last executing test programs: 10.478020416s ago: executing program 0 (id=2282): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0xfffffffd, 0xfffffffe, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20041094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x90, r4, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb365}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb0f7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x402f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000640)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000700)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000780)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x143603, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000800)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000840)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000880)=0xc203400) pwritev(r7, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x5d1}], 0x1, 0xfffffffa, 0xc) write(r5, &(0x7f0000000200)='select \n', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 9.709558931s ago: executing program 0 (id=2286): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$sock(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f00000006c0)="91c41c647991a627770f0ee1567051bb37d084e3538fcfecc2ee1e34bbccb819878fa92900183601f1dc73093075b5d4d300e5b6a7233ab5ed64f14af8deacb5c28abd97e81e33ee9c0e743d7fff97daf9af2061b3e7664f930c97b647e087330abad87eebd6c6260d6fe60421ffcc4b4166c3c03a680d4e30633ca1e9f3e8207a9072c42cbd04a7cbf2387afd43f79c8d312c45f469c108ca18e730e204cfeab29e3b35471c9165274b1a6c7e5f5a9da351443b9a61c49043f7f24c31ebfb3e6f31ea2129506611199f4c5ebc19f165cdf75edc2d666f989833e1c839d358c4051489862ce33250523a4edb9c01bfd4c19f86e421c0427e05608802fc23a6d5d3f13f0cae0019de54089b533d01d6953dcc5a8bf6c5b91e58f1ec9a90a51aa2babe3a16fa8740fc81e346194fb0cf3d7e89e9aa33be2c9a3e3838f4d9753a755d691e9853ca61844ba7bd404cb8b9baa70fa6e7c05f9b057b51c4b29373b52adecd0283b60ff77112ad35dfaa9e5be2c8fb5de9debc520c5f99e1e2cdb63cda38b1999f2db2a9f76771841f3cc49e3b528c600b23ea110dde81d8bc61fcc1beb8954204886a6d9d0184a13b8b8125ba60b60d598baa816b55bcba4aeffeb3445c1f2ee0b39d8a922ffa80badf3c0ebd93407b5870809f1d8a80518525fd318d2be019c24d3aff86210b526ae1a3b0d30f5eda137886b7187acf88f15fccf9ecb9344aaca42093c00a12f1717ea9b2cab3aaf21c15fdf893a3ad05e7437e565961fb6b0b3b4795bd48e722ca89a2497f26e452ad7d8c3298392cf516e7c83366d1d02f868ffd9a0aa0e4053855c596f50e9b6c3572692fe491b2446ae6376c824a7ec4731f79678613158a321a23e42edbfb63b0561386fcb95f30e2f1ac62b8e27272255e0115bd44e8d3a31258838b0fdb1d6841c36767965c06bc7dfde97961c50f24482a57d8ad1b52be58bbf9d7ba6ed9f6f5ebeeb900aa993ae91b13b530753834f83052d18eda3bc0db4abc4af4aa20df6848c0ebbb8e6b9c69adc75d894d0505a71574276b10c2fb4ec91d9abebe58260d2b0f43ca9e093c346eb08d86ae9a0f5a95181d3fc5eaf570be2796900b79854606e4240401053ea36aa4f039e5951346666309ac42fa63a35d6fbb27595a4738a1b72d557cc9ea035dfa7db1f8abadb10e853a6ed8d961be83eb747ad0b2e8880727715614a7503f180f016d0734786c6cc800da79e372820e39994d98a7e70d01bf17d85069e53286de040125c2c03d87e89a367aabde53827d9da64a31a17ba0376c5b1c581c2daffc7d20c87c8792f8e879f9b6bb0b24ecb33d1a990836b6a321706cf7e4a8c65c54fee00552cb5f23b687715cad05e260ccaee078e48877f57d2cd22213b4825e3127bc1e8e92869682a644bf0c1bf1b7532d138ad82d4c03b015ad112992268106ece97f5c4b8adb5254005cae7899ad444e4044c8b6946bee3cbbf39b05168372fb7f34e46f726bf3af395938e4901054ff81bf1de07961847a61ed84c60681942d948089a18efce607721c9573a13d4f61cf34cca6300a6d604de75f907938537465d99dacd5423c721dfb343b11492a0173ecb1e7432016ba1cf077dc0625bc3e809116fd406ffd2b231397fea27b6e01cf8bc80c40646b3b47b406dd778daf72b38d1264074d7167f3ea19f327cd9401b5758e137da19355ae6c1febf0b59ef8a800d074b80121e6e38c704c2fd972df31fb2837f93b1f1938c87033019cbffc07d12447405a67ef5130232972c74705cace76111d9572a00e85a274828713ace99188c1a7adc9c03af63b806bd49d59aa413a5523454a2b4bf6479d319957de882960db6bc5e02771b423eed7a55eaebc5b7ea0b96616138fa2a1f9cf4c9ebf9beb6de53d02af8a800903f8ee71925728e249a63b4dbb3f2d7f48a5b76bdc589d03a27d34b6b80770a87c77adb8fd3d69d598c442654db5f864011960154b303f165655d87d06acce6257dbe6b268b6a224ef85b968c857775cb54e2cf8f837ebd2e8c21bc59eda132116c56163012a4366769b6c2fbec77b9b3b590b37cf0109eaeefa7f45a16ece92dfa2fa294eeb904fe7de767818fa364d71a3d20ede", 0x5df}], 0x1}, 0x90) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000500)="260f882b000000438ff9460f2355c402d1aa045af2440f07660f2a0166baf80cb8b0439287ef66bafc0ced430f01bf470000003ef3410fc7720248b80b83f09c6f777d3a48b8eea80000000000000f23c80f21f835040020000f23f835000000080f23f8", 0x64}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000000)={0xf0000000, 0x79d}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x0, &(0x7f0000000140)}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000380), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES64=r3, @ANYRESDEC=r0, @ANYBLOB="010020bd70100600010007000000080009000200000008000b00"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x4000, 0xd000, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x109000, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000180)=0x1) r8 = openat$binderfs_log(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_BOOT_CPU_ID(r8, 0xae78, &(0x7f00000004c0)=0x8) write$ppp(r7, &(0x7f00000001c0)='\fA', 0x2) r11 = syz_open_dev$video4linux(&(0x7f0000000200), 0x5, 0x0) ioctl$SG_GET_SCSI_ID(r2, 0x2276, &(0x7f00000002c0)) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r11, 0xc0305602, &(0x7f0000000280)={0x0, 0x10001, 0x5001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 8.65810917s ago: executing program 0 (id=2289): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x11, 0x2e, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x800) 8.657825986s ago: executing program 0 (id=2290): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000300)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r2, &(0x7f0000000340)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000140), &(0x7f0000000180)=0x4) syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYBLOB="b20e2a4ed8834eb562320e97594f8b183f104b2a613cfbdf78b0ce630a6da554dd9ff6a2d0c4617c79875ca102c89ed4036726715dfc7ee39950dad57c4f367f52c46aa980be55785020bc60d06dc40e37a881dbc5ab345cc15691b28aaff9330fee7ddc74428fa4f73174d50052f34b7bd67e7c4f1760d912aea7f16c4e9e7082251bfe36c0e3339ef8a5fba89ebb3b5886668a8d27d18182672969d627df445ca4e554716c517c60f134df79d11d10e1197ad79959920f2f43938a73268edcd9bc3596384b75fed34e4deb"], 0x0) r3 = socket(0x2d, 0x2, 0x0) setsockopt(r3, 0x11d, 0x1, &(0x7f0000000000)="01000000", 0x4) landlock_create_ruleset(&(0x7f00000003c0)={0x404, 0x7, 0x6, 0x1002, 0x7, 0x2}, 0x30, 0x2) sendmsg(r3, &(0x7f0000000040)={&(0x7f0000000080)=@generic={0x2d, "000000000000080118000200000006000a00"}, 0x80, 0x0}, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000200), 0x1, 0x2003) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000240)={&(0x7f0000000280)=[{0xd7, 0xec01, 0x0, 0x0}, {0x8, 0x90f5, 0x0, 0x0}], 0x2}) 5.607323234s ago: executing program 0 (id=2301): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b11, 0x0) 5.272094561s ago: executing program 1 (id=2303): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$loop(0x0, 0x5, 0x801) r1 = openat$kvm(0x0, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000006c0)={0x0, &(0x7f0000000700)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x48}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) write(r5, &(0x7f0000000880)='\a', 0x1) (fail_nth: 5) 5.200578715s ago: executing program 2 (id=2304): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0xfffffffd, 0xfffffffe, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20041094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x90, r4, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb365}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb0f7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x402f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000640)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000700)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000780)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x143603, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000800)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000840)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000880)=0xc203400) pwritev(r7, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x5d1}], 0x1, 0xfffffffa, 0xc) write(r5, &(0x7f0000000200)='select \n', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.838117835s ago: executing program 1 (id=2305): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x2, 0x2, {0x51, 0x7e53, 0x6, {0x101, 0xffff}, {0x0, 0x5}, @const={0x3, {0x4, 0x8, 0xd, 0x3}}}, {0x52, 0x66d4, 0x1, {0x4, 0x3}, {0x3187, 0x1000}, @ramp={0xda0, 0x7fff, {0x0, 0xb}}}}) ioctl$EVIOCGMASK(r1, 0x40015b19, 0x0) 4.415960107s ago: executing program 3 (id=2307): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.232698498s ago: executing program 3 (id=2308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000004c0)='./mysys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r4, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1) 4.053610584s ago: executing program 3 (id=2309): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000740)={0x0, &(0x7f0000000480)=[@nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmload={0x182, 0xfffffffffffffdd7, 0x1}, @nested_set_state_pages={0x140, 0x28, {0x2, 0x32, @arbitrary=0x9}}, @cpuid={0x64, 0x18, {0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x2a, 0x2}}, @nested_amd_clgi={0x17f, 0x10}], 0xa0}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000380)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r5, &(0x7f00000003c0)={0x28, 0x0, 0x0, @host}, 0x10) r6 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./debug\x00', &(0x7f0000000540)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./debug/split_huge_pages\x00', 0x1, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='test_file\x00', 0x42, 0x1ff) write(r9, &(0x7f0000000600), 0x2000000) write(r8, &(0x7f0000000640)='/proc/self/cwd/test_file,0x0,0x1', 0x20) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/class/net/bridge0/bridge/vlan_protocol\x00', 0x80001, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.697279529s ago: executing program 3 (id=2310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = dup(r1) mkdir(&(0x7f0000000480)='my_sys\x00', 0x1ff) r4 = syz_open_dev$sndpcmc(&(0x7f0000002800), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000002840)={0x0, [[0xc07c, 0xffffffff, 0xffffffff, 0x1, 0x1, 0xfffffffc, 0x3f60f1d7, 0xffffffff], [0xffffffff, 0x2, 0xfffffffd, 0xa, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x83, 0xffffffff, 0xffffffff, 0xffffffff, 0x3, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0xa, 0x186a0, 0x0, 0x0, 0x1}, {0x103, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x101000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffd, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) read$FUSE(r4, &(0x7f0000002ac0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000580)='my_sys\x00', &(0x7f00000005c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0xae4d2f8ed3bfc611) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='7', 0x1) flock(r6, 0x6) read$FUSE(r5, &(0x7f00000007c0)={0x2020}, 0x2020) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000080)='sysfs\x00', 0x1040000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r8, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x220143, 0x0) pwritev(r9, &(0x7f0000000240)=[{&(0x7f0000000280)="d2", 0x1}], 0x1, 0x80, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) 3.409286359s ago: executing program 3 (id=2311): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000380)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000440)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f00000004c0)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000540)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000840)={0x14, &(0x7f00000007c0)={0x0, 0x4, 0x1e, {0x1e, 0x8, "d42f3c91aa80c70d5b199722a521f8d438638feb7419c6a02834be79"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}}, &(0x7f0000000a80)={0x44, &(0x7f0000000880)={0x40, 0xf, 0x7, "320e2f9cf825ca"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000940)={0x20, 0x81, 0x3, "02044e"}, &(0x7f0000000980)={0x20, 0x82, 0x2, "88be"}, &(0x7f00000009c0)=ANY=[@ANYBLOB="8310c3eb89814e36"], &(0x7f0000000a00)={0x20, 0x84, 0x4, "6599e788"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "d6faea"}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000780)={0x40, 0x15, 0x4, "c7fe4b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2.525654458s ago: executing program 0 (id=2312): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2007fa51d98b02c1b368f441f4d27164653a0400000060aadbbb"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) 2.158779096s ago: executing program 2 (id=2313): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mnt\x00', 0x3f2) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x40000090, 0x0, 0xfffffffffffffff9}]}) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000040)={0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80001, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(r0, 0x0, r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)={0x10000000000000cf, 0x0, [{}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./mnt\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./mnt\x00', &(0x7f00000004c0)='ext4\x00', 0x8410, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000180)={0x1}, 0x8) shutdown(r5, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x438001, 0x10) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000580)=0x4091) write$P9_RSYMLINK(r6, 0x0, 0x0) 2.055268048s ago: executing program 2 (id=2314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1f) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xb, 0x400) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000001580)={0x0, &(0x7f00000015c0)=[@cpuid={0x64, 0x18, {0xb, 0x407}}], 0x18}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.913251385s ago: executing program 2 (id=2315): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x6, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000480)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc0405626, &(0x7f00000004c0)=0x1) 1.91285833s ago: executing program 2 (id=2316): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) sendto$inet6(r1, &(0x7f0000000380)='\t', 0x1, 0x65055, &(0x7f00000003c0)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r3, &(0x7f00000000c0)='0', 0x1) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000140)={'raw\x00', 0x0, [0xde, 0x20af, 0x5, 0x1, 0x7f]}, &(0x7f00000001c0)=0x54) 1.818684499s ago: executing program 1 (id=2317): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfff, 0x141800) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x31, 0x0, 0x3017, 0xa04c, 0x9, 0x1, 0xd, 0x1}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x2}, 0x20) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000000)) syz_io_uring_setup(0x2e33, &(0x7f0000000140)={0x0, 0x9631, 0x4000, 0x0, 0x3ce, 0x0, r2}, &(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000003c0)=@IORING_OP_SETXATTR={0x2a, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000440)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000500)) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000005c0), 0x102, 0x0) syz_io_uring_submit(0x0, r3, r7, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x10, 0x0, r2, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', r8, 0x400}) 1.748227144s ago: executing program 1 (id=2318): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x0, 0xd, 0x1, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={0x1, 0xd3, "9cbc900fe32f590188ed6aa90a0b813f8553d8b9312da5470d2d251e46589a94e8a9130108854271b8d29fcc3d7ed1b84f561ccb8bdeae2351d217f722d5d6b9ecc57c18b0d48688e524cd4b32e51484d5b6aee9fcb09e1311b0caaa3a326b00a2559cea8a92fbb86ea0415be4d19c27c0d0131568d9977df77ee2c844ec48c3c334b9bfe6fb6252e97047478b82caca6dbfe4bad8f86db09322c745d9f3ead05fb01fbfaa4f56dd2cfa2b849f3639ad3d8c7abd9c4f763a5acb85a9a0ef3a8acc1ad04db1b8bb97d3a275a2c95c0c0cd55635"}, &(0x7f0000000240)=0xdb) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x2, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={r1, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e1f, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r0, 0x84, 0x7a, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x100000}, &(0x7f00000003c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000500)={r2, 0xe8, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xd}}, @in6={0xa, 0x4e20, 0x2, @mcast2, 0x5}, @in6={0xa, 0x4e20, 0xf132, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, @in={0x2, 0x1000, @multicast2}, @in6={0xa, 0x4e22, 0x101, @local, 0xffffffff}, @in={0x2, 0x4e23, @private=0xa010100}, @in6={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x43}, 0x2}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e22, 0x0, @loopback, 0x4}]}, &(0x7f0000000540)=0x10) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000580)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r4, 0x80506409, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x1, 0x40, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000640)=[0x0], 0x1, 0x0}) read(r4, &(0x7f0000000680)=""/4096, 0x1000) poll(&(0x7f0000001680)=[{r4, 0x2}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r5, 0x6, 0x9, &(0x7f00000002c0)={{0xc, @local, 0x0, 0x3, 'wrr\x00', 0x28, 0x6, 