz [ 187.530479][ T9] usb 2-1: config 0 descriptor?? [ 187.819540][ T7705] fuse: fd is not a fuse device [ 187.962812][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 187.962841][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 188.165308][ T7709] fuse: fd is not a fuse device [ 188.379863][ T7713] fuse: fd is not a fuse device [ 188.408520][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 188.409417][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 188.494794][ T9] usb 2-1: USB disconnect, device number 14 [ 188.517036][ T5607] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 188.524967][ T5923] udevd[5923]: setting mode of /dev/bus/usb/002/014 to 020664 failed: No such file or directory [ 188.525092][ T5923] udevd[5923]: setting owner of /dev/bus/usb/002/014 to uid=0, gid=0 failed: No such file or directory [ 188.670161][ T7717] overlayfs: missing 'lowerdir' [ 188.711517][ T5607] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.711572][ T5607] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.711588][ T5607] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.711612][ T5607] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 188.711624][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.786508][ T5607] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 188.792033][ T5607] usb 4-1: invalid MIDI out EP 0 [ 189.054742][ T7723] fuse: fd is not a fuse device [ 189.374242][ T7729] fuse: fd is not a fuse device [ 189.479324][ T7733] fuse: fd is not a fuse device [ 189.594294][ T7737] overlay: Unknown parameter '/file0' [ 189.789694][ T5607] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 189.806516][ T5607] usb 4-1: USB disconnect, device number 9 [ 189.948855][ T7746] fuse: Bad value for 'fd' [ 190.324233][ T7757] autofs: Bad value for 'fd' [ 191.047121][ T5607] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 191.120071][ T7768] overlay: Unknown parameter '/file0' [ 191.202802][ T5607] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 191.202860][ T5607] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.202887][ T5607] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.202929][ T5607] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.202951][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.334546][ T5607] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.344210][ T5607] usb 1-1: invalid MIDI out EP 0 [ 191.984116][ T7776] fuse: Bad value for 'fd' [ 192.250584][ T5607] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 192.263511][ T5607] usb 1-1: USB disconnect, device number 8 [ 192.344892][ T7784] do_umount: task=syz.3.716[7784] propagate_mount_busy()!=0 [ 192.577069][ T5607] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 192.747851][ T5607] usb 1-1: Using ep0 maxpacket: 32 [ 192.750020][ T5607] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 192.750045][ T5607] usb 1-1: config 0 has no interface number 0 [ 192.754344][ T5607] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 192.754367][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.754386][ T5607] usb 1-1: Product: syz [ 192.754399][ T5607] usb 1-1: Manufacturer: syz [ 192.754412][ T5607] usb 1-1: SerialNumber: syz [ 192.767572][ T5607] usb 1-1: config 0 descriptor?? [ 192.876435][ T7793] overlay: Unknown parameter '/file0' [ 193.286027][ T5607] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 193.286046][ T5607] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 193.471602][ T7801] fuse: Bad value for 'fd' [ 193.710720][ T5607] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 193.711040][ T5607] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 193.792166][ T5607] usb 1-1: USB disconnect, device number 9 [ 194.079288][ T7814] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 194.079342][ T7814] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 194.281143][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.281246][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.693098][ T7825] fuse: Bad value for 'fd' [ 195.139859][ T5607] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 195.166265][ T7833] do_umount: task=syz.3.736[7833] propagate_mount_busy()!=0 [ 195.345224][ T5607] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.345258][ T5607] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.345297][ T5607] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.345317][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.409372][ T5607] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.415132][ T5607] usb 1-1: invalid MIDI out EP 0 [ 195.565729][ T7839] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 195.565787][ T7839] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 195.942937][ T7846] fuse: Bad value for 'fd' [ 196.103788][ T5607] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 196.127474][ T5607] usb 1-1: USB disconnect, device number 10 [ 196.278270][ T200] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 196.303132][ T7860] do_umount: task=syz.0.745[7860] propagate_mount_busy()!=0 [ 196.407192][ T200] usb 4-1: device descriptor read/64, error -71 [ 196.707772][ T200] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 196.840645][ T200] usb 4-1: device descriptor read/64, error -71 [ 196.928380][ T7865] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 196.928436][ T7865] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 196.947513][ T200] usb usb4-port1: attempt power cycle [ 197.202442][ T7872] fuse: Bad value for 'fd' [ 197.335774][ T200] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 197.360932][ T200] usb 4-1: device descriptor read/8, error -71 [ 197.667703][ T200] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 197.688595][ T200] usb 4-1: device descriptor read/8, error -71 [ 197.702861][ T7881] fuse: fd is not a fuse device [ 197.800353][ T200] usb usb4-port1: unable to enumerate USB device [ 197.805223][ T7887] overlayfs: missing 'lowerdir' [ 197.907246][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 198.071175][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.071210][ T9] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.071253][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.071275][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.130815][ T7896] fuse: Invalid rootmode [ 198.190297][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.191267][ T9] usb 2-1: invalid MIDI out EP 0 [ 198.403573][ T7902] do_umount: task=syz.0.764[7902] propagate_mount_busy()!=0 [ 198.836051][ T9] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 198.848870][ T9] usb 2-1: USB disconnect, device number 15 [ 199.106123][ T7909] overlayfs: missing 'lowerdir' [ 199.872255][ T7926] fuse: fd is not a fuse device [ 200.017364][ T7934] do_umount: task=syz.3.773[7934] propagate_mount_busy()!=0 [ 200.181560][ T7941] overlayfs: missing 'lowerdir' [ 200.514269][ T7956] fuse: Invalid rootmode [ 200.527160][ T5607] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 200.687055][ T5607] usb 1-1: Using ep0 maxpacket: 16 [ 200.689255][ T5607] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 200.689282][ T5607] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.689302][ T5607] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.689320][ T5607] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.689340][ T5607] usb 1-1: config 0 has no interface number 0 [ 200.692025][ T5607] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 200.692051][ T5607] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.692071][ T5607] usb 1-1: Product: syz [ 200.692084][ T5607] usb 1-1: Manufacturer: syz [ 200.692097][ T5607] usb 1-1: SerialNumber: syz [ 200.790813][ T5607] usb 1-1: config 0 descriptor?? [ 200.934433][ T7969] do_umount: task=syz.1.786[7969] propagate_mount_busy()!