last executing test programs: 37.405761516s ago: executing program 0 (id=1058): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) 36.433849822s ago: executing program 0 (id=1067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x20000004) socket$inet6(0xa, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x165) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000280)=@x86={0x6, 0x1, 0x8, 0x0, 0xc, 0xb1, 0x4, 0xb, 0x3, 0x13, 0x5, 0x6, 0x0, 0x10, 0xb, 0x3, 0x0, 0x0, 0x0, '\x00', 0x2, 0xf}) 36.133722891s ago: executing program 0 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) write$P9_RMKDIR(r0, &(0x7f0000000180)={0x14, 0x49, 0x2, {0x2, 0x1, 0x6}}, 0x14) fallocate(r0, 0x100000000000011, 0x9, 0x2f93) creat(&(0x7f0000000040)='./bus\x00', 0xa7) 36.040951254s ago: executing program 0 (id=1064): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r0, &(0x7f0000000180)="707a73408b202e2f66696c65303a30", 0xf) 35.931621171s ago: executing program 0 (id=1066): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="500f02"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000ac0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00060100000021"], 0x0, 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) statx(0xffffffffffffff9c, 0x0, 0x0, 0x35ce9dbc6723c18f, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 35.652696803s ago: executing program 0 (id=1069): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 35.320048049s ago: executing program 32 (id=1069): r0 = socket$inet(0x2, 0x1, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':27.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 8.683807183s ago: executing program 2 (id=1185): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':\x00'/18, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, &(0x7f0000000100), 0x4) read(r1, &(0x7f0000000304), 0x4) write(r1, &(0x7f0000000300), 0x100) 7.72863195s ago: executing program 2 (id=1195): r0 = syz_open_dev$dvb_demux(&(0x7f00000001c0), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0xf9, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0xd) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000080)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, &(0x7f0000000280)='L', 0x1) write$char_usb(r2, &(0x7f00000005c0)='R', 0x1) 6.252908708s ago: executing program 1 (id=1199): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14307f, 0x0) r2 = eventfd2(0x0, 0x0) r3 = dup2(r2, r1) write$eventfd(r2, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x0, r3}) 6.155731975s ago: executing program 1 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x7b, 0x40, 0x27, 0x0, 0x2, 0x5, 0x4, 0x7f, 0x8, 0x9, 0x2, 0x7, 0x0, 0x96a7, 0x8, 0x6, 0x27, 0xfa, 0x3, '\x00', 0x8, 0x5}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4104aec6, &(0x7f0000000d80)={0x1, [{0x1, 0x0, 0x101, 0x0}, {0x1, 0x590, 0xff, &(0x7f0000000180)="0ee062cf8f27de5ff5898b9f33257bf69f6ad925eec2a0570701d03f3a880f36cbae1fb7384b036a2d90e230ef2a60eb17fe566ed1033e8db5d48bb808c94d1eb3778999361827825176ba908c871bbdbc553b0c98baefa6a2dee72c34d8a8c0ca1997f1c8f680da672013020d5351111da519a5389b79993e52184e2e71fce3b2be6e16c6968222d8c2c4fa9e9284bd65d299cfb88627cd08439e59afc463972c83aaa9adf4ef04e1d5cf6a2117aa9b6ae7"}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x80000001, 0x0}, {0x1, 0x0, 0x6f5, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x6, 0x0, 0xc6c2, 0x0}, {0xb7d4904c39f7106e, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x6aa, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x49b7499af3df3cdb, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x1000000, 0x0}, {0x3, 0x0, 0x22f, 0x0}]}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x9}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.006103693s ago: executing program 3 (id=1201): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000740)='./file0\x00', 0x0, 0x0) chown(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) keyctl$join(0x1, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r0, &(0x7f0000000000)='3', 0x4e) mount$afs(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0), 0x1, &(0x7f0000000380)={[{@dyn}]}) 5.661383413s ago: executing program 3 (id=1202): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040bd28420000000000000109022400010000000009040100020300000009210000000122"], 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b00"], 0x88) 5.652037393s ago: executing program 1 (id=1203): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x542, 0x0) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000180)={0x10, 0x0, "7a56159f1a5e338ad3ffbe6de075b6bb"}) 5.36609151s ago: executing program 1 (id=1205): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d5, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9c068000) syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x814082, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESOCT=r1]) 4.57680886s ago: executing program 1 (id=1207): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="400901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.896684223s ago: executing program 2 (id=1208): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x3, 0x2, 0xeeee8000, 0x1000, &(0x7f0000f40000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x2, 0x2, 0xfec00000, 0x2000, &(0x7f0000f8b000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f00000001c0)={0x1ff, 0x0, 0x7000, 0x1000, &(0x7f0000ffe000/0x1000)=nil, 0x99}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xd000, 0x2000, &(0x7f0000c7d000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x4, 0x200000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) 3.818265419s ago: executing program 3 (id=1210): mkdir(&(0x7f0000000000)='./file0\x00', 0x130) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) creat(&(0x7f00000001c0)='./file0/file1\x00', 0x80) chdir(&(0x7f0000000000)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000180)='./file0\x00', 0x1000) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) 3.395932976s ago: executing program 3 (id=1213): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bond0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10, 0x0, 0x0, 0x4, [0x7, 0x7, 0xc60, 0xffffffff, 0x0, 0x2, 0x0, 0x1000]}}) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, 0x0, 0x2, &(0x7f0000000740)={0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000540)={'macvlan0\x00', 0x2}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x81) 3.161441973s ago: executing program 2 (id=1214): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='12345678-1234-1234', 0x12, 0xc30) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 2.871515013s ago: executing program 2 (id=1216): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$P9_RRENAME(r1, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2.78948864s ago: executing program 3 (id=1217): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000c00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r1, 0x4142, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000000)=0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000280)={0x1, 0x81, 0x95, 0x1, 0x200, 0x8000000000000000, 0x1, 0x9, 0x4, 0x8, 0x936, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x80984120, &(0x7f0000000080)) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) 2.729500602s ago: executing program 1 (id=1219): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r2, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r1) 2.662146165s ago: executing program 2 (id=1220): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.579775774s ago: executing program 3 (id=1222): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 1.517412365s ago: executing program 4 (id=1223): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r1, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x20, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727b, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.123030688s ago: executing program 4 (id=1224): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="400d06"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000740)={0x20, 0x17, 0x1, "e1"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="400b11"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f00000000c0)={0x20, 0x18, 0x1, "9f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 454.23675ms ago: executing program 4 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mount(&(0x7f0000000000)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./dev\x00', &(0x7f00000000c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x100000000000011, 0x2000, 0x2f93) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x61) sendfile(r2, r2, 0x0, 0x1000000201005) 273.632943ms ago: executing program 4 (id=1226): connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x38) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000080)={0x8001, 0x400, 0x10001}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xffffffffffffffff, 0x85, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 216.576627ms ago: executing program 4 (id=1227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r1, 0xc138fd05, &(0x7f0000000000)="0400000002000000000000007e0100003801") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, 0x0) preadv(r0, 0x0, 0x0, 0x6, 0x1) 0s ago: executing program 4 (id=1228): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28012, r0, 0x23719000) kernel console output (not intermixed with test programs): 028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 238.256680][ T8568] RAX: ffffffffffffffda RBX: 00007f43ec225fa0 RCX: 00007f43ebf9e159 [ 238.256691][ T8568] RDX: 0000200000000100 RSI: 0000200000000040 RDI: 0000200000000180 [ 238.256702][ T8568] RBP: 00007f43ec03506b R08: ffffffffffffffff R09: 0000000000000000 [ 238.256713][ T8568] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 238.256722][ T8568] R13: 00007f43ec226038 R14: 00007f43ec225fa0 R15: 00007ffe3a011048 [ 238.256746][ T8568] [ 238.585394][ T8574] FAULT_INJECTION: forcing a failure. [ 238.585394][ T8574] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 238.585433][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.2.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.585455][ T8574] Tainted: [L]=SOFTLOCKUP [ 238.585460][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 238.585470][ T8574] Call Trace: [ 238.585477][ T8574] [ 238.585483][ T8574] dump_stack_lvl+0xe8/0x150 [ 238.585509][ T8574] should_fail_ex+0x3eb/0x540 [ 238.585553][ T8574] _copy_from_user+0x2d/0xb0 [ 238.585585][ T8574] ucma_set_option+0xf9/0xce0 [ 238.585621][ T8574] ? __pfx_ucma_set_option+0x10/0x10 [ 238.585650][ T8574] ? __lock_acquire+0x747/0x2de0 [ 238.585678][ T8574] ? aa_file_perm+0x4ed/0x15f0 [ 238.585698][ T8574] ? aa_file_perm+0x18b/0x15f0 [ 238.585727][ T8574] ? lock_acquire+0x115/0x350 [ 238.585760][ T8574] ? __might_fault+0xaf/0x130 [ 238.585787][ T8574] ucma_write+0x249/0x2f0 [ 238.585807][ T8574] ? __pfx_ucma_write+0x10/0x10 [ 238.585824][ T8574] ? security_file_permission+0x75/0x260 [ 238.585849][ T8574] ? rw_verify_area+0x203/0x4c0 [ 238.585873][ T8574] ? __pfx_ucma_write+0x10/0x10 [ 238.585889][ T8574] vfs_write+0x296/0xba0 [ 238.585916][ T8574] ? __pfx_vfs_write+0x10/0x10 [ 238.585943][ T8574] ? __fget_files+0x2a/0x420 [ 238.585965][ T8574] ? __fget_files+0x2a/0x420 [ 238.585984][ T8574] ? __fget_files+0x3a2/0x420 [ 238.586004][ T8574] ? __fget_files+0x2a/0x420 [ 238.586030][ T8574] ksys_write+0x150/0x270 [ 238.586054][ T8574] ? __pfx_ksys_write+0x10/0x10 [ 238.586084][ T8574] do_syscall_64+0x166/0x520 [ 238.586099][ T8574] ? trace_irq_disable+0x3b/0x140 [ 238.586122][ T8574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.586138][ T8574] ? clear_bhb_loop+0x70/0xc0 [ 238.586158][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.586174][ T8574] RIP: 0033:0x7f43ebf9e159 [ 238.586189][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.586202][ T8574] RSP: 002b:00007f43ecea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 238.586219][ T8574] RAX: ffffffffffffffda RBX: 00007f43ec225fa0 RCX: 00007f43ebf9e159 [ 238.586231][ T8574] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 238.586241][ T8574] RBP: 00007f43ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 238.586251][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.586260][ T8574] R13: 00007f43ec226038 R14: 00007f43ec225fa0 R15: 00007ffe3a011048 [ 238.586290][ T8574] [ 239.425315][ T31] kauditd_printk_skb: 58 callbacks suppressed [ 239.425338][ T31] audit: type=1800 audit(1700000032.612:696): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.904" name="file1" dev="tmpfs" ino=1252 res=0 errno=0 [ 239.584523][ T31] audit: type=1800 audit(1700000032.772:697): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 239.624611][ T31] audit: type=1800 audit(1700000032.812:698): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 239.772978][ T31] audit: type=1800 audit(1700000032.962:699): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 239.842387][ T8597] syzkaller1: entered promiscuous mode [ 239.842412][ T8597] syzkaller1: entered allmulticast mode [ 239.849157][ T31] audit: type=1800 audit(1700000033.032:700): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 239.908787][ T31] audit: type=1800 audit(1700000033.092:701): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.899" name="cmci_disabled" dev="sysfs" ino=53302 res=0 errno=0 [ 240.005514][ T31] audit: type=1800 audit(1700000033.192:702): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 240.088016][ T31] audit: type=1800 audit(1700000033.272:703): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 240.313263][ T8601] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 240.720697][ T31] audit: type=1800 audit(1700000033.902:704): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 240.933260][ T31] audit: type=1800 audit(1700000034.122:705): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 241.300332][ T8626] FAULT_INJECTION: forcing a failure. [ 241.300332][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 241.300382][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.0.910 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.300413][ T8626] Tainted: [L]=SOFTLOCKUP [ 241.300422][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 241.300450][ T8626] Call Trace: [ 241.300460][ T8626] [ 241.300470][ T8626] dump_stack_lvl+0xe8/0x150 [ 241.300507][ T8626] should_fail_ex+0x3eb/0x540 [ 241.300539][ T8626] should_failslab+0xa8/0x100 [ 241.300567][ T8626] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 241.300605][ T8626] ? kasprintf+0xe2/0x140 [ 241.300634][ T8626] ? kasprintf+0xe2/0x140 [ 241.300670][ T8626] kvasprintf+0xeb/0x1a0 [ 241.300702][ T8626] ? __pfx_kvasprintf+0x10/0x10 [ 241.300745][ T8626] kasprintf+0xe2/0x140 [ 241.300776][ T8626] ? __is_module_percpu_address+0x28/0x3f0 [ 241.300811][ T8626] ? __pfx_kasprintf+0x10/0x10 [ 241.300842][ T8626] ? __is_module_percpu_address+0x39b/0x3f0 [ 241.300871][ T8626] ? is_module_address+0x17/0xf0 [ 241.300899][ T8626] ? is_module_address+0x17/0xf0 [ 241.300937][ T8626] alloc_workqueue_noprof+0x12e/0x210 [ 241.300976][ T8626] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 241.301017][ T8626] ? mutex_init_lockdep+0xdf/0x110 [ 241.301052][ T8626] __rds_conn_create+0x130d/0x2250 [ 241.301076][ T8626] ? __rds_conn_create+0x2d2/0x2250 [ 241.301133][ T8626] ? __pfx___rds_conn_create+0x10/0x10 [ 241.301158][ T8626] ? trace_kmalloc+0x2a/0xf0 [ 241.301196][ T8626] ? __raw_spin_lock_init+0x45/0x100 [ 241.301227][ T8626] rds_conn_create_outgoing+0x43/0x60 [ 241.301258][ T8626] rds_sendmsg+0xfca/0x20e0 [ 241.301307][ T8626] ? __pfx_rds_sendmsg+0x10/0x10 [ 241.301343][ T8626] ? __lock_acquire+0x747/0x2de0 [ 241.301375][ T8626] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.301404][ T8626] ? aa_sock_msg_perm+0x144/0x210 [ 241.301435][ T8626] ? apparmor_socket_sendmsg+0x98/0x360 [ 241.301461][ T8626] ? __pfx_rds_sendmsg+0x10/0x10 [ 241.301490][ T8626] sock_sendmsg_nosec+0x13a/0x180 [ 241.301525][ T8626] ____sys_sendmsg+0x54e/0x850 [ 241.301557][ T8626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.301593][ T8626] ? import_iovec+0x73/0xa0 [ 241.301627][ T8626] ___sys_sendmsg+0x2a5/0x360 [ 241.301652][ T8626] ? __lock_acquire+0x747/0x2de0 [ 241.301690][ T8626] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.301753][ T8626] ? __fget_files+0x2a/0x420 [ 241.301782][ T8626] ? __fget_files+0x3a2/0x420 [ 241.301822][ T8626] __x64_sys_sendmsg+0x1b1/0x290 [ 241.301847][ T8626] ? sched_clock+0x41/0x60 [ 241.301878][ T8626] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.301928][ T8626] do_syscall_64+0x166/0x520 [ 241.301968][ T8626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.301993][ T8626] ? clear_bhb_loop+0x70/0xc0 [ 241.302022][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.302066][ T8626] RIP: 0033:0x7f67e059e159 [ 241.302088][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.302110][ T8626] RSP: 002b:00007f67e143b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.302136][ T8626] RAX: ffffffffffffffda RBX: 00007f67e0825fa0 RCX: 00007f67e059e159 [ 241.302171][ T8626] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 241.302187][ T8626] RBP: 00007f67e063506b R08: 0000000000000000 R09: 0000000000000000 [ 241.302202][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.302217][ T8626] R13: 00007f67e0826038 R14: 00007f67e0825fa0 R15: 00007ffececbbfe8 [ 241.302253][ T8626] [ 242.249901][ T8641] overlayfs: upper fs does not support file handles, falling back to index=off. [ 244.180743][ T25] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 244.333405][ T25] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 244.334602][ T25] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 244.334631][ T25] usb 2-1: config 0 has no interface number 0 [ 244.334677][ T25] usb 2-1: config 0 interface 41 has no altsetting 0 [ 244.336635][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.336663][ T25] usb 2-1: Product: syz [ 244.336681][ T25] usb 2-1: Manufacturer: syz [ 244.336704][ T25] usb 2-1: SerialNumber: syz [ 244.339791][ T25] usb 2-1: config 0 descriptor?? [ 244.351185][ T5626] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 244.434627][ T31] kauditd_printk_skb: 19 callbacks suppressed [ 244.434648][ T31] audit: type=1800 audit(1700000037.622:725): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 244.499593][ T8682] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 244.510787][ T5626] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 244.513635][ T5626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.520488][ T31] audit: type=1800 audit(1700000037.702:726): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141019 res=0 errno=0 [ 244.559315][ T5351] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 244.559318][ T31] audit: type=1800 audit(1700000037.742:727): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=141048 res=0 errno=0 [ 244.586617][ T31] audit: type=1800 audit(1700000037.772:728): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=141026 res=0 errno=0 [ 244.606832][ T31] audit: type=1800 audit(1700000037.792:729): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=141027 res=0 errno=0 [ 244.633715][ T31] audit: type=1800 audit(1700000037.822:730): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=141028 res=0 errno=0 [ 244.666203][ T31] audit: type=1800 audit(1700000037.852:731): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141068 res=0 errno=0 [ 244.706244][ T31] audit: type=1800 audit(1700000037.892:732): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 244.730852][ T5351] usb 3-1: Using ep0 maxpacket: 32 [ 244.773089][ T31] audit: type=1800 audit(1700000037.962:733): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141149 res=0 errno=0 [ 244.774094][ T5626] net1080 1-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, c6:bb:88:f2:c5:d3 [ 244.817115][ T31] audit: type=1800 audit(1700000038.002:734): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=141154 res=0 errno=0 [ 244.869165][ T5351] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.869220][ T5351] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 244.870410][ T5351] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 244.870445][ T5351] usb 3-1: can't read configurations, error -71 [ 245.246797][ T25] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 245.804617][ T8675] net1080 1-1:1.0 usb0: port B, peer disconnected [ 246.007165][ T8707] bond0: option mode: unable to set because the bond device has slaves [ 246.015271][ T5724] usb 1-1: USB disconnect, device number 34 [ 246.043446][ T5724] net1080 1-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 246.487321][ T25] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 246.489280][ T25] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 246.489556][ T25] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 246.511001][ T25] usb 2-1: USB disconnect, device number 33 [ 247.190219][ T8740] Bluetooth: MGMT ver 1.23 [ 247.199632][ T8739] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 247.307241][ T8742] Zero length message leads to an empty skb [ 247.815457][ T8750] FAULT_INJECTION: forcing a failure. [ 247.815457][ T8750] name failslab, interval 1, probability 0, space 0, times 0 [ 247.815507][ T8750] CPU: 0 UID: 0 PID: 8750 Comm: syz.3.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.815542][ T8750] Tainted: [L]=SOFTLOCKUP [ 247.815551][ T8750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 247.815565][ T8750] Call Trace: [ 247.815574][ T8750] [ 247.815584][ T8750] dump_stack_lvl+0xe8/0x150 [ 247.815619][ T8750] should_fail_ex+0x3eb/0x540 [ 247.815651][ T8750] should_failslab+0xa8/0x100 [ 247.815676][ T8750] ? __kernfs_new_node+0xe6/0x980 [ 247.815712][ T8750] kmem_cache_alloc_noprof+0x9c/0x600 [ 247.815747][ T8750] ? __kernfs_new_node+0xe6/0x980 [ 247.815788][ T8750] __kernfs_new_node+0xe6/0x980 [ 247.815832][ T8750] ? __pfx___kernfs_new_node+0x10/0x10 [ 247.815867][ T8750] ? kernfs_root+0x1c/0x230 [ 247.815907][ T8750] ? kernfs_root+0x1c/0x230 [ 247.815938][ T8750] ? kernfs_root+0x1c/0x230 [ 247.815968][ T8750] ? kernfs_root+0x1c/0x230 [ 247.816005][ T8750] kernfs_new_node+0xea/0x140 [ 247.816045][ T8750] __kernfs_create_file+0x4b/0x2e0 [ 247.816075][ T8750] sysfs_add_file_mode_ns+0x237/0x300 [ 247.816112][ T8750] internal_create_group+0x679/0x1180 [ 247.816157][ T8750] ? kobject_init_and_add+0x12b/0x1a0 [ 247.816184][ T8750] ? tun_attach+0x1191/0x1560 [ 247.816204][ T8750] ? tun_set_iff+0x463/0xf20 [ 247.816238][ T8750] ? __pfx_internal_create_group+0x10/0x10 [ 247.816303][ T8750] sysfs_create_groups+0x59/0x120 [ 247.816342][ T8750] netdev_queue_update_kobjects+0x29a/0x6b0 [ 247.816395][ T8750] netif_set_real_num_tx_queues+0x265/0xa30 [ 247.816435][ T8750] tun_attach+0x1191/0x1560 [ 247.816479][ T8750] ? tun_not_capable+0x148/0x1f0 [ 247.816506][ T8750] tun_set_iff+0x463/0xf20 [ 247.816550][ T8750] __tun_chr_ioctl+0x7e5/0x1e70 [ 247.816596][ T8750] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 247.816655][ T8750] ? __fget_files+0x2a/0x420 [ 247.816685][ T8750] ? __fget_files+0x3a2/0x420 [ 247.816714][ T8750] ? __fget_files+0x2a/0x420 [ 247.816748][ T8750] ? bpf_lsm_file_ioctl+0x9/0x20 [ 247.816778][ T8750] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 247.816812][ T8750] __se_sys_ioctl+0xfc/0x170 [ 247.816853][ T8750] do_syscall_64+0x166/0x520 [ 247.816874][ T8750] ? trace_irq_disable+0x3b/0x140 [ 247.816908][ T8750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.816933][ T8750] ? clear_bhb_loop+0x70/0xc0 [ 247.816964][ T8750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.816987][ T8750] RIP: 0033:0x7fedf779e159 [ 247.817010][ T8750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.817030][ T8750] RSP: 002b:00007fedf59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.817057][ T8750] RAX: ffffffffffffffda RBX: 00007fedf7a25fa0 RCX: 00007fedf779e159 [ 247.817074][ T8750] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000006 [ 247.817090][ T8750] RBP: 00007fedf783506b R08: 0000000000000000 R09: 0000000000000000 [ 247.817106][ T8750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.817120][ T8750] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 247.817157][ T8750] [ 249.527088][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 249.527108][ T31] audit: type=1800 audit(1700000042.712:765): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 249.844570][ T31] audit: type=1800 audit(1700000043.032:766): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 250.065836][ T31] audit: type=1800 audit(1700000043.252:767): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 250.139285][ T31] audit: type=1800 audit(1700000043.322:768): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="new_array" dev="sysfs" ino=61943 res=0 errno=0 [ 250.172015][ T8799] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 250.203050][ T31] audit: type=1800 audit(1700000043.392:769): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="metadata_version" dev="sysfs" ino=119646 res=0 errno=0 [ 250.239525][ T31] audit: type=1800 audit(1700000043.422:770): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="new_dev" dev="sysfs" ino=119647 res=0 errno=0 [ 250.317667][ T31] audit: type=1800 audit(1700000043.502:771): pid=8799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.959" name="bad_blocks" dev="sysfs" ino=141641 res=0 errno=0 [ 250.473166][ T31] audit: type=1800 audit(1700000043.662:772): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 250.639776][ T5720] usb 4-1: [UEAGLE-ATM] firmware is not available [ 250.653585][ T31] audit: type=1800 audit(1700000043.842:773): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=126219 res=0 errno=0 [ 250.654719][ T31] audit: type=1800 audit(1700000043.842:774): pid=6001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=126198 res=0 errno=0 [ 250.715324][ T8802] Config c/1 of g1 needs at least one function. [ 250.716571][ T8802] udc dummy_udc.0: failed to start g1: -22 [ 250.716596][ T8802] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 250.718481][ T8802] UDC core: g1: couldn't find an available UDC or it's busy [ 250.844932][ T8548] IPVS: starting estimator thread 0... [ 250.930726][ T8808] IPVS: using max 32 ests per chain, 76800 per kthread [ 251.000329][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 251.068231][ T8813] netlink: 'syz.1.964': attribute type 4 has an invalid length. [ 251.068256][ T8813] netlink: 152 bytes leftover after parsing attributes in process `syz.1.964'. [ 251.095619][ T8813] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 251.162831][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.165783][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 251.165821][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.165847][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.165893][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.183773][ T10] usb 4-1: config 0 descriptor?? [ 251.470338][ T5765] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 251.631257][ T5765] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.632804][ T5765] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.632834][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 251.632861][ T5765] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 251.632885][ T5765] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.632927][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.720445][ T5765] usb 2-1: config 0 descriptor?? [ 251.737943][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 252.182440][ T5765] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 252.550506][ T8823] ceph: No mds server is up or the cluster is laggy [ 252.919147][ T8842] Invalid argument reading file caps for ./file0 [ 253.135970][ T8847] FAULT_INJECTION: forcing a failure. [ 253.135970][ T8847] name failslab, interval 1, probability 0, space 0, times 0 [ 253.135997][ T8847] CPU: 1 UID: 0 PID: 8847 Comm: syz.2.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.136031][ T8847] Tainted: [L]=SOFTLOCKUP [ 253.136037][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 253.136053][ T8847] Call Trace: [ 253.136060][ T8847] [ 253.136067][ T8847] dump_stack_lvl+0xe8/0x150 [ 253.136093][ T8847] should_fail_ex+0x3eb/0x540 [ 253.136115][ T8847] should_failslab+0xa8/0x100 [ 253.136165][ T8847] __kmalloc_cache_noprof+0x9e/0x600 [ 253.136202][ T8847] ? nl80211_dump_wiphy_parse+0xa7/0x560 [ 253.136233][ T8847] ? nl80211_dump_wiphy_parse+0xa7/0x560 [ 253.136267][ T8847] nl80211_dump_wiphy_parse+0xa7/0x560 [ 253.136298][ T8847] ? __kasan_kmalloc+0x93/0xb0 [ 253.136315][ T8847] ? __pfx_nl80211_dump_wiphy_parse+0x10/0x10 [ 253.136338][ T8847] ? __kmalloc_cache_noprof+0x148/0x600 [ 253.136360][ T8847] ? nl80211_dump_wiphy+0x27a/0x6b0 [ 253.136397][ T8847] ? nl80211_dump_wiphy+0x27a/0x6b0 [ 253.136423][ T8847] nl80211_dump_wiphy+0x2aa/0x6b0 [ 253.136442][ T8847] ? __kmalloc_node_track_caller_noprof+0x2e6/0x720 [ 253.136467][ T8847] ? netlink_dump+0x1e7/0xee0 [ 253.136493][ T8847] genl_dumpit+0x10b/0x1b0 [ 253.136521][ T8847] netlink_dump+0x711/0xee0 [ 253.136552][ T8847] ? __pfx_netlink_dump+0x10/0x10 [ 253.136582][ T8847] ? genl_start+0x497/0x6d0 [ 253.136612][ T8847] __netlink_dump_start+0x589/0x7b0 [ 253.136638][ T8847] genl_family_rcv_msg_dumpit+0x213/0x310 [ 253.136668][ T8847] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 253.136693][ T8847] ? genl_get_cmd+0x82f/0x960 [ 253.136721][ T8847] ? __pfx_genl_start+0x10/0x10 [ 253.136745][ T8847] ? __pfx_genl_dumpit+0x10/0x10 [ 253.136768][ T8847] ? __pfx_genl_done+0x10/0x10 [ 253.136785][ T8847] ? __dev_queue_xmit+0x29b/0x3820 [ 253.136813][ T8847] genl_rcv_msg+0x5e1/0x7a0 [ 253.136843][ T8847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.136868][ T8847] ? __pfx_nl80211_dump_wiphy+0x10/0x10 [ 253.136890][ T8847] ? __pfx_nl80211_dump_wiphy_done+0x10/0x10 [ 253.136913][ T8847] ? __asan_memcpy+0x40/0x70 [ 253.136935][ T8847] ? __skb_clone+0x5c/0x6c0 [ 253.136958][ T8847] netlink_rcv_skb+0x226/0x4a0 [ 253.136979][ T8847] ? __pfx_genl_rcv_msg+0x10/0x10 [ 253.137006][ T8847] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 253.137038][ T8847] ? down_read+0x2b9/0x320 [ 253.137066][ T8847] genl_rcv+0x28/0x40 [ 253.137090][ T8847] netlink_unicast+0x7bd/0x940 [ 253.137117][ T8847] netlink_sendmsg+0x7c3/0xae0 [ 253.137144][ T8847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.137172][ T8847] ? apparmor_socket_sendmsg+0x98/0x360 [ 253.137192][ T8847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.137213][ T8847] sock_sendmsg_nosec+0x13a/0x180 [ 253.137238][ T8847] ____sys_sendmsg+0x54e/0x850 [ 253.137280][ T8847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.137318][ T8847] ? import_iovec+0x73/0xa0 [ 253.137353][ T8847] ___sys_sendmsg+0x2a5/0x360 [ 253.137378][ T8847] ? __lock_acquire+0x747/0x2de0 [ 253.137416][ T8847] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.137438][ T8847] ? futex_wait+0x2a2/0x390 [ 253.137482][ T8847] ? __fget_files+0x2a/0x420 [ 253.137502][ T8847] ? __fget_files+0x3a2/0x420 [ 253.137531][ T8847] __x64_sys_sendmsg+0x1b1/0x290 [ 253.137555][ T8847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.137602][ T8847] do_syscall_64+0x166/0x520 [ 253.137616][ T8847] ? trace_irq_disable+0x3b/0x140 [ 253.137639][ T8847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.137656][ T8847] ? clear_bhb_loop+0x70/0xc0 [ 253.137675][ T8847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.137691][ T8847] RIP: 0033:0x7f43ebf9e159 [ 253.137706][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.137719][ T8847] RSP: 002b:00007f43ecea7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.137736][ T8847] RAX: ffffffffffffffda RBX: 00007f43ec225fa0 RCX: 00007f43ebf9e159 [ 253.137748][ T8847] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 253.137758][ T8847] RBP: 00007f43ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 253.137768][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.137778][ T8847] R13: 00007f43ec226038 R14: 00007f43ec225fa0 R15: 00007ffe3a011048 [ 253.137802][ T8847] [ 253.717952][ T10] usb 4-1: USB disconnect, device number 22 [ 253.855122][ T8853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.238967][ T25] usb 2-1: USB disconnect, device number 34 [ 254.532764][ T31] kauditd_printk_skb: 490 callbacks suppressed [ 254.532784][ T31] audit: type=1800 audit(1700000047.722:1265): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142204 res=0 errno=0 [ 254.547288][ T31] audit: type=1800 audit(1700000047.732:1266): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142216 res=0 errno=0 [ 254.595835][ T31] audit: type=1800 audit(1700000047.782:1267): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142228 res=0 errno=0 [ 254.626915][ T31] audit: type=1800 audit(1700000047.812:1268): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142240 res=0 errno=0 [ 254.650036][ T31] audit: type=1800 audit(1700000047.832:1269): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142252 res=0 errno=0 [ 254.672009][ T31] audit: type=1800 audit(1700000047.852:1270): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142264 res=0 errno=0 [ 254.702700][ T31] audit: type=1800 audit(1700000047.893:1271): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142276 res=0 errno=0 [ 254.733516][ T31] audit: type=1800 audit(1700000047.923:1272): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142288 res=0 errno=0 [ 254.764914][ T31] audit: type=1800 audit(1700000047.953:1273): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142300 res=0 errno=0 [ 254.802961][ T31] audit: type=1800 audit(1700000047.993:1274): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=142312 res=0 errno=0 [ 255.757794][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.757848][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.120367][ T5765] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 256.229903][ C0] net_ratelimit: 54 callbacks suppressed [ 256.270078][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 256.270835][ T5765] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 256.272511][ T5765] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 256.272550][ T5765] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 256.272591][ T5765] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 256.272622][ T5765] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 256.272653][ T5765] usb 1-1: config 0 interface 0 has no altsetting 0 [ 256.279811][ T5765] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 256.280025][ T5765] usb 1-1: Product: syz [ 256.280043][ T5765] usb 1-1: Manufacturer: syz [ 256.280060][ T5765] usb 1-1: SerialNumber: syz [ 256.371536][ T5765] usb 1-1: config 0 descriptor?? [ 256.393759][ T5765] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.395846][ T5765] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.504149][ T8882] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.534584][ T8896] rust_binder: Failure in copy_transaction_data: EINVAL [ 256.534665][ T8896] rust_binder: 8895:8896 transaction call to 8895:0 failed EINVAL, code 0 size 8192-24 [ 256.538914][ T5720] rust_binder: 8895: undelivered TRANSACTION_ERROR: 29201 [ 256.596003][ T8896] syz.2.991 (8896) used greatest stack depth: 11936 bytes left [ 256.770527][ T8893] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 256.774977][ T8897] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 256.776740][ C1] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 256.776845][ T5765] usb 1-1: USB disconnect, device number 35 [ 256.812237][ T5765] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 257.695224][ T8922] device-mapper: table: 248:0: too large device [ 257.695238][ T8922] device-mapper: ioctl: error adding target to table [ 257.792735][ T8924] syzkaller0: entered promiscuous mode [ 257.792767][ T8924] syzkaller0: entered allmulticast mode [ 259.486120][ T8945] Bluetooth: (null): Non-link packet received in non-active state [ 259.691456][ T31] kauditd_printk_skb: 87 callbacks suppressed [ 259.691475][ T31] audit: type=1800 audit(1700000052.873:1362): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143400 res=0 errno=0 [ 260.013214][ T31] audit: type=1800 audit(1700000053.203:1363): pid=8953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1009" name="qw_sign" dev="configfs" ino=24885 res=0 errno=0 [ 260.191210][ T31] audit: type=1800 audit(1700000053.383:1364): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1006" name="/" dev="fuse" ino=1 res=0 errno=0 [ 260.276952][ T31] audit: type=1800 audit(1700000053.463:1365): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 260.366285][ T31] audit: type=1800 audit(1700000053.563:1366): pid=8957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1011" name="resource0" dev="sysfs" ino=2974 res=0 errno=0 [ 260.462772][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da4400: rx timeout, send abort [ 260.464501][ T25] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 260.620553][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 260.628608][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.628655][ T25] usb 1-1: New USB device found, idVendor=534d, idProduct=0021, bcdDevice= 0.40 [ 260.664372][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.664394][ T25] usb 1-1: Product: syz [ 260.664410][ T25] usb 1-1: Manufacturer: syz [ 260.664427][ T25] usb 1-1: SerialNumber: syz [ 260.693739][ T31] audit: type=1800 audit(1700000053.893:1367): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=143427 res=0 errno=0 [ 260.695690][ T31] audit: type=1800 audit(1700000053.893:1368): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=143459 res=0 errno=0 [ 260.696541][ T31] audit: type=1800 audit(1700000053.893:1369): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=143434 res=0 errno=0 [ 260.697367][ T31] audit: type=1800 audit(1700000053.893:1370): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=143435 res=0 errno=0 [ 260.858515][ T31] audit: type=1800 audit(1700000054.043:1371): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 260.956120][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da6800: rx timeout, send abort [ 260.962867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888079da4400: abort rx timeout. Force session deactivation [ 261.090805][ C0] vcan0: j1939_xtp_rx_rts_session_active: 0xffff888079da6800: connection exists (fe ff). last cmd: 20 [ 261.340696][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880795d8400: rx timeout, send abort [ 261.429597][ C0] net_ratelimit: 77 callbacks suppressed [ 261.487005][ T25] usb 1-1: USB disconnect, device number 36 [ 261.647601][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 261.710472][ T5724] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 261.850295][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880795d8400: abort rx timeout. Force session deactivation [ 261.862502][ T5724] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 261.881721][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.881744][ T5724] usb 2-1: Product: syz [ 261.881759][ T5724] usb 2-1: Manufacturer: syz [ 261.881776][ T5724] usb 2-1: SerialNumber: syz [ 262.333066][ T5724] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 262.575103][ T8979] FAULT_INJECTION: forcing a failure. [ 262.575103][ T8979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.575139][ T8979] CPU: 1 UID: 0 PID: 8979 Comm: syz.3.1019 Tainted: G L syzkaller #0 PREEMPT(full) [ 262.575176][ T8979] Tainted: [L]=SOFTLOCKUP [ 262.575186][ T8979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 262.575200][ T8979] Call Trace: [ 262.575210][ T8979] [ 262.575221][ T8979] dump_stack_lvl+0xe8/0x150 [ 262.575257][ T8979] should_fail_ex+0x3eb/0x540 [ 262.575310][ T8979] set_fd_set+0x3a/0xa0 [ 262.575337][ T8979] core_sys_select+0x9c1/0xb40 [ 262.575362][ T8979] ? cgroup1_freezing+0x20/0x350 [ 262.575406][ T8979] ? __pfx_core_sys_select+0x10/0x10 [ 262.575459][ T8979] ? __pfx_set_user_sigmask+0x10/0x10 [ 262.575488][ T8979] ? kmem_cache_free+0x182/0x650 [ 262.575535][ T8979] __se_sys_pselect6+0x267/0x320 [ 262.575591][ T8979] ? __pfx___se_sys_pselect6+0x10/0x10 [ 262.575628][ T8979] ? __x64_sys_pselect6+0x21/0xf0 [ 262.575659][ T8979] do_syscall_64+0x166/0x520 [ 262.575682][ T8979] ? trace_irq_disable+0x3b/0x140 [ 262.575716][ T8979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.575741][ T8979] ? clear_bhb_loop+0x70/0xc0 [ 262.575770][ T8979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.575794][ T8979] RIP: 0033:0x7fedf779e159 [ 262.575815][ T8979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.575836][ T8979] RSP: 002b:00007fedf59f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 262.575862][ T8979] RAX: ffffffffffffffda RBX: 00007fedf7a25fa0 RCX: 00007fedf779e159 [ 262.575880][ T8979] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 262.575896][ T8979] RBP: 00007fedf783506b R08: 00002000000001c0 R09: 0000200000000300 [ 262.575913][ T8979] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000000 [ 262.575928][ T8979] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 262.575963][ T8979] [ 262.893416][ T8982] rust_binder: 8981:8982 error while translating object: EPERM [ 262.893573][ T8982] rust_binder: Failure in copy_transaction_data: EPERM [ 262.893602][ T8982] rust_binder: 8981:8982 transaction call to 8981:0 failed EPERM, code 0 size 88-24 [ 262.894709][ T5765] rust_binder: 8981: undelivered TRANSACTION_ERROR: 29201 [ 263.045060][ T10] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 263.045143][ T8989] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 263.203343][ T5765] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 263.239561][ T5720] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 263.351130][ T5765] usb 4-1: not running at top speed; connect to a high speed hub [ 263.351153][ T5765] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 263.353111][ T5765] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 263.356231][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.356254][ T5765] usb 4-1: Product: syz [ 263.356299][ T5765] usb 4-1: Manufacturer: syz [ 263.356316][ T5765] usb 4-1: SerialNumber: syz [ 263.417763][ T5720] usb 3-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 263.421864][ T5720] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.421931][ T5720] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 263.422080][ T5720] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.465295][ T5765] oti6858 4-1:1.0: oti6858 converter detected [ 263.480670][ T5765] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 263.510162][ T5720] idmouse 3-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 263.886386][ T9001] syzkaller1: entered promiscuous mode [ 263.886404][ T9001] syzkaller1: entered allmulticast mode [ 264.031634][ T5724] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 264.055340][ T5724] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 264.075505][ T5724] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 264.095561][ T5724] usb 2-1: USB disconnect, device number 35 [ 264.300546][ T5720] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 264.450286][ T5720] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.450325][ T5720] usb 1-1: too many configurations: 13, using maximum allowed: 8 [ 264.450982][ T5720] usb 1-1: config 0 has no interfaces? [ 264.451761][ T5720] usb 1-1: config 0 has no interfaces? [ 264.452364][ T5720] usb 1-1: config 0 has no interfaces? [ 264.452983][ T5720] usb 1-1: config 0 has no interfaces? [ 264.453590][ T5720] usb 1-1: config 0 has no interfaces? [ 264.454347][ T5720] usb 1-1: config 0 has no interfaces? [ 264.454955][ T5720] usb 1-1: config 0 has no interfaces? [ 264.455559][ T5720] usb 1-1: config 0 has no interfaces? [ 264.458620][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.458645][ T5720] usb 1-1: Product: syz [ 264.458662][ T5720] usb 1-1: Manufacturer: syz [ 264.458677][ T5720] usb 1-1: SerialNumber: syz [ 264.551469][ T5720] usb 1-1: config 0 descriptor?? [ 264.757246][ T5720] usb 1-1: USB disconnect, device number 37 [ 264.866265][ T31] kauditd_printk_skb: 57 callbacks suppressed [ 264.866279][ T31] audit: type=1800 audit(1700000058.053:1429): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 265.160524][ T5724] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 265.309387][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 265.310257][ T5724] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 265.311451][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 265.311472][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.313893][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.313908][ T5724] usb 2-1: Product: syz [ 265.313918][ T5724] usb 2-1: Manufacturer: syz [ 265.313951][ T5724] usb 2-1: SerialNumber: syz [ 265.316888][ T5724] usb 2-1: config 0 descriptor?? [ 265.318321][ T31] audit: type=1800 audit(1700000058.503:1430): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144400 res=0 errno=0 [ 265.342268][ T5724] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 265.342349][ T5724] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 265.368497][ T31] audit: type=1800 audit(1700000058.523:1431): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144432 res=0 errno=0 [ 265.368549][ T31] audit: type=1800 audit(1700000058.533:1432): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144407 res=0 errno=0 [ 265.368592][ T31] audit: type=1800 audit(1700000058.543:1433): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144408 res=0 errno=0 [ 265.432527][ T5765] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 265.503989][ T5766] usb 3-1: USB disconnect, device number 26 [ 265.508296][ T5766] idmouse 3-1:1.0: disconnected [ 265.591249][ T5765] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 265.592284][ T5765] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.592328][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.596964][ T31] audit: type=1800 audit(1700000058.783:1434): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144470 res=0 errno=0 [ 265.649019][ T31] audit: type=1800 audit(1700000058.813:1435): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=144499 res=0 errno=0 [ 265.672187][ T31] audit: type=1800 audit(1700000058.863:1436): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=144477 res=0 errno=0 [ 265.675409][ T31] audit: type=1800 audit(1700000058.863:1437): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=144478 res=0 errno=0 [ 265.676967][ T31] audit: type=1800 audit(1700000058.863:1438): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=144479 res=0 errno=0 [ 265.901120][ T5720] usb 4-1: USB disconnect, device number 23 [ 265.935691][ T5720] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 265.936661][ T5720] oti6858 4-1:1.0: device disconnected [ 265.961942][ T5724] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 