0x38}, {@broadcast, 0x4e21, 0x2, 0x0, 0x66, 0x1}}, 0x44) getsockopt$inet_tcp_int(r5, 0x6, 0x9, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(r0, 0x84, 0x83, &(0x7f0000000100)={r2, 0x1}, 0x8) 1.641265764s ago: executing program 1 (id=2319): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000d80)={0x7}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB="200000001200cfb39ef72dac1e010a000003"], 0x26}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000002010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000c40)='./sys\x00', &(0x7f0000000c80)='sysfs\x00', 0x0, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./sys/devices/system/cpu/cpuidle/available_governors\x00', 0x0, 0x0) read(r3, &(0x7f0000000d00)=""/100, 0x64) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000580)={'wpan1\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000e80), 0x141100, 0x0) ioctl$BLKZEROOUT(r5, 0x127f, 0x0) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x38, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) (async, rerun: 32) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r12], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000bc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0xe8, 0x0, 0x800, 0x70bd28, 0x27dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x64, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd9}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x40000) (async) ioctl$XFS_IOC_FREE_EOFBLOCKS(r13, 0x8080583a, &(0x7f0000000480)={0x7, 0x7, 0x3ff, 0x7, 0x40, 0x0, 0x8}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan3\x00'}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (rerun: 64) 717.636674ms ago: executing program 1 (id=2320): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0xb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x1}, 0x1c, 0x0}}], 0x1, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000280)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x8000) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000001c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000002c0)={0x0, 0xfe}, 0x2) read(r1, &(0x7f0000000300)=""/93, 0x5d) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x24, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000380)={0x2, 0x4}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000003c0)={0x2, 0x4}, 0x2) 341.07976ms ago: executing program 3 (id=2321): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='\x00\x00)'], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x3c, r2, 0x1, 0xfffffffd, 0xfffffffe, {0x24}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20041094) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x90, r4, 0x301, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe84}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc040}, 0x40008d0) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xb4, r4, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xb365}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb0f7}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x402f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2b1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x14}, 0x880) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000640)={0x18, 0x0, {0x1, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000000700)) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x80002, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000780)) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x143603, 0x0) ioctl(r8, 0x40047438, &(0x7f0000000800)) ioctl$PPPIOCCONNECT(r8, 0x4004743a, &(0x7f0000000840)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000880)=0xc203400) pwritev(r7, &(0x7f00000008c0)=[{&(0x7f0000000900)="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", 0x5d1}], 0x1, 0xfffffffa, 0xc) write(r5, &(0x7f0000000200)='select \n', 0x10) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000571000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 0s ago: executing program 2 (id=2322): mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000780)='./sys\x00', &(0x7f00000007c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/module/phram/parameters/phram\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='test,0x8000000000000000,0x1000', 0x1e) kernel console output (not intermixed with test programs): 598120][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598130][ T5721] gspca_stk1135: Sensor read failed [ 477.598156][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598166][ T5721] gspca_stk1135: Sensor read failed [ 477.598173][ T5721] gspca_stk1135: Detected sensor type unknown (0x0) [ 477.598206][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598215][ T5721] gspca_stk1135: Sensor read failed [ 477.598242][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598251][ T5721] gspca_stk1135: Sensor read failed [ 477.598278][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598287][ T5721] gspca_stk1135: Sensor write failed [ 477.598315][ T5721] gspca_stk1135: serial bus timeout: status=0x00 [ 477.598325][ T5721] gspca_stk1135: Sensor write failed [ 477.598395][ T5721] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 477.612554][ T5721] usb 2-1: USB disconnect, device number 119 [ 477.621228][ T5376] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 477.771529][ T5376] usb 3-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 477.772575][ T5376] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 477.772599][ T5376] usb 3-1: config 0 has no interface number 0 [ 477.772639][ T5376] usb 3-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 477.772653][ T5376] usb 3-1: config 0 interface 41 has no altsetting 0 [ 477.776110][ T5376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.776134][ T5376] usb 3-1: Product: syz [ 477.776150][ T5376] usb 3-1: Manufacturer: syz [ 477.776164][ T5376] usb 3-1: SerialNumber: syz [ 477.778060][ T5376] usb 3-1: config 0 descriptor?? [ 477.786320][ T5376] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 478.115581][T12156] Process accounting paused [ 478.181164][ T5376] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 478.340990][ T5376] usb 4-1: Using ep0 maxpacket: 8 [ 478.341522][ T5376] usb 4-1: New USB device found: idVendor=194f, idProduct=010c, bcdDevice=0.40 [ 478.342465][ T5376] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 478.344345][ T5376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.344368][ T5376] usb 4-1: Product: syz [ 478.344382][ T5376] usb 4-1: Manufacturer: syz [ 478.344397][ T5376] usb 4-1: SerialNumber: syz [ 478.530912][ T2262] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 478.681797][ T2262] usb 2-1: Using ep0 maxpacket: 32 [ 478.683694][ T2262] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 478.688789][ T2262] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 478.688816][ T2262] usb 2-1: config 0 has no interface number 0 [ 478.695988][ T2262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.696014][ T2262] usb 2-1: Product: syz [ 478.696029][ T2262] usb 2-1: Manufacturer: syz [ 478.696043][ T2262] usb 2-1: SerialNumber: syz [ 478.707795][ T2262] usb 2-1: config 0 descriptor?? [ 478.848808][ T5376] usb 4-1: unit 4 not found! [ 478.921475][ T5376] usb 4-1: USB disconnect, device number 127 [ 478.973074][ T5654] udevd[5654]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.117716][ T2262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 479.117739][ T2262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 479.817965][T12190] FAULT_INJECTION: forcing a failure. [ 479.817965][T12190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.818000][T12190] CPU: 0 UID: 0 PID: 12190 Comm: syz.3.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.818026][T12190] Tainted: [L]=SOFTLOCKUP [ 479.818034][T12190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.818045][T12190] Call Trace: [ 479.818051][T12190] [ 479.818056][T12190] dump_stack_lvl+0xe8/0x150 [ 479.818077][T12190] should_fail_ex+0x3eb/0x540 [ 479.818098][T12190] _copy_to_user+0x31/0xb0 [ 479.818110][T12190] simple_read_from_buffer+0xe1/0x170 [ 479.818126][T12190] proc_fail_nth_read+0x1bb/0x230 [ 479.818150][T12190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.818168][T12190] ? rw_verify_area+0x24a/0x4c0 [ 479.818182][T12190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.818197][T12190] vfs_read+0x213/0xa80 [ 479.818213][T12190] ? __pfx___mutex_lock+0x10/0x10 [ 479.818230][T12190] ? __pfx_vfs_read+0x10/0x10 [ 479.818245][T12190] ? __fget_files+0x2a/0x420 [ 479.818259][T12190] ? __fget_files+0x3a2/0x420 [ 479.818270][T12190] ? __fget_files+0x2a/0x420 [ 479.818284][T12190] ? fdget+0x1ac/0x250 [ 479.818299][T12190] ksys_read+0x150/0x270 [ 479.818313][T12190] ? __pfx_ksys_read+0x10/0x10 [ 479.818332][T12190] do_syscall_64+0x166/0x520 [ 479.818347][T12190] ? trace_irq_disable+0x3b/0x140 [ 479.818360][T12190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.818371][T12190] ? clear_bhb_loop+0x70/0xc0 [ 479.818384][T12190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.818394][T12190] RIP: 0033:0x7fed69f5fd8e [ 479.818406][T12190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 479.818415][T12190] RSP: 002b:00007fed6adb8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.818428][T12190] RAX: ffffffffffffffda RBX: 00007fed6adb96c0 RCX: 00007fed69f5fd8e [ 479.818436][T12190] RDX: 000000000000000f RSI: 00007fed6adb90a0 RDI: 0000000000000007 [ 479.818442][T12190] RBP: 00007fed6adb9090 R08: 0000000000000000 R09: 0000000000000000 [ 479.818449][T12190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.818455][T12190] R13: 00007fed6a226038 R14: 00007fed6a225fa0 R15: 00007ffd26ec75d8 [ 479.818473][T12190] [ 480.323892][ T2262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 480.324167][ T2262] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 480.389899][T11926] usb 3-1: USB disconnect, device number 114 [ 480.790917][T11926] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 480.941584][T11926] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 480.942743][T11926] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 480.942791][T11926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.943816][T11926] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 480.943839][T11926] usb 3-1: Manufacturer: syz [ 480.947371][T11926] usb 3-1: config 0 descriptor?? [ 481.071297][T11926] rc_core: IR keymap rc-hauppauge not found [ 481.072017][T11926] Registered IR keymap rc-empty [ 481.075733][T11926] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 481.077846][T11926] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input93 [ 481.167878][T12225] FAULT_INJECTION: forcing a failure. [ 481.167878][T12225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.167916][T12225] CPU: 1 UID: 0 PID: 12225 Comm: syz.3.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 481.167943][T12225] Tainted: [L]=SOFTLOCKUP [ 481.167951][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.167963][T12225] Call Trace: [ 481.167971][T12225] [ 481.167988][T12225] dump_stack_lvl+0xe8/0x150 [ 481.168023][T12225] should_fail_ex+0x3eb/0x540 [ 481.168060][T12225] _copy_to_user+0x31/0xb0 [ 481.168082][T12225] simple_read_from_buffer+0xe1/0x170 [ 481.168112][T12225] proc_fail_nth_read+0x1bb/0x230 [ 481.168145][T12225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.168178][T12225] ? rw_verify_area+0x24a/0x4c0 [ 481.168204][T12225] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 481.168233][T12225] vfs_read+0x213/0xa80 [ 481.168263][T12225] ? __pfx___mutex_lock+0x10/0x10 [ 481.168294][T12225] ? __pfx_vfs_read+0x10/0x10 [ 481.168320][T12225] ? __fget_files+0x2a/0x420 [ 481.168341][T12225] ? __fget_files+0x3a2/0x420 [ 481.168363][T12225] ? __fget_files+0x2a/0x420 [ 481.168390][T12225] ? fdget+0x1ac/0x250 [ 481.168419][T12225] ksys_read+0x150/0x270 [ 481.168446][T12225] ? __pfx_ksys_read+0x10/0x10 [ 481.168482][T12225] do_syscall_64+0x166/0x520 [ 481.168510][T12225] ? trace_irq_disable+0x3b/0x140 [ 481.168534][T12225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.168556][T12225] ? clear_bhb_loop+0x70/0xc0 [ 481.168581][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.168601][T12225] RIP: 0033:0x7fed69f5fd8e [ 481.168620][T12225] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 481.168638][T12225] RSP: 002b:00007fed6ad97fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.168663][T12225] RAX: ffffffffffffffda RBX: 00007fed6ad986c0 RCX: 00007fed69f5fd8e [ 481.168679][T12225] RDX: 000000000000000f RSI: 00007fed6ad980a0 RDI: 0000000000000007 [ 481.168692][T12225] RBP: 00007fed6ad98090 R08: 0000000000000000 R09: 0000000000000000 [ 481.168705][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.168717][T12225] R13: 00007fed6a226128 R14: 00007fed6a226090 R15: 00007ffd26ec75d8 [ 481.168751][T12225] [ 481.630120][ T5376] usb 2-1: USB disconnect, device number 120 [ 481.710130][ T5721] usb 3-1: USB disconnect, device number 115 [ 481.911122][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 482.030903][ T5376] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 482.061515][ T32] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 482.062463][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.062481][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.062502][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.064158][ T32] usb 4-1: config 0 descriptor?? [ 482.181365][ T5376] usb 2-1: New USB device found: idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 482.182187][ T5376] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 482.182209][ T5376] usb 2-1: config 0 has no interface number 0 [ 482.184200][ T5376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.184243][ T5376] usb 2-1: Product: syz [ 482.184252][ T5376] usb 2-1: Manufacturer: syz [ 482.184260][ T5376] usb 2-1: SerialNumber: syz [ 482.186286][ T5376] usb 2-1: config 0 descriptor?? [ 482.190355][ T5376] usb 2-1: selecting invalid altsetting 1 [ 482.190479][ T5376] dvb_ttusb_budget: ttusb_init_controller: error [ 482.190487][ T5376] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 482.318255][ T5376] DVB: Unable to find symbol stv0299_attach() [ 482.375488][ T5376] DVB: Unable to find symbol tda8083_attach() [ 482.375508][ T5376] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 482.427133][T11926] usb 2-1: USB disconnect, device number 121 [ 482.483546][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483582][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483607][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483633][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483660][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483688][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.483758][ T32] cp2112 0003:10C4:EA90.002C: unknown main item tag 0x0 [ 482.488084][ T32] cp2112 0003:10C4:EA90.002C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 482.651099][ T10] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 482.682973][ T32] cp2112 0003:10C4:EA90.002C: Part Number: 0x00 Device Version: 0x00 [ 482.801584][ T10] usb 3-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 482.802664][ T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 482.802689][ T10] usb 3-1: config 0 has no interface number 0 [ 482.802729][ T10] usb 3-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 482.802743][ T10] usb 3-1: config 0 interface 41 has no altsetting 0 [ 482.804905][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.804919][ T10] usb 3-1: Product: syz [ 482.804928][ T10] usb 3-1: Manufacturer: syz [ 482.804938][ T10] usb 3-1: SerialNumber: syz [ 482.807130][ T10] usb 3-1: config 0 descriptor?? [ 482.822186][ T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 483.271001][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2156'. [ 483.275612][T12258] veth2: entered allmulticast mode [ 483.297866][ T32] cp2112 0003:10C4:EA90.002C: error reading lock byte: -71 [ 483.313350][ T32] usb 4-1: USB disconnect, device number 2 [ 483.438991][T12261] netlink: 'syz.0.2157': attribute type 11 has an invalid length. [ 483.456997][T12261] jffs2: notice: (12261) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 483.484470][T12261] FAULT_INJECTION: forcing a failure. [ 483.484470][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 483.484503][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.0.2157 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.484530][T12261] Tainted: [L]=SOFTLOCKUP [ 483.484538][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 483.484551][T12261] Call Trace: [ 483.484559][T12261] [ 483.484568][T12261] dump_stack_lvl+0xe8/0x150 [ 483.484607][T12261] should_fail_ex+0x3eb/0x540 [ 483.484645][T12261] ? __alloc_empty_sheaf+0x28/0x40 [ 483.484669][T12261] should_failslab+0xa8/0x100 [ 483.484700][T12261] ? __alloc_empty_sheaf+0x28/0x40 [ 483.484720][T12261] __kmalloc_flags_noprof+0x123/0x790 [ 483.484747][T12261] ? __alloc_empty_sheaf+0x28/0x40 [ 483.484777][T12261] __alloc_empty_sheaf+0x28/0x40 [ 483.484798][T12261] __pcs_replace_empty_main+0x43b/0x6c0 [ 483.484837][T12261] kmem_cache_alloc_noprof+0x394/0x600 [ 483.484858][T12261] ? __local_bh_enable_ip+0xd6/0x140 [ 483.484892][T12261] ? jffs2_do_read_inode_internal+0xd42/0x6790 [ 483.484976][T12261] ? kmem_cache_alloc_noprof+0x151/0x600 [ 483.484998][T12261] ? jffs2_do_read_inode_internal+0xd42/0x6790 [ 483.485030][T12261] jffs2_do_read_inode_internal+0xd42/0x6790 [ 483.485052][T12261] ? security_inode_alloc+0x39/0x310 [ 483.485081][T12261] ? kmem_cache_alloc_noprof+0x151/0x600 [ 483.485142][T12261] ? __pfx_jffs2_do_read_inode_internal+0x10/0x10 [ 483.485171][T12261] ? __mutex_trylock_common+0x15f/0x270 [ 483.485224][T12261] ? do_raw_spin_unlock+0xf5/0x200 [ 483.485260][T12261] jffs2_do_read_inode+0x4b4/0x6a0 [ 483.485293][T12261] ? __pfx_jffs2_do_read_inode+0x10/0x10 [ 483.485323][T12261] ? _raw_spin_unlock+0x28/0x50 [ 483.485359][T12261] jffs2_iget+0x228/0xcc0 [ 483.485386][T12261] ? __pfx_jffs2_iget+0x10/0x10 [ 483.485422][T12261] ? make_vfsuid+0x49/0xa0 [ 483.485490][T12261] ? generic_permission+0x2ba/0x660 [ 483.485509][T12261] ? full_name_hash+0x92/0xe0 [ 483.485535][T12261] jffs2_lookup+0x377/0x430 [ 483.485602][T12261] lookup_open+0x94b/0x1970 [ 483.485658][T12261] path_openat+0x70c/0x20f0 [ 483.485705][T12261] do_file_open+0x23e/0x4a0 [ 483.485739][T12261] ? __pfx_do_file_open+0x10/0x10 [ 483.485791][T12261] ? _raw_spin_unlock+0x28/0x50 [ 483.485818][T12261] ? alloc_fd+0x6af/0x760 [ 483.485859][T12261] do_sys_openat2+0x115/0x200 [ 483.485881][T12261] ? __se_sys_futex+0x3a8/0x450 [ 483.485921][T12261] ? __pfx_do_sys_openat2+0x10/0x10 [ 483.485948][T12261] ? rcu_is_watching+0x16/0xb0 [ 483.485983][T12261] __x64_sys_open+0x11e/0x150 [ 483.486009][T12261] do_syscall_64+0x166/0x520 [ 483.486039][T12261] ? trace_irq_disable+0x3b/0x140 [ 483.486063][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.486084][T12261] ? clear_bhb_loop+0x70/0xc0 [ 483.486110][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.486132][T12261] RIP: 0033:0x7f6002b9f559 [ 483.486153][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.486172][T12261] RSP: 002b:00007f6003a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 483.486196][T12261] RAX: ffffffffffffffda RBX: 00007f6002e25fa0 RCX: 00007f6002b9f559 [ 483.486212][T12261] RDX: 00000000000001c0 RSI: 00000000000a23c6 RDI: 0000200000000640 [ 483.486228][T12261] RBP: 00007f6002c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 483.486242][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.486256][T12261] R13: 00007f6002e26038 R14: 00007f6002e25fa0 R15: 00007ffe087b3b08 [ 483.486292][T12261] [ 483.557198][ T10] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 483.674964][ T10] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 484.079082][T12274] FAULT_INJECTION: forcing a failure. [ 484.079082][T12274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.079105][T12274] CPU: 1 UID: 0 PID: 12274 Comm: syz.1.2162 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.079120][T12274] Tainted: [L]=SOFTLOCKUP [ 484.079124][T12274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 484.079131][T12274] Call Trace: [ 484.079136][T12274] [ 484.079141][T12274] dump_stack_lvl+0xe8/0x150 [ 484.079162][T12274] should_fail_ex+0x3eb/0x540 [ 484.079182][T12274] _copy_from_iter+0x1d3/0x1680 [ 484.079197][T12274] ? __might_fault+0xaf/0x130 [ 484.079216][T12274] ? _copy_from_iter+0x21b/0x1680 [ 484.079230][T12274] ? sock_alloc_send_pskb+0xc87/0xd90 [ 484.079246][T12274] ? __pfx__copy_from_iter+0x10/0x10 [ 484.079264][T12274] ? __pfx__copy_from_iter+0x10/0x10 [ 484.079286][T12274] copy_page_from_iter+0x219/0x2d0 [ 484.079304][T12274] skb_copy_datagram_from_iter+0x2f4/0x720 [ 484.079326][T12274] packet_sendmsg+0x390b/0x5330 [ 484.079422][T12274] ? __lock_acquire+0x747/0x2de0 [ 484.079439][T12274] ? __lock_acquire+0x747/0x2de0 [ 484.079451][T12274] ? __lock_acquire+0x747/0x2de0 [ 484.079465][T12274] ? kstrtouint+0x6e/0xe0 [ 484.079482][T12274] ? __pfx_packet_sendmsg+0x10/0x10 [ 484.079496][T12274] ? aa_sk_perm+0x6ff/0x8f0 [ 484.079514][T12274] ? rwsem_del_wake_waiter+0x42/0x2d0 [ 484.079530][T12274] ? __pfx_aa_sk_perm+0x10/0x10 [ 484.079545][T12274] ? aa_sock_msg_perm+0x144/0x210 [ 484.079562][T12274] ? apparmor_socket_sendmsg+0x98/0x360 [ 484.079576][T12274] ? __pfx_packet_sendmsg+0x10/0x10 [ 484.079591][T12274] sock_sendmsg_nosec+0x14e/0x190 [ 484.079603][T12274] __sys_sendto+0x408/0x5a0 [ 484.079616][T12274] ? ksys_write+0x1e6/0x270 [ 484.079631][T12274] ? __pfx___sys_sendto+0x10/0x10 [ 484.079643][T12274] ? __mutex_unlock_slowpath+0x731/0x900 [ 484.079666][T12274] ? fdget+0x1ac/0x250 [ 484.079693][T12274] ? __pfx_ksys_write+0x10/0x10 [ 484.079719][T12274] __x64_sys_sendto+0xde/0x100 [ 484.079744][T12274] do_syscall_64+0x166/0x520 [ 484.079772][T12274] ? trace_irq_disable+0x3b/0x140 [ 484.079802][T12274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.079817][T12274] ? clear_bhb_loop+0x70/0xc0 [ 484.079830][T12274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.079841][T12274] RIP: 0033:0x7f5fe299f559 [ 484.079852][T12274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.079862][T12274] RSP: 002b:00007f5fe378a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 484.079874][T12274] RAX: ffffffffffffffda RBX: 00007f5fe2c25fa0 RCX: 00007f5fe299f559 [ 484.079882][T12274] RDX: 00000000000100a6 RSI: 0000200000000080 RDI: 0000000000000003 [ 484.079889][T12274] RBP: 00007f5fe378a090 R08: 00002000000000c0 R09: 0000000000000050 [ 484.079896][T12274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.079903][T12274] R13: 00007f5fe2c26038 R14: 00007f5fe2c25fa0 R15: 00007ffe9d4226c8 [ 484.079919][T12274] [ 484.220904][ T2262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 484.371714][ T2262] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 484.373004][ T2262] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 484.373051][ T2262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 484.374279][ T2262] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 484.374301][ T2262] usb 4-1: Manufacturer: syz [ 484.377743][ T2262] usb 4-1: config 0 descriptor?? [ 484.480897][ T2262] rc_core: IR keymap rc-hauppauge not found [ 484.480913][ T2262] Registered IR keymap rc-empty [ 484.481982][ T2262] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 484.483620][ T2262] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input94 [ 484.492175][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 484.640908][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 484.641708][ T10] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 484.642662][ T10] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 484.642686][ T10] usb 2-1: config 0 has no interface number 0 [ 484.642726][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 484.642752][ T10] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 484.644685][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.644710][ T10] usb 2-1: Product: syz [ 484.644725][ T10] usb 2-1: Manufacturer: syz [ 484.644740][ T10] usb 2-1: SerialNumber: syz [ 484.647068][ T10] usb 2-1: config 0 descriptor?? [ 484.647947][T12277] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 484.648167][T12277] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 484.844829][ T32] usb 4-1: USB disconnect, device number 3 [ 484.859699][T12277] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 484.859851][T12277] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 485.060911][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 485.397677][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.397984][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.416603][T11926] usb 3-1: USB disconnect, device number 116 [ 485.467482][T12285] input: syz0 as /devices/virtual/input/input95 [ 485.578386][T12287] FAULT_INJECTION: forcing a failure. [ 485.578386][T12287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 485.578425][T12287] CPU: 1 UID: 0 PID: 12287 Comm: syz.2.2166 Tainted: G L syzkaller #0 PREEMPT(full) [ 485.578444][T12287] Tainted: [L]=SOFTLOCKUP [ 485.578449][T12287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.578456][T12287] Call Trace: [ 485.578461][T12287] [ 485.578467][T12287] dump_stack_lvl+0xe8/0x150 [ 485.578491][T12287] should_fail_ex+0x3eb/0x540 [ 485.578529][T12287] prepare_alloc_pages+0x21e/0x5f0 [ 485.578562][T12287] __alloc_frozen_pages_noprof+0x17c/0x410 [ 485.578590][T12287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 485.578614][T12287] alloc_pages_mpol+0x21e/0x390 [ 485.578634][T12287] alloc_pages_noprof+0xb1/0x2b0 [ 485.578657][T12287] kimage_alloc_pages+0xbe/0x3c0 [ 485.578687][T12287] kimage_alloc_page+0xa6/0x880 [ 485.578726][T12287] kimage_load_segment+0xbec/0x1220 [ 485.578753][T12287] do_kexec_load+0x637/0x7c0 [ 485.578770][T12287] ? __pfx_do_kexec_load+0x10/0x10 [ 485.578786][T12287] ? _copy_from_user+0x94/0xb0 [ 485.578801][T12287] __se_sys_kexec_load+0x134/0x160 [ 485.578833][T12287] do_syscall_64+0x166/0x520 [ 485.578865][T12287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.578886][T12287] ? clear_bhb_loop+0x70/0xc0 [ 485.578901][T12287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.578912][T12287] RIP: 0033:0x7f0e1c59f559 [ 485.578924][T12287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.578934][T12287] RSP: 002b:00007f0e1d3b2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 485.578946][T12287] RAX: ffffffffffffffda RBX: 00007f0e1c825fa0 RCX: 00007f0e1c59f559 [ 485.578961][T12287] RDX: 00002000000006c0 RSI: 0000000000000001 RDI: 0000000000000140 [ 485.578975][T12287] RBP: 00007f0e1c636b20 R08: 0000000000000000 R09: 0000000000000000 [ 485.578989][T12287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 485.579002][T12287] R13: 00007f0e1c826038 R14: 00007f0e1c825fa0 R15: 00007fff40099088 [ 485.579042][T12287] [ 485.630852][ T32] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 485.805240][ T32] usb 4-1: device descriptor read/64, error -71 [ 486.041132][ T32] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 486.041520][ T2262] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 486.170829][ T32] usb 4-1: device descriptor read/64, error -71 [ 486.190944][ T2262] usb 3-1: Using ep0 maxpacket: 8 [ 486.191558][ T2262] usb 3-1: New USB device found: idVendor=1e7d, idProduct=3138, bcdDevice=0.00 [ 486.192418][ T2262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.192435][ T2262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.192447][ T2262] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 486.192471][ T2262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.195211][ T2262] usb 3-1: config 0 descriptor?? [ 486.282669][ T32] usb usb4-port1: attempt power cycle [ 486.630872][ T32] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 486.651292][ T32] usb 4-1: device descriptor read/8, error -71 [ 486.680172][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 486.680226][ T10] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 486.680477][ T10] asix 2-1:0.34: probe with driver asix failed with error -71 [ 486.696331][ T10] usb 2-1: USB disconnect, device number 122 [ 486.805297][ T2262] usbhid 3-1:0.0: can't add hid device: -71 [ 486.805366][ T2262] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 486.812578][ T2262] usb 3-1: USB disconnect, device number 117 [ 486.900834][ T32] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 486.921669][ T32] usb 4-1: device descriptor read/8, error -71 [ 487.041137][ T32] usb usb4-port1: unable to enumerate USB device [ 487.461014][ T2262] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 487.620875][ T32] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 487.641868][ T2262] usb 2-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 487.642918][ T2262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.644642][ T2262] usb 2-1: config 0 descriptor?? [ 487.648298][ T2262] cp210x 2-1:0.0: cp210x converter detected [ 487.770890][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 487.771642][ T32] usb 3-1: New USB device found: idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 487.772985][ T32] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 487.773003][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.773021][ T32] usb 3-1: config 0 has no interface number 0 [ 487.775090][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.775133][ T32] usb 3-1: Product: syz [ 487.775149][ T32] usb 3-1: Manufacturer: syz [ 487.775161][ T32] usb 3-1: SerialNumber: syz [ 487.777470][ T32] usb 3-1: config 0 descriptor?? [ 487.782078][ T32] uvcvideo 3-1:0.31: probe with driver uvcvideo failed with error -22 [ 487.980941][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.981370][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.991561][ T32] usb 3-1: USB disconnect, device number 118 [ 488.049170][ T2262] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 488.066954][ T2262] usb 2-1: cp210x converter now attached to ttyUSB0 [ 488.252022][ T32] usb 2-1: USB disconnect, device number 123 [ 488.266530][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 488.267081][ T32] cp210x 2-1:0.0: device disconnected [ 488.418079][T12301] FAULT_INJECTION: forcing a failure. [ 488.418079][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 488.418102][T12301] CPU: 0 UID: 0 PID: 12301 Comm: syz.3.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.418117][T12301] Tainted: [L]=SOFTLOCKUP [ 488.418121][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.418128][T12301] Call Trace: [ 488.418133][T12301] [ 488.418138][T12301] dump_stack_lvl+0xe8/0x150 [ 488.418160][T12301] should_fail_ex+0x3eb/0x540 [ 488.418181][T12301] should_failslab+0xa8/0x100 [ 488.418198][T12301] __kmalloc_cache_noprof+0x9e/0x600 [ 488.418211][T12301] ? nft_trans_table_add+0x56/0x430 [ 488.418226][T12301] ? nft_trans_table_add+0x56/0x430 [ 488.418237][T12301] ? __asan_memset+0x22/0x50 [ 488.418251][T12301] nft_trans_table_add+0x56/0x430 [ 488.418265][T12301] nf_tables_newtable+0xd26/0x1990 [ 488.418287][T12301] nfnetlink_rcv+0x1288/0x28c0 [ 488.418316][T12301] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 488.418349][T12301] ? skb_clone+0x246/0x3a0 [ 488.418396][T12301] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.418409][T12301] ? netlink_deliver_tap+0x2e/0x1b0 [ 488.418423][T12301] netlink_unicast+0x8ef/0xa80 [ 488.418449][T12301] netlink_sendmsg+0x7f0/0xb20 [ 488.418464][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.418478][T12301] ? aa_sock_msg_perm+0x144/0x210 [ 488.418498][T12301] ? apparmor_socket_sendmsg+0x98/0x360 [ 488.418513][T12301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 488.418524][T12301] sock_sendmsg_nosec+0x14e/0x190 [ 488.418537][T12301] ____sys_sendmsg+0x54e/0x850 [ 488.418554][T12301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 488.418573][T12301] ? import_iovec+0x73/0xa0 [ 488.418592][T12301] ___sys_sendmsg+0x2a6/0x360 [ 488.418605][T12301] ? __lock_acquire+0x747/0x2de0 [ 488.418620][T12301] ? __pfx____sys_sendmsg+0x10/0x10 [ 488.418653][T12301] ? __fget_files+0x3a2/0x420 [ 488.418665][T12301] ? __fget_files+0x2a/0x420 [ 488.418682][T12301] __x64_sys_sendmsg+0x1b1/0x290 [ 488.418698][T12301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 488.418723][T12301] do_syscall_64+0x166/0x520 [ 488.418741][T12301] ? trace_irq_disable+0x3b/0x140 [ 488.418754][T12301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.418765][T12301] ? clear_bhb_loop+0x70/0xc0 [ 488.418779][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.418789][T12301] RIP: 0033:0x7fed69f9f559 [ 488.418800][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.418809][T12301] RSP: 002b:00007fed6adb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 488.418822][T12301] RAX: ffffffffffffffda RBX: 00007fed6a225fa0 RCX: 00007fed69f9f559 [ 488.418830][T12301] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 488.418837][T12301] RBP: 00007fed6adb9090 R08: 0000000000000000 R09: 0000000000000000 [ 488.418844][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.418850][T12301] R13: 00007fed6a226038 R14: 00007fed6a225fa0 R15: 00007ffd26ec75d8 [ 488.418867][T12301] [ 488.822380][ T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 488.831756][ T27] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 488.878702][T12307] comedi comedi3: das16m1: I/O base address not correctly aligned [ 488.878931][T12307] sg_write: data in/out 819164/136 bytes for SCSI command 0x0-- guessing data in; [ 488.878931][T12307] program syz.1.2175 not setting count and/or reply_len properly [ 488.981614][ T10] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 488.982630][ T10] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 488.982681][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.983833][ T10] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 488.983859][ T10] usb 3-1: Manufacturer: syz [ 488.988819][ T10] usb 3-1: config 0 descriptor?? [ 489.012359][ T27] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 489.013679][ T27] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 489.013703][ T27] usb 4-1: config 0 has no interface number 0 [ 489.013752][ T27] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 489.013774][ T27] usb 4-1: config 0 interface 41 has no altsetting 0 [ 489.017172][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.017196][ T27] usb 4-1: Product: syz [ 489.017211][ T27] usb 4-1: Manufacturer: syz [ 489.017225][ T27] usb 4-1: SerialNumber: syz [ 489.023460][ T27] usb 4-1: config 0 descriptor?? [ 489.030706][ T27] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 489.160997][ T10] rc_core: IR keymap rc-hauppauge not found [ 489.161017][ T10] Registered IR keymap rc-empty [ 489.162233][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 489.165256][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input96 [ 489.271126][ T27] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 489.422427][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 489.424618][ T27] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 489.426662][ T27] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 