=0 [ 200.959359][ T7970] overlayfs: missing 'workdir' [ 201.054703][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.055285][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.081466][ T7975] fuse: Bad value for 'rootmode' [ 201.232346][ T7972] syz.2.789 (7972) used greatest stack depth: 17448 bytes left [ 201.397203][ T32] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 201.478857][ T5600] Bluetooth: hci0: command 0x0c1a tx timeout [ 201.499724][ T7992] fuse: fd is not a fuse device [ 201.570449][ T32] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.570484][ T32] usb 4-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 201.570519][ T32] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.570542][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.619800][ T7996] overlayfs: missing 'workdir' [ 201.674845][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.675894][ T32] usb 4-1: invalid MIDI out EP 0 [ 201.823739][ T7999] fuse: fd is not a fuse device [ 201.952702][ T32] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 201.972222][ T32] usb 4-1: USB disconnect, device number 14 [ 202.291478][ T8016] fuse: fd is not a fuse device [ 202.331937][ T8018] overlayfs: missing 'workdir' [ 202.392297][ T8020] fuse: fd is not a fuse device [ 202.427199][ T5705] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 202.578886][ T5705] usb 2-1: Invalid ep0 maxpacket: 64 [ 202.718597][ T5705] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 202.867142][ T5705] usb 2-1: Invalid ep0 maxpacket: 64 [ 202.867965][ T5705] usb usb2-port1: attempt power cycle [ 203.122162][ T8042] fuse: fd is not a fuse device [ 203.165055][ T8037] do_umount: task=syz.3.816[8037] propagate_mount_busy()!=0 [ 203.228597][ T5705] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 203.249968][ T5705] usb 2-1: Invalid ep0 maxpacket: 64 [ 203.387281][ T5705] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 203.408955][ T5705] usb 2-1: Invalid ep0 maxpacket: 64 [ 203.409213][ T5705] usb usb2-port1: unable to enumerate USB device [ 203.414974][ T32] usb 1-1: USB disconnect, device number 11 [ 204.087345][ T32] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 204.247028][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 204.252620][ T32] usb 4-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 204.252649][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.252667][ T32] usb 4-1: Product: syz [ 204.252678][ T32] usb 4-1: Manufacturer: syz [ 204.252685][ T32] usb 4-1: SerialNumber: syz [ 204.339369][ T8063] fuse: fd is not a fuse device [ 204.383878][ T8065] fuse: fd is not a fuse device [ 204.594963][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.615465][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.676375][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.680055][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.791947][ T32] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 204.792018][ T32] usb 4-1: MIDIStreaming interface descriptor not found [ 205.075413][ T32] usb 4-1: USB disconnect, device number 15 [ 205.176280][ T8083] fuse: fd is not a fuse device [ 205.225238][ T5793] udevd[5793]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.238194][ T5780] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.277811][ T8085] fuse: fd is not a fuse device [ 205.352543][ T8087] FAULT_INJECTION: forcing a failure. [ 205.352543][ T8087] name failslab, interval 1, probability 0, space 0, times 0 [ 205.352575][ T8087] CPU: 1 UID: 0 PID: 8087 Comm: syz.1.838 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 205.352597][ T8087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.352608][ T8087] Call Trace: [ 205.352623][ T8087] [ 205.352630][ T8087] dump_stack_lvl+0xe8/0x150 [ 205.352660][ T8087] should_fail_ex+0x467/0x600 [ 205.352691][ T8087] should_failslab+0xa8/0x100 [ 205.352709][ T8087] ? sk_prot_alloc+0x57/0x210 [ 205.352736][ T8087] kmem_cache_alloc_noprof+0x9e/0x680 [ 205.352764][ T8087] ? sk_prot_alloc+0x57/0x210 [ 205.352790][ T8087] ? lock_acquire+0x115/0x350 [ 205.352824][ T8087] sk_prot_alloc+0x57/0x210 [ 205.352848][ T8087] ? sk_alloc+0x27/0x390 [ 205.352877][ T8087] sk_alloc+0x3a/0x390 [ 205.352905][ T8087] inet_create+0x7a9/0x1000 [ 205.352932][ T8087] ? inet_create+0x9d/0x1000 [ 205.352962][ T8087] __sock_create+0x4e8/0x960 [ 205.352995][ T8087] mptcp_subflow_create_socket+0xfd/0x810 [ 205.353021][ T8087] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 205.353041][ T8087] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 205.353067][ T8087] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 205.353100][ T8087] __mptcp_nmpc_sk+0x155/0x790 [ 205.353126][ T8087] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 205.353160][ T8087] mptcp_sendmsg_fastopen+0xce/0x540 [ 205.353180][ T8087] ? mptcp_rps_record_subflows+0x1d/0x400 [ 205.353209][ T8087] mptcp_sendmsg+0x1a69/0x1d10 [ 205.353250][ T8087] ? __lock_acquire+0x6df/0x2e40 [ 205.353272][ T8087] ? __lock_acquire+0x6df/0x2e40 [ 205.353290][ T8087] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 205.353316][ T8087] ? inet_sendmsg+0x298/0x320 [ 205.353343][ T8087] ? __pfx_inet_sendmsg+0x10/0x10 [ 205.353365][ T8087] sock_sendmsg_nosec+0x10e/0x180 [ 205.353387][ T8087] ____sys_sendmsg+0x565/0x870 [ 205.353421][ T8087] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.353454][ T8087] ? import_iovec+0x73/0xa0 [ 205.353487][ T8087] ___sys_sendmsg+0x2a5/0x360 [ 205.353514][ T8087] ? __lock_acquire+0x6df/0x2e40 [ 205.353536][ T8087] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.353600][ T8087] ? __fget_files+0x2a/0x420 [ 205.353626][ T8087] ? __fget_files+0x3a8/0x420 [ 205.353656][ T8087] __x64_sys_sendmsg+0x1b7/0x290 [ 205.353687][ T8087] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 205.353735][ T8087] do_syscall_64+0x17b/0x530 [ 205.353754][ T8087] ? irqentry_exit+0x10f/0x8f0 [ 205.353772][ T8087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.353792][ T8087] ? clear_bhb_loop+0x40/0x90 [ 205.353816][ T8087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.353835][ T8087] RIP: 0033:0x7fbcdf9cde99 [ 205.353853][ T8087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.353869][ T8087] RSP: 002b:00007fbcddc26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.353890][ T8087] RAX: ffffffffffffffda RBX: 00007fbcdfc55fa0 RCX: 00007fbcdf9cde99 [ 205.353904][ T8087] RDX: 0000000020040000 RSI: 0000200000001900 RDI: 0000000000000003 [ 205.353917][ T8087] RBP: 00007fbcddc26090 R08: 0000000000000000 R09: 0000000000000000 [ 205.353929][ T8087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.353941][ T8087] R13: 00007fbcdfc56038 R14: 00007fbcdfc55fa0 R15: 00007ffebac12f38 [ 205.353972][ T8087] [ 205.446673][ T5780] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.446709][ T5780] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 205.446730][ T5780] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 205.446769][ T5780] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.446790][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.776640][ T5780] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.035738][ T5780] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 206.064647][ T5780] usb 