265.963988][ T5724] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 266.027869][ T5765] wacom 0003:056A:033B.0015: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 266.047722][ T5765] wacom 0003:056A:033B.0015: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0 [ 266.085188][ T5765] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.0015/input/input38 [ 266.296593][ T9015] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3766862737 (7533725474 ns) > initial count (2843276174 ns). Using initial count to start timer. [ 266.549429][ T5720] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 266.629262][ C0] net_ratelimit: 114 callbacks suppressed [ 266.692355][ T9025] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 266.699363][ T5720] usb 4-1: Using ep0 maxpacket: 32 [ 266.709974][ T5720] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 266.711516][ T5720] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.711542][ T5720] usb 4-1: config 0 has no interfaces? [ 266.711627][ T5720] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.755522][ T5720] usb 4-1: config 0 descriptor?? [ 266.978751][ T5766] usb 1-1: USB disconnect, device number 38 [ 266.983832][ T5724] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe [ 267.193088][ T5724] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 267.196142][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 267.198598][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 267.199397][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 267.205534][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 267.207782][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 267.247543][ T5724] usb 2-1: USB disconnect, device number 36 [ 267.355356][ T9027] kvm: apic: phys broadcast and lowest prio [ 268.209786][ T9034] FAULT_INJECTION: forcing a failure. [ 268.209786][ T9034] name failslab, interval 1, probability 0, space 0, times 0 [ 268.209821][ T9034] CPU: 1 UID: 0 PID: 9034 Comm: syz.1.1038 Tainted: G L syzkaller #0 PREEMPT(full) [ 268.209854][ T9034] Tainted: [L]=SOFTLOCKUP [ 268.209864][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 268.209880][ T9034] Call Trace: [ 268.209890][ T9034] [ 268.209901][ T9034] dump_stack_lvl+0xe8/0x150 [ 268.209938][ T9034] should_fail_ex+0x3eb/0x540 [ 268.209971][ T9034] should_failslab+0xa8/0x100 [ 268.210016][ T9034] __kmalloc_cache_noprof+0x9e/0x600 [ 268.210051][ T9034] ? shmem_init_fs_context+0x53/0x260 [ 268.210075][ T9034] ? shmem_init_fs_context+0x53/0x260 [ 268.210106][ T9034] shmem_init_fs_context+0x53/0x260 [ 268.210134][ T9034] alloc_fs_context+0x99e/0xd00 [ 268.210179][ T9034] do_new_mount+0x17f/0xdc0 [ 268.210213][ T9034] ? __pfx_do_new_mount+0x10/0x10 [ 268.210245][ T9034] ? ns_capable+0x84/0xe0 [ 268.210274][ T9034] ? path_mount+0x647/0x1050 [ 268.210307][ T9034] ? user_path_at+0xd4/0x160 [ 268.210342][ T9034] __se_sys_mount+0x31d/0x420 [ 268.210377][ T9034] ? __pfx___se_sys_mount+0x10/0x10 [ 268.210414][ T9034] ? __x64_sys_mount+0x20/0xc0 [ 268.210446][ T9034] do_syscall_64+0x166/0x520 [ 268.210468][ T9034] ? trace_irq_disable+0x3b/0x140 [ 268.210502][ T9034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.210527][ T9034] ? clear_bhb_loop+0x70/0xc0 [ 268.210565][ T9034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.210589][ T9034] RIP: 0033:0x7fe9f419e159 [ 268.210610][ T9034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 ** 319 printk messages dropped ** ** 70 printk messages dropped ** ** 80 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 80 printk messages dropped ** ** 83 printk messages dropped ** ** 132 printk messages dropped ** ** 72 printk messages dropped ** ** 78 printk messages dropped ** ** 79 printk messages dropped ** ** 79 printk messages dropped ** ** 87 printk messages dropped ** ** 78 printk messages dropped ** ** 90 printk messages dropped ** ** 40 printk messages dropped ** [ 268.690432][ T9038] netlink: 'syz.0.1040': attribute type 10 has an invalid length. [ 268.690453][ T9038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1040'. [ 268.691029][ T9038] team0: entered promiscuous mode [ 268.691050][ T9038] team_slave_0: entered promiscuous mode [ 268.691266][ T9038] team_slave_1: entered promiscuous mode [ 268.691477][ T9038] team0: entered allmulticast mode [ 268.691506][ T9038] team_slave_0: entered allmulticast mode [ 268.691523][ T9038] team_slave_1: entered allmulticast mode [ 268.692595][ T9038] bridge0: port 3(team0) entered blocking state [ 268.692752][ T9038] bridge0: port 3(team0) entered disabled state [ 268.698924][ T9038] bridge0: port 3(team0) entered blocking state [ 268.699125][ T9038] bridge0: port 3(team0) entered forwarding state ** 301 printk messages dropped ** ** 86 printk messages dropped ** ** 85 printk messages dropped ** ** 89 printk messages dropped ** ** 103 printk messages dropped ** ** 98 printk messages dropped ** ** 364 printk messages dropped ** ** 136 printk messages dropped ** ** 85 printk messages dropped ** [ 269.268720][ T5766] usb 4-1: USB disconnect, device number 24 [ 269.459076][ T5765] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 269.610409][ T5765] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 269.611633][ T5765] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.615111][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 269.615134][ T5765] usb 1-1: Product: syz [ 269.615151][ T5765] usb 1-1: Manufacturer: syz [ 269.615168][ T5765] usb 1-1: SerialNumber: syz [ 269.870513][ T31] kauditd_printk_skb: 41 callbacks suppressed [ 269.870530][ T31] audit: type=1800 audit(1700000063.063:1480): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 269.920436][ T5765] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 269.944023][ T31] audit: type=1800 audit(1700000063.133:1481): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=144849 res=0 errno=0 [ 269.944073][ T31] audit: type=1800 audit(1700000063.133:1482): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=144850 res=0 errno=0 [ 269.945581][ T31] audit: type=1800 audit(1700000063.133:1483): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=144829 res=0 errno=0 [ 269.946798][ T31] audit: type=1800 audit(1700000063.133:1484): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=144851 res=0 errno=0 [ 270.032313][ T31] audit: type=1800 audit(1700000063.213:1485): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144872 res=0 errno=0 [ 270.096082][ T9053] FAULT_INJECTION: forcing a failure. [ 270.096082][ T9053] name failslab, interval 1, probability 0, space 0, times 0 [ 270.096119][ T9053] CPU: 1 UID: 0 PID: 9053 Comm: syz.3.1046 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.096151][ T9053] Tainted: [L]=SOFTLOCKUP [ 270.096161][ T9053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 270.096176][ T9053] Call Trace: [ 270.096187][ T9053] [ 270.096197][ T9053] dump_stack_lvl+0xe8/0x150 [ 270.096235][ T9053] should_fail_ex+0x3eb/0x540 [ 270.096268][ T9053] should_failslab+0xa8/0x100 [ 270.096298][ T9053] __kmalloc_cache_noprof+0x9e/0x600 [ 270.096334][ T9053] ? __raw_spin_lock_init+0x45/0x100 [ 270.096362][ T9053] ? __kthread_create_on_node+0x115/0x3d0 [ 270.096402][ T9053] ? __kthread_create_on_node+0x115/0x3d0 [ 270.096435][ T9053] ? __init_swait_queue_head+0xa8/0x150 [ 270.096459][ T9053] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 270.096495][ T9053] __kthread_create_on_node+0x115/0x3d0 [ 270.096529][ T9053] ? __pfx___kthread_create_on_node+0x10/0x10 [ 270.096576][ T9053] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 270.096610][ T9053] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 270.096645][ T9053] kthread_create_on_node+0xeb/0x140 [ 270.096682][ T9053] ? __pfx_kthread_create_on_node+0x10/0x10 [ 270.096721][ T9053] ? do_raw_spin_unlock+0xf5/0x200 [ 270.096755][ T9053] rxrpc_lookup_local+0xf56/0x15d0 [ 270.096801][ T9053] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 270.096837][ T9053] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 270.096869][ T9053] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 270.096915][ T9053] ? rxrpc_sendmsg+0x11e/0x6b0 [ 270.096949][ T9053] ? __local_bh_enable_ip+0xd6/0x140 [ 270.096981][ T9053] rxrpc_sendmsg+0x34b/0x6b0 [ 270.097020][ T9053] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 270.097052][ T9053] sock_sendmsg_nosec+0x13a/0x180 [ 270.097090][ T9053] ____sys_sendmsg+0x54e/0x850 [ 270.097125][ T9053] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.097163][ T9053] ? import_iovec+0x73/0xa0 [ 270.097199][ T9053] ___sys_sendmsg+0x2a5/0x360 [ 270.097226][ T9053] ? __lock_acquire+0x747/0x2de0 [ 270.097266][ T9053] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.097297][ T9053] ? futex_wait+0x2a2/0x390 [ 270.097362][ T9053] ? __fget_files+0x2a/0x420 [ 270.097401][ T9053] ? __fget_files+0x3a2/0x420 [ 270.097445][ T9053] __x64_sys_sendmsg+0x1b1/0x290 [ 270.097477][ T9053] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.097529][ T9053] do_syscall_64+0x166/0x520 [ 270.097552][ T9053] ? trace_irq_disable+0x3b/0x140 [ 270.097587][ T9053] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.097613][ T9053] ? clear_bhb_loop+0x70/0xc0 [ 270.097643][ T9053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.097667][ T9053] RIP: 0033:0x7fedf779e159 [ 270.097690][ T9053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.097711][ T9053] RSP: 002b:00007fedf59f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.097737][ T9053] RAX: ffffffffffffffda RBX: 00007fedf7a25fa0 RCX: 00007fedf779e159 [ 270.097756][ T9053] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 270.097773][ T9053] RBP: 00007fedf783506b R08: 0000000000000000 R09: 0000000000000000 [ 270.097789][ T9053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 270.097804][ T9053] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 270.097842][ T9053] [ 270.097899][ T31] audit: type=1800 audit(1700000063.283:1486): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 270.119556][ T31] audit: type=1800 audit(1700000063.303:1487): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=144966 res=0 errno=0 [ 270.169678][ T5699] usb 1-1: USB disconnect, device number 39 [ 270.290351][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 270.373230][ T5699] usblp0: removed [ 270.465937][ T10] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 270.490123][ T10] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 270.490210][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.490263][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 270.490460][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.550618][ T10] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 270.550640][ T10] usb 2-1: Product: syz [ 270.550655][ T10] usb 2-1: Manufacturer: syz [ 270.619987][ T31] audit: type=1800 audit(1700000063.814:1488): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145022 res=0 errno=0 [ 270.657639][ T31] audit: type=1800 audit(1700000063.844:1489): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=145053 res=0 errno=0 [ 270.693657][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 270.693688][ T10] cdc_wdm 2-1:1.0: skipping garbage [ 270.736673][ T10] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 270.736691][ T10] cdc_wdm 2-1:1.0: Unknown control protocol [ 270.844587][ T5699] usb 2-1: USB disconnect, device number 37 [ 271.108484][ T9055] md: could not open device unknown-block(0,0). [ 271.108568][ T9055] md: md_import_device returned -6 [ 271.299299][ T5699] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 271.449999][ T5699] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 271.451501][ T5699] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 271.451524][ T5699] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.451545][ T5699] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 271.451609][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.453818][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 271.453840][ T5699] usb 2-1: Product: syz [ 271.453856][ T5699] usb 2-1: Manufacturer: syz [ 271.538363][ T5699] cdc_wdm 2-1:1.0: skipping garbage [ 271.538379][ T5699] cdc_wdm 2-1:1.0: skipping garbage [ 271.564617][ T5699] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 271.564650][ T5699] cdc_wdm 2-1:1.0: Unknown control protocol [ 271.660109][ T7916] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 271.668918][ C1] net_ratelimit: 101 callbacks suppressed [ 271.808295][ T6440] IPVS: starting estimator thread 0... [ 271.815472][ T7916] usb 3-1: Using ep0 maxpacket: 32 [ 271.816933][ T7916] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 271.835358][ T7916] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 271.835382][ T7916] usb 3-1: config 0 has no interface number 0 [ 271.835425][ T7916] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 271.842571][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.842632][ T7916] usb 3-1: Product: syz [ 271.842674][ T7916] usb 3-1: Manufacturer: syz [ 271.842725][ T7916] usb 3-1: SerialNumber: syz [ 271.861275][ T7916] usb 3-1: config 0 descriptor?? [ 271.873206][ T9068] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 271.890450][ T5699] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 271.939928][ T9077] IPVS: using max 26 ests per chain, 62400 per kthread [ 272.040844][ T5699] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 272.043523][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.043645][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.074378][ T5699] usb 4-1: config 0 descriptor?? [ 272.106428][ T5699] pwc: Askey VC010 type 2 USB webcam detected. [ 272.127254][ T9068] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 272.496013][ T5699] pwc: recv_control_msg error -32 req 02 val 2b00 [ 272.496859][ T5699] pwc: recv_control_msg error -32 req 02 val 2700 [ 272.497532][ T5699] pwc: recv_control_msg error -32 req 02 val 2c00 [ 272.498212][ T5699] pwc: recv_control_msg error -32 req 04 val 1000 [ 272.500961][ T5699] pwc: recv_control_msg error -32 req 04 val 1300 [ 272.508275][ T5699] pwc: recv_control_msg error -32 req 04 val 1400 [ 272.511977][ T5699] pwc: recv_control_msg error -32 req 02 val 2000 [ 272.514333][ T5699] pwc: recv_control_msg error -32 req 02 val 2100 [ 272.645132][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 272.645354][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.645374][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.645674][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.645693][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.645983][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.646003][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.646399][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.646412][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.646709][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.646721][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.647018][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.647031][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.647337][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.647355][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.647663][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.647685][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.648069][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.648090][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.648381][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 272.648404][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 272.657466][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 272.657551][ T5765] usb 2-1: USB disconnect, device number 