489.426690][ T27] usb 2-1: config 0 has no interface number 0 [ 489.430273][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.430298][ T27] usb 2-1: Product: syz [ 489.430312][ T27] usb 2-1: Manufacturer: syz [ 489.430328][ T27] usb 2-1: SerialNumber: syz [ 489.435460][ T27] usb 2-1: config 0 descriptor?? [ 489.489504][ T5376] usb 3-1: USB disconnect, device number 119 [ 489.829565][T12317] device-mapper: table: 248:1: integrity: Device lookup failed (-EBUSY) [ 489.829583][T12317] device-mapper: ioctl: error adding target to table [ 489.847123][ T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 489.847142][ T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 489.849590][T12317] FAULT_INJECTION: forcing a failure. [ 489.849590][T12317] name failslab, interval 1, probability 0, space 0, times 0 [ 489.849611][T12317] CPU: 0 UID: 0 PID: 12317 Comm: syz.0.2177 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.849627][T12317] Tainted: [L]=SOFTLOCKUP [ 489.849631][T12317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.849640][T12317] Call Trace: [ 489.849644][T12317] [ 489.849650][T12317] dump_stack_lvl+0xe8/0x150 [ 489.849672][T12317] should_fail_ex+0x3eb/0x540 [ 489.849700][T12317] should_failslab+0xa8/0x100 [ 489.849718][T12317] __kmalloc_cache_noprof+0x9e/0x600 [ 489.849732][T12317] ? kvm_create_vm_debugfs+0x58f/0x8f0 [ 489.849743][T12317] ? kvm_create_vm_debugfs+0x58f/0x8f0 [ 489.849754][T12317] ? debugfs_create_file_full+0x3f/0x60 [ 489.849769][T12317] kvm_create_vm_debugfs+0x58f/0x8f0 [ 489.849784][T12317] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 489.849802][T12317] kvm_dev_ioctl+0x1245/0x1700 [ 489.849817][T12317] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 489.849830][T12317] ? bpf_lsm_file_ioctl+0x9/0x20 [ 489.849846][T12317] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 489.849857][T12317] __se_sys_ioctl+0xfc/0x170 [ 489.849874][T12317] do_syscall_64+0x166/0x520 [ 489.849891][T12317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.849903][T12317] ? clear_bhb_loop+0x70/0xc0 [ 489.849916][T12317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.849927][T12317] RIP: 0033:0x7f6002b9f559 [ 489.849939][T12317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.849948][T12317] RSP: 002b:00007f6003a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 489.849961][T12317] RAX: ffffffffffffffda RBX: 00007f6002e25fa0 RCX: 00007f6002b9f559 [ 489.849970][T12317] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 489.849976][T12317] RBP: 00007f6002c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 489.849983][T12317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.849990][T12317] R13: 00007f6002e26038 R14: 00007f6002e25fa0 R15: 00007ffe087b3b08 [ 489.850007][T12317] [ 490.390945][ T5376] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 490.551575][ T5376] usb 3-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 490.552386][ T5376] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 490.552430][ T5376] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.552442][ T5376] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 490.552455][ T5376] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 490.553802][ T5376] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 490.553830][ T5376] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 490.553842][ T5376] usb 3-1: config 2 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 490.553854][ T5376] usb 3-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 490.555517][ T5376] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.555540][ T5376] usb 3-1: Product: syz [ 490.555555][ T5376] usb 3-1: Manufacturer: syz [ 490.555570][ T5376] usb 3-1: SerialNumber: syz [ 490.565151][ T5376] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 490.565585][ T5376] ti_usb_3410_5052 3-1:2.0: missing endpoints [ 490.671927][ T27] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 490.672186][ T27] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 490.764322][ T27] usb 3-1: USB disconnect, device number 120 [ 491.357513][T12328] input: syz0 as /devices/virtual/input/input97 [ 491.509426][ T2262] usb 4-1: USB disconnect, device number 8 [ 491.620889][ T10] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 491.770937][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 491.771485][ T10] usb 3-1: New USB device found: idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 491.774306][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 491.774331][ T10] usb 3-1: Product: syz [ 491.774346][ T10] usb 3-1: Manufacturer: syz [ 491.774360][ T10] usb 3-1: SerialNumber: syz [ 491.776193][ T10] usb 3-1: config 0 descriptor?? [ 491.780055][ T10] gspca_main: sq905-2.14.0 probing 2770:9120 [ 491.881189][ T2262] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 492.029083][ T27] usb 2-1: USB disconnect, device number 124 [ 492.030860][ T2262] usb 4-1: Using ep0 maxpacket: 32 [ 492.047432][ T2262] usb 4-1: unable to get BOS descriptor or descriptor too short [ 492.048087][ T2262] usb 4-1: New USB device found: idVendor=0644, idProduct=800e, bcdDevice=0.40 [ 492.050571][ T2262] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.050594][ T2262] usb 4-1: config 0 has no interfaces? [ 492.089881][ T2262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.089909][ T2262] usb 4-1: Product: syz [ 492.089924][ T2262] usb 4-1: Manufacturer: syz [ 492.089938][ T2262] usb 4-1: SerialNumber: syz [ 492.094387][T12334] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 492.127718][ T2262] usb 4-1: config 0 descriptor?? [ 492.149222][T12336] skbuff: bad partial csum: csum=65535/2 headroom=2 headlen=65543 [ 492.290650][T12344] FAULT_INJECTION: forcing a failure. [ 492.290650][T12344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.290673][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.1.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.290688][T12344] Tainted: [L]=SOFTLOCKUP [ 492.290692][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.290702][T12344] Call Trace: [ 492.290707][T12344] [ 492.290712][T12344] dump_stack_lvl+0xe8/0x150 [ 492.290738][T12344] should_fail_ex+0x3eb/0x540 [ 492.290771][T12344] _copy_to_user+0x31/0xb0 [ 492.290792][T12344] simple_read_from_buffer+0xe1/0x170 [ 492.290818][T12344] proc_fail_nth_read+0x1bb/0x230 [ 492.290848][T12344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.290881][T12344] ? rw_verify_area+0x24a/0x4c0 [ 492.290907][T12344] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.290933][T12344] vfs_read+0x213/0xa80 [ 492.290969][T12344] ? __pfx___mutex_lock+0x10/0x10 [ 492.290999][T12344] ? __pfx_vfs_read+0x10/0x10 [ 492.291024][T12344] ? __fget_files+0x2a/0x420 [ 492.291045][T12344] ? __fget_files+0x3a2/0x420 [ 492.291065][T12344] ? __fget_files+0x2a/0x420 [ 492.291090][T12344] ? fdget+0x1ac/0x250 [ 492.291119][T12344] ksys_read+0x150/0x270 [ 492.291145][T12344] ? __pfx_ksys_read+0x10/0x10 [ 492.291167][T12344] ? fput+0xb1/0xd0 [ 492.291197][T12344] do_syscall_64+0x166/0x520 [ 492.291226][T12344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.291245][T12344] ? clear_bhb_loop+0x70/0xc0 [ 492.291269][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.291289][T12344] RIP: 0033:0x7f5fe295fd8e [ 492.291307][T12344] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.291323][T12344] RSP: 002b:00007f5fe3789fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.291344][T12344] RAX: ffffffffffffffda RBX: 00007f5fe378a6c0 RCX: 00007f5fe295fd8e [ 492.291358][T12344] RDX: 000000000000000f RSI: 00007f5fe378a0a0 RDI: 0000000000000004 [ 492.291370][T12344] RBP: 00007f5fe378a090 R08: 0000000000000000 R09: 0000000000000000 [ 492.291382][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.291394][T12344] R13: 00007f5fe2c26038 R14: 00007f5fe2c25fa0 R15: 00007ffe9d4226c8 [ 492.291422][T12344] [ 492.531727][ T10] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 492.531847][ T10] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 492.536106][ T2262] usb 4-1: USB disconnect, device number 9 [ 492.541640][ T10] usb 3-1: USB disconnect, device number 121 [ 492.621321][ T27] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 492.791791][ T27] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 492.792762][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 492.792781][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 492.792802][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.794639][ T27] usb 2-1: config 0 descriptor?? [ 493.202451][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202489][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202514][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202540][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202565][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202591][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.202616][ T27] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 493.206519][ T27] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 493.370903][ T2262] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 493.399979][ T27] cp2112 0003:10C4:EA90.002E: Part Number: 0x00 Device Version: 0x00 [ 493.400908][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 493.520811][ T2262] usb 3-1: Using ep0 maxpacket: 32 [ 493.521511][ T2262] usb 3-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 493.522426][ T2262] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 493.522449][ T2262] usb 3-1: config 0 has no interface number 0 [ 493.524272][ T2262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.524294][ T2262] usb 3-1: Product: syz [ 493.524309][ T2262] usb 3-1: Manufacturer: syz [ 493.524323][ T2262] usb 3-1: SerialNumber: syz [ 493.526586][ T2262] usb 3-1: config 0 descriptor?? [ 493.587935][ T10] usb 4-1: New USB device found: idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 493.589108][ T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 493.589134][ T10] usb 4-1: config 0 has no interface number 0 [ 493.589174][ T10] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 493.589223][ T10] usb 4-1: config 0 interface 41 has no altsetting 0 [ 493.631338][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.631379][ T10] usb 4-1: Product: syz [ 493.631388][ T10] usb 4-1: Manufacturer: syz [ 493.631396][ T10] usb 4-1: SerialNumber: syz [ 493.655994][ T10] usb 4-1: config 0 descriptor?? [ 493.666411][ T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 493.930710][ T2262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 493.930784][ T2262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 494.003873][ T27] cp2112 0003:10C4:EA90.002E: error reading lock byte: -71 [ 494.009771][ T27] usb 2-1: USB disconnect, device number 125 [ 494.544469][ T33] audit: type=1326 audit(1793402824.264:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12362 comm="syz.1.2191" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe299f559 code=0x0 [ 494.735740][ T2262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 494.735935][ T2262] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 495.640873][ T2262] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 495.792359][ T2262] usb 2-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 495.793378][ T2262] usb 2-1: config 1 has an invalid interface number: 3 but max is 0 [ 495.793404][ T2262] usb 2-1: config 1 has no interface number 0 [ 495.795396][ T2262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.795420][ T2262] usb 2-1: Product: syz [ 495.795436][ T2262] usb 2-1: Manufacturer: syz [ 495.795459][ T2262] usb 2-1: SerialNumber: syz [ 495.805324][ T2262] usb 2-1: 3:0 : does not exist [ 495.805347][ T2262] usb 2-1: 3:0 : does not exist [ 496.148290][ T27] usb 3-1: USB disconnect, device number 122 [ 496.197845][ T32] usb 4-1: USB disconnect, device number 10 [ 496.287877][T12381] FAULT_INJECTION: forcing a failure. [ 496.287877][T12381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.287902][T12381] CPU: 0 UID: 0 PID: 12381 Comm: syz.3.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.287918][T12381] Tainted: [L]=SOFTLOCKUP [ 496.287922][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 496.287929][T12381] Call Trace: [ 496.287934][T12381] [ 496.287940][T12381] dump_stack_lvl+0xe8/0x150 [ 496.287961][T12381] should_fail_ex+0x3eb/0x540 [ 496.287981][T12381] _copy_from_user+0x2d/0xb0 [ 496.287992][T12381] ___sys_recvmsg+0x173/0x5a0 [ 496.288011][T12381] ? __pfx____sys_recvmsg+0x10/0x10 [ 496.288028][T12381] ? lock_acquire+0x115/0x350 [ 496.288048][T12381] ? __fget_files+0x2a/0x420 [ 496.288060][T12381] ? __fget_files+0x3a2/0x420 [ 496.288071][T12381] ? __fget_files+0x2a/0x420 [ 496.288087][T12381] __x64_sys_recvmsg+0x1ae/0x290 [ 496.288104][T12381] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 496.288129][T12381] do_syscall_64+0x166/0x520 [ 496.288144][T12381] ? trace_irq_disable+0x3b/0x140 [ 496.288158][T12381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.288169][T12381] ? clear_bhb_loop+0x70/0xc0 [ 496.288182][T12381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.288192][T12381] RIP: 0033:0x7fed69f9f559 [ 496.288203][T12381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.288213][T12381] RSP: 002b:00007fed6ad98028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 496.288225][T12381] RAX: ffffffffffffffda RBX: 00007fed6a226090 RCX: 00007fed69f9f559 [ 496.288233][T12381] RDX: 0000000000000700 RSI: 0000200000000580 RDI: 0000000000000003 [ 496.288240][T12381] RBP: 00007fed6ad98090 R08: 0000000000000000 R09: 0000000000000000 [ 496.288247][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.288253][T12381] R13: 00007fed6a226128 R14: 00007fed6a226090 R15: 00007ffd26ec75d8 [ 496.288270][T12381] [ 497.106788][T12385] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 497.590888][ T2262] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 497.751370][ T2262] usb 3-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 497.752384][ T2262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.752416][ T2262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.752453][ T2262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.754313][ T2262] usb 3-1: config 0 descriptor?? [ 498.165890][ T2262] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 498.165929][ T2262] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 498.165956][ T2262] cp2112 0003:10C4:EA90.002F: unknown main item tag 0x0 [ 498.168596][ T2262] cp2112 0003:10C4:EA90.002F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 498.220941][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 498.363556][ T2262] cp2112 0003:10C4:EA90.002F: Part Number: 0x00 Device Version: 0x00 [ 498.380821][ T27] usb 4-1: Using ep0 maxpacket: 32 [ 498.381545][ T27] usb 4-1: New USB device found: idVendor=1e7d, idProduct=2d51, bcdDevice=0.00 [ 498.382463][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.382493][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.382529][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.384777][ T27] usb 4-1: config 0 descriptor?? [ 498.447612][ T10] usb 2-1: USB disconnect, device number 126 [ 498.794476][ T27] hid_parser_main: 4 callbacks suppressed [ 498.794499][ T27] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 498.794531][ T27] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 498.794558][ T27] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 498.794584][ T27] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 498.794612][ T27] koneplus 0003:1E7D:2D51.0030: unknown main item tag 0x0 [ 498.797594][ T27] koneplus 0003:1E7D:2D51.0030: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 498.840956][ T10] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 498.966351][ T2262] cp2112 0003:10C4:EA90.002F: error reading lock byte: -71 [ 498.970162][ T2262] usb 3-1: USB disconnect, device number 123 [ 498.992475][T12395] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2200'. [ 498.997728][ T10] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 499.007567][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 499.007619][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.015979][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 499.016004][ T10] usb 2-1: Manufacturer: syz [ 499.061873][ T27] koneplus 0003:1E7D:2D51.0030: couldn't init struct koneplus_device [ 499.061929][ T27] koneplus 0003:1E7D:2D51.0030: couldn't install mouse [ 499.072899][ T10] usb 2-1: config 0 descriptor?? [ 499.096001][ T27] koneplus 0003:1E7D:2D51.0030: probe with driver koneplus failed with error -71 [ 499.098788][ T27] usb 4-1: USB disconnect, device number 11 [ 499.200936][ T10] rc_core: IR keymap rc-hauppauge not found [ 499.200959][ T10] Registered IR keymap rc-empty [ 499.201713][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 499.203468][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input98 [ 499.556075][T12406] FAULT_INJECTION: forcing a failure. [ 499.556075][T12406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 499.556108][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.2.2203 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.556136][T12406] Tainted: [L]=SOFTLOCKUP [ 499.556143][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 499.556154][T12406] Call Trace: [ 499.556163][T12406] [ 499.556172][T12406] dump_stack_lvl+0xe8/0x150 [ 499.556204][T12406] should_fail_ex+0x3eb/0x540 [ 499.556238][T12406] _copy_from_iter+0x1d3/0x1680 [ 499.556279][T12406] ? lock_acquire+0x115/0x350 [ 499.556304][T12406] ? __lock_acquire+0x747/0x2de0 [ 499.556325][T12406] ? __pfx__copy_from_iter+0x10/0x10 [ 499.556365][T12406] tun_get_user+0x265/0x4470 [ 499.556405][T12406] ? aa_file_perm+0x18b/0x15f0 [ 499.556438][T12406] ? aa_file_perm+0x4ed/0x15f0 [ 499.556464][T12406] ? __pfx_tun_get_user+0x10/0x10 [ 499.556489][T12406] ? __lock_acquire+0x747/0x2de0 [ 499.556513][T12406] ? kstrtoull+0x137/0x1d0 [ 499.556544][T12406] ? ref_tracker_alloc+0x172/0x530 [ 499.556564][T12406] ? lock_acquire+0x115/0x350 [ 499.556586][T12406] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 499.556608][T12406] ? lock_acquire+0x115/0x350 [ 499.556629][T12406] ? tun_get+0x1c/0x2f0 [ 499.556656][T12406] ? tun_get+0x1c/0x2f0 [ 499.556678][T12406] ? tun_get+0x1c/0x2f0 [ 499.556705][T12406] tun_chr_write_iter+0x113/0x200 [ 499.556731][T12406] vfs_write+0x612/0xba0 [ 499.556762][T12406] ? __pfx_vfs_write+0x10/0x10 [ 499.556790][T12406] ? __fget_files+0x3a2/0x420 [ 499.556811][T12406] ? __fget_files+0x2a/0x420 [ 499.556836][T12406] ? fdget+0x1ac/0x250 [ 499.556864][T12406] ksys_write+0x150/0x270 [ 499.556891][T12406] ? __pfx_ksys_write+0x10/0x10 [ 499.556925][T12406] do_syscall_64+0x166/0x520 [ 499.556952][T12406] ? trace_irq_disable+0x3b/0x140 [ 499.556976][T12406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.556996][T12406] ? clear_bhb_loop+0x70/0xc0 [ 499.557019][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.557039][T12406] RIP: 0033:0x7f0e1c59f559 [ 499.557057][T12406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.557074][T12406] RSP: 002b:00007f0e1d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 499.557095][T12406] RAX: ffffffffffffffda RBX: 00007f0e1c825fa0 RCX: 00007f0e1c59f559 [ 499.557110][T12406] RDX: 0000000000000097 RSI: 0000200000000740 RDI: 0000000000000003 [ 499.557123][T12406] RBP: 00007f0e1d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 499.557135][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.557147][T12406] R13: 00007f0e1c826038 R14: 00007f0e1c825fa0 R15: 00007fff40099088 [ 499.557179][T12406] [ 499.589913][ T2262] usb 2-1: USB disconnect, device number 127 [ 500.196066][T12432] netlink: 'syz.1.2209': attribute type 21 has an invalid length. [ 500.196089][T12432] netlink: 'syz.1.2209': attribute type 22 has an invalid length. [ 500.380851][ T32] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 500.541643][T11926] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 500.545070][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 500.545119][ T32] usb 4-1: New USB device found: idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 500.568883][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 500.569379][ T32] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 500.569410][ T32] usb 4-1: config 1 interface 0 has no altsetting 1 [ 500.618719][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.618749][ T32] usb 4-1: Product: syz [ 500.618765][ T32] usb 4-1: Manufacturer: syz [ 500.618780][ T32] usb 4-1: SerialNumber: syz [ 500.653746][ T32] smsusb:smsusb_probe: board id=8, interface number 0 [ 500.691551][T11926] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 500.693845][T11926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.693878][T11926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.693916][T11926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.698790][T11926] usb 2-1: config 0 descriptor?? [ 500.855413][ T32] smsusb:smsusb_probe: Device initialized with return code -19 [ 501.059171][ T2262] usb 4-1: USB disconnect, device number 12 [ 501.140887][T11926] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 501.140945][T11926] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 501.140971][T11926] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 501.140996][T11926] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 501.141022][T11926] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 501.149440][T11926] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 501.228590][T12471] FAULT_INJECTION: forcing a failure. [ 501.228590][T12471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.228625][T12471] CPU: 0 UID: 0 PID: 12471 Comm: syz.2.2214 Tainted: G L syzkaller #0 PREEMPT(full) [ 501.228649][T12471] Tainted: [L]=SOFTLOCKUP [ 501.228657][T12471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 501.228670][T12471] Call Trace: [ 501.228677][T12471] [ 501.228687][T12471] dump_stack_lvl+0xe8/0x150 [ 501.228722][T12471] should_fail_ex+0x3eb/0x540 [ 501.228754][T12471] _copy_from_iter+0x1d3/0x1680 [ 501.228782][T12471] ? sock_alloc_send_pskb+0xc87/0xd90 [ 501.228818][T12471] ? __pfx__copy_from_iter+0x10/0x10 [ 501.228851][T12471] ? __lock_acquire+0x747/0x2de0 [ 501.228871][T12471] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 501.228900][T12471] skb_copy_datagram_from_iter+0xe6/0x720 [ 501.228932][T12471] ? skb_put+0x112/0x210 [ 501.228958][T12471] tun_get_user+0x1510/0x4470 [ 501.228996][T12471] ? aa_file_perm+0x18b/0x15f0 [ 501.229029][T12471] ? aa_file_perm+0x4ed/0x15f0 [ 501.229056][T12471] ? __pfx_tun_get_user+0x10/0x10 [ 501.229081][T12471] ? __lock_acquire+0x747/0x2de0 [ 501.229105][T12471] ? kstrtoull+0x137/0x1d0 [ 501.229137][T12471] ? ref_tracker_alloc+0x172/0x530 [ 501.229156][T12471] ? lock_acquire+0x115/0x350 [ 501.229179][T12471] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 501.229202][T12471] ? lock_acquire+0x115/0x350 [ 501.229222][T12471] ? tun_get+0x1c/0x2f0 [ 501.229250][T12471] ? tun_get+0x1c/0x2f0 [ 501.229272][T12471] ? tun_get+0x1c/0x2f0 [ 501.229300][T12471] tun_chr_write_iter+0x113/0x200 [ 501.229326][T12471] vfs_write+0x612/0xba0 [ 501.229359][T12471] ? __pfx_vfs_write+0x10/0x10 [ 501.229387][T12471] ? __fget_files+0x3a2/0x420 [ 501.229408][T12471] ? __fget_files+0x2a/0x420 [ 501.229443][T12471] ? fdget+0x1ac/0x250 [ 501.229472][T12471] ksys_write+0x150/0x270 [ 501.229497][T12471] ? __pfx_ksys_write+0x10/0x10 [ 501.229533][T12471] do_syscall_64+0x166/0x520 [ 501.229561][T12471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.229582][T12471] ? clear_bhb_loop+0x70/0xc0 [ 501.229606][T12471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.229625][T12471] RIP: 0033:0x7f0e1c59f559 [ 501.229643][T12471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.229659][T12471] RSP: 002b:00007f0e1d3b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 501.229682][T12471] RAX: ffffffffffffffda RBX: 00007f0e1c825fa0 RCX: 00007f0e1c59f559 [ 501.229696][T12471] RDX: 0000000000000066 RSI: 0000200000000500 RDI: 0000000000000003 [ 501.229709][T12471] RBP: 00007f0e1d3b2090 R08: 0000000000000000 R09: 0000000000000000 [ 501.229722][T12471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.229733][T12471] R13: 00007f0e1c826038 R14: 00007f0e1c825fa0 R15: 00007fff40099088 [ 501.229764][T12471] [ 501.354530][T11926] cp2112 0003:10C4:EA90.0031: Part Number: 0x00 Device Version: 0x00 [ 501.532938][T12476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.533442][T12476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.644823][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.763092][ T2262] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 501.911385][ T2262] usb 3-1: New USB device found: idVendor=9710, idProduct=7810, bcdDevice=1.00 [ 501.912378][ T2262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.912409][ T2262] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 501.913890][ T2262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 501.913913][ T2262] usb 3-1: Product: syz [ 501.913928][ T2262] usb 3-1: Manufacturer: syz [ 501.920652][ T2262] mos7840 3-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 501.940880][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 501.987158][T11926] cp2112 0003:10C4:EA90.0031: error reading lock byte: -71 [ 501.998418][T11926] usb 2-1: USB disconnect, device number 2 [ 502.111542][ T27] usb 4-1: New USB device found: idVendor=12d8, idProduct=0001, bcdDevice=1.00 [ 502.112789][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.112837][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.114740][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.114763][ T27] usb 4-1: Product: syz [ 502.114777][ T27] usb 4-1: Manufacturer: syz [ 502.114791][ T27] usb 4-1: SerialNumber: syz [ 502.219380][T12485] FAULT_INJECTION: forcing a failure. [ 502.219380][T12485] name failslab, interval 1, probability 0, space 0, times 0 [ 502.219405][T12485] CPU: 1 UID: 0 PID: 12485 Comm: syz.0.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.219440][T12485] Tainted: [L]=SOFTLOCKUP [ 502.219448][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.219461][T12485] Call Trace: [ 502.219469][T12485] [ 502.219478][T12485] dump_stack_lvl+0xe8/0x150 [ 502.219503][T12485] should_fail_ex+0x3eb/0x540 [ 502.219524][T12485] should_failslab+0xa8/0x100 [ 502.219540][T12485] __kmalloc_noprof+0xf9/0x710 [ 502.219559][T12485] ? __list_lru_init+0x114/0x680 [ 502.219578][T12485] ? __list_lru_init+0x114/0x680 [ 502.219606][T12485] __list_lru_init+0x114/0x680 [ 502.219634][T12485] sget_fc+0xf92/0x1ce0 [ 502.219655][T12485] ? __pfx_set_anon_super_fc+0x10/0x10 [ 502.219669][T12485] ? __pfx_sget_fc+0x10/0x10 [ 502.219680][T12485] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 502.219698][T12485] ? __kmalloc_cache_noprof+0x148/0x600 [ 502.219727][T12485] ? __pfx_mqueue_fill_super+0x10/0x10 [ 502.219816][T12485] get_tree_nodev+0x2a/0x150 [ 502.219830][T12485] vfs_get_tree+0x92/0x2a0 [ 502.219845][T12485] fc_mount_longterm+0x1c/0x100 [ 502.219874][T12485] mq_init_ns+0x508/0x770 [ 502.219898][T12485] copy_ipcs+0x460/0x6c0 [ 502.219926][T12485] create_new_namespaces+0x210/0x6b0 [ 502.219951][T12485] ? security_capable+0x7e/0x2c0 [ 502.219968][T12485] unshare_nsproxy_namespaces+0x144/0x190 [ 502.219985][T12485] ksys_unshare+0x532/0x890 [ 502.220004][T12485] ? __pfx_ksys_unshare+0x10/0x10 [ 502.220028][T12485] ? ksys_write+0x242/0x270 [ 502.220055][T12485] ? __pfx_ksys_write+0x10/0x10 [ 502.220090][T12485] __x64_sys_unshare+0x38/0x50 [ 502.220106][T12485] do_syscall_64+0x166/0x520 [ 502.220122][T12485] ? trace_irq_disable+0x3b/0x140 [ 502.220135][T12485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.220146][T12485] ? clear_bhb_loop+0x70/0xc0 [ 502.220166][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.220187][T12485] RIP: 0033:0x7f6002b9f559 [ 502.220206][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.220223][T12485] RSP: 002b:00007f6003a65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 502.220244][T12485] RAX: ffffffffffffffda RBX: 00007f6002e25fa0 RCX: 00007f6002b9f559 [ 502.220252][T12485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 502.220259][T12485] RBP: 00007f6003a65090 R08: 0000000000000000 R09: 0000000000000000 [ 502.220267][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.220273][T12485] R13: 00007f6002e26038 R14: 00007f6002e25fa0 R15: 00007ffe087b3b08 [ 502.220290][T12485] [ 502.614984][T12492] FAULT_INJECTION: forcing a failure. [ 502.614984][T12492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.615011][T12492] CPU: 1 UID: 0 PID: 12492 Comm: syz.1.2220 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.615039][T12492] Tainted: [L]=SOFTLOCKUP [ 502.615047][T12492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.615060][T12492] Call Trace: [ 502.615068][T12492] [ 502.615077][T12492] dump_stack_lvl+0xe8/0x150 [ 502.615104][T12492] should_fail_ex+0x3eb/0x540 [ 502.615125][T12492] _copy_to_user+0x31/0xb0 [ 502.615137][T12492] simple_read_from_buffer+0xe1/0x170 [ 502.615158][T12492] proc_fail_nth_read+0x1bb/0x230 [ 502.615192][T12492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.615224][T12492] ? rw_verify_area+0x24a/0x4c0 [ 502.615248][T12492] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.615263][T12492] vfs_read+0x213/0xa80 [ 502.615278][T12492] ? __pfx___mutex_lock+0x10/0x10 [ 502.615295][T12492] ? __pfx_vfs_read+0x10/0x10 [ 502.615317][T12492] ? __fget_files+0x2a/0x420 [ 502.615338][T12492] ? __fget_files+0x3a2/0x420 [ 502.615358][T12492] ? __fget_files+0x2a/0x420 [ 502.615382][T12492] ? fdget+0x1ac/0x250 [ 502.615412][T12492] ksys_read+0x150/0x270 [ 502.615438][T12492] ? __pfx_ksys_read+0x10/0x10 [ 502.615470][T12492] do_syscall_64+0x166/0x520 [ 502.615497][T12492] ? trace_irq_disable+0x3b/0x140 [ 502.615523][T12492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.615543][T12492] ? clear_bhb_loop+0x70/0xc0 [ 502.615565][T12492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.615577][T12492] RIP: 0033:0x7f5fe295fd8e [ 502.615588][T12492] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 502.615598][T12492] RSP: 002b:00007f5fe3789fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.615610][T12492] RAX: ffffffffffffffda RBX: 00007f5fe378a6c0 RCX: 00007f5fe295fd8e [ 502.615620][T12492] RDX: 000000000000000f RSI: 00007f5fe378a0a0 RDI: 0000000000000012 [ 502.615633][T12492] RBP: 00007f5fe378a090 R08: 0000000000000000 R09: 0000000000000000 [ 502.615646][T12492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 502.615659][T12492] R13: 00007f5fe2c26038 R14: 00007f5fe2c25fa0 R15: 00007ffe9d4226c8 [ 502.615692][T12492] [ 502.767038][T12497] FAULT_INJECTION: forcing a failure. [ 502.767038][T12497] name failslab, interval 1, probability 0, space 0, times 0 [ 502.767071][T12497] CPU: 1 UID: 0 PID: 12497 Comm: syz.1.2221 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.767098][T12497] Tainted: [L]=SOFTLOCKUP [ 502.767106][T12497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.767118][T12497] Call Trace: [ 502.767126][T12497] [ 502.767135][T12497] dump_stack_lvl+0xe8/0x150 [ 502.767169][T12497] should_fail_ex+0x3eb/0x540 [ 502.767204][T12497] should_failslab+0xa8/0x100 [ 502.767233][T12497] __kmalloc_cache_noprof+0x9e/0x600 [ 502.767257][T12497] ? __kmalloc_cache_noprof+0x148/0x600 [ 502.767278][T12497] ? sctp_add_bind_addr+0x8c/0x370 [ 502.767306][T12497] ? sctp_add_bind_addr+0x8c/0x370 [ 502.767340][T12497] sctp_add_bind_addr+0x8c/0x370 [ 502.767373][T12497] sctp_copy_local_addr_list+0x31a/0x4e0 [ 502.767405][T12497] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 502.767442][T12497] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 502.767474][T12497] ? sctp_v6_is_any+0x64/0x80 [ 502.767494][T12497] ? sctp_copy_one_addr+0x93/0x360 [ 502.767526][T12497] sctp_bind_addr_copy+0xb3/0x3c0 [ 502.767558][T12497] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 502.767588][T12497] sctp_connect_new_asoc+0x2ff/0x6b0 [ 502.767612][T12497] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 502.767643][T12497] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 502.767668][T12497] ? security_sctp_bind_connect+0x7e/0x2c0 [ 502.767695][T12497] sctp_sendmsg+0x159b/0x2d00 [ 502.767726][T12497] ? kstrtouint+0x6e/0xe0 [ 502.767751][T12497] ? __pfx_sctp_sendmsg+0x10/0x10 [ 502.767771][T12497] ? lock_acquire+0x115/0x350 [ 502.767812][T12497] ? aa_sock_msg_perm+0xf5/0x210 [ 502.767838][T12497] ? sock_rps_record_flow+0x19/0x350 [ 502.767948][T12497] ? inet_sendmsg+0x298/0x320 [ 502.768004][T12497] ? __pfx_inet_sendmsg+0x10/0x10 [ 502.768028][T12497] sock_sendmsg_nosec+0x10f/0x190 [ 502.768052][T12497] __sys_sendto+0x408/0x5a0 [ 502.768075][T12497] ? ksys_write+0x1e6/0x270 [ 502.768103][T12497] ? __pfx___sys_sendto+0x10/0x10 [ 502.768124][T12497] ? __mutex_unlock_slowpath+0x731/0x900 [ 502.768166][T12497] ? fdget+0x1ac/0x250 [ 502.768201][T12497] ? __pfx_ksys_write+0x10/0x10 [ 502.768229][T12497] __x64_sys_sendto+0xde/0x100 [ 502.768256][T12497] do_syscall_64+0x166/0x520 [ 502.768283][T12497] ? trace_irq_disable+0x3b/0x140 [ 502.768306][T12497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.768326][T12497] ? clear_bhb_loop+0x70/0xc0 [ 502.768349][T12497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.768369][T12497] RIP: 0033:0x7f5fe299f559 [ 502.768388][T12497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.768406][T12497] RSP: 002b:00007f5fe378a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 502.768433][T12497] RAX: ffffffffffffffda RBX: 00007f5fe2c25fa0 RCX: 00007f5fe299f559 [ 502.768448][T12497] RDX: 0000000000000001 RSI: 0000200000000600 RDI: 0000000000000003 [ 502.768461][T12497] RBP: 00007f5fe378a090 R08: 0000200000000640 R09: 000000000000001c [ 502.768475][T12497] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002 [ 502.768487][T12497] R13: 00007f5fe2c26038 R14: 00007f5fe2c25fa0 R15: 00007ffe9d4226c8 [ 502.768519][T12497] [ 503.082361][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 503.250889][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 503.251710][ T27] usb 2-1: New USB device found: idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 503.252759][ T27] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 503.252783][ T27] usb 2-1: config 1 has no interface number 0 [ 503.252823][ T27] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 503.252849][ T27] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 503.252873][ T27] usb 2-1: config 1 interface 105 has no altsetting 0 [ 503.255067][ T27] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 503.255090][ T27] usb 2-1: Product: syz [ 503.255105][ T27] usb 2-1: Manufacturer: syz [ 503.255119][ T27] usb 2-1: SerialNumber: syz [ 503.259625][T12499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 503.259787][T12499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 503.405877][T11926] usb 4-1: USB disconnect, device number 13 [ 503.577567][ T2262] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 503.592197][ T2262] usb 3-1: USB disconnect, device number 124 [ 503.598465][ T2262] mos7840 3-1:1.0: device disconnected [ 