1-1: USB disconnect, device number 12 [ 206.167698][ T8108] fuse: Unknown parameter 'user_i00000000000000000000' [ 206.202554][ T8110] fuse: fd is not a fuse device [ 206.281962][ T8112] netlink: 'syz.3.848': attribute type 21 has an invalid length. [ 206.282076][ T8112] netlink: 156 bytes leftover after parsing attributes in process `syz.3.848'. [ 206.326818][ T8116] fuse: fd is not a fuse device [ 206.666330][ T8130] fuse: Unknown parameter 'user_i00000000000000000000' [ 206.707373][ T8131] fuse: fd is not a fuse device [ 206.744969][ T8133] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 206.744997][ T8133] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 206.856604][ T8135] fuse: Bad value for 'group_id' [ 206.856625][ T8135] fuse: Bad value for 'group_id' [ 207.351676][ T8128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.854'. [ 207.377493][ T32] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 207.403974][ T8128] netlink: 188 bytes leftover after parsing attributes in process `syz.3.854'. [ 207.527170][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 207.529771][ T32] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 207.529797][ T32] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 207.529815][ T32] usb 2-1: config 8 has no interface number 0 [ 207.531958][ T32] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 207.531984][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.532026][ T32] usb 2-1: Product: syz [ 207.532033][ T32] usb 2-1: Manufacturer: syz [ 207.532040][ T32] usb 2-1: SerialNumber: syz [ 207.845733][ T32] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 207.849874][ T32] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 207.849928][ T32] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 207.860182][ T32] usb 2-1: USB disconnect, device number 20 [ 207.889657][ T32] garmin_gps 2-1:8.206: device disconnected [ 207.927424][ T8157] fuse: Unknown parameter 'user_i00000000000000000000' [ 207.995544][ T8162] fuse: Bad value for 'group_id' [ 207.995561][ T8162] fuse: Bad value for 'group_id' [ 208.112661][ T8167] FAULT_INJECTION: forcing a failure. [ 208.112661][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 208.112695][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.0.871 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 208.112721][ T8167] Tainted: [L]=SOFTLOCKUP [ 208.112727][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 208.112738][ T8167] Call Trace: [ 208.112745][ T8167] [ 208.112753][ T8167] dump_stack_lvl+0xe8/0x150 [ 208.112780][ T8167] should_fail_ex+0x467/0x600 [ 208.112809][ T8167] should_failslab+0xa8/0x100 [ 208.112827][ T8167] ? skb_clone+0x212/0x3a0 [ 208.112854][ T8167] kmem_cache_alloc_noprof+0x9e/0x680 [ 208.112882][ T8167] ? skb_clone+0x212/0x3a0 [ 208.112915][ T8167] skb_clone+0x212/0x3a0 [ 208.112944][ T8167] __netlink_deliver_tap+0x410/0x880 [ 208.112981][ T8167] ? netlink_deliver_tap+0x2e/0x1b0 [ 208.113018][ T8167] netlink_deliver_tap+0x19c/0x1b0 [ 208.113047][ T8167] netlink_unicast+0x7b8/0x990 [ 208.113081][ T8167] netlink_sendmsg+0x813/0xb40 [ 208.113117][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.113146][ T8167] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 208.113174][ T8167] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 208.113201][ T8167] ? arch_stack_walk+0xfb/0x150 [ 208.113231][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.113255][ T8167] sock_sendmsg_nosec+0x13a/0x180 [ 208.113277][ T8167] ____sys_sendmsg+0x565/0x870 [ 208.113311][ T8167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.113346][ T8167] ? import_iovec+0x73/0xa0 [ 208.113376][ T8167] ___sys_sendmsg+0x2a5/0x360 [ 208.113401][ T8167] ? __lock_acquire+0x6df/0x2e40 [ 208.113423][ T8167] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.113486][ T8167] ? __fget_files+0x2a/0x420 [ 208.113504][ T8167] ? __fget_files+0x3a8/0x420 [ 208.113532][ T8167] __x64_sys_sendmsg+0x1b7/0x290 [ 208.113563][ T8167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 208.113608][ T8167] do_syscall_64+0x17b/0x530 [ 208.113628][ T8167] ? irqentry_exit+0x10f/0x8f0 [ 208.113646][ T8167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.113664][ T8167] ? clear_bhb_loop+0x40/0x90 [ 208.113692][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.113711][ T8167] RIP: 0033:0x7f1dfe9fde99 [ 208.113730][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.113746][ T8167] RSP: 002b:00007f1dfcc56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.113767][ T8167] RAX: ffffffffffffffda RBX: 00007f1dfec85fa0 RCX: 00007f1dfe9fde99 [ 208.113781][ T8167] RDX: 0000000000000080 RSI: 0000200000000580 RDI: 0000000000000003 [ 208.113794][ T8167] RBP: 00007f1dfcc56090 R08: 0000000000000000 R09: 0000000000000000 [ 208.113806][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.113817][ T8167] R13: 00007f1dfec86038 R14: 00007f1dfec85fa0 R15: 00007ffdc9fd95b8 [ 208.113846][ T8167] [ 208.791610][ T8189] fuse: Unknown parameter 'user_id00000000000000000000' [ 209.149219][ T8202] FAULT_INJECTION: forcing a failure. [ 209.149219][ T8202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.149255][ T8202] CPU: 1 UID: 0 PID: 8202 Comm: syz.0.884 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.149291][ T8202] Tainted: [L]=SOFTLOCKUP [ 209.149297][ T8202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.149308][ T8202] Call Trace: [ 209.149316][ T8202] [ 209.149323][ T8202] dump_stack_lvl+0xe8/0x150 [ 209.149353][ T8202] should_fail_ex+0x467/0x600 [ 209.149384][ T8202] _copy_to_user+0x31/0xb0 [ 209.149406][ T8202] simple_read_from_buffer+0xe1/0x170 [ 209.149432][ T8202] proc_fail_nth_read+0x1be/0x230 [ 209.149456][ T8202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.149481][ T8202] ? rw_verify_area+0x250/0x4d0 [ 209.149505][ T8202] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.149525][ T8202] vfs_read+0x219/0xa90 [ 209.149555][ T8202] ? __pfx_vfs_read+0x10/0x10 [ 209.149580][ T8202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 209.149600][ T8202] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.149620][ T8202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 209.149638][ T8202] ? mutex_lock_nested+0x152/0x1d0 [ 209.149662][ T8202] ? fdget_pos+0x252/0x320 [ 209.149690][ T8202] ksys_read+0x156/0x270 [ 209.149714][ T8202] ? __pfx_ksys_read+0x10/0x10 [ 209.149747][ T8202] do_syscall_64+0x17b/0x530 [ 209.149766][ T8202] ? irqentry_exit+0x10f/0x8f0 [ 209.149783][ T8202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.149803][ T8202] ? clear_bhb_loop+0x40/0x90 [ 209.149827][ T8202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.149846][ T8202] RIP: 0033:0x7f1dfe9be6ce [ 209.149863][ T8202] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 209.149879][ T8202] RSP: 002b:00007f1dfcc55fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.149899][ T8202] RAX: ffffffffffffffda RBX: 00007f1dfcc566c0 RCX: 00007f1dfe9be6ce [ 209.149914][ T8202] RDX: 000000000000000f RSI: 00007f1dfcc560a0 RDI: 0000000000000004 [ 209.149925][ T8202] RBP: 00007f1dfcc56090 R08: 0000000000000000 R09: 0000000000000000 [ 209.149937][ T8202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.149947][ T8202] R13: 00007f1dfec86038 R14: 00007f1dfec85fa0 R15: 00007ffdc9fd95b8 [ 209.149979][ T8202] [ 209.303676][ T8206] process 'syz.1.885' launched './file1' with NULL argv: empty string added [ 209.567633][ T8208] fuse: Unknown parameter 'user_id00000000000000000000' [ 209.987086][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 