last executing test programs: 25.58900902s ago: executing program 3 (id=1141): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220b00000092a82139401483f8da99c55e2ff6d6449d2cab"], 0x0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001020000000904", @ANYRES32, @ANYRES8=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vcs(0xffffffffffffff9c, 0x0, 0x401, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x140, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f0000000400)={0x2, 0x6e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0xd6}, {&(0x7f0000000500)=""/133, 0x6d}, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/94, 0x5e}, {&(0x7f0000000640)=""/33, 0x21}, {&(0x7f0000000680)=""/146, 0x92}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000001a80)=""/4112, 0xffffffffffffff52}], 0x5, 0x13, 0x1ff}}], 0x48}, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000940)=[{&(0x7f0000000340)=""/146, 0x92}], 0x1, 0x8000, 0x3) 20.964774385s ago: executing program 3 (id=1152): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x111) 20.226239889s ago: executing program 3 (id=1154): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220b00000092a82139401483f8da99c55e2ff6d6449d2cab"], 0x0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18.805386747s ago: executing program 4 (id=1157): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r0}, 0x94) fcntl$setown(r0, 0x8, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x14482, 0x2) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000180)=0x81) 18.64112438s ago: executing program 4 (id=1159): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0xf0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f00003a1000/0x18000)=nil, 0x0, 0x0, 0x4a, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 11.657222987s ago: executing program 4 (id=1168): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) 11.462073865s ago: executing program 0 (id=1169): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000040)={0x0, 0x200000}) (fail_nth: 2) 11.21568427s ago: executing program 0 (id=1170): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x2f, 0x7a, 0x2, 0x4, 0x24, @dev={0xfe, 0x80, '\x00', 0x20}, @private2, 0x80, 0x7, 0xffffffff}}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d83b0fa, 0xc574450d1af1b8ad}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FAST_LEAVE={0x5, 0x7, 0x1}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x148, 0x24, 0x605, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x20, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x148}}, 0x0) r8 = socket$key(0xf, 0x3, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x81, 0x1, 0x2, 0x2, 0x8, 0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026, r9}, &(0x7f00000000c0)={0x29, 0xf5b, 0x1000000, 0x10, 0x80000000, 0x100}) sendmsg$key(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x170}}, 0x0) 10.946837596s ago: executing program 4 (id=1171): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x100000}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000010000), &(0x7f0000020000), &(0x7f0000018000)}) write(r1, &(0x7f0000018000)="000001", 0x3) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000600)={0x1, r1}) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x10) 10.928565692s ago: executing program 3 (id=1172): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40804) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8000000001cb, 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000005c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x240080c4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) getrandom(0xfffffffffffffffe, 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2090}, 0x4008044) mount$afs(&(0x7f0000000540)=@cell={0x25, '', 'syz0', '.backup'}, &(0x7f0000000580)='./file0\x00', &(0x7f0000000380), 0x50001, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x400c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 8.285501348s ago: executing program 1 (id=1175): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5019, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @local=@item_4={0x3, 0x2, 0x2, "99231d89"}, @main=@item_4={0x3, 0x0, 0x8, "14ca3f7a"}, @main=@item_012={0x2, 0x0, 0x8, 'F\x00'}, @global=@item_012={0x1, 0x1, 0x0, '\b'}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x17, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x8000000004, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x100000000, 0x100, 0x4, 0x2, 0x4bf, 0x4000003, 0x8, 0x8}) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) clock_adjtime(0x2, &(0x7f0000000100)={0x7fffffffffffffff, 0x232b, 0x9, 0x8, 0xffff, 0x6ea, 0x9, 0x9, 0x8, 0x3, 0xb, 0xa30d, 0x4, 0xb, 0x3ff, 0x400, 0x2, 0x3, 0xd6, 0x6, 0x1ff, 0x9, 0xffffffff, 0x9, 0x9, 0x5}) 8.138909921s ago: executing program 3 (id=1176): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000008001fc0100000000000000885dc66392401f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x7, 0x7ff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xffffffbffffffffc, 0x4}, {0x10000000000009, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x63b5, &(0x7f0000006680)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='\x00V\x13\xdb\xbc', 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f00000001c0)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x9d}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) eventfd2(0x9, 0x80800) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) 7.172147423s ago: executing program 0 (id=1177): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002280)={0x1, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}], 0x0}, 0x20) io_uring_enter(0xffffffffffffffff, 0x64f5, 0x90f4, 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}], 0x0, 0x1}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4321, @loopback}, 0x10) r5 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r5, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) connect$rxrpc(r5, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4321, @loopback}}, 0x24) sendmsg(r5, 0x0, 0x0) recvfrom(r4, &(0x7f0000000300)=""/256, 