38 [ 272.759606][ T5699] pwc: recv_control_msg error -71 req 02 val 2500 [ 272.773308][ T5699] pwc: recv_control_msg error -71 req 02 val 2400 [ 272.775024][ T5699] pwc: recv_control_msg error -71 req 02 val 2600 [ 272.784996][ T5699] pwc: recv_control_msg error -71 req 02 val 2900 [ 272.788563][ T5699] pwc: recv_control_msg error -71 req 02 val 2800 [ 272.798389][ T5699] pwc: recv_control_msg error -71 req 04 val 1100 [ 272.806720][ T5699] pwc: recv_control_msg error -71 req 04 val 1200 [ 272.860941][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 272.887018][ T5699] pwc: Registered as video103. [ 272.906662][ T5699] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input41 [ 272.946011][ T5699] usb 4-1: USB disconnect, device number 25 [ 273.789187][ T5765] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 273.864505][ T9105] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 273.940999][ T5765] usb 4-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 273.945349][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.206651][ T5765] net1080 4-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.3-1, NetChip TurboCONNECT, ce:ae:67:0d:2a:c2 [ 274.223567][ T7916] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 274.223594][ T7916] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 274.223843][ T7916] asix 3-1:0.188: probe with driver asix failed with error -71 [ 274.277636][ T7916] usb 3-1: USB disconnect, device number 27 [ 274.690825][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.695836][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.711907][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.714218][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.715609][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.911983][ T31] kauditd_printk_skb: 81 callbacks suppressed [ 274.912000][ T31] audit: type=1800 audit(1700000068.104:1571): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 275.080345][ T5699] usb 4-1: USB disconnect, device number 26 [ 275.108135][ T5699] net1080 4-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.3-1, NetChip TurboCONNECT [ 275.278822][ T7916] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 275.430840][ T7916] usb 3-1: Using ep0 maxpacket: 32 [ 275.431664][ T7916] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 275.432804][ T7916] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 275.432828][ T7916] usb 3-1: config 0 has no interface number 0 [ 275.435313][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.435335][ T7916] usb 3-1: Product: syz [ 275.435351][ T7916] usb 3-1: Manufacturer: syz [ 275.435367][ T7916] usb 3-1: SerialNumber: syz [ 275.457594][ T31] audit: type=1800 audit(1700000068.644:1572): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=145927 res=0 errno=0 [ 275.463442][ T7916] usb 3-1: config 0 descriptor?? [ 275.513156][ T31] audit: type=1800 audit(1700000068.704:1573): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=145959 res=0 errno=0 [ 275.516767][ T31] audit: type=1800 audit(1700000068.704:1574): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=145934 res=0 errno=0 [ 275.546376][ T31] audit: type=1800 audit(1700000068.734:1575): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=145935 res=0 errno=0 [ 275.929301][ T31] audit: type=1800 audit(1700000069.124:1576): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 276.033110][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 276.033139][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 276.348005][ T31] audit: type=1800 audit(1700000069.534:1577): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 276.423488][ T9159] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 276.423515][ T9159] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 276.692795][ T9118] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.692997][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.693177][ T9118] bridge_slave_0: entered allmulticast mode [ 276.695269][ T9118] bridge_slave_0: entered promiscuous mode [ 276.717047][ T9118] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.717306][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.717827][ T9118] bridge_slave_1: entered allmulticast mode [ 276.730691][ T9118] bridge_slave_1: entered promiscuous mode [ 276.788778][ C0] net_ratelimit: 93 callbacks suppressed [ 276.788979][ T5629] Bluetooth: hci0: command tx timeout [ 276.847559][ T31] audit: type=1800 audit(1700000070.034:1578): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 276.935433][ T9118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.971445][ T9118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.081323][ T9118] team0: Port device team_slave_0 added [ 277.086009][ T9118] team0: Port device team_slave_1 added [ 277.245894][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.245907][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.245935][ T9118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.290016][ T9118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.290056][ T9118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.290126][ T9118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.414446][ T31] audit: type=1800 audit(1700000070.604:1579): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 277.481659][ T31] audit: type=1800 audit(1700000070.674:1580): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 277.652995][ T9118] hsr_slave_0: entered promiscuous mode [ 277.659526][ T9118] hsr_slave_1: entered promiscuous mode [ 277.674408][ T9118] debugfs: 'hsr0' already exists in 'hsr' [ 277.674446][ T9118] Cannot create hsr debugfs directory [ 277.751967][ T7916] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -71 [ 277.752235][ T7916] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 277.791355][ T7916] usb 3-1: USB disconnect, device number 28 [ 278.184166][ T9179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.868817][ T5629] Bluetooth: hci0: command tx timeout [ 279.029332][ T5766] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 279.190431][ T5766] usb 4-1: Using ep0 maxpacket: 16 [ 279.195683][ T5766] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 279.197153][ T5766] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 279.213404][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.213468][ T5766] usb 4-1: Product: syz [ 279.213517][ T5766] usb 4-1: Manufacturer: syz [ 279.213561][ T5766] usb 4-1: SerialNumber: syz [ 279.249592][ T5766] usb 4-1: config 0 descriptor?? [ 279.296977][ T5766] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 279.296998][ T5766] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 279.344965][ T9118] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.389714][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 279.402109][ T9118] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.441507][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 279.446369][ T9118] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.495397][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 279.503292][ T9118] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 279.548295][ T9118] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 279.891352][ T5766] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 279.894443][ T5724] rust_binder: 9210: undelivered TRANSACTION_COMPLETE [ 279.916158][ T9118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.975681][ T9118] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.986023][ T5724] rust_binder: 9210: undelivered transaction 17, process died [ 280.024515][ T6440] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.024639][ T6440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.049862][ T31] kauditd_printk_skb: 29 callbacks suppressed [ 280.049879][ T31] audit: type=1800 audit(1700000073.244:1610): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 280.068564][ T9213] FAULT_INJECTION: forcing a failure. [ 280.068564][ T9213] name failslab, interval 1, probability 0, space 0, times 0 [ 280.068699][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.1.1089 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.068787][ T9213] Tainted: [L]=SOFTLOCKUP [ 280.068817][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 280.068858][ T9213] Call Trace: [ 280.068881][ T9213] [ 280.068912][ T9213] dump_stack_lvl+0xe8/0x150 [ 280.069018][ T9213] should_fail_ex+0x3eb/0x540 [ 280.069102][ T9213] should_failslab+0xa8/0x100 [ 280.069183][ T9213] __kmalloc_cache_noprof+0x9e/0x600 [ 280.069294][ T9213] ? kernfs_get_tree+0xc4/0x980 [ 280.069377][ T9213] ? kernfs_get_tree+0xc4/0x980 [ 280.069466][ T9213] kernfs_get_tree+0xc4/0x980 [ 280.069557][ T9213] ? __mutex_unlock_slowpath+0x731/0x900 [ 280.069621][ T9213] ? __pfx_kernfs_get_tree+0x10/0x10 [ 280.069699][ T9213] ? percpu_ref_tryget_live+0x1c/0x2a0 [ 280.069775][ T9213] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 280.069858][ T9213] cgroup_do_get_tree+0xf3/0x520 [ 280.069937][ T9213] ? percpu_ref_tryget_live+0x1c/0x2a0 [ 280.070033][ T9213] cgroup1_get_tree+0x701/0x890 [ 280.070130][ T9213] vfs_get_tree+0x92/0x2a0 [ 280.070227][ T9213] do_new_mount+0x319/0xdc0 [ 280.070325][ T9213] ? __pfx_do_new_mount+0x10/0x10 [ 280.070409][ T9213] ? ns_capable+0x84/0xe0 [ 280.070478][ T9213] ? path_mount+0x647/0x1050 [ 280.070570][ T9213] ? user_path_at+0xd4/0x160 [ 280.070696][ T9213] __se_sys_mount+0x31d/0x420 [ 280.070799][ T9213] ? __pfx___se_sys_mount+0x10/0x10 [ 280.070893][ T9213] ? __x64_sys_mount+0x20/0xc0 [ 280.070987][ T9213] do_syscall_64+0x166/0x520 [ 280.071042][ T9213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.071106][ T9213] ? clear_bhb_loop+0x70/0xc0 [ 280.071174][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.071237][ T9213] RIP: 0033:0x7fe9f419e159 [ 280.071292][ T9213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.071344][ T9213] RSP: 002b:00007fe9f513d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 280.071410][ T9213] RAX: ffffffffffffffda RBX: 00007fe9f4425fa0 RCX: 00007fe9f419e159 [ 280.071454][ T9213] RDX: 00002000000001c0 RSI: 0000200000000100 RDI: 0000000000000000 [ 280.071484][ T9213] RBP: 00007fe9f423506b R08: 0000200000000200 R09: 0000000000000000 [ 280.071526][ T9213] R10: 0000000002010042 R11: 0000000000000246 R12: 0000000000000000 [ 280.071561][ T9213] R13: 00007fe9f4426038 R14: 00007fe9f4425fa0 R15: 00007ffdc3426168 [ 280.071655][ T9213] [ 280.298242][ T6440] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.298599][ T6440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.398151][ T5766] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 280.398180][ T5766] em28xx 4-1:0.0: board has no eeprom [ 280.433033][ T31] audit: type=1800 audit(1700000073.624:1611): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 280.475222][ T31] audit: type=1800 audit(1700000073.664:1612): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=152137 res=0 errno=0 [ 280.958849][ T5629] Bluetooth: hci0: command tx timeout [ 281.027478][ T9118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.210543][ T31] audit: type=1800 audit(1700000074.404:1613): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1090" name="/" dev="fuse" ino=1 res=0 errno=0 [ 281.310639][ T31] audit: type=1800 audit(1700000074.504:1614): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 281.524746][ T31] audit: type=1800 audit(1700000074.714:1615): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 281.582132][ T9118] veth0_vlan: entered promiscuous mode [ 281.583618][ T9240] rust_binder: 9239:9240 FDA parent offset not aligned correctly [ 281.583637][ T9240] rust_binder: 9239:9240 error while translating object: EINVAL [ 281.583734][ T9240] rust_binder: Failure in copy_transaction_data: EINVAL [ 281.583776][ T9240] rust_binder: 9239:9240 transaction call to 9239:0 failed EINVAL, code 0 size 80-24 [ 281.642830][ T9118] veth1_vlan: entered promiscuous mode [ 281.668519][ T5766] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 281.668546][ T5766] em28xx 4-1:0.0: dvb set to bulk mode. [ 281.669547][ T7916] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 281.691719][ T5765] em28xx 4-1:0.0: Binding DVB extension [ 281.705720][ T31] audit: type=1800 audit(1700000074.884:1616): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=152050 res=0 errno=0 [ 281.731398][ T31] audit: type=1800 audit(1700000074.924:1617): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=152051 res=0 errno=0 [ 281.734326][ T31] audit: type=1800 audit(1700000074.924:1618): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=152030 res=0 errno=0 [ 281.735494][ T31] audit: type=1800 audit(1700000074.924:1619): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=152052 res=0 errno=0 [ 281.844756][ T5765] em28xx 4-1:0.0: Registering input extension [ 281.858576][ T9188] em28xx 4-1:0.0: reading from i2c device at 0x12 failed (error=-5) [ 281.861426][ T7916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.865159][ T7916] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.905547][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.905572][ T7916] usb 3-1: Product: syz [ 281.905591][ T7916] usb 3-1: Manufacturer: syz [ 281.905608][ T7916] usb 3-1: SerialNumber: syz [ 281.941233][ T5765] usb 4-1: USB disconnect, device number 27 [ 281.956148][ T5765] em28xx 4-1:0.0: Disconnecting em28xx [ 281.956174][ T5765] em28xx 4-1:0.0: Closing input extension [ 281.988998][ C0] net_ratelimit: 67 callbacks suppressed [ 282.025837][ T9118] veth0_macvtap: entered promiscuous mode [ 282.100320][ T9118] veth1_macvtap: entered promiscuous mode [ 282.117920][ T5765] em28xx: Freeing device [ 282.277500][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.325753][ T9118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.508965][ T7916] cdc_ncm 3-1:1.0: bind() failure [ 282.518582][ T6437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.545798][ T6437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.567282][ T7916] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 282.567326][ T7916] cdc_ncm 3-1:1.1: bind() failure [ 282.617474][ T7916] usb 3-1: USB disconnect, device number 29 [ 282.655981][ T8544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.656867][ T8544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.835477][ T3343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.835493][ T3343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.944233][ T6436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.944251][ T6436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.028483][ T5629] Bluetooth: hci0: command tx timeout [ 283.093036][ T9257] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 283.093053][ T9257] rust_binder: Read failure Err(EFAULT) in pid:3 [ 283.149828][ T9257] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 283.149847][ T9257] rust_binder: Read failure Err(EFAULT) in pid:3 [ 283.163113][ T9257] rust_binder: Error in use_page_slow: EFAULT [ 283.163180][ T9257] rust_binder: use_range failure EFAULT [ 283.163245][ T9257] rust_binder: Failed to allocate buffer. len:4184, is_oneway:false [ 283.163317][ T9257] rust_binder: Failure in copy_transaction_data: EFAULT [ 283.163405][ T9257] rust_binder: 9256:9257 transaction call to 9256:0 failed EFAULT, code 0 size 0-24 [ 283.170537][ T7916] rust_binder: 9256: undelivered TRANSACTION_ERROR: 29201 [ 284.074942][ T9283] bond0: option arp_validate: invalid value (al) [ 284.475124][ T9297] kvm: pic: single mode not supported [ 284.475137][ T9297] kvm: pic: level sensitive irq not supported [ 284.484388][ T9297] kvm: pic: single mode not supported [ 284.498696][ T5766] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 