210.139460][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 210.139494][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 210.139509][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 210.139530][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 210.139542][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.166353][ T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 210.219339][ T5705] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 210.367074][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 210.369186][ T5705] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 210.369212][ T5705] usb 2-1: config 0 has no interface number 0 [ 210.369255][ T5705] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 210.369292][ T5705] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 210.373306][ T8232] fuse: fd is not a fuse device [ 210.374067][ T5705] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 210.374094][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.374114][ T5705] usb 2-1: Product: syz [ 210.374129][ T5705] usb 2-1: Manufacturer: syz [ 210.374142][ T5705] usb 2-1: SerialNumber: syz [ 210.418577][ T5705] usb 2-1: config 0 descriptor?? [ 210.551078][ T8235] fuse: fd is not a fuse device [ 210.609906][ T8237] netlink: 'syz.2.899': attribute type 61 has an invalid length. [ 210.638142][ T5705] radio-si470x 2-1:0.35: this is not a si470x device. [ 210.673418][ T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 210.679297][ T9] usb 1-1: USB disconnect, device number 13 [ 210.698180][ T5705] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 210.719089][ T5705] usb 2-1: USB disconnect, device number 21 [ 211.192315][ T8243] exFAT-fs (nbd0): unable to read boot sector [ 211.192335][ T8243] exFAT-fs (nbd0): failed to read boot sector [ 211.192344][ T8243] exFAT-fs (nbd0): failed to recognize exfat type [ 211.433564][ T8255] fuse: Bad value for 'fd' [ 211.490622][ T8259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.908'. [ 211.549807][ T8254] netlink: 25 bytes leftover after parsing attributes in process `syz.2.908'. [ 211.604809][ T8259] netlink: 'syz.2.908': attribute type 4 has an invalid length. [ 211.640050][ T8262] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nullb0": -EINTR [ 211.714110][ T5705] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 211.920427][ T5705] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 211.920472][ T5705] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 211.920492][ T5705] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 211.920530][ T5705] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 211.920552][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.995557][ T5705] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 212.307603][ T5705] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 212.327967][ T5705] usb 1-1: USB disconnect, device number 14 [ 212.393068][ T8285] fuse: fd is not a fuse device [ 212.434524][ T8287] fuse: Bad value for 'fd' [ 212.797729][ T5606] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 212.887180][ T8305] fuse: fd is not a fuse device [ 212.930080][ T8307] fuse: Bad value for 'fd' [ 212.950176][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 212.952113][ T5606] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 212.952139][ T5606] usb 2-1: config 0 has no interface number 0 [ 212.952182][ T5606] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 212.952209][ T5606] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 212.954621][ T5606] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 212.954649][ T5606] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.954669][ T5606] usb 2-1: Product: syz [ 212.954682][ T5606] usb 2-1: Manufacturer: syz [ 212.954696][ T5606] usb 2-1: SerialNumber: syz [ 212.982787][ T8309] warning: `syz.2.929' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 212.987688][ T5822] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 213.079963][ T5606] usb 2-1: config 0 descriptor?? [ 213.086535][ T5606] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 213.109854][ T5606] nokiaca42v2 ttyUSB0: probe with driver nokiaca42v2 failed with error -22 [ 213.150871][ T5822] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 213.150899][ T5822] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 213.155514][ T5822] usb 1-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 213.155542][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.155560][ T5822] usb 1-1: Product: syz [ 213.155568][ T5822] usb 1-1: Manufacturer: syz [ 213.155575][ T5822] usb 1-1: SerialNumber: syz [ 213.209860][ T5822] usb 1-1: config 0 descriptor?? [ 213.287557][ T5705] usb 2-1: USB disconnect, device number 22 [ 213.313162][ T5705] cypress_m8 2-1:0.35: device disconnected [ 213.413011][ T8300] netlink: 'syz.0.925': attribute type 29 has an invalid length. [ 213.413027][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.925'. [ 214.327591][ T5606] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 214.415335][ T5822] mos7840 1-1:0.0: required endpoints missing [ 214.470614][ T5822] usb 1-1: USB disconnect, device number 15 [ 214.605566][ T5606] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 214.605622][ T5606] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 214.605645][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.695056][ T5606] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 214.808283][ T8326] fuse: Unknown parameter '0x0000000000000003' [ 214.904593][ T8330] fuse: fd is not a fuse device [ 214.996565][ T8335] overlayfs: failed to clone upperpath [ 215.405138][ T8352] fuse: Unknown parameter '0x0000000000000003' [ 215.437168][ T5822] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 215.589979][ T5822] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 215.590002][ T5822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.593775][ T5822] usb 1-1: config 0 descriptor?? [ 215.720304][ T5606] stv0680 2-1:4.0: Could not get descriptor 0200 [ 215.747133][ T5706] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 215.897051][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 215.924044][ T5706] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 215.924114][ T5706] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.924507][ T5706] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.924523][ T5706] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.924542][ T5706] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.924585][ T5706] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 215.924609][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.993831][ T5606] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 215.993854][ T5606] stv0680 2-1:4.0: last error: 2, command = 0x8 [ 216.035258][ T5822] ath6kl: Failed to submit usb control message: -71 [ 216.035291][ T5822] ath6kl: unable to send the bmi data to the device: -71 [ 216.035299][ T5822] ath6kl: Unable to send get target info: -71 [ 216.083170][ T5822] ath6kl: Failed to init ath6kl core: -71 [ 216.096410][ T5606] usb 2-1: USB disconnect, device number 23 [ 216.114608][ T5822] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 216.172760][ T8360] fuse: fd is not a fuse device [ 216.240796][ T5822] usb 1-1: USB disconnect, device number 16 [ 216.300137][ T8363] fuse: fd is not a fuse device [ 216.324428][ T5706] usb 4-1: usb_control_msg returned -32 [ 216.324493][ T5706] usbtmc 4-1:16.0: can't read capabilities [ 217.148172][ T8381] fuse: Unknown parameter '0x0000000000000003' [ 217.426306][ T8391] fuse: fd is not a fuse device [ 217.486266][ T8392] do_umount: task=syz.0.959[8392] propagate_mount_busy()!