0x100, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(r7, &(0x7f0000000500)="000000020104", 0x6) read(r6, &(0x7f0000000310), 0x6) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, 0x0, &(0x7f0000000040)) 5.625609081s ago: executing program 2 (id=1179): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r1, 0x1, 0x3d, 0x0, &(0x7f00000003c0)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./sys/devices/system/cpu/smt/control\x00', &(0x7f00000000c0)='sysfs\x00', 0x31, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x157201, 0x0) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x5, 0x2) write(r2, &(0x7f0000000080)="390365c9b04fadff7157ad204597c2a026a5ae000000513b7e", 0x19) 5.288851358s ago: executing program 2 (id=1180): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) socket$unix(0x1, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private=0xa010101}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) bind$rds(r1, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) read$dsp(r0, &(0x7f00000001c0)=""/62, 0x3e) 5.228562567s ago: executing program 1 (id=1181): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) unshare(0x20000) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 4.907993323s ago: executing program 4 (id=1182): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000000879215300000000000001090224000100000000090401130103000100092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220b00000092a82139401483f8da99c55e2ff6d6449d2cab"], 0x0}, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYRES8=r1], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x18, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.895039229s ago: executing program 3 (id=1183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000100)) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) pwritev(r0, &(0x7f00000034c0), 0x0, 0x4, 0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r2, 0xc3219fe22fdf3a2b, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x52e}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000140)={0x0, 0x5, 0x7fb, 0x4, 0xa1, 0x0, 0x0}) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4082) ioctl$SNAPSHOT_UNFREEZE(r6, 0x3302) listns(0x0, 0x0, 0x0, 0x0) 3.321309057s ago: executing program 2 (id=1184): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x72, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) fcntl$notify(0xffffffffffffffff, 0x402, 0x30) creat(&(0x7f0000000080)='./file0\x00', 0x111) 3.319499417s ago: executing program 0 (id=1185): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r0, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @private2, 0x49}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000029000000040000003a000000000000001000"], 0x30}, 0x4004000) 3.057181008s ago: executing program 2 (id=1186): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40804) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8000000001cb, 0x12) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r3, 0x5607, 0x4) ioctl$VT_ACTIVATE(r3, 0x5606, 0x4) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f00000005c0)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, 0x0, 0x240080c4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r7, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) getrandom(0xfffffffffffffffe, 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r8, 0x0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2090}, 0x4008044) mount$afs(&(0x7f0000000540)=@cell={0x25, '', 'syz0', '.backup'}, &(0x7f0000000580)='./file0\x00', &(0x7f0000000380), 0x50001, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x400c0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 2.917373886s ago: executing program 0 (id=1187): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="05000000", 0x4) 1.600895334s ago: executing program 0 (id=1188): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x2000) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7, 0x33, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20}, 0x36) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x7, 0x33, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20}, 0x36) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000080)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) syz_usb_connect$uac2(0x0, 0x7b, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100100000020cc171010400001020301090269000301069002080b0002010920090904"], 0x0) socket$unix(0x1, 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r9, 0x52da}, 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000240)={r9, 0x52da}, 0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0xe, 0x7, 0x7fffffff, 0x80000000}}]}}}]}, 0x60}}, 0x0) 1.527587069s ago: executing program 1 (id=1189): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r0) epoll_create1(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e079c0814"], 0xa) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002840)={r2, 0x0, &(0x7f0000002780)=""/135}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 913.950686ms ago: executing program 2 (id=1190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x138, 0x24, 0x405, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104}]}}]}, 0x138}}, 0x0) r3 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) pidfd_getfd(r3, r0, 0x0) 521.156841ms ago: executing program 4 (id=1191): setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='off', 0x3) write(r0, &(0x7f0000000180)='on', 0x2) 439.569046ms ago: executing program 1 (id=1192): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000500)='n', 0x1) 322.880639ms ago: executing program 1 (id=1193): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) r0 = fsopen(&(0x7f00000000c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r9, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 354.801197][ T1251] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 354.801223][ T1251] usb 4-1: config 0 has no interface number 0 [ 354.801265][ T1251] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 354.801292][ T1251] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.801313][ T1251] usb 4-1: config 0 interface 1 has no