503.666517][T12499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 503.666606][T12499] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 504.068095][ T27] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 504.068673][ T27] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 504.069250][ T27] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 504.088417][ T27] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e6:e3:0b:7a:17:35 [ 504.181455][ T2262] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 504.210297][T12503] syzkaller1: entered promiscuous mode [ 504.210312][T12503] syzkaller1: entered allmulticast mode [ 504.363772][ T2262] usb 4-1: unable to get BOS descriptor or descriptor too short [ 504.363825][ T2262] usb 4-1: New USB device found: idVendor=0d8c, idProduct=0103, bcdDevice=0.40 [ 504.364692][ T2262] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 504.364725][ T2262] usb 4-1: can't read configurations, error -71 [ 504.630900][ T5721] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 504.780821][ T5721] usb 3-1: Using ep0 maxpacket: 32 [ 504.781527][ T5721] usb 3-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 504.782559][ T5721] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 504.782591][ T5721] usb 3-1: config 0 has no interface number 0 [ 504.784491][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.784515][ T5721] usb 3-1: Product: syz [ 504.784529][ T5721] usb 3-1: Manufacturer: syz [ 504.784540][ T5721] usb 3-1: SerialNumber: syz [ 504.786661][ T5721] usb 3-1: config 0 descriptor?? [ 504.808113][ T10] usb 2-1: USB disconnect, device number 3 [ 504.813579][ T5303] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -71 [ 504.813731][ T5303] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 504.813867][ T5303] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 504.814031][ T5303] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 504.814159][ T5303] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 504.814352][ T5303] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 504.816784][ T10] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 504.821323][ T5303] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 504.821504][ T5303] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 504.822038][ T5303] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 504.822162][ T5303] aqc111 2-1:1.105 eth1: Error submitting the control message: status=-19 [ 504.835507][ T10] aqc111 2-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 504.835634][ T10] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 504.835864][ T10] aqc111 2-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 504.835998][ T10] aqc111 2-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 505.013474][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 505.013597][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 505.013713][ T10] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 505.195208][ T5721] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 505.195241][ T5721] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 505.561882][ T2262] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 505.665767][T12548] openvswitch: netlink: Tunnel attr 108 out of range max 16 [ 505.735225][ T2262] usb 4-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 505.737112][ T2262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 505.737133][ T2262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 505.737155][ T2262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.742145][ T2262] usb 4-1: config 0 descriptor?? [ 505.825605][ T32] hid_parser_main: 2 callbacks suppressed [ 505.825650][ T32] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 505.827894][ T32] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 506.000515][ T5721] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 506.011837][ T5721] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 506.152651][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152688][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152715][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152740][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152766][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152826][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.152852][ T2262] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 506.156605][ T2262] cp2112 0003:10C4:EA90.0033: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 506.310895][ T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 506.351860][ T2262] cp2112 0003:10C4:EA90.0033: Part Number: 0x00 Device Version: 0x00 [ 506.460838][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 506.461582][ T32] usb 2-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 506.462517][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.462540][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 506.464309][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.464324][ T32] usb 2-1: Product: syz [ 506.464332][ T32] usb 2-1: Manufacturer: syz [ 506.464343][ T32] usb 2-1: SerialNumber: syz [ 506.476722][ T32] usb 2-1: 0:2 : does not exist [ 506.680294][ T32] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 506.726171][ T32] usb 2-1: USB disconnect, device number 4 [ 506.758065][ T5654] udevd[5654]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.957404][ T2262] cp2112 0003:10C4:EA90.0033: error reading lock byte: -71 [ 506.964718][ T2262] usb 4-1: USB disconnect, device number 16 [ 507.413566][ T32] usb 3-1: USB disconnect, device number 125 [ 507.454070][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 507.454372][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 507.454392][T12565] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 507.454439][T12565] UDF-fs: Scanning with blocksize 512 failed [ 507.457108][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 507.457245][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 507.457263][T12565] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 507.457276][T12565] UDF-fs: Scanning with blocksize 1024 failed [ 507.457920][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 507.462495][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 507.462524][T12565] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 507.462538][T12565] UDF-fs: Scanning with blocksize 2048 failed [ 507.463111][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 507.463234][T12565] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 507.463283][T12565] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 507.463296][T12565] UDF-fs: Scanning with blocksize 4096 failed [ 507.463306][T12565] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 507.482515][T12565] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2237'. [ 507.624068][ T33] audit: type=1326 audit(1793402837.344:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12569 comm="syz.2.2239" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e1c59f559 code=0x0 [ 508.100886][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 508.133294][ T32] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 508.137256][ T32] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 508.252549][ T10] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 508.253832][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 508.253865][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 508.253903][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.259437][T12578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 508.317182][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 508.467916][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.468455][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.487558][ T10] usb 4-1: USB disconnect, device number 17 [ 508.880022][T12588] Process accounting resumed [ 508.980882][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 509.220195][ T10] usb 4-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 509.232480][ T2262] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 509.249111][ T10] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 509.249147][ T10] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 509.249188][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.285639][T12578] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 509.319768][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 509.385948][ T2262] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 509.387106][ T2262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.387135][ T2262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.387169][ T2262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.401998][ T2262] usb 2-1: config 0 descriptor?? [ 509.626427][ T4959] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.647551][ T4959] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.660817][ T4959] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.664930][ T4959] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.665668][ T4959] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.699576][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.703429][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.703817][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.705159][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.706046][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.818335][ T2262] cp2112 0003:10C4:EA90.0035: unknown main item tag 0x0 [ 509.827857][ T2262] cp2112 0003:10C4:EA90.0035: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 510.017596][ T2262] cp2112 0003:10C4:EA90.0035: Part Number: 0x00 Device Version: 0x00 [ 510.186235][ T6918] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.287920][ T6918] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.320102][T12599] rxe_eth0 speed is unknown, defaulting to 1000 [ 510.366942][ T6918] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.490370][ T6918] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.623872][ T2262] cp2112 0003:10C4:EA90.0035: error reading lock byte: -71 [ 510.639001][ T2262] usb 2-1: USB disconnect, device number 5 [ 510.878976][ T6918] bridge_slave_1: left allmulticast mode [ 510.879022][ T6918] bridge_slave_1: left promiscuous mode [ 510.880635][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.906823][ T6918] bridge_slave_0: left allmulticast mode [ 510.906842][ T6918] bridge_slave_0: left promiscuous mode [ 510.906977][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.034092][ T5721] usb 4-1: USB disconnect, device number 18 [ 511.369586][T12636] input: syz1 as /devices/virtual/input/input99 [ 511.470676][ T6918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.496717][ T6918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.499640][ T6918] bond0 (unregistering): Released all slaves [ 511.610203][ T5303] 8021q: adding VLAN 0 to HW filter on device eth1 [ 511.721521][ T5642] Bluetooth: hci4: command tx timeout [ 511.745890][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.747215][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.747410][T12599] bridge_slave_0: entered allmulticast mode [ 511.749613][T12599] bridge_slave_0: entered promiscuous mode [ 511.830372][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.830520][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.830633][T12599] bridge_slave_1: entered allmulticast mode [ 511.856012][T12599] bridge_slave_1: entered promiscuous mode [ 512.027334][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.030271][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.157854][T12599] team0: Port device team_slave_0 added [ 512.174363][T12599] team0: Port device team_slave_1 added [ 512.264348][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.264390][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.264414][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.464960][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.464978][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.465007][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.467429][ T33] audit: type=1800 audit(1793402842.184:60): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2254" name="/" dev="fuse" ino=1 res=0 errno=-22 [ 512.730655][T12599] hsr_slave_0: entered promiscuous mode [ 512.738745][T12599] hsr_slave_1: entered promiscuous mode [ 512.747089][T12599] debugfs: 'hsr0' already exists in 'hsr' [ 512.747110][T12599] Cannot create hsr debugfs directory [ 512.851598][ T2262] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 513.005447][ T2262] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 513.006733][ T2262] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.006759][ T2262] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 513.006780][ T2262] usb 4-1: config 1 has no interface number 0 [ 513.006829][ T2262] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 513.009594][ T2262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.009620][ T2262] usb 4-1: Product: syz [ 513.009635][ T2262] usb 4-1: Manufacturer: syz [ 513.009650][ T2262] usb 4-1: SerialNumber: syz [ 513.062681][ T2262] cdc_ncm 4-1:1.1: skipping garbage [ 513.062704][ T2262] usb 4-1: selecting invalid altsetting 1 [ 513.123062][ T5303] 8021q: adding VLAN 0 to HW filter on device eth2 [ 513.255816][ T2262] cdc_ncm 4-1:1.1: bind() failure [ 513.274377][ T2262] usb 4-1: USB disconnect, device number 19 [ 513.390893][ T5721] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 513.542832][ T5721] usb 2-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 513.544016][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.544048][ T5721] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 513.544087][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.604943][ T5721] usb 2-1: config 0 descriptor?? [ 513.784318][ T6918] hsr_slave_0: left promiscuous mode [ 513.785355][ T6918] hsr_slave_1: left promiscuous mode [ 513.789628][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.789667][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.801029][ T5642] Bluetooth: hci4: command tx timeout [ 513.831232][ T6918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.831277][ T6918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.856084][ T6918] veth1_macvtap: left promiscuous mode [ 513.856146][ T6918] veth0_macvtap: left promiscuous mode [ 513.856276][ T6918] veth1_vlan: left promiscuous mode [ 513.856392][ T6918] veth0_vlan: left promiscuous mode [ 514.052142][ T5721] hid_parser_main: 6 callbacks suppressed [ 514.052170][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052201][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052229][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052255][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052280][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052307][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.052333][ T5721] cp2112 0003:10C4:EA90.0036: unknown main item tag 0x0 [ 514.057479][ T5721] cp2112 0003:10C4:EA90.0036: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 514.170863][T11926] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 514.244950][ T5721] cp2112 0003:10C4:EA90.0036: Part Number: 0x00 Device Version: 0x00 [ 514.267008][ T6918] team0 (unregistering): Port device team_slave_1 removed [ 514.288271][ T6918] team0 (unregistering): Port device team_slave_0 removed [ 514.320861][T11926] usb 4-1: Using ep0 maxpacket: 32 [ 514.321689][T11926] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 514.322778][T11926] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 514.322802][T11926] usb 4-1: config 0 has no interface number 0 [ 514.325050][T11926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.325074][T11926] usb 4-1: Product: syz [ 514.325089][T11926] usb 4-1: Manufacturer: syz [ 514.325103][T11926] usb 4-1: SerialNumber: syz [ 514.347202][T11926] usb 4-1: config 0 descriptor?? [ 514.766540][T11926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 514.766573][T11926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 514.869442][ T5721] cp2112 0003:10C4:EA90.0036: error reading lock byte: -71 [ 514.898755][ T5721] usb 2-1: USB disconnect, device number 6 [ 515.194664][T12599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.202873][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 515.204346][T12599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.246673][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 515.263887][T12599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.275179][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 515.277885][T12599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.302453][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 515.506106][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.539302][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.542590][T12723] loop0: detected capacity change from 0 to 4096 [ 515.555715][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.555811][ T6901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.569795][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.569908][ T6901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 515.585161][T11926] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 515.585418][T11926] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 515.618388][T12723] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 515.622469][T12723] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 515.622490][T12723] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 