284.517671][ T9297] kvm: pic: level sensitive irq not supported [ 284.526217][ T9297] kvm: pic: level sensitive irq not supported [ 284.544021][ T9297] kvm: pic: single mode not supported [ 284.545889][ T9297] kvm: pic: level sensitive irq not supported [ 284.649493][ T5766] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 284.651087][ T5766] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 284.651167][ T5766] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 284.651196][ T5766] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 284.653793][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 284.653816][ T5766] usb 5-1: Product: syz [ 284.653833][ T5766] usb 5-1: Manufacturer: syz [ 284.718885][ T9293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.719003][ T9293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.719129][ T9293] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 284.806363][ T9305] FAULT_INJECTION: forcing a failure. [ 284.806363][ T9305] name failslab, interval 1, probability 0, space 0, times 0 [ 284.806412][ T9305] CPU: 1 UID: 0 PID: 9305 Comm: syz.2.1116 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.806461][ T9305] Tainted: [L]=SOFTLOCKUP [ 284.806470][ T9305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 284.806483][ T9305] Call Trace: [ 284.806493][ T9305] [ 284.806506][ T9305] dump_stack_lvl+0xe8/0x150 [ 284.806541][ T9305] should_fail_ex+0x3eb/0x540 [ 284.806581][ T9305] should_failslab+0xa8/0x100 [ 284.806609][ T9305] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 284.806647][ T9305] ? alloc_vfsmnt+0xe6/0x410 [ 284.806668][ T9305] ? alloc_vfsmnt+0xe6/0x410 [ 284.806696][ T9305] kstrdup+0x42/0x100 [ 284.806732][ T9305] alloc_vfsmnt+0xe6/0x410 [ 284.806758][ T9305] clone_mnt+0x4b/0x9b0 [ 284.806786][ T9305] lock_mount_exact+0x183/0x790 [ 284.806825][ T9305] open_new_namespace+0x2f4/0xd40 [ 284.806873][ T9305] ? __pfx_open_new_namespace+0x10/0x10 [ 284.806916][ T9305] ? do_getname+0x151/0x250 [ 284.806945][ T9305] vfs_open_tree+0x31f/0x3c0 [ 284.806982][ T9305] ? __pfx_vfs_open_tree+0x10/0x10 [ 284.807027][ T9305] __x64_sys_open_tree+0x96/0x110 [ 284.807057][ T9305] do_syscall_64+0x166/0x520 [ 284.807080][ T9305] ? trace_irq_disable+0x3b/0x140 [ 284.807113][ T9305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.807137][ T9305] ? clear_bhb_loop+0x70/0xc0 [ 284.807166][ T9305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.807189][ T9305] RIP: 0033:0x7f43ebf9e159 [ 284.807211][ T9305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.807230][ T9305] RSP: 002b:00007f43ecea7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 284.807256][ T9305] RAX: ffffffffffffffda RBX: 00007f43ec225fa0 RCX: 00007f43ebf9e159 [ 284.807273][ T9305] RDX: 0000000000081102 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 284.807289][ T9305] RBP: 00007f43ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 284.807303][ T9305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.807318][ T9305] R13: 00007f43ec226038 R14: 00007f43ec225fa0 R15: 00007ffe3a011048 [ 284.807353][ T9305] [ 285.092447][ T5629] Bluetooth: hci3: unexpected cc 0x0c05 length: 4 > 1 [ 285.092503][ T5629] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 285.122452][ T31] kauditd_printk_skb: 52 callbacks suppressed [ 285.122470][ T31] audit: type=1800 audit(1700000078.314:1672): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 285.555312][ T31] audit: type=1800 audit(1700000078.744:1673): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 285.789728][ T9313] FAULT_INJECTION: forcing a failure. [ 285.789728][ T9313] name failslab, interval 1, probability 0, space 0, times 0 [ 285.789760][ T9313] CPU: 0 UID: 0 PID: 9313 Comm: syz.3.1118 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.789793][ T9313] Tainted: [L]=SOFTLOCKUP [ 285.789803][ T9313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 285.789818][ T9313] Call Trace: [ 285.789829][ T9313] [ 285.789839][ T9313] dump_stack_lvl+0xe8/0x150 [ 285.789892][ T9313] should_fail_ex+0x3eb/0x540 [ 285.789935][ T9313] should_failslab+0xa8/0x100 [ 285.789966][ T9313] __kmalloc_cache_noprof+0x9e/0x600 [ 285.790004][ T9313] ? do_raw_spin_lock+0x12b/0x2f0 [ 285.790031][ T9313] ? sctp_auth_init+0xc5/0x400 [ 285.790064][ T9313] ? sctp_auth_init+0xc5/0x400 [ 285.790104][ T9313] sctp_auth_init+0xc5/0x400 [ 285.790135][ T9313] ? sctp_setsockopt+0x21c/0x12c0 [ 285.790175][ T9313] sctp_setsockopt_auth_supported+0x302/0x530 [ 285.790210][ T9313] sctp_setsockopt+0x599/0x12c0 [ 285.790247][ T9313] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 285.790286][ T9313] do_sock_setsockopt+0x17c/0x1b0 [ 285.790319][ T9313] __x64_sys_setsockopt+0x13d/0x1b0 [ 285.790350][ T9313] do_syscall_64+0x166/0x520 [ 285.790374][ T9313] ? trace_irq_disable+0x3b/0x140 [ 285.790408][ T9313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.790433][ T9313] ? clear_bhb_loop+0x70/0xc0 [ 285.790463][ T9313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.790487][ T9313] RIP: 0033:0x7fedf779e159 [ 285.790511][ T9313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.790533][ T9313] RSP: 002b:00007fedf59f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 285.790560][ T9313] RAX: ffffffffffffffda RBX: 00007fedf7a25fa0 RCX: 00007fedf779e159 [ 285.790579][ T9313] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 285.790595][ T9313] RBP: 00007fedf783506b R08: 0000000000000008 R09: 0000000000000000 [ 285.790611][ T9313] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000000 [ 285.790627][ T9313] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 285.790665][ T9313] ** 1387 printk messages dropped ** ** 33 printk messages dropped ** [ 286.157348][ T5766] redrat3 5-1:1.0: Firmware rev:  [ 286.288158][ T31] audit: type=1800 audit(1700000079.465:1674): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 286.601135][ T5766] redrat3 5-1:1.0: Failed to read timeout from hardware [ 286.708108][ T5766] rc_core: IR keymap rc-hauppauge not found [ 286.708125][ T5766] Registered IR keymap rc-empty [ 286.711787][ T5766] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/rc/rc0 [ 286.714606][ T5766] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/rc/rc0/input44 [ 286.820793][ T31] audit: type=1800 audit(1700000080.015:1675): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 286.827556][ T5766] redrat3 5-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 286.828471][ T5766] redrat3 5-1:1.0: redrat3_send_cmd: Error sending rr3 cmd res -71, data 0 [ 286.828521][ T5766] redrat3 5-1:1.0: redrat3_enable_detector: detector status: -5, should be 1 [ 286.910697][ T5766] redrat3 5-1:1.0: probe with driver redrat3 failed with error -5 [ 286.926514][ T5766] usb 5-1: USB disconnect, device number 2 [ 286.958044][ T31] audit: type=1800 audit(1700000080.145:1676): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=152756 res=0 errno=0 [ 286.959200][ T31] audit: type=1800 audit(1700000080.155:1677): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=152757 res=0 errno=0 [ 287.026154][ T31] audit: type=1800 audit(1700000080.215:1678): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26905 res=0 errno=0 [ 287.108629][ T8545] net_ratelimit: 294 callbacks suppressed [ 287.388355][ T31] audit: type=1800 audit(1700000080.585:1679): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 287.652566][ T31] audit: type=1800 audit(1700000080.845:1680): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15462 res=0 errno=0 [ 287.708234][ T5766] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 287.872294][ T31] audit: type=1800 audit(1700000081.065:1681): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15462 res=0 errno=0 [ 287.906336][ T5766] usb 4-1: Using ep0 maxpacket: 8 [ 288.010216][ T9324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.011820][ T9324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.502865][ T5766] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.502913][ T5766] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 288.505964][ T5766] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 288.506002][ T5766] usb 4-1: can't read configurations, error -71 [ 289.257827][ T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 289.470145][ T25] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 289.474928][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.474977][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 289.475003][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 289.475030][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 289.475098][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.495478][ T9342] syzkaller0: entered promiscuous mode [ 289.495522][ T9342] syzkaller0: entered allmulticast mode [ 290.278168][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 290.278185][ T31] audit: type=1800 audit(1700000083.475:1698): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 290.455429][ T31] audit: type=1800 audit(1700000083.645:1699): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 290.555289][ T31] audit: type=1800 audit(1700000083.745:1700): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153254 res=0 errno=0 [ 290.590042][ T25] [drm] Initialized gud 1.0.0 for 5-1:1.0 on minor 1 [ 290.626151][ T31] audit: type=1800 audit(1700000083.815:1701): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153268 res=0 errno=0 [ 290.627346][ T31] audit: type=1800 audit(1700000083.815:1702): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153285 res=0 errno=0 [ 290.868682][ T31] audit: type=1800 audit(1700000084.065:1703): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 290.977989][ T31] audit: type=1800 audit(1700000084.175:1704): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 291.164145][ T31] audit: type=1800 audit(1700000084.355:1705): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 291.246864][ T9393] FAULT_INJECTION: forcing a failure. [ 291.246864][ T9393] name failslab, interval 1, probability 0, space 0, times 0 [ 291.246898][ T9393] CPU: 1 UID: 0 PID: 9393 Comm: syz.3.1136 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.246934][ T9393] Tainted: [L]=SOFTLOCKUP [ 291.246943][ T9393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 291.246959][ T9393] Call Trace: [ 291.246968][ T9393] [ 291.246989][ T9393] dump_stack_lvl+0xe8/0x150 [ 291.247025][ T9393] should_fail_ex+0x3eb/0x540 [ 291.247058][ T9393] should_failslab+0xa8/0x100 [ 291.247087][ T9393] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 291.247127][ T9393] ? snd_pcm_hw_rule_add+0x196/0x800 [ 291.247154][ T9393] ? snd_pcm_hw_rule_add+0x196/0x800 [ 291.247184][ T9393] ? kfree+0x4d/0x650 [ 291.247213][ T9393] ? snd_pcm_hw_rule_add+0x196/0x800 [ 291.247241][ T9393] krealloc_node_align_noprof+0x19a/0x390 [ 291.247285][ T9393] snd_pcm_hw_rule_add+0x196/0x800 [ 291.247315][ T9393] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 291.247349][ T9393] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 291.247394][ T9393] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 291.247428][ T9393] ? snd_pcm_attach_substream+0x845/0xb10 [ 291.247472][ T9393] snd_pcm_open_substream+0xebf/0x24f0 [ 291.247500][ T9393] ? snd_pcm_open+0x17d/0x690 [ 291.247535][ T9393] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 291.247566][ T9393] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.247606][ T9393] snd_pcm_open+0x1dc/0x690 [ 291.247639][ T9393] ? __pfx_snd_pcm_open+0x10/0x10 [ 291.247662][ T9393] ? __pfx_default_wake_function+0x10/0x10 [ 291.247704][ T9393] snd_pcm_capture_open+0x62/0xc0 [ 291.247733][ T9393] chrdev_open+0x4d9/0x600 [ 291.247762][ T9393] ? __pfx_chrdev_open+0x10/0x10 [ 291.247789][ T9393] ? devcgroup_check_permission+0x31/0x8f0 [ 291.247829][ T9393] ? __pfx_chrdev_open+0x10/0x10 [ 291.247852][ T9393] do_dentry_open+0x80e/0x1360 [ 291.247890][ T9393] vfs_open_consume+0x4a/0x350 [ 291.247915][ T9393] ? path_openat+0x14bb/0x1e40 [ 291.247953][ T9393] path_openat+0x14d7/0x1e40 [ 291.248020][ T9393] do_file_open+0x23e/0x4a0 [ 291.248062][ T9393] ? __pfx_do_file_open+0x10/0x10 [ 291.248121][ T9393] ? _raw_spin_unlock+0x28/0x50 [ 291.248152][ T9393] ? alloc_fd+0x651/0x6c0 [ 291.248193][ T9393] do_sys_openat2+0x115/0x200 [ 291.248222][ T9393] ? __pfx_do_sys_openat2+0x10/0x10 [ 291.248252][ T9393] ? __irq_exit_rcu+0xcb/0x220 [ 291.248283][ T9393] ? handle_softirqs+0x720/0x860 [ 291.248312][ T9393] __x64_sys_openat+0x138/0x170 [ 291.248346][ T9393] do_syscall_64+0x166/0x520 [ 291.248368][ T9393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.248393][ T9393] ? clear_bhb_loop+0x70/0xc0 [ 291.248422][ T9393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.248447][ T9393] RIP: 0033:0x7fedf775e98e [ 291.248469][ T9393] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 291.248490][ T9393] RSP: 002b:00007fedf59f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 291.248515][ T9393] RAX: ffffffffffffffda RBX: 00007fedf59f66c0 RCX: 00007fedf775e98e [ 291.248534][ T9393] RDX: 0000000000000002 RSI: 00007fedf59f5c00 RDI: ffffffffffffff9c [ 291.248550][ T9393] RBP: 00007fedf59f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 291.248565][ T9393] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 291.248582][ T9393] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 291.248618][ T9393] [ 291.413481][ T31] audit: type=1800 audit(1700000084.605:1706): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1133" name="/" dev="fuse" ino=1 res=0 errno=0 [ 291.821502][ T31] audit: type=1800 audit(1700000085.015:1707): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 292.147599][ C1] net_ratelimit: 763 callbacks suppressed [ 292.612596][ T9417] FAULT_INJECTION: forcing a failure. [ 292.612596][ T9417] name failslab, interval 1, probability 0, space 0, times 0 [ 292.612640][ T9417] CPU: 0 UID: 0 PID: 9417 Comm: syz.2.1142 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.612673][ T9417] Tainted: [L]=SOFTLOCKUP [ 292.612683][ T9417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 292.612698][ T9417] Call Trace: [ 292.612708][ T9417] [ 292.612719][ T9417] dump_stack_lvl+0xe8/0x150 [ 292.612755][ T9417] should_fail_ex+0x3eb/0x540 [ 292.612789][ T9417] should_failslab+0xa8/0x100 [ 292.612816][ T9417] ? __kernfs_new_node+0xe6/0x980 [ 292.612863][ T9417] kmem_cache_alloc_noprof+0x9c/0x600 [ 292.612904][ T9417] ? __kernfs_new_node+0xe6/0x980 [ 292.612947][ T9417] __kernfs_new_node+0xe6/0x980 [ 292.612994][ T9417] ? __pfx___kernfs_new_node+0x10/0x10 [ 292.613031][ T9417] ? kernfs_root+0x1c/0x230 [ 292.613071][ T9417] ? kernfs_root+0x1c/0x230 [ 292.613104][ T9417] ? kernfs_root+0x1c/0x230 [ 292.613136][ T9417] ? kernfs_root+0x1c/0x230 [ 292.613175][ T9417] kernfs_new_node+0xea/0x140 [ 292.613216][ T9417] __kernfs_create_file+0x4b/0x2e0 [ 292.613248][ T9417] sysfs_add_file_mode_ns+0x237/0x300 [ 292.613289][ T9417] sysfs_create_file_ns+0x12b/0x1b0 [ 292.613321][ T9417] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 292.613351][ T9417] ? sysfs_add_file_mode_ns+0x237/0x300 [ 292.613381][ T9417] ? sysfs_add_file_mode_ns+0x258/0x300 [ 292.613413][ T9417] ? device_create_file+0xf4/0x1b0 [ 292.613444][ T9417] device_add_attrs+0x3eb/0x600 [ 292.613475][ T9417] ? __pfx_device_add_attrs+0x10/0x10 [ 292.613505][ T9417] ? class_to_subsys+0xb6/0x120 [ 292.613541][ T9417] ? device_add_class_symlinks+0xd4/0x240 [ 292.613575][ T9417] device_add+0x488/0xb80 [ 292.613605][ T9417] iommu_mock_device_add+0x83/0x1e0 [ 292.613640][ T9417] iommufd_test+0x38d2/0x6360 [ 292.613686][ T9417] ? __lock_acquire+0x747/0x2de0 [ 292.613721][ T9417] ? __pfx_iommufd_test+0x10/0x10 [ 292.613767][ T9417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 