altsetting 0 [ 354.801344][ T1251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.851803][ T1251] usb 4-1: config 0 descriptor?? [ 354.861549][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.741'. [ 355.714451][ T8294] netlink: 72 bytes leftover after parsing attributes in process `syz.2.742'. [ 355.731336][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.732596][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.616141][ T5697] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 357.644288][ T1251] uclogic 0003:2179:0053.0019: failed retrieving string descriptor #100: -71 [ 357.644377][ T1251] uclogic 0003:2179:0053.0019: failed retrieving pen parameters: -71 [ 357.644395][ T1251] uclogic 0003:2179:0053.0019: pen probing failed: -71 [ 357.644409][ T1251] uclogic 0003:2179:0053.0019: failed probing parameters: -71 [ 357.644506][ T1251] uclogic 0003:2179:0053.0019: probe with driver uclogic failed with error -71 [ 357.673723][ T1251] usb 4-1: USB disconnect, device number 15 [ 357.745902][ T5697] usb 5-1: device descriptor read/64, error -71 [ 358.005676][ T5697] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 358.025534][ T197] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 358.136970][ T5697] usb 5-1: device descriptor read/64, error -71 [ 358.187018][ T197] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 358.204539][ T197] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.204568][ T197] usb 1-1: config 0 has no interface number 0 [ 358.204613][ T197] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 358.204640][ T197] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.204663][ T197] usb 1-1: config 0 interface 1 has no altsetting 0 [ 358.204697][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.245789][ T5697] usb usb5-port1: attempt power cycle [ 358.292073][ T197] usb 1-1: config 0 descriptor?? [ 358.296409][ T8323] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 358.296432][ T8323] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.661745][ T8324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.904920][ T5697] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 358.926655][ T5697] usb 5-1: device descriptor read/8, error -71 [ 359.144763][ T8315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.146964][ T8315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.455529][ T5697] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 359.485583][ T5697] usb 5-1: device descriptor read/8, error -71 [ 359.600277][ T5697] usb usb5-port1: unable to enumerate USB device [ 361.173759][ T1251] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 361.336757][ T1251] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 361.347657][ T1251] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.347684][ T1251] usb 5-1: config 0 has no interface number 0 [ 361.347728][ T1251] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 361.347753][ T1251] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.347775][ T1251] usb 5-1: config 0 interface 1 has no altsetting 0 [ 361.348052][ T1251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.421315][ T1251] usb 5-1: config 0 descriptor?? [ 361.549506][ T197] uclogic 0003:2179:0053.001A: failed retrieving string descriptor #100: -71 [ 361.549624][ T197] uclogic 0003:2179:0053.001A: failed retrieving pen parameters: -71 [ 361.549643][ T197] uclogic 0003:2179:0053.001A: pen probing failed: -71 [ 361.549661][ T197] uclogic 0003:2179:0053.001A: failed probing parameters: -71 [ 361.549769][ T197] uclogic 0003:2179:0053.001A: probe with driver uclogic failed with error -71 [ 361.621521][ T197] usb 1-1: USB disconnect, device number 19 [ 362.128634][ T8349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.143052][ T8349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.733211][ T5603] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 363.821431][ T1251] uclogic 0003:2179:0053.001B: failed retrieving string descriptor #100: -71 [ 363.839461][ T1251] uclogic 0003:2179:0053.001B: failed retrieving pen parameters: -71 [ 363.839489][ T1251] uclogic 0003:2179:0053.001B: pen probing failed: -71 [ 363.839507][ T1251] uclogic 0003:2179:0053.001B: failed probing parameters: -71 [ 363.839619][ T1251] uclogic 0003:2179:0053.001B: probe with driver uclogic failed with error -71 [ 363.925130][ T1251] usb 5-1: USB disconnect, device number 29 [ 364.075518][ T5603] usb 1-1: Using ep0 maxpacket: 8 [ 364.076878][ T5603] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.078390][ T5603] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 364.078444][ T5603] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.078465][ T5603] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.078488][ T5603] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.078511][ T5603] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.078549][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.491113][ T5603] usb 1-1: usb_control_msg returned -71 [ 364.491213][ T5603] usbtmc 1-1:16.0: can't read capabilities [ 364.555565][ T5603] usb 1-1: USB disconnect, device number 20 [ 365.745582][ T6201] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 365.907366][ T6201] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 365.921189][ T6201] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 365.930403][ T6201] usb 3-1: config 0 has no interface number 0 [ 365.930465][ T6201] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.930493][ T6201] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.930513][ T6201] usb 3-1: config 0 interface 1 has no altsetting 0 [ 365.930547][ T6201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.993530][ T6201] usb 3-1: config 0 descriptor?? [ 366.733113][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.746290][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.885451][ T6091] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 369.058871][ T6201] uclogic 0003:2179:0053.001C: failed retrieving string descriptor #100: -71 [ 369.069962][ T6201] uclogic 0003:2179:0053.001C: failed retrieving pen parameters: -71 [ 369.069988][ T6201] uclogic 0003:2179:0053.001C: pen