515.622596][T12723] loop0: [ 515.882775][ T5642] Bluetooth: hci4: command tx timeout [ 516.278861][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.346259][T12599] veth0_vlan: entered promiscuous mode [ 516.355665][T12599] veth1_vlan: entered promiscuous mode [ 516.398239][T12599] veth0_macvtap: entered promiscuous mode [ 516.405178][T12599] veth1_macvtap: entered promiscuous mode [ 516.438459][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.461730][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.564073][ T6901] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.564125][ T6901] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.564162][ T6901] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.571603][ T1123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.694847][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.694879][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.743268][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.743290][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.849976][ T5008] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 516.850437][ T5008] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 516.850454][ T5008] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 516.850520][ T5008] loop0: [ 517.003475][ T5376] usb 4-1: USB disconnect, device number 20 [ 517.402961][ T5376] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 517.561726][ T5376] usb 4-1: Using ep0 maxpacket: 32 [ 517.562440][ T5376] usb 4-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 517.583703][ T5376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.583732][ T5376] usb 4-1: Product: syz [ 517.583747][ T5376] usb 4-1: Manufacturer: syz [ 517.583762][ T5376] usb 4-1: SerialNumber: syz [ 517.587297][ T5376] usb 4-1: config 0 descriptor?? [ 517.619977][T12793] 9p: Bad value for 'timeout' [ 517.623335][T12793] FAULT_INJECTION: forcing a failure. [ 517.623335][T12793] name fail_futex, interval 1, probability 0, space 0, times 0 [ 517.623368][T12793] CPU: 0 UID: 0 PID: 12793 Comm: syz.1.2267 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.623397][T12793] Tainted: [L]=SOFTLOCKUP [ 517.623405][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 517.623418][T12793] Call Trace: [ 517.623427][T12793] [ 517.623436][T12793] dump_stack_lvl+0xe8/0x150 [ 517.623473][T12793] should_fail_ex+0x3eb/0x540 [ 517.623511][T12793] get_futex_key+0x1ab/0x1410 [ 517.623552][T12793] ? __pfx_get_futex_key+0x10/0x10 [ 517.623583][T12793] ? update_se+0x90/0x1080 [ 517.623617][T12793] futex_wait_setup+0x4a/0x590 [ 517.623646][T12793] ? __futex_wait+0xdb/0x470 [ 517.623673][T12793] __futex_wait+0x175/0x470 [ 517.623695][T12793] ? update_protect_slice+0x45/0x320 [ 517.623723][T12793] ? __pfx___futex_wait+0x10/0x10 [ 517.623750][T12793] ? __pfx_futex_wake_mark+0x10/0x10 [ 517.623778][T12793] ? try_to_wake_up+0x8ce/0x14e0 [ 517.623819][T12793] futex_wait+0x121/0x390 [ 517.623844][T12793] ? __pfx_futex_wait+0x10/0x10 [ 517.623885][T12793] do_futex+0x3e7/0x4e0 [ 517.623920][T12793] ? __pfx_do_futex+0x10/0x10 [ 517.623952][T12793] ? rcu_is_watching+0x16/0xb0 [ 517.623985][T12793] __se_sys_futex+0x3a8/0x450 [ 517.624023][T12793] ? __pfx___se_sys_futex+0x10/0x10 [ 517.624053][T12793] ? rcu_is_watching+0x16/0xb0 [ 517.624087][T12793] ? __x64_sys_futex+0x21/0xf0 [ 517.624120][T12793] do_syscall_64+0x166/0x520 [ 517.624151][T12793] ? trace_irq_disable+0x3b/0x140 [ 517.624177][T12793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.624199][T12793] ? clear_bhb_loop+0x70/0xc0 [ 517.624225][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.624246][T12793] RIP: 0033:0x7f5fe299f559 [ 517.624267][T12793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.624292][T12793] RSP: 002b:00007f5fe378a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 517.624316][T12793] RAX: ffffffffffffffda RBX: 00007f5fe2c25fa8 RCX: 00007f5fe299f559 [ 517.624334][T12793] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5fe2c25fa8 [ 517.624349][T12793] RBP: 00007f5fe2c25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 517.624364][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.624378][T12793] R13: 00007f5fe2c26038 R14: 00007ffe9d4225e0 R15: 00007ffe9d4226c8 [ 517.624411][T12793] [ 517.630952][T11926] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 517.749533][ T5376] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 517.749662][ T5376] dvb-usb: bulk message failed: -22 (4/0) [ 517.749679][ T5376] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.749804][ T5376] dvb-usb: bulk message failed: -22 (5/0) [ 517.749817][ T5376] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 517.780868][T11926] usb 3-1: Using ep0 maxpacket: 32 [ 517.781570][T11926] usb 3-1: New USB device found: idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 517.787085][T11926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 517.787109][T11926] usb 3-1: SerialNumber: syz [ 517.792842][T11926] usb 3-1: config 0 descriptor?? [ 517.828762][T11926] as10x_usb: device has been detected [ 517.833584][T11926] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 517.898374][T11926] usb 3-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)... [ 517.952976][ T5376] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.954440][ T5376] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 517.954493][ T5376] usb 4-1: media controller created [ 517.971139][ T5642] Bluetooth: hci4: command tx timeout [ 517.973719][ T5376] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.989327][ T5376] usb 4-1: selecting invalid altsetting 3 [ 517.989349][ T5376] ttusb2: set interface to alts=3 failed [ 518.025371][ T5376] DVB: Unable to find symbol tda10086_attach() [ 518.025396][ T5376] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 518.026277][ T5376] dvb-usb: bulk message failed: -22 (4/0) [ 518.026295][ T5376] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.026418][ T5376] dvb-usb: bulk message failed: -22 (5/0) [ 518.026432][ T5376] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 518.026490][ T5376] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 518.029508][ T5376] usb 4-1: USB disconnect, device number 21 [ 518.059682][ T5376] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 518.147342][T11926] as10x_usb: error during firmware upload part1 [ 518.147723][T11926] Registered device nBox DVB-T Dongle [ 518.150676][T11926] usb 3-1: USB disconnect, device number 126 [ 518.200079][T11926] Unregistered device nBox DVB-T Dongle [ 518.202160][ T5752] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 518.204216][T11926] as10x_usb: device has been disconnected [ 518.351922][ T5752] usb 2-1: New USB device found: idVendor=1199, idProduct=68a3, bcdDevice=0.00 [ 518.353063][ T5752] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 518.353080][ T5752] usb 2-1: config 1 has no interface number 0 [ 518.353105][ T5752] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 518.353119][ T5752] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 518.353130][ T5752] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 518.354774][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.354789][ T5752] usb 2-1: Product: syz [ 518.354797][ T5752] usb 2-1: Manufacturer: syz [ 518.354805][ T5752] usb 2-1: SerialNumber: syz [ 518.357544][T12797] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 518.357680][T12797] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 518.360041][ T5752] usb 2-1: Expected 3 endpoints, found: 1 [ 518.621984][ T5752] usb 2-1: USB disconnect, device number 7 [ 518.980937][T11926] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 519.130861][T11926] usb 3-1: Using ep0 maxpacket: 32 [ 519.131620][T11926] usb 3-1: New USB device found: idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 519.134729][T11926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.134755][T11926] usb 3-1: Product: syz [ 519.134771][T11926] usb 3-1: Manufacturer: syz [ 519.134786][T11926] usb 3-1: SerialNumber: syz [ 519.138693][T11926] usb 3-1: config 0 descriptor?? [ 519.145076][T11926] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 519.145170][T11926] dvb-usb: bulk message failed: -22 (4/0) [ 519.145185][T11926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.145321][T11926] dvb-usb: bulk message failed: -22 (5/0) [ 519.145334][T11926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.152165][T11926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 519.155592][T11926] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 519.155735][T11926] usb 3-1: media controller created [ 519.179607][T11926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 519.194674][T11926] usb 3-1: selecting invalid altsetting 3 [ 519.194695][T11926] ttusb2: set interface to alts=3 failed [ 519.247239][T11926] DVB: Unable to find symbol tda10086_attach() [ 519.247255][T11926] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 519.248731][T11926] dvb-usb: bulk message failed: -22 (4/0) [ 519.248750][T11926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.248863][T11926] dvb-usb: bulk message failed: -22 (5/0) [ 519.248876][T11926] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 519.248938][T11926] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 519.362461][T11926] usb 3-1: USB disconnect, device number 127 [ 519.464836][T11926] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 519.650859][ T5376] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 519.730889][ T32] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 519.780888][ T5376] usb 4-1: device descriptor read/64, error -71 [ 519.880859][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 519.881732][ T32] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 519.883095][ T32] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 519.883120][ T32] usb 2-1: config 0 has no interface number 0 [ 519.885881][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.885906][ T32] usb 2-1: Product: syz [ 519.885922][ T32] usb 2-1: Manufacturer: syz [ 519.885937][ T32] usb 2-1: SerialNumber: syz [ 519.905820][ T32] usb 2-1: config 0 descriptor?? [ 519.948301][ T33] audit: type=1326 audit(1793402849.664:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12819 comm="syz.2.2276" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8d5d9f559 code=0x0 [ 520.110851][ T5376] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 520.240979][ T5376] usb 4-1: device descriptor read/64, error -71 [ 520.336991][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 520.337028][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.361482][ T5376] usb usb4-port1: attempt power cycle [ 520.700949][ T5376] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 520.721494][ T5376] usb 4-1: device descriptor read/8, error -71 [ 520.960920][ T5376] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 520.982182][ T5376] usb 4-1: device descriptor read/8, error -71 [ 521.091395][ T5376] usb usb4-port1: unable to enumerate USB device [ 521.140912][ T32] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 521.141159][ T32] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 521.990985][ T2262] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 522.142184][ T2262] usb 3-1: Using ep0 maxpacket: 32 [ 522.148389][ T2262] usb 3-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 522.149366][ T2262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.152494][ T2262] usb 3-1: config 0 descriptor?? [ 522.358841][ T2262] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 522.361663][ T2262] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 522.364955][ T2262] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 522.365009][ T2262] usb 3-1: media controller created [ 522.390468][ T2262] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 522.463046][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 522.511103][ T32] usb 2-1: USB disconnect, device number 8 [ 522.564729][ T2262] az6027: usb out operation failed. (-71) [ 522.565343][ T2262] az6027: usb out operation failed. (-71) [ 522.565358][ T2262] stb0899_attach: Driver disabled by Kconfig [ 522.565450][ T2262] az6027: no front-end attached [ 522.565450][ T2262] [ 522.565849][ T33] audit: type=1326 audit(1793402852.284:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.3.2284" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fed69f9f559 code=0x0 [ 522.566266][ T2262] az6027: usb out operation failed. (-71) [ 522.566281][ T2262] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 522.568387][ T2262] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input100 [ 522.573417][ T2262] dvb-usb: schedule remote query interval to 400 msecs. [ 522.573437][ T2262] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 522.575986][ T2262] usb 3-1: USB disconnect, device number 2 [ 522.619382][T12846] FAULT_INJECTION: forcing a failure. [ 522.619382][T12846] name failslab, interval 1, probability 0, space 0, times 0 [ 522.619414][T12846] CPU: 0 UID: 0 PID: 12846 Comm: syz.3.2284 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.619440][T12846] Tainted: [L]=SOFTLOCKUP [ 522.619448][T12846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 522.619463][T12846] Call Trace: [ 522.619471][T12846] [ 522.619479][T12846] dump_stack_lvl+0xe8/0x150 [ 522.619514][T12846] should_fail_ex+0x3eb/0x540 [ 522.619549][T12846] should_failslab+0xa8/0x100 [ 522.619578][T12846] __kmalloc_noprof+0xf9/0x710 [ 522.619600][T12846] ? mutex_init_lockdep+0xdf/0x110 [ 522.619625][T12846] ? security_task_alloc+0x4d/0x330 [ 522.619647][T12846] ? security_task_alloc+0x4d/0x330 [ 522.619677][T12846] security_task_alloc+0x4d/0x330 [ 522.619703][T12846] copy_process+0x1c75/0x4510 [ 522.619741][T12846] ? copy_process+0xd17/0x4510 [ 522.619781][T12846] ? __pfx_copy_process+0x10/0x10 [ 522.619812][T12846] ? mutex_init_lockdep+0xdf/0x110 [ 522.619840][T12846] vhost_task_create+0x1f9/0x380 [ 522.619862][T12846] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 522.619884][T12846] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 522.619909][T12846] ? __pfx_vhost_task_create+0x10/0x10 [ 522.619935][T12846] ? register_lock_class+0x31/0x2e0 [ 522.619964][T12846] ? __pfx_vhost_task_fn+0x10/0x10 [ 522.619993][T12846] ? kasan_quarantine_put+0xbb/0x1f0 [ 522.620024][T12846] kvm_mmu_post_init_vm+0x147/0x2b0 [ 522.620053][T12846] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 522.620080][T12846] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 522.620107][T12846] kvm_vcpu_ioctl+0xa61/0xfd0 [ 522.620133][T12846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 522.620174][T12846] ? __fget_files+0x2a/0x420 [ 522.620198][T12846] ? __fget_files+0x2a/0x420 [ 522.620219][T12846] ? __fget_files+0x2a/0x420 [ 522.620244][T12846] ? bpf_lsm_file_ioctl+0x9/0x20 [ 522.620270][T12846] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 522.620291][T12846] __se_sys_ioctl+0xfc/0x170 [ 522.620320][T12846] do_syscall_64+0x166/0x520 [ 522.620349][T12846] ? trace_irq_disable+0x3b/0x140 [ 522.620373][T12846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.620393][T12846] ? clear_bhb_loop+0x70/0xc0 [ 522.620416][T12846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.620435][T12846] RIP: 0033:0x7fed69f9f559 [ 522.620454][T12846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.620471][T12846] RSP: 002b:00007fed6ad98028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 522.620492][T12846] RAX: ffffffffffffffda RBX: 00007fed6a226090 RCX: 00007fed69f9f559 [ 522.620506][T12846] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 522.620517][T12846] RBP: 00007fed6ad98090 R08: 0000000000000000 R09: 0000000000000000 [ 522.620527][T12846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.620537][T12846] R13: 00007fed6a226128 R14: 00007fed6a226090 R15: 00007ffd26ec75d8 [ 522.620566][T12846] [ 522.795658][ T2262] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 523.026390][ T33] audit: type=1326 audit(1793402852.744:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.0.2286" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6002b9f559 code=0x0 [ 523.071097][T11926] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 523.220950][T11926] usb 2-1: Using ep0 maxpacket: 32 [ 523.223446][T11926] usb 2-1: New USB device found: idVendor=0403, idProduct=f448, bcdDevice=c7.41 [ 523.226364][T11926] usb 2-1: config 134 has an invalid interface number: 117 but max is 0 [ 523.226393][T11926] usb 2-1: config 134 has no interface number 0 [ 523.226435][T11926] usb 2-1: config 134 interface 117 altsetting 83 bulk endpoint 0x1 has invalid maxpacket 64 [ 523.226461][T11926] usb 2-1: config 134 interface 117 altsetting 83 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 523.226488][T11926] usb 2-1: config 134 interface 117 altsetting 83 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 523.226514][T11926] usb 2-1: config 134 interface 117 altsetting 83 has a duplicate endpoint with address 0x8, skipping [ 523.226537][T11926] usb 2-1: config 134 interface 117 has no altsetting 0 [ 523.230919][T11926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.230944][T11926] usb 2-1: Product: syz [ 523.230959][T11926] usb 2-1: Manufacturer: syz [ 523.230975][T11926] usb 2-1: SerialNumber: syz [ 523.240442][T12847] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.461007][T11926] ftdi_sio 2-1:134.117: FTDI USB Serial Device converter detected [ 523.480130][T11926] ftdi_sio ttyUSB0: unknown device type: 0xc741 [ 523.494615][T11926] usb 2-1: USB disconnect, device number 9 [ 