=0 [ 217.739216][ T8404] fuse: Unknown parameter '0x0000000000000003' [ 217.930614][ T8412] fuse: fd is not a fuse device [ 218.021615][ T8415] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 218.039279][ T8417] fuse: fd is not a fuse device [ 218.047993][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 218.155696][ T8420] capability: warning: `syz.2.972' uses deprecated v2 capabilities in a way that may be insecure [ 218.177365][ T9] usb 1-1: device descriptor read/64, error -71 [ 218.271484][ T8426] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 218.295766][ T8428] fuse: Unknown parameter '0x0000000000000003' [ 218.417408][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 218.547407][ T9] usb 1-1: device descriptor read/64, error -71 [ 218.578372][ T32] usb 4-1: USB disconnect, device number 16 [ 218.667160][ T9] usb usb1-port1: attempt power cycle [ 218.672592][ T8435] fuse: fd is not a fuse device [ 218.853281][ T8439] do_umount: task=syz.3.980[8439] propagate_mount_busy()!=0 [ 219.020903][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 219.038491][ T9] usb 1-1: device descriptor read/8, error -71 [ 219.086352][ T8446] fuse: Unknown parameter '0x0000000000000003' [ 219.215242][ T5608] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 219.287955][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 219.307996][ T9] usb 1-1: device descriptor read/8, error -71 [ 219.418220][ T9] usb usb1-port1: unable to enumerate USB device [ 219.542428][ T8458] fuse: Unknown parameter 'group_i00000000000000000000' [ 219.616215][ T8462] netlink: 'syz.3.991': attribute type 1 has an invalid length. [ 219.616236][ T8462] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.991'. [ 219.624953][ T5706] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 219.645591][ T8462] netlink: 'syz.3.991': attribute type 4 has an invalid length. [ 219.645611][ T8462] netlink: 152 bytes leftover after parsing attributes in process `syz.3.991'. [ 219.785154][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.992'. [ 219.788660][ T5706] usb 2-1: Using ep0 maxpacket: 8 [ 219.790673][ T5706] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 219.790725][ T5706] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.790747][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.790778][ T5706] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.790801][ T5706] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.790840][ T5706] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 219.790862][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.016370][ T8469] fuse: Unknown parameter 'fd0x0000000000000003' [ 220.031646][ T5706] usb 2-1: usb_control_msg returned -32 [ 220.031697][ T5706] usbtmc 2-1:16.0: can't read capabilities [ 220.336710][ T8479] fuse: fd is not a fuse device [ 220.397644][ T8483] FAULT_INJECTION: forcing a failure. [ 220.397644][ T8483] name failslab, interval 1, probability 0, space 0, times 0 [ 220.397671][ T8483] CPU: 0 UID: 0 PID: 8483 Comm: syz.1.988 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 220.397686][ T8483] Tainted: [L]=SOFTLOCKUP [ 220.397690][ T8483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 220.397696][ T8483] Call Trace: [ 220.397701][ T8483] [ 220.397706][ T8483] dump_stack_lvl+0xe8/0x150 [ 220.397724][ T8483] should_fail_ex+0x467/0x600 [ 220.397740][ T8483] should_failslab+0xa8/0x100 [ 220.397752][ T8483] __kmalloc_noprof+0xfb/0x790 [ 220.397767][ T8483] ? tomoyo_encode+0x2ad/0x570 [ 220.397781][ T8483] ? tomoyo_encode+0x2ad/0x570 [ 220.397799][ T8483] tomoyo_encode+0x2ad/0x570 [ 220.397816][ T8483] tomoyo_realpath_from_path+0x5fa/0x640 [ 220.397836][ T8483] ? tomoyo_path_number_perm+0x219/0x5f0 [ 220.397848][ T8483] tomoyo_path_number_perm+0x246/0x5f0 [ 220.397862][ T8483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.397875][ T8483] ? do_raw_spin_lock+0x12b/0x2f0 [ 220.397896][ T8483] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 220.397907][ T8483] ? lockdep_hardirqs_on+0x7a/0x110 [ 220.397925][ T8483] ? __fget_files+0x2a/0x420 [ 220.397939][ T8483] ? __fget_files+0x3a8/0x420 [ 220.397948][ T8483] ? __fget_files+0x2a/0x420 [ 220.397960][ T8483] security_file_ioctl+0xb9/0x260 [ 220.397973][ T8483] __se_sys_ioctl+0x47/0x170 [ 220.397988][ T8483] do_syscall_64+0x17b/0x530 [ 220.397998][ T8483] ? irqentry_exit+0x10f/0x8f0 [ 220.398008][ T8483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.398019][ T8483] ? clear_bhb_loop+0x40/0x90 [ 220.398032][ T8483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.398042][ T8483] RIP: 0033:0x7fbcdf9cde99 [ 220.398052][ T8483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.398061][ T8483] RSP: 002b:00007fbcddc05028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 220.398073][ T8483] RAX: ffffffffffffffda RBX: 00007fbcdfc56090 RCX: 00007fbcdf9cde99 [ 220.398081][ T8483] RDX: 0000000000000000 RSI: 0000000000005b01 RDI: 0000000000000004 [ 220.398087][ T8483] RBP: 00007fbcddc05090 R08: 0000000000000000 R09: 0000000000000000 [ 220.398093][ T8483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.398100][ T8483] R13: 00007fbcdfc56128 R14: 00007fbcdfc56090 R15: 00007ffebac12f38 [ 220.398115][ T8483] [ 220.398126][ T8483] ERROR: Out of memory at tomoyo_realpath_from_path. [ 220.414545][ T8484] fuse: fd is not a fuse device [ 220.600838][ T8483] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 220.603730][ T5706] usb 2-1: USB disconnect, device number 24 [ 220.805796][ T8490] usb usb5: usbfs: process 8490 (syz.0.1002) did not claim interface 0 before use [ 220.820902][ T8490] overlay: filesystem on ./bus not supported [ 220.864631][ T8493] fuse: Unknown parameter 'fd0x0000000000000003' [ 220.990327][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1005'. [ 221.037701][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1005'. [ 221.263046][ T8511] fuse: fd is not a fuse device [ 221.470630][ T8525] fuse: Unknown parameter 'fd0x0000000000000003' [ 221.647504][ T5706] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 221.803072][ T5706] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.803098][ T5706] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.807223][ T5706] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 221.807252][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.807271][ T5706] usb 4-1: Product: syz [ 221.807285][ T5706] usb 4-1: Manufacturer: syz [ 221.807299][ T5706] usb 4-1: SerialNumber: syz [ 222.024586][ T8540] fuse: Unknown parameter 'group_id00000000000000000000' [ 222.038687][ T32] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 222.110956][ T5706] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 222.165049][ T8542] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.201077][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.203119][ T32] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 222.203145][ T32] usb 2-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 222.203163][ T32] usb 2-1: Product: syz [ 222.203177][ T32] usb 2-1: SerialNumber: syz [ 222.249630][ T5706] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 222.251632][ T32] usb 2-1: config 0 descriptor?? [ 222.271293][ T32] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 222.273621][ T32] usb 2-1: Detected SIO [ 222.300319][ T32] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 