292.613794][ T9417] ? tomoyo_path_number_perm+0x219/0x5f0 [ 292.613822][ T9417] ? lock_acquire+0x115/0x350 [ 292.613882][ T9417] ? __might_fault+0xaf/0x130 [ 292.613921][ T9417] iommufd_fops_ioctl+0x465/0x600 [ 292.613955][ T9417] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 292.613994][ T9417] ? __fget_files+0x2a/0x420 [ 292.614030][ T9417] ? __fget_files+0x2a/0x420 [ 292.614064][ T9417] ? bpf_lsm_file_ioctl+0x9/0x20 [ 292.614094][ T9417] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 292.614122][ T9417] __se_sys_ioctl+0xfc/0x170 [ 292.614162][ T9417] do_syscall_64+0x166/0x520 [ 292.614184][ T9417] ? trace_irq_disable+0x3b/0x140 [ 292.614219][ T9417] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.614243][ T9417] ? clear_bhb_loop+0x70/0xc0 [ 292.614273][ T9417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.614298][ T9417] RIP: 0033:0x7f43ebf9e159 [ 292.614320][ T9417] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.614342][ T9417] RSP: 002b:00007f43ecea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.614367][ T9417] RAX: ffffffffffffffda RBX: 00007f43ec225fa0 RCX: 00007f43ebf9e159 [ 292.614384][ T9417] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000005 [ 292.614401][ T9417] RBP: 00007f43ec03506b R08: 0000000000000000 R09: 0000000000000000 [ 292.614417][ T9417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.614432][ T9417] R13: 00007f43ec226038 R14: 00007f43ec225fa0 R15: 00007ffe3a011048 [ 292.614469][ T9417] [ 293.745510][ T5629] Bluetooth: hci1: unexpected event for opcode 0x041b [ 293.761678][ T9437] Bluetooth: MGMT ver 1.23 [ 294.521597][ T9442] gadgetfs: bound to dummy_udc driver [ 294.757515][ T5765] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 294.757801][ C1] gadgetfs: connected [ 294.759766][ T5765] gadgetfs: disconnected [ 295.293693][ T31] kauditd_printk_skb: 16 callbacks suppressed [ 295.293710][ T31] audit: type=1800 audit(1700000088.485:1724): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 295.354741][ T31] audit: type=1800 audit(1700000088.545:1725): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 295.410590][ T31] audit: type=1800 audit(1700000088.605:1726): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 295.451847][ T31] audit: type=1800 audit(1700000088.645:1727): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153317 res=0 errno=0 [ 295.575842][ T9460] syzkaller0: entered promiscuous mode [ 295.575862][ T9460] syzkaller0: entered allmulticast mode [ 295.657386][ T31] audit: type=1800 audit(1700000088.835:1728): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 295.757458][ T31] audit: type=1800 audit(1700000088.955:1729): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153414 res=0 errno=0 [ 295.784661][ T31] audit: type=1800 audit(1700000088.975:1730): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="name" dev="sysfs" ino=153426 res=0 errno=0 [ 295.786087][ T31] audit: type=1800 audit(1700000088.975:1731): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153439 res=0 errno=0 [ 295.821303][ T25] Console: switching to colour frame buffer device 128x48 [ 295.828238][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 295.828288][ T52] Bluetooth: hci0: command 0x0c24 tx timeout [ 295.830042][ T5624] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 295.843857][ T5629] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 295.882189][ T25] gud 5-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 295.913116][ T25] usb 5-1: USB disconnect, device number 3 [ 296.013873][ T25] Console: switching to colour VGA+ 80x25 [ 296.044092][ T31] audit: type=1800 audit(1700000089.235:1732): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15462 res=0 errno=0 [ 296.174046][ T31] audit: type=1800 audit(1700000089.365:1733): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15462 res=0 errno=0 [ 296.901214][ T7916] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 297.053587][ T7916] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 297.075745][ T7916] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.075795][ T7916] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 297.075823][ T7916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 297.075852][ T7916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 297.075878][ T7916] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 297.101912][ T7916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 297.101935][ T7916] usb 3-1: Product: syz [ 297.101951][ T7916] usb 3-1: Manufacturer: syz [ 297.101967][ T7916] usb 3-1: SerialNumber: syz [ 297.126511][ T7916] usb 3-1: config 0 descriptor?? [ 297.187294][ C0] net_ratelimit: 122 callbacks suppressed [ 297.369214][ T7916] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 297.369240][ T7916] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 297.574218][ T7916] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 297.574242][ T7916] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 297.574265][ T7916] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 297.782025][ T7916] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 297.917411][ T5624] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 297.924336][ T5629] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 297.926151][ T4934] Bluetooth: hci0: command 0x0c24 tx timeout [ 297.926180][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 299.426581][ T7916] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 299.494068][ T7916] usb 3-1: USB disconnect, device number 30 [ 300.145119][ T9524] rust_binder: Failed to allocate buffer. len:1024, is_oneway:true [ 300.145140][ T9524] rust_binder: Failure in copy_transaction_data: ENOSPC [ 300.145162][ T9524] rust_binder: 9523:9524 transaction async to 9523:0 failed ENOSPC, code 0 size 0-0 [ 300.145693][ T25] rust_binder: 9523: undelivered TRANSACTION_COMPLETE [ 300.145728][ T25] rust_binder: 9523: undelivered TRANSACTION_ERROR: 29201 [ 300.194004][ T9526] fuse: Bad value for 'fd' [ 300.431722][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 300.431739][ T31] audit: type=1800 audit(1700000093.625:1762): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 300.558931][ T31] audit: type=1800 audit(1700000093.755:1763): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 300.837225][ T7916] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 300.987379][ T7916] usb 4-1: Using ep0 maxpacket: 32 [ 300.988674][ T7916] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 300.994526][ T7916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.994540][ T7916] usb 4-1: Product: syz [ 300.994555][ T7916] usb 4-1: Manufacturer: syz [ 300.994566][ T7916] usb 4-1: SerialNumber: syz [ 301.021237][ T7916] usb 4-1: config 0 descriptor?? [ 301.037441][ T31] audit: type=1800 audit(1700000094.225:1764): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=153948 res=0 errno=0 [ 301.060054][ T31] audit: type=1800 audit(1700000094.255:1765): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=153980 res=0 errno=0 [ 301.071068][ T31] audit: type=1800 audit(1700000094.265:1766): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=153955 res=0 errno=0 [ 301.076256][ T31] audit: type=1800 audit(1700000094.265:1767): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=153956 res=0 errno=0 [ 301.125073][ T7916] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 301.214056][ T31] audit: type=1800 audit(1700000094.405:1768): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 301.379965][ T5629] Bluetooth: hci0: SCO packet too small [ 301.524817][ T9559] fuse: fd is not a fuse device [ 301.747211][ T5629] Bluetooth: hci4: command 0x1003 tx timeout [ 301.747353][ T5624] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 301.857993][ T31] audit: type=1800 audit(1700000095.056:1769): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 301.960806][ T31] audit: type=1800 audit(1700000095.156:1770): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15093 res=0 errno=0 [ 302.142666][ T31] audit: type=1800 audit(1700000095.336:1771): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 302.226972][ C1] net_ratelimit: 79 callbacks suppressed [ 302.607019][ T5765] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 302.757775][ T5765] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 302.758924][ T5765] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 302.758941][ T5765] usb 3-1: config 0 has no interface number 0 [ 302.758996][ T5765] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 302.762087][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.762111][ T5765] usb 3-1: Product: syz [ 302.762128][ T5765] usb 3-1: Manufacturer: syz [ 302.762144][ T5765] usb 3-1: SerialNumber: syz [ 302.766306][ T5765] usb 3-1: config 0 descriptor?? [ 302.840417][ T5765] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 303.281319][ T7916] gspca_ov534_9: reg_r err -71 [ 303.567943][ T7916] gspca_ov534_9: Unknown sensor 0000 [ 303.568031][ T7916] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 303.571565][ T7916] usb 4-1: USB disconnect, device number 30 [ 303.752986][ T9563] mount: server 127.0.0.1 not responding, timed out [ 303.922614][ T9591] FAULT_INJECTION: forcing a failure. [ 303.922614][ T9591] name failslab, interval 1, probability 0, space 0, times 0 [ 303.922652][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.3.1201 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.922691][ T9591] Tainted: [L]=SOFTLOCKUP [ 303.922698][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 303.922709][ T9591] Call Trace: [ 303.922716][ T9591] [ 303.922723][ T9591] dump_stack_lvl+0xe8/0x150 [ 303.922786][ T9591] should_fail_ex+0x3eb/0x540 [ 303.922818][ T9591] should_failslab+0xa8/0x100 [ 303.922851][ T9591] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 303.922879][ T9591] ? kobject_set_name_vargs+0x61/0x110 [ 303.922913][ T9591] ? kobject_set_name_vargs+0x61/0x110 [ 303.922949][ T9591] kstrdup+0x42/0x100 [ 303.922985][ T9591] kobject_set_name_vargs+0x61/0x110 [ 303.923017][ T9591] device_create+0x23d/0x300 [ 303.923046][ T9591] ? __pfx_device_create+0x10/0x10 [ 303.923101][ T9591] bdi_register_va+0x9c/0x740 [ 303.923143][ T9591] super_setup_bdi_name+0xf8/0x210 [ 303.923184][ T9591] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 303.923208][ T9591] ? __kasan_kmalloc+0x93/0xb0 [ 303.923244][ T9591] ? __kmalloc_cache_noprof+0x31c/0x600 [ 303.923278][ T9591] ? __kmalloc_cache_noprof+0x148/0x600 [ 303.923310][ T9591] ? afs_get_tree+0x3b9/0x12c0 [ 303.923349][ T9591] afs_get_tree+0xa40/0x12c0 [ 303.923372][ T9591] ? apparmor_capable+0x126/0x170 [ 303.923427][ T9591] vfs_get_tree+0x92/0x2a0 [ 303.923463][ T9591] do_new_mount+0x319/0xdc0 [ 303.923498][ T9591] ? __pfx_do_new_mount+0x10/0x10 [ 303.923520][ T9591] ? ns_capable+0x84/0xe0 [ 303.923557][ T9591] ? path_mount+0x647/0x1050 [ 303.923590][ T9591] ? user_path_at+0xd4/0x160 [ 303.923624][ T9591] __se_sys_mount+0x31d/0x420 [ 303.923659][ T9591] ? __pfx___se_sys_mount+0x10/0x10 [ 303.923684][ T9591] ? __x64_sys_mount+0x20/0xc0 [ 303.923726][ T9591] do_syscall_64+0x166/0x520 [ 303.923749][ T9591] ? trace_irq_disable+0x3b/0x140 [ 303.923788][ T9591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.923814][ T9591] ? clear_bhb_loop+0x70/0xc0 [ 303.923835][ T9591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.923853][ T9591] RIP: 0033:0x7fedf779e159 [ 303.923890][ T9591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.923911][ T9591] RSP: 002b:00007fedf59f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 303.923936][ T9591] RAX: ffffffffffffffda RBX: 00007fedf7a25fa0 RCX: 00007fedf779e159 [ 303.923955][ T9591] RDX: 00002000000001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 303.923972][ T9591] RBP: 00007fedf783506b R08: 0000200000000380 R09: 0000000000000000 [ 303.923984][ T9591] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 303.923994][ T9591] R13: 00007fedf7a26038 R14: 00007fedf7a25fa0 R15: 00007ffc4be3fcd8 [ 303.924036][ T9591] [ 304.617725][ T7916] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 304.772871][ T7916] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 304.774258][ T7916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.774284][ T7916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.774306][ T7916] usb 4-1: config 0 has no interface number 0 [ 304.774371][ T7916] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 304.774468][ T7916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.826124][ T7916] usb 4-1: config 0 descriptor?? [ 304.881481][ T7916] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 305.040370][ T189] kernel read not supported for file /swradio3 (pid: 189 comm: kworker/0:2) [ 305.099566][ T5765] usb 4-1: USB disconnect, device number 31 [ 305.167879][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 305.189797][ T5724] usb 3-1: USB disconnect, device number 31 [ 305.210430][ T5724] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 305.536812][ T5765] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 305.691266][ T5765] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 305.692896][ T5765] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.692965][ T5765] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.696507][ T5765] usb 2-1: config 0 descriptor?? [ 305.717940][ T31] kauditd_printk_skb: 33 callbacks suppressed [ 305.717960][ T31] audit: type=1800 audit(1700000098.906:1805): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154370 res=0 errno=0 [ 305.726205][ T31] audit: type=1800 audit(1700000098.916:1806): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=154399 res=0 errno=0 [ 305.739238][ T31] audit: type=1800 audit(1700000098.926:1807): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=154377 res=0 errno=0 [ 305.759241][ T31] audit: type=1800 audit(1700000098.936:1808): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=154378 res=0 errno=0 [ 305.759295][ T31] audit: type=1800 audit(1700000098.936:1809): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=154379 res=0 errno=0 [ 305.845698][ T5765] pwc: Askey VC010 type 2 USB webcam detected. [ 305.854861][ T31] audit: type=1800 audit(1700000099.046:1810): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=154419 res=0 errno=0 [ 305.924018][ T31] audit: type=1800 audit(1700000099.116:1811): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 306.057320][ T31] audit: type=1800 audit(1700000099.256:1812): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 306.255285][ T5765] pwc: recv_control_msg error -32 req 02 val 2b00 [ 306.256313][ T5765] pwc: recv_control_msg error -32 req 02 val 2700 [ 306.273240][ T5765] pwc: recv_control_msg error -32 req 02 val 2c00 [ 306.274107][ T5765] pwc: recv_control_msg error -32 req 04 val 1000 [ 306.274906][ T5765] pwc: recv_control_msg error -32 req 04 val 1300 [ 306.283422][ T5765] pwc: recv_control_msg error -32 req 04 val 1400 [ 306.305003][ T5765] pwc: recv_control_msg error -32 req 02 val 2000 [ 306.305772][ T5765] pwc: recv_control_msg error -32 req 02 val 2100 [ 306.334960][ T5765] pwc: recv_control_msg error -32 req 04 val 1500 [ 306.358741][ T31] audit: type=1804 audit(1700000099.556:1813): pid=9637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1210" name="/newroot/275/bus/file0" dev="overlay" ino=2 res=1 errno=0 [ 306.509640][ T31] audit: type=1800 audit(1700000099.706:1814): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15339 res=0 errno=0 [ 306.564309][ T5765] pwc: recv_control_msg error -71 req 02 val 2400 [ 306.566459][ T5765] pwc: recv_control_msg error -71 req 02 val 2600 [ 306.569081][ T5765] pwc: recv_control_msg error -71 req 02 val 2900 [ 306.571794][ T5765] pwc: recv_control_msg error -71 req 02 val 2800 [ 306.582842][ T5765] pwc: recv_control_msg error -71 req 04 val 1100 [ 306.586019][ T5765] pwc: recv_control_msg error -71 req 04 val 1200 [ 306.626232][ T5765] pwc: Registered as video103. [ 306.656437][ T5765] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 306.708093][ T5765] usb 2-1: USB disconnect, device number 39 [ 306.743120][ T9648] loop0: detected capacity change from 0 to 2049 [ 306.806171][ T9648] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 306.806198][ T9648] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 306.806212][ T9648] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 306.806292][ T9648] loop0: [ 306.945340][ T9651] fuse: fd is not a fuse device [ 307.426647][ C1] net_ratelimit: 97 callbacks suppressed [ 307.436696][ T189] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 307.476810][ T7916] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 307.566716][ T5765] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 307.606676][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 307.607630][ T189] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 307.609011][ T189] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.609033][ T189] usb 2-1: config 0 interface 0 has no altsetting 0 [ 307.611618][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.611634][ T189] usb 2-1: Product: syz [ 307.611645][ T189] usb 2-1: Manufacturer: syz [ 307.611656][ T189] usb 2-1: SerialNumber: syz [ 307.615219][ T189] usb 2-1: config 0 descriptor?? [ 307.637344][ T7916] usb 3-1: Using ep0 maxpacket: 32 [ 307.641861][ T7916] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 307.655173][ T7916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.718506][ T7916] usb 3-1: config 0 descriptor?? [ 307.734559][ T7916] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 307.786624][ T5765] usb 4-1: Using ep0 maxpacket: 16 [ 307.787480][ T5765] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 307.788870][ T5765] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.793676][ T5765] usb 4-1: config 0 descriptor?? [ 307.833388][ T5765] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 307.875958][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 307.894949][ T189] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input46 [ 307.922312][ T189] imon:send_packet: packet tx failed (-71) [ 307.946684][ T189] imon 2-1:0.0: panel buttons/knobs setup failed [ 308.057674][ T189] rc_core: IR keymap rc-imon-pad not found [ 308.057695][ T189] Registered IR keymap rc-empty [ 308.057844][ T189] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 308.057862][ T189] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 308.058366][ T189] imon:send_packet: packet tx failed (-71) [ 308.077686][ T189] imon 2-1:0.0: remote input dev register failed [ 308.078155][ T189] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 308.168322][ T189] imon 2-1:0.0: unable to initialize intf0, err 0 [ 308.168337][ T189] imon:imon_probe: failed to initialize context! [ 308.168349][ T189] imon 2-1:0.0: unable to register, err -19 [ 308.174990][ T189] usb 2-1: USB disconnect, device number 40 [ 308.536637][ T189] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 308.726151][ T189] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 308.739213][ T189] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 308.739271][ T189] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 308.739302][ T189] usb 2-1: config 0 interface 0 has no altsetting 0 [ 308.745228][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.745252][ T189] usb 2-1: Product: syz [ 308.745270][ T189] usb 2-1: Manufacturer: syz [ 308.745286][ T189] usb 2-1: SerialNumber: syz [ 308.807906][ T189] usb 2-1: config 0 descriptor?? [ 308.809100][ T9659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 309.020951][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 309.024145][ T189] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input48 [ 309.326552][ T189] rc_core: IR keymap rc-imon-pad not found [ 309.326576][ T189] Registered IR keymap rc-empty [ 309.329433][ T189] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 309.329450][ T189] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 309.448259][ T189] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 309.453894][ T189] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input49 [ 309.497683][ T189] imon 2-1:0.0: iMON device (15c2:0045, intf0) on usb<2:41> initialized [ 309.656823][ T9659] imon:lcd_write: invalid payload size: 0 (expected 8) [ 309.660131][ T9659] imon:display_open: display port is already open [ 309.688983][ T10] usb 2-1: USB disconnect, device number 41 [ 309.892040][ T9658] ================================================================== [ 309.892058][ T9658] BUG: KASAN: slab-use-after-free in dev_driver_string+0x35/0xd0 [ 309.892090][ T9658] Read of size 8 at addr ffff88803130d0e0 by task syz.1.1219/9658 [ 309.892113][ T9658] [ 309.892123][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.1.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 309.892144][ T9658] Tainted: [L]=SOFTLOCKUP [ 309.892150][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 309.892160][ T9658] Call Trace: [ 309.892182][ T9658] [ 309.892192][ T9658] dump_stack_lvl+0xe8/0x150 [ 309.892222][ T9658] print_address_description+0x55/0x1e0 [ 309.892251][ T9658] ? dev_driver_string+0x35/0xd0 [ 309.892275][ T9658] print_report+0x58/0x70 [ 309.892295][ T9658] kasan_report+0x117/0x150 [ 309.892313][ T9658] ? dev_driver_string+0x35/0xd0 [ 309.892348][ T9658] dev_driver_string+0x35/0xd0 [ 309.892372][ T9658] __dynamic_dev_dbg+0x1ae/0x2e0 [ 309.892399][ T9658] ? __mutex_lock+0x305/0x15a0 [ 309.892422][ T9658] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 309.892447][ T9658] ? __pfx_ima_file_free+0x10/0x10 [ 309.892482][ T9658] ? __asan_memset+0x22/0x50 [ 309.892526][ T9658] ? __fsnotify_parent+0x267/0x620 [ 309.892557][ T9658] ? display_close+0x4b/0x240 [ 309.892593][ T9658] display_close+0x1f9/0x240 [ 309.892610][ T9658] ? __pfx_display_close+0x10/0x10 [ 309.892625][ T9658] __fput+0x413/0xa50 [ 309.892662][ T9658] task_work_run+0x1d9/0x260 [ 309.892698][ T9658] ? __pfx_task_work_run+0x10/0x10 [ 309.892735][ T9658] exit_to_user_mode_loop+0x204/0x770 [ 309.892764][ T9658] ? rcu_is_watching+0x16/0xb0 [ 309.892780][ T9658] do_syscall_64+0x328/0x520 [ 309.892795][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.892839][ T9658] ? clear_bhb_loop+0x70/0xc0 [ 309.892863][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.892884][ T9658] RIP: 0033:0x7fe9f419e159 [ 309.892906][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.892920][ T9658] RSP: 002b:00007ffdc34262c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 309.892938][ T9658] RAX: 0000000000000000 RBX: 00007ffdc34263b0 RCX: 00007fe9f419e159 [ 309.892949][ T9658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 309.892976][ T9658] RBP: 000000000004afcd R08: 0000000000000001 R09: 0000000000000000 [ 309.892991][ T9658] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007ffdc34263f0 [ 309.893006][ T9658] R13: 00007fe9f4425fac R14: 000000000004bad9 R15: 00007fe9f4425fa0 [ 309.893030][ T9658] [ 309.893038][ T9658] [ 309.893061][ T9658] Allocated by task 189: [ 309.893069][ T9658] kasan_save_track+0x3e/0x80 [ 309.893092][ T9658] __kasan_kmalloc+0x93/0xb0 [ 309.893105][ T9658] __kmalloc_cache_noprof+0x31c/0x600 [ 309.893149][ T9658] usb_set_configuration+0x3cc/0x2180 [ 309.893169][ T9658] usb_generic_driver_probe+0x8d/0x150 [ 309.893199][ T9658] usb_probe_device+0x1c3/0x3b0 [ 309.893221][ T9658] really_probe+0x254/0xae0 [ 309.893240][ T9658] __driver_probe_device+0x1e8/0x360 [ 309.893257][ T9658] driver_probe_device+0x4f/0x240 [ 309.893293][ T9658] __device_attach_driver+0x270/0x410 [ 309.893320][ T9658] bus_for_each_drv+0x258/0x2f0 [ 309.893337][ T9658] __device_attach+0x2c4/0x450 [ 309.893359][ T9658] device_initial_probe+0xa1/0xd0 [ 309.893384][ T9658] bus_probe_device+0x12a/0x220 [ 309.893396][ T9658] device_add+0x7d7/0xb80 [ 309.893411][ T9658] usb_new_device+0x9aa/0x1690 [ 309.893445][ T9658] hub_event+0x28e8/0x4d30 [ 309.893463][ T9658] process_scheduled_works+0xc3d/0x1630 [ 309.893485][ T9658] worker_thread+0xa47/0xfb0 [ 309.893506][ T9658] kthread+0x38b/0x480 [ 309.893532][ T9658] ret_from_fork+0x514/0xb70 [ 309.893558][ T9658] ret_from_fork_asm+0x1a/0x30 [ 309.893585][ T9658] [ 309.893609][ T9658] Freed by task 10: [ 309.893620][ T9658] kasan_save_track+0x3e/0x80 [ 309.893650][ T9658] kasan_save_free_info+0x40/0x50 [ 309.893674][ T9658] __kasan_slab_free+0x5c/0x80 [ 309.893693][ T9658] kfree+0x1c5/0x650 [ 309.893715][ T9658] device_release+0xc4/0x1f0 [ 309.893734][ T9658] kobject_put+0x222/0x550 [ 309.893749][ T9658] usb_disable_device+0x611/0x8d0 [ 309.893793][ T9658] usb_disconnect+0x346/0x9a0 [ 309.893818][ T9658] hub_event+0x1bbb/0x4d30 [ 309.893841][ T9658] process_scheduled_works+0xc3d/0x1630 [ 309.893864][ T9658] worker_thread+0xa47/0xfb0 [ 309.893880][ T9658] kthread+0x38b/0x480 [ 309.893898][ T9658] ret_from_fork+0x514/0xb70 [ 309.893933][ T9658] ret_from_fork_asm+0x1a/0x30 [ 309.893959][ T9658] [ 309.893965][ T9658] The buggy address belongs to the object at ffff88803130d000 [ 309.893965][ T9658] which belongs to the cache kmalloc-2k of size 2048 [ 309.893982][ T9658] The buggy address is located 224 bytes inside of [ 309.893982][ T9658] freed 2048-byte region [ffff88803130d000, ffff88803130d800) [ 309.894006][ T9658] [ 309.894015][ T9658] The buggy address belongs to the physical page: [ 309.894023][ T9658] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31308 [ 309.894038][ T9658] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 309.894050][ T9658] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 309.894065][ T9658] page_type: f5(slab) [ 309.894098][ T9658] raw: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 309.894117][ T9658] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 309.894137][ T9658] head: 00fff00000000040 ffff88813ff1b000 dead000000000100 dead000000000122 [ 309.894155][ T9658] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 309.894178][ T9658] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 309.894192][ T9658] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 309.894200][ T9658] page dumped because: kasan: bad access detected [ 309.894213][ T9658] page_owner tracks the page as allocated [ 309.894219][ T9658] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9460, tgid 9456 (syz.1.1161), ts 295537212646 [ 309.894266][ T9658] post_alloc_hook+0x1f9/0x250 [ 309.894292][ T9658] get_page_from_freelist+0x2209/0x2280 [ 309.894327][ T9658] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 309.894351][ T9658] allocate_slab+0x7d/0x620 [ 309.894367][ T9658] refill_objects+0x2d5/0x350 [ 309.894396][ T9658] __pcs_replace_empty_main+0x2c8/0x6c0 [ 309.894419][ T9658] __kmalloc_node_noprof+0x548/0x720 [ 309.894446][ T9658] qdisc_alloc+0x92/0x9d0 [ 309.894466][ T9658] qdisc_create_dflt+0x8e/0x4e0 [ 309.894490][ T9658] mq_init_common+0x267/0x440 [ 309.894507][ T9658] mq_init+0x83/0x260 [ 309.894524][ T9658] qdisc_create_dflt+0x13b/0x4e0 [ 309.894554][ T9658] dev_activate+0x1ce/0x1150 [ 309.894595][ T9658] __dev_open+0x699/0x850 [ 309.894623][ T9658] __dev_change_flags+0x329/0x820 [ 309.894642][ T9658] netif_change_flags+0x7c/0x1b0 [ 309.894665][ T9658] page last free pid 6000 tgid 6000 ts 291890904422 stack trace: [ 309.894676][ T9658] __free_frozen_pages+0xc93/0xd90 [ 309.894711][ T9658] __slab_free+0x274/0x2c0 [ 309.894742][ T9658] qlist_free_all+0x99/0x100 [ 309.894770][ T9658] kasan_quarantine_reduce+0x148/0x160 [ 309.894804][ T9658] __kasan_slab_alloc+0x22/0x80 [ 309.894818][ T9658] kmem_cache_alloc_lru_noprof+0x29e/0x5f0 [ 309.894864][ T9658] shmem_alloc_inode+0x28/0x40 [ 309.894893][ T9658] alloc_inode+0x6a/0x1b0 [ 309.894914][ T9658] new_inode+0x1f/0x170 [ 309.894937][ T9658] shmem_get_inode+0x3a4/0x1030 [ 309.894965][ T9658] shmem_mknod+0x17d/0x340 [ 309.894985][ T9658] lookup_open+0xb5e/0x1380 [ 309.895006][ T9658] path_openat+0x696/0x1e40 [ 309.895050][ T9658] do_file_open+0x23e/0x4a0 [ 309.895078][ T9658] do_sys_openat2+0x115/0x200 [ 309.895099][ T9658] __x64_sys_openat+0x138/0x170 [ 309.895124][ T9658] [ 309.895128][ T9658] Memory state around the buggy address: [ 309.895136][ T9658] ffff88803130cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 309.895147][ T9658] ffff88803130d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.895158][ T9658] >ffff88803130d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.895182][ T9658] ^ [ 309.895196][ T9658] ffff88803130d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.895211][ T9658] ffff88803130d180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 309.895223][ T9658] ================================================================== [ 309.895358][ T9658] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 310.721402][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.1.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.732392][ T9658] Tainted: [L]=SOFTLOCKUP [ 310.736761][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 310.746924][ T9658] Call Trace: [ 310.750222][ T9658] [ 310.753166][ T9658] vpanic+0x56d/0xa70 [ 310.757184][ T9658] ? __pfx_vpanic+0x10/0x10 [ 310.761723][ T9658] panic+0xc5/0xd0 [ 310.765481][ T9658] ? __pfx_panic+0x10/0x10 [ 310.769952][ T9658] ? preempt_schedule_thunk+0x16/0x40 [ 310.775372][ T9658] ? dev_driver_string+0x35/0xd0 [ 310.780327][ T9658] ? preempt_schedule_thunk+0x16/0x40 [ 310.785733][ T9658] ? dev_driver_string+0x35/0xd0 [ 310.790699][ T9658] check_panic_on_warn+0x89/0xb0 [ 310.795680][ T9658] ? dev_driver_string+0x35/0xd0 [ 310.800756][ T9658] end_report+0x73/0x170 [ 310.805026][ T9658] ? dev_driver_string+0x35/0xd0 [ 310.809989][ T9658] kasan_report+0x128/0x150 [ 310.814513][ T9658] ? dev_driver_string+0x35/0xd0 [ 310.819484][ T9658] dev_driver_string+0x35/0xd0 [ 310.824271][ T9658] __dynamic_dev_dbg+0x1ae/0x2e0 [ 310.829238][ T9658] ? __mutex_lock+0x305/0x15a0 [ 310.834026][ T9658] ? __pfx___dynamic_dev_dbg+0x10/0x10 [ 310.839532][ T9658] ? __pfx_ima_file_free+0x10/0x10 [ 310.844678][ T9658] ? __asan_memset+0x22/0x50 [ 310.849308][ T9658] ? __fsnotify_parent+0x267/0x620 [ 310.854453][ T9658] ? display_close+0x4b/0x240 [ 310.859161][ T9658] display_close+0x1f9/0x240 [ 310.863806][ T9658] ? __pfx_display_close+0x10/0x10 [ 310.868938][ T9658] __fput+0x413/0xa50 [ 310.873034][ T9658] task_work_run+0x1d9/0x260 [ 310.877658][ T9658] ? __pfx_task_work_run+0x10/0x10 [ 310.882811][ T9658] exit_to_user_mode_loop+0x204/0x770 [ 310.888209][ T9658] ? rcu_is_watching+0x16/0xb0 [ 310.892994][ T9658] do_syscall_64+0x328/0x520 [ 310.897607][ T9658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.903700][ T9658] ? clear_bhb_loop+0x70/0xc0 [ 310.908404][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.914319][ T9658] RIP: 0033:0x7fe9f419e159 [ 310.918761][ T9658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.938409][ T9658] RSP: 002b:00007ffdc34262c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 310.946875][ T9658] RAX: 0000000000000000 RBX: 00007ffdc34263b0 RCX: 00007fe9f419e159 [ 310.954865][ T9658] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 310.962856][ T9658] RBP: 000000000004afcd R08: 0000000000000001 R09: 0000000000000000 [ 310.970864][ T9658] R10: 0000001b32c20000 R11: 0000000000000246 R12: 00007ffdc34263f0 [ 310.978873][ T9658] R13: 00007fe9f4425fac R14: 000000000004bad9 R15: 00007fe9f4425fa0 [ 310.986893][ T9658] [ 310.990549][ T9658] Kernel Offset: disabled [ 310.994897][ T9658] Rebooting in 86400 seconds..