523.506880][T11926] ftdi_sio 2-1:134.117: device disconnected [ 523.516000][ T5654] udevd[5654]: setting owner of /dev/bus/usb/002/009 to uid=0, gid=0 failed: No such file or directory [ 523.940506][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 524.560872][T11926] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 524.710882][T11926] usb 2-1: Using ep0 maxpacket: 32 [ 524.711439][T11926] usb 2-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 524.712517][T11926] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 524.712533][T11926] usb 2-1: config 0 has no interface number 0 [ 524.714506][T11926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.714531][T11926] usb 2-1: Product: syz [ 524.714546][T11926] usb 2-1: Manufacturer: syz [ 524.714557][T11926] usb 2-1: SerialNumber: syz [ 524.716489][T11926] usb 2-1: config 0 descriptor?? [ 525.121228][T11926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 525.121249][T11926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 525.926868][T11926] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 525.927127][T11926] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 526.570099][T12889] tipc: Started in network mode [ 526.570123][T12889] tipc: Node identity 1001001, cluster identity 4711 [ 526.570137][T12889] tipc: Node number set to 16781313 [ 526.590703][T12889] set_target_expiration: 23 callbacks suppressed [ 526.597501][T12889] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1088 (2176 ns) > initial count (128 ns). Using initial count to start timer. [ 527.343508][ T5721] usb 2-1: USB disconnect, device number 10 [ 527.710882][ T32] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 527.840836][ T32] usb 3-1: device descriptor read/64, error -71 [ 528.000816][ T5721] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 528.069094][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.069338][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.069510][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.069670][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.069834][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.069981][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.070134][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.070275][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.070419][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.091929][T12911] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2306'. [ 528.149792][ T32] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 528.230880][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 528.232749][ T5721] usb 2-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 528.233749][ T5721] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 528.233795][ T5721] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 528.233816][ T5721] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 528.233838][ T5721] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 528.233860][ T5721] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 528.233897][ T5721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.320904][ T32] usb 3-1: device descriptor read/64, error -71 [ 528.429150][T12919] FAULT_INJECTION: forcing a failure. [ 528.429150][T12919] name failslab, interval 1, probability 0, space 0, times 0 [ 528.429178][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz.3.2308 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.429204][T12919] Tainted: [L]=SOFTLOCKUP [ 528.429211][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 528.429224][T12919] Call Trace: [ 528.429232][T12919] [ 528.429241][T12919] dump_stack_lvl+0xe8/0x150 [ 528.429275][T12919] should_fail_ex+0x3eb/0x540 [ 528.429297][T12919] should_failslab+0xa8/0x100 [ 528.429314][T12919] __kmalloc_noprof+0xf9/0x710 [ 528.429325][T12919] ? rcu_is_watching+0x16/0xb0 [ 528.429343][T12919] ? tomoyo_realpath_from_path+0xf2/0x640 [ 528.429372][T12919] ? tomoyo_realpath_from_path+0xf2/0x640 [ 528.429420][T12919] tomoyo_realpath_from_path+0xf2/0x640 [ 528.429448][T12919] ? tomoyo_path_number_perm+0x219/0x5f0 [ 528.429462][T12919] tomoyo_path_number_perm+0x246/0x5f0 [ 528.429477][T12919] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 528.429489][T12919] ? __lock_acquire+0x747/0x2de0 [ 528.429547][T12919] ? __fget_files+0x2a/0x420 [ 528.429573][T12919] ? __fget_files+0x2a/0x420 [ 528.429591][T12919] ? __fget_files+0x2a/0x420 [ 528.429605][T12919] security_file_ioctl+0xc3/0x2a0 [ 528.429620][T12919] __se_sys_ioctl+0x47/0x170 [ 528.429636][T12919] do_syscall_64+0x166/0x520 [ 528.429658][T12919] ? trace_irq_disable+0x3b/0x140 [ 528.429696][T12919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.429731][T12919] ? clear_bhb_loop+0x70/0xc0 [ 528.429747][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.429758][T12919] RIP: 0033:0x7fed69f9f559 [ 528.429769][T12919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.429778][T12919] RSP: 002b:00007fed6adb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 528.429790][T12919] RAX: ffffffffffffffda RBX: 00007fed6a225fa0 RCX: 00007fed69f9f559 [ 528.429802][T12919] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 528.429814][T12919] RBP: 00007fed6adb9090 R08: 0000000000000000 R09: 0000000000000000 [ 528.429827][T12919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.429839][T12919] R13: 00007fed6a226038 R14: 00007fed6a225fa0 R15: 00007ffd26ec75d8 [ 528.429880][T12919] [ 528.429888][T12919] ERROR: Out of memory at tomoyo_realpath_from_path. [ 528.444285][ T32] usb usb3-port1: attempt power cycle [ 528.462059][ T5721] usb 2-1: usb_control_msg returned -32 [ 528.462109][ T5721] usbtmc 2-1:16.0: can't read capabilities [ 528.931177][ T32] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 528.951577][ T32] usb 3-1: device descriptor read/8, error -71 [ 529.019317][T12927] FAULT_INJECTION: forcing a failure. [ 529.019317][T12927] name failslab, interval 1, probability 0, space 0, times 0 [ 529.019349][T12927] CPU: 1 UID: 0 PID: 12927 Comm: syz.3.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.019371][T12927] Tainted: [L]=SOFTLOCKUP [ 529.019376][T12927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 529.019384][T12927] Call Trace: [ 529.019389][T12927] [ 529.019395][T12927] dump_stack_lvl+0xe8/0x150 [ 529.019417][T12927] should_fail_ex+0x3eb/0x540 [ 529.019438][T12927] should_failslab+0xa8/0x100 [ 529.019457][T12927] __kmalloc_noprof+0xf9/0x710 [ 529.019470][T12927] ? kernfs_fop_read_iter+0x16e/0x6a0 [ 529.019483][T12927] ? kernfs_fop_read_iter+0x16e/0x6a0 [ 529.019499][T12927] kernfs_fop_read_iter+0x16e/0x6a0 [ 529.019515][T12927] vfs_read+0x595/0xa80 [ 529.019534][T12927] ? __pfx_vfs_read+0x10/0x10 [ 529.019549][T12927] ? __fget_files+0x3a2/0x420 [ 529.019561][T12927] ? __fget_files+0x2a/0x420 [ 529.019576][T12927] ? fdget+0x1ac/0x250 [ 529.019591][T12927] ksys_read+0x150/0x270 [ 529.019606][T12927] ? __pfx_ksys_read+0x10/0x10 [ 529.019625][T12927] do_syscall_64+0x166/0x520 [ 529.019641][T12927] ? trace_irq_disable+0x3b/0x140 [ 529.019655][T12927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.019670][T12927] ? clear_bhb_loop+0x70/0xc0 [ 529.019683][T12927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.019694][T12927] RIP: 0033:0x7fed69f9f559 [ 529.019706][T12927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.019716][T12927] RSP: 002b:00007fed6adb9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 529.019729][T12927] RAX: ffffffffffffffda RBX: 00007fed6a225fa0 RCX: 00007fed69f9f559 [ 529.019737][T12927] RDX: 0000000000002020 RSI: 00002000000007c0 RDI: 0000000000000007 [ 529.019745][T12927] RBP: 00007fed6a036b20 R08: 0000000000000000 R09: 0000000000000000 [ 529.019752][T12927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.019758][T12927] R13: 00007fed6a226038 R14: 00007fed6a225fa0 R15: 00007ffd26ec75d8 [ 529.019776][T12927] [ 529.311210][ T32] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 529.331276][ T32] usb 3-1: device descriptor read/8, error -71 [ 529.441804][ T32] usb usb3-port1: unable to enumerate USB device [ 529.500892][ T2262] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 529.651523][ T2262] usb 4-1: Using ep0 maxpacket: 32 [ 529.654175][ T2262] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 529.655153][ T2262] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 529.655178][ T2262] usb 4-1: config 0 has no interface number 0 [ 529.657271][ T2262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.657295][ T2262] usb 4-1: Product: syz [ 529.657310][ T2262] usb 4-1: Manufacturer: syz [ 529.657324][ T2262] usb 4-1: SerialNumber: syz [ 529.659186][ T2262] usb 4-1: config 0 descriptor?? [ 530.070315][ T2262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 530.070347][ T2262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 530.292692][ T2262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 530.292859][ T2262] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 530.724207][T12942] sctp: Trying to GSO but underlying device doesn't support it. [ 530.791400][ T5757] usb 2-1: USB disconnect, device number 11 [ 532.201375][ T2262] psmouse serio2: Failed to reset mouse on : -5 [ 532.275201][ T5757] usb 4-1: USB disconnect, device number 26 [ 532.620986][ T5757] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 532.659307][T12991] ioremap: invalid physical address 8000000000000000 [ 532.659369][T12991] ------------[ cut here ]------------ [ 532.659375][T12991] 1 [ 532.659382][T12991] WARNING: arch/x86/mm/ioremap.c:206 at __ioremap_caller+0x51e/0x620, CPU#0: syz.2.2322/12991 [ 532.684829][T12991] Modules linked in: [ 532.688782][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.2.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 532.699975][T12991] Tainted: [L]=SOFTLOCKUP [ 532.704375][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 532.714500][T12991] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 532.720162][T12991] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 24 a2 0a cc e8 b4 3f 4f 00 48 8b 74 24 60 48 c7 c7 a0 0c 2a 8c e8 23 c0 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 532.739946][T12991] RSP: 0018:ffffc900044a7880 EFLAGS: 00010246 [ 532.746306][T12991] RAX: 0000000000000032 RBX: 1ffff92000894f00 RCX: d9076eb548660100 [ 532.754416][T12991] RDX: 0000000000000003 RSI: 8000000000000000 RDI: 0000000000000000 [ 532.763188][T12991] RBP: ffffc900044a7990 R08: 0000000000400000 R09: 00000000000058c0 [ 532.771608][T12991] R10: 00000000000058e8 R11: fffff52000894ec1 R12: 0000000000020000 [ 532.779609][T12991] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 532.787681][T12991] FS: 00007fd8d6d146c0(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 532.796907][T12991] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.803556][T12991] CR2: 00007fd8d6b5da08 CR3: 00000000331c4000 CR4: 00000000003526f0 [ 532.811598][T12991] Call Trace: [ 532.814876][T12991] [ 532.817816][T12991] ? register_device+0x12c/0x570 [ 532.822940][T12991] ? __pfx___ioremap_caller+0x10/0x10 [ 532.828359][T12991] ? __kasan_kmalloc+0x93/0xb0 [ 532.833277][T12991] ? __kmalloc_cache_noprof+0x31c/0x600 [ 532.838864][T12991] ? __kmalloc_cache_noprof+0x148/0x600 [ 532.844499][T12991] ? register_device+0xc6/0x570 [ 532.849366][T12991] ? register_device+0xc6/0x570 [ 532.854329][T12991] register_device+0x12c/0x570 [ 532.859393][T12991] phram_setup+0x412/0x620 [ 532.864301][T12991] ? __pfx_phram_setup+0x10/0x10 [ 532.869281][T12991] ? __pfx___mutex_lock+0x10/0x10 [ 532.874392][T12991] ? sysfs_file_kobj+0x1a/0x230 [ 532.879294][T12991] param_attr_store+0x214/0x310 [ 532.884253][T12991] ? __pfx_param_attr_store+0x10/0x10 [ 532.889649][T12991] ? __pfx_sysfs_kf_write+0x10/0x10 [ 532.894934][T12991] module_attr_store+0x65/0x90 [ 532.899730][T12991] kernfs_fop_write_iter+0x3a4/0x540 [ 532.905141][T12991] vfs_write+0x612/0xba0 [ 532.909410][T12991] ? __pfx_vfs_write+0x10/0x10 [ 532.914305][T12991] ? __fget_files+0x3a2/0x420 [ 532.919004][T12991] ? __fget_files+0x2a/0x420 [ 532.923698][T12991] ? fdget+0x1ac/0x250 [ 532.927801][T12991] ksys_write+0x150/0x270 [ 532.932205][T12991] ? __pfx_ksys_write+0x10/0x10 [ 532.937082][T12991] do_syscall_64+0x166/0x520 [ 532.941736][T12991] ? trace_irq_disable+0x3b/0x140 [ 532.946784][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.952939][T12991] ? clear_bhb_loop+0x70/0xc0 [ 532.957630][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.963950][T12991] RIP: 0033:0x7fd8d5d9f559 [ 532.968377][T12991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.988776][T12991] RSP: 002b:00007fd8d6d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 532.997315][T12991] RAX: ffffffffffffffda RBX: 00007fd8d6025fa0 RCX: 00007fd8d5d9f559 [ 533.005507][T12991] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 533.013554][T12991] RBP: 00007fd8d5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 533.021606][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.029598][T12991] R13: 00007fd8d6026038 R14: 00007fd8d6025fa0 R15: 00007fff552fc8b8 [ 533.037696][T12991] [ 533.040835][T12991] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 533.048125][T12991] CPU: 0 UID: 0 PID: 12991 Comm: syz.2.2322 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.059057][T12991] Tainted: [L]=SOFTLOCKUP [ 533.063370][T12991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 533.073414][T12991] Call Trace: [ 533.076695][T12991] [ 533.079648][T12991] vpanic+0x26f/0x710 [ 533.083640][T12991] panic+0xc5/0xd0 [ 533.087364][T12991] ? __pfx_panic+0x10/0x10 [ 533.091808][T12991] __warn+0x315/0x4c0 [ 533.095789][T12991] ? __ioremap_caller+0x51e/0x620 [ 533.100834][T12991] ? __ioremap_caller+0x51e/0x620 [ 533.105875][T12991] __report_bug+0x276/0x570 [ 533.110489][T12991] ? __ioremap_caller+0x51e/0x620 [ 533.115527][T12991] ? __pfx___report_bug+0x10/0x10 [ 533.120553][T12991] ? irq_work_queue+0xbf/0x150 [ 533.125331][T12991] ? vprintk_emit+0x55c/0x5f0 [ 533.130017][T12991] ? __kmalloc_cache_noprof+0x31c/0x600 [ 533.135570][T12991] ? register_device+0xc6/0x570 [ 533.140443][T12991] ? __pfx_vprintk_emit+0x10/0x10 [ 533.145474][T12991] ? ksys_write+0x150/0x270 [ 533.149989][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.156065][T12991] ? __ioremap_caller+0x51e/0x620 [ 533.161100][T12991] report_bug+0x16b/0x220 [ 533.165435][T12991] ? __ioremap_caller+0x51e/0x620 [ 533.170460][T12991] ? __ioremap_caller+0x520/0x620 [ 533.175480][T12991] handle_bug+0x9c/0x200 [ 533.179721][T12991] exc_invalid_op+0x1a/0x50 [ 533.184222][T12991] asm_exc_invalid_op+0x1a/0x20 [ 533.189074][T12991] RIP: 0010:__ioremap_caller+0x51e/0x620 [ 533.194710][T12991] Code: 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 ca 24 a2 0a cc e8 b4 3f 4f 00 48 8b 74 24 60 48 c7 c7 a0 0c 2a 8c e8 23 c0 ad ff 90 <0f> 0b 90 e9 49 fd ff ff 4c 8b 74 24 28 41 81 e6 ff 0f 00 00 4d 01 [ 533.214314][T12991] RSP: 0018:ffffc900044a7880 EFLAGS: 00010246 [ 533.220391][T12991] RAX: 0000000000000032 RBX: 1ffff92000894f00 RCX: d9076eb548660100 [ 533.228359][T12991] RDX: 0000000000000003 RSI: 8000000000000000 RDI: 0000000000000000 [ 533.236333][T12991] RBP: ffffc900044a7990 R08: 0000000000400000 R09: 00000000000058c0 [ 533.244306][T12991] R10: 00000000000058e8 R11: fffff52000894ec1 R12: 0000000000020000 [ 533.252287][T12991] R13: 000000000000002e R14: 8000000000000fff R15: dffffc0000000000 [ 533.260278][T12991] ? register_device+0x12c/0x570 [ 533.265229][T12991] ? __pfx___ioremap_caller+0x10/0x10 [ 533.270600][T12991] ? __kasan_kmalloc+0x93/0xb0 [ 533.275368][T12991] ? __kmalloc_cache_noprof+0x31c/0x600 [ 533.280915][T12991] ? __kmalloc_cache_noprof+0x148/0x600 [ 533.286457][T12991] ? register_device+0xc6/0x570 [ 533.291316][T12991] ? register_device+0xc6/0x570 [ 533.296185][T12991] register_device+0x12c/0x570 [ 533.300966][T12991] phram_setup+0x412/0x620 [ 533.305390][T12991] ? __pfx_phram_setup+0x10/0x10 [ 533.310341][T12991] ? __pfx___mutex_lock+0x10/0x10 [ 533.315379][T12991] ? sysfs_file_kobj+0x1a/0x230 [ 533.320243][T12991] param_attr_store+0x214/0x310 [ 533.325101][T12991] ? __pfx_param_attr_store+0x10/0x10 [ 533.330475][T12991] ? __pfx_sysfs_kf_write+0x10/0x10 [ 533.335761][T12991] module_attr_store+0x65/0x90 [ 533.340542][T12991] kernfs_fop_write_iter+0x3a4/0x540 [ 533.345847][T12991] vfs_write+0x612/0xba0 [ 533.350107][T12991] ? __pfx_vfs_write+0x10/0x10 [ 533.354979][T12991] ? __fget_files+0x3a2/0x420 [ 533.359686][T12991] ? __fget_files+0x2a/0x420 [ 533.364294][T12991] ? fdget+0x1ac/0x250 [ 533.368368][T12991] ksys_write+0x150/0x270 [ 533.372702][T12991] ? __pfx_ksys_write+0x10/0x10 [ 533.377596][T12991] do_syscall_64+0x166/0x520 [ 533.382207][T12991] ? trace_irq_disable+0x3b/0x140 [ 533.387231][T12991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.393294][T12991] ? clear_bhb_loop+0x70/0xc0 [ 533.397975][T12991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.403867][T12991] RIP: 0033:0x7fd8d5d9f559 [ 533.408285][T12991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.427885][T12991] RSP: 002b:00007fd8d6d14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 533.436303][T12991] RAX: ffffffffffffffda RBX: 00007fd8d6025fa0 RCX: 00007fd8d5d9f559 [ 533.444289][T12991] RDX: 000000000000001e RSI: 0000200000000880 RDI: 0000000000000003 [ 533.452267][T12991] RBP: 00007fd8d5e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 533.460278][T12991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.468336][T12991] R13: 00007fd8d6026038 R14: 00007fd8d6025fa0 R15: 00007fff552fc8b8 [ 533.476334][T12991] [ 533.479676][T12991] Kernel Offset: disabled [ 533.484020][T12991] Rebooting in 86400 seconds..