222.335273][ T5706] usb 4-1: USB disconnect, device number 17 [ 222.368834][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.557622][ T8549] fuse: fd is not a fuse device [ 222.639773][ T8555] overlay: filesystem on ./bus not supported [ 222.710946][ T5706] usb 2-1: USB disconnect, device number 25 [ 222.729721][ T5706] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 222.730389][ T5706] ftdi_sio 2-1:0.0: device disconnected [ 223.391598][ T8564] fuse: Bad value for 'user_id' [ 223.391618][ T8564] fuse: Bad value for 'user_id' [ 223.847844][ T5606] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 223.990234][ T8586] fuse: fd is not a fuse device [ 224.002230][ T5606] usb 4-1: device descriptor read/64, error -71 [ 224.082335][ T8579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1037'. [ 224.237173][ T5606] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 224.377291][ T5606] usb 4-1: device descriptor read/64, error -71 [ 224.393674][ T8592] fuse: fd is not a fuse device [ 224.487428][ T5606] usb usb4-port1: attempt power cycle [ 224.827107][ T5606] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 224.848965][ T5606] usb 4-1: device descriptor read/8, error -71 [ 225.097037][ T5606] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 225.117574][ T5606] usb 4-1: device descriptor read/8, error -71 [ 225.230383][ T5606] usb usb4-port1: unable to enumerate USB device [ 225.570727][ T8603] usb usb5: usbfs: process 8603 (syz.1.1044) did not claim interface 0 before use [ 225.575102][ T8603] overlay: filesystem on ./bus not supported [ 226.785869][ T8619] fuse: fd is not a fuse device [ 226.852064][ T8621] FAULT_INJECTION: forcing a failure. [ 226.852064][ T8621] name failslab, interval 1, probability 0, space 0, times 0 [ 226.852099][ T8621] CPU: 1 UID: 0 PID: 8621 Comm: syz.1.1050 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 226.852125][ T8621] Tainted: [L]=SOFTLOCKUP [ 226.852132][ T8621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 226.852144][ T8621] Call Trace: [ 226.852151][ T8621] [ 226.852158][ T8621] dump_stack_lvl+0xe8/0x150 [ 226.852188][ T8621] should_fail_ex+0x467/0x600 [ 226.852218][ T8621] should_failslab+0xa8/0x100 [ 226.852238][ T8621] __kmalloc_noprof+0xfb/0x790 [ 226.852264][ T8621] ? comedi_alloc_devpriv+0x1f/0x60 [ 226.852289][ T8621] ? comedi_alloc_devpriv+0x1f/0x60 [ 226.852320][ T8621] comedi_alloc_devpriv+0x1f/0x60 [ 226.852355][ T8621] pcl818_attach+0x125/0x1710 [ 226.852387][ T8621] comedi_device_attach+0x535/0x730 [ 226.852423][ T8621] comedi_unlocked_ioctl+0x8f4/0x1af0 [ 226.852465][ T8621] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 226.852487][ T8621] ? kasan_quarantine_put+0xbb/0x1f0 [ 226.852527][ T8621] ? do_vfs_ioctl+0x1184/0x1550 [ 226.852554][ T8621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 226.852594][ T8621] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 226.852615][ T8621] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.852651][ T8621] ? __fget_files+0x2a/0x420 [ 226.852674][ T8621] ? __fget_files+0x3a8/0x420 [ 226.852693][ T8621] ? __fget_files+0x2a/0x420 [ 226.852715][ T8621] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.852745][ T8621] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 226.852768][ T8621] __se_sys_ioctl+0xff/0x170 [ 226.852796][ T8621] do_syscall_64+0x17b/0x530 [ 226.852815][ T8621] ? irqentry_exit+0x10f/0x8f0 [ 226.852832][ T8621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.852852][ T8621] ? clear_bhb_loop+0x40/0x90 [ 226.852877][ T8621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.852897][ T8621] RIP: 0033:0x7fbcdf9cde99 [ 226.852915][ T8621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.852931][ T8621] RSP: 002b:00007fbcddc26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.852953][ T8621] RAX: ffffffffffffffda RBX: 00007fbcdfc55fa0 RCX: 00007fbcdf9cde99 [ 226.852968][ T8621] RDX: 00002000000003c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 226.853015][ T8621] RBP: 00007fbcddc26090 R08: 0000000000000000 R09: 0000000000000000 [ 226.853029][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.853041][ T8621] R13: 00007fbcdfc56038 R14: 00007fbcdfc55fa0 R15: 00007ffebac12f38 [ 226.853073][ T8621] [ 227.040473][ T8623] fuse: Bad value for 'fd' [ 227.212795][ T8627] overlay: filesystem on ./bus not supported [ 227.857083][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 228.010529][ T9] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 228.010560][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.055407][ T9] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 228.056132][ T9] usb 2-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 228.056147][ T9] usb 2-1: Falling back to sysfs fallback for: emi26/loader.fw [ 228.284385][ T9] usb 2-1: emi26_load_firmware - request_firmware() failed [ 228.284409][ T9] usb 2-1: emi26_load_firmware - error loading firmware: error = -12 [ 228.284468][ T9] emi26 - firmware loader 2-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 228.293924][ T9] usb 2-1: USB disconnect, device number 26 [ 228.470722][ T8655] fuse: Bad value for 'fd' [ 228.561458][ T8659] overlayfs: failed to clone upperpath [ 228.888614][ T8673] gadgetfs: bound to dummy_udc driver [ 229.102277][ T8682] fuse: Bad value for 'fd' [ 229.157845][ T5780] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 229.158102][ C0] gadgetfs: connected [ 229.162872][ T5780] gadgetfs: disconnected [ 229.204835][ T8686] overlayfs: workdir and upperdir must be separate subtrees [ 229.343494][ T5608] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 229.737187][ T5607] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 229.910505][ T5607] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 229.910536][ T5607] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.939510][ T5607] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 229.942797][ T5607] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 229.942822][ T5607] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 229.983684][ T8710] fuse: fd is not a fuse device [ 230.128404][ T5780] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 230.164720][ T5607] usb 4-1: emi26_load_firmware - request_firmware() failed [ 230.164743][ T5607] usb 4-1: emi26_load_firmware - error loading firmware: error = -12 [ 230.164800][ T5607] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 230.197621][ T5607] usb 4-1: USB disconnect, device number 22 [ 230.291044][ T5780] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice= 1.00 [ 230.291079][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.291099][ T5780] usb 1-1: Product: syz [ 230.291113][ T5780] usb 1-1: Manufacturer: syz [ 230.291127][ T5780] usb 1-1: SerialNumber: syz [ 230.737465][ T5780] hackrf 1-1:1.0: Board ID: 00 [ 230.737488][ T5780] hackrf 1-1:1.0: Firmware version: [ 230.743533][ T5780] hackrf 1-1:1.0: Registered as swradio0 [ 230.746436][ T5780] hackrf 1-1:1.0: Registered as swradio1 [ 230.746456][ T5780] hackrf 1-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 232.677380][ T8714] hackrf 1-1:1.0: usb_control_msg() failed -110 request 10 [ 232.705215][ T5780] usb 1-1: USB disconnect, device number 22 [ 233.361861][ T8722] gadgetfs: bound to dummy_udc driver [ 233.597132][ T5780] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 233.599604][ C0] gadgetfs: connected [ 233.599834][ T5780] gadgetfs: disconnected [ 233.967119][ T5706] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 234.120258][ T5706] usb 4-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 234.120289][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.159578][ T5706] emi26 - firmware loader 4-1:1.0: emi26_probe start [ 234.160237][ T5706] usb 4-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 234.160250][ T5706] usb 4-1: Falling back to sysfs fallback for: emi26/loader.fw [ 234.957559][ T5822] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 235.023948][ T8781] fuse: fd is not a fuse device [ 235.110541][ T5822] usb 2-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 235.110572][ T5822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.175462][ T5822] emi26 - firmware loader 2-1:1.0: emi26_probe start [ 236.303190][ T8817] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 236.437497][ T8822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.462709][ T8824] fuse: fd is not a fuse device [ 237.441863][ T8844] fuse: fd is not a fuse device [ 239.414161][ T8873] fuse: fd is not a fuse device [ 240.016076][ T8882] gadgetfs: bound to dummy_udc driver [ 240.244171][ T8802] Set syz1 is full, maxelem 65536 reached [ 240.247097][ T5607] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 240.247360][ C1] gadgetfs: connected [ 240.264758][ T5607] gadgetfs: disconnected [ 240.592569][ T5608] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 241.027085][ T5607] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 241.179003][ T5607] usb 1-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 241.179022][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.190901][ T5607] emi26 - firmware loader 1-1:1.0: emi26_probe start [ 241.494438][ T5705] playstation 0003:054C:05C4.0005: reserved main item tag 0xe [ 241.494503][ T5705] playstation 0003:054C:05C4.0005: unbalanced collection at end of report description [ 241.494848][ T5705] playstation 0003:054C:05C4.0005: Parse failed [ 241.494879][ T5705] playstation 0003:054C:05C4.0005: probe with driver playstation failed with error -22 [ 242.051316][ T8933] fuse: fd is not a fuse device [ 246.755131][ T9003] fuse: fd is not a fuse device [ 247.869289][ T9023] fuse: fd is not a fuse device [ 250.284014][ T9077] fuse: fd is not a fuse device [ 254.083875][ T9148] fuse: fd is not a fuse device [ 254.134137][ T9150] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 255.549985][ T9158] NILFS (nullb0): couldn't find nilfs on the device [ 255.720620][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.720719][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.506256][ T9178] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 258.894584][ T5608] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 260.584734][ T9215] fuse: fd is not a fuse device [ 260.660850][ T9219] fuse: fd is not a fuse device [ 261.792383][ T9221] fuse: fd is not a fuse device [ 265.336315][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 265.384756][ T5600] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 265.388546][ T5600] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 265.390757][ T5600] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 265.391618][ T5600] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 267.251005][ T4305] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.633047][ T4305] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.800500][ T5608] Bluetooth: hci4: command tx timeout [ 268.050641][ T4305] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.620130][ T4305] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.934838][ T9256] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.935081][ T9256] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.935308][ [ 268.935308][ T9256] bridge_slave_0: entered allmulticast mode [ 268.940288][ T9256] bridge_slave_0: entered promiscuous mode [ 268.946816][ T5822] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 268.946837][ T5822] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 268.946860][ T5822] CPU: 0 UID: 0 PID: 5822 Comm: kworker/0:8 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 268.946883][ T5822] Tainted: [L]=SOFTLOCKUP [ 268.946889][ T5822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.946904][ T5822] Workqueue: usb_hub_wq hub_event [ 268.946931][ T5822] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.946949][ T5822] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.946964][ T5822] RSP: 0018:ffffc9000603ed20 EFLAGS: 00010247 [ 268.946977][ T5822] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.946989][ T5822] RDX: ffffc90019044000 RSI: 000000000000e171 RDI: 0000000000000004 [ 268.946999][ T5822] RBP: ffffc9000603ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.947010][ T5822] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.947022][ T5822] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.947034][ T5822] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 268.947047][ T5822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.947058][ T5822] CR2: 000000110c2f41bd CR3: 000000001bfa8000 CR4: 00000000003526f0 [ 268.947072][ T5822] DR0: 000000000000000a DR1: 0000000000000006 DR2: 0000000000000003 [ 268.947081][ T5822] DR3: 000000000000eda9 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 268.947092][ T5822] Call Trace: [ 268.947098][ T5822] [ 268.947109][ T5822] ? __pfx_emi26_probe+0x10/0x10 [ 268.947124][ T5822] ? __pm_runtime_set_status+0x977/0xc40 [ 268.947146][ T5822] usb_probe_interface+0x788/0xe50 [ 268.947171][ T5822] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.947192][ T5822] ? sysfs_do_create_link_sd+0xe0/0x110 [ 268.947209][ T5822] ? driver_sysfs_add+0x1fe/0x210 [ 268.947226][ T5822] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.947246][ T5822] really_probe+0x254/0xae0 [ 268.947275][ T5822] __driver_probe_device+0x1e8/0x360 [ 268.947294][ T5822] driver_probe_device+0x4f/0x240 [ 268.947314][ T5822] __device_attach_driver+0x270/0x410 [ 268.947335][ T5822] bus_for_each_drv+0x25b/0x2f0 [ 268.947358][ T5822] ? __pfx___device_attach_driver+0x10/0x10 [ 268.947378][ T5822] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.947401][ T5822] ? rt_spin_unlock+0x163/0x200 [ 268.947423][ T5822] __device_attach+0x2c7/0x450 [ 268.947440][ T5822] ? rt_spin_unlock+0x157/0x200 [ 268.947459][ T5822] ? __pfx___device_attach+0x10/0x10 [ 268.947479][ T5822] device_initial_probe+0xa1/0xd0 [ 268.947497][ T5822] bus_probe_device+0x12d/0x220 [ 268.947520][ T5822] device_add+0x7d7/0xb80 [ 268.947536][ T5822] usb_set_configuration+0x1ad8/0x2180 [ 268.947564][ T5822] usb_generic_driver_probe+0x8d/0x150 [ 268.947583][ T5822] usb_probe_device+0x1c3/0x3b0 [ 268.947604][ T5822] ? __pfx_usb_probe_device+0x10/0x10 [ 268.947623][ T5822] really_probe+0x254/0xae0 [ 268.947639][ T5822] __driver_probe_device+0x1e8/0x360 [ 268.947651][ T5822] driver_probe_device+0x4f/0x240 [ 268.947664][ T5822] __device_attach_driver+0x270/0x410 [ 268.947676][ T5822] bus_for_each_drv+0x25b/0x2f0 [ 268.947691][ T5822] ? __pfx___device_attach_driver+0x10/0x10 [ 268.947703][ T5822] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.947717][ T5822] ? rt_spin_unlock+0x163/0x200 [ 268.947731][ T5822] __device_attach+0x2c7/0x450 [ 268.947743][ T5822] ? __pfx___device_attach+0x10/0x10 [ 268.947759][ T5822] device_initial_probe+0xa1/0xd0 [ 268.947772][ T5822] bus_probe_device+0x12d/0x220 [ 268.947786][ T5822] device_add+0x7d7/0xb80 [ 268.947797][ T5822] usb_new_device+0x98d/0x1610 [ 268.947807][ T5822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.947818][ T5822] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.947831][ T5822] ? __pfx_usb_new_device+0x10/0x10 [ 268.947842][ T5822] hub_event+0x28cf/0x4cf0 [ 268.947863][ T5822] ? __pfx_hub_event+0x10/0x10 [ 268.947876][ T5822] ? rcu_is_watching+0x15/0xb0 [ 268.947888][ T5822] ? process_one_work+0x7fd/0x1480 [ 268.947898][ T5822] process_one_work+0xaaf/0x1480 [ 268.947912][ T5822] ? __pfx_process_one_work+0x10/0x10 [ 268.947921][ T5822] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.947936][ T5822] ? assign_work+0x3cf/0x5d0 [ 268.947946][ T5822] worker_thread+0xb05/0x10d0 [ 268.947960][ T5822] ? __kthread_parkme+0x71/0x1f0 [ 268.947973][ T5822] kthread+0x388/0x470 [ 268.947986][ T5822] ? __pfx_worker_thread+0x10/0x10 [ 268.947996][ T5822] ? __pfx_kthread+0x10/0x10 [ 268.948008][ T5822] ret_from_fork+0x514/0xb70 [ 268.948022][ T5822] ? __pfx_ret_from_fork+0x10/0x10 [ 268.948035][ T5822] ? __switch_to+0xc89/0x1420 [ 268.948047][ T5822] ? __pfx_kthread+0x10/0x10 [ 268.948060][ T5822] ret_from_fork_asm+0x1a/0x30 [ 268.948076][ T5822] [ 268.948080][ T5822] Modules linked in: [ 268.948122][ T5607] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#2] SMP KASAN PTI [ 268.948141][ T5607] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 268.948158][ T5822] ---[ end trace 0000000000000000 ]--- [ 268.948162][ T5607] CPU: 1 UID: 0 PID: 5607 Comm: kworker/1:5 Tainted: G D L syzkaller #0 PREEMPT_{RT,(full)} [ 268.948188][ T5607] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 268.948196][ T5607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 268.948208][ T5607] Workqueue: usb_hub_wq hub_event [ 268.948230][ T5607] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.948249][ T5607] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.948266][ T5607] RSP: 0018:ffffc9000568ed20 EFLAGS: 00010247 [ 268.948280][ T5607] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.948294][ T5607] RDX: ffffc90018843000 RSI: 000000000000fdf3 RDI: 0000000000000004 [ 268.948307][ T5607] RBP: ffffc9000568ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.948320][ T5607] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.948334][ T5607] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.948348][ T5607] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 268.948365][ T5607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.948378][ T5607] CR2: 0000001b32523ffc CR3: 00000000349da000 CR4: 00000000003526f0 [ 268.948396][ T5607] DR0: 000000000000000a DR1: 0000000000000006 DR2: 0000000000000003 [ 268.948408][ T5607] DR3: 000000000000eda9 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 268.948422][ T5607] Call Trace: [ 268.948429][ T5607] [ 268.948442][ T5607] ? __pfx_emi26_probe+0x10/0x10 [ 268.948461][ T5607] ? __pm_runtime_set_status+0x977/0xc40 [ 268.948485][ T5607] usb_probe_interface+0x788/0xe50 [ 268.948512][ T5607] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.948537][ T5607] ? sysfs_do_create_link_sd+0xe0/0x110 [ 268.948555][ T5607] ? driver_sysfs_add+0x1fe/0x210 [ 268.948575][ T5607] ? __pfx_usb_probe_interface+0x10/0x10 [ 268.948598][ T5607] really_probe+0x254/0xae0 [ 268.948622][ T5607] __driver_probe_device+0x1e8/0x360 [ 268.948644][ T5607] driver_probe_device+0x4f/0x240 [ 268.948667][ T5607] __device_attach_driver+0x270/0x410 [ 268.948692][ T5607] bus_for_each_drv+0x25b/0x2f0 [ 268.948720][ T5607] ? __pfx___device_attach_driver+0x10/0x10 [ 268.948744][ T5607] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.948843][ T5607] ? rt_spin_unlock+0x163/0x200 [ 268.948869][ T5607] __device_attach+0x2c7/0x450 [ 268.948890][ T5607] ? rt_spin_unlock+0x157/0x200 [ 268.948916][ T5607] ? __pfx___device_attach+0x10/0x10 [ 268.948941][ T5607] device_initial_probe+0xa1/0xd0 [ 268.948964][ T5607] bus_probe_device+0x12d/0x220 [ 268.948991][ T5607] device_add+0x7d7/0xb80 [ 268.949009][ T5607] usb_set_configuration+0x1ad8/0x2180 [ 268.949040][ T5607] usb_generic_driver_probe+0x8d/0x150 [ 268.949064][ T5607] usb_probe_device+0x1c3/0x3b0 [ 268.949090][ T5607] ? __pfx_usb_probe_device+0x10/0x10 [ 268.949113][ T5607] really_probe+0x254/0xae0 [ 268.949136][ T5607] __driver_probe_device+0x1e8/0x360 [ 268.949159][ T5607] driver_probe_device+0x4f/0x240 [ 268.949182][ T5607] __device_attach_driver+0x270/0x410 [ 268.949208][ T5607] bus_for_each_drv+0x25b/0x2f0 [ 268.949234][ T5607] ? __pfx___device_attach_driver+0x10/0x10 [ 268.949255][ T5607] ? __pfx_bus_for_each_drv+0x10/0x10 [ 268.949280][ T5607] ? rt_spin_unlock+0x163/0x200 [ 268.949306][ T5607] __device_attach+0x2c7/0x450 [ 268.949328][ T5607] ? __pfx___device_attach+0x10/0x10 [ 268.949354][ T5607] device_initial_probe+0xa1/0xd0 [ 268.949375][ T5607] bus_probe_device+0x12d/0x220 [ 268.949404][ T5607] device_add+0x7d7/0xb80 [ 268.949424][ T5607] usb_new_device+0x98d/0x1610 [ 268.949443][ T5607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.949463][ T5607] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 268.949472][ T5706] usb 4-1: emi26_load_firmware - request_firmware() failed [ 268.949487][ T5607] ? __pfx_usb_new_device+0x10/0x10 [ 268.949491][ T5706] usb 4-1: emi26_load_firmware - error loading firmware: error = -12 [ 268.949510][ T5607] hub_event+0x28cf/0x4cf0 [ 268.949534][ T5706] emi26 - firmware loader 4-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 268.949552][ T5607] ? __pfx_hub_event+0x10/0x10 [ 268.949577][ T5607] ? rcu_is_watching+0x15/0xb0 [ 268.949599][ T5607] ? process_one_work+0x7fd/0x1480 [ 268.949618][ T5607] process_one_work+0xaaf/0x1480 [ 268.949643][ T5607] ? __pfx_process_one_work+0x10/0x10 [ 268.949660][ T5607] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.949687][ T5607] ? assign_work+0x3cf/0x5d0 [ 268.949707][ T5607] worker_thread+0xb05/0x10d0 [ 268.949736][ T5607] kthread+0x388/0x470 [ 268.949771][ T5607] ? __pfx_worker_thread+0x10/0x10 [ 268.949792][ T5607] ? __pfx_kthread+0x10/0x10 [ 268.949817][ T5607] ret_from_fork+0x514/0xb70 [ 268.949846][ T5607] ? __pfx_ret_from_fork+0x10/0x10 [ 268.949870][ T5607] ? __switch_to+0xc89/0x1420 [ 268.949893][ T5607] ? __pfx_kthread+0x10/0x10 [ 268.949917][ T5607] ret_from_fork_asm+0x1a/0x30 [ 268.949949][ T5607] [ 268.949956][ T5607] Modules linked in: [ 268.950018][ T5607] ---[ end trace 0000000000000000 ]--- [ 268.954460][ T5822] RIP: 0010:emi26_probe+0x283/0x1690 [ 268.954501][ T5822] Code: ff 89 de e8 6f 64 97 00 85 db 0f 84 d9 01 00 00 e8 62 60 97 00 48 bb 00 00 00 00 00 fc ff df 49 8d 7e 04 48 89 f8 48 c1 e8 03 <0f> b6 04 18 84 c0 75 47 49 8d 7e 05 48 89 f8 48 c1 e8 03 0f b6 04 [ 268.954520][ T5822] RSP: 0018:ffffc9000603ed20 EFLAGS: 00010247 [ 268.954538][ T5822] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000100000 [ 268.954553][ T5822] RDX: ffffc90019044000 RSI: 000000000000e171 RDI: 0000000000000004 [ 268.954567][ T5822] RBP: ffffc9000603ee50 R08: 0000000000000000 R09: 0000000000000000 [ 268.954581][ T5822] R10: dffffc0000000000 R11: fffffbfff1fa1890 R12: fffffffffffffffa [ 268.954596][ T5822] R13: 1fffffffffffffff R14: 0000000000000000 R15: 1fffffffffffffff [ 268.954611][ T5822] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 268.954628][ T5822] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.954643][ T5822] CR2: 000000110c2f41bd CR3: 000000003812e000 CR4: 00000000003526f0 [ 268.954660][ T5822] DR0: 000000000000000a DR1: 0000000000000006 DR2: 0000000000000003 [ 268.954673][ T5822] DR3: 000000000000eda9 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 268.954688][ T5822] Kernel panic - not syncing: Fatal exception [ 268.954994][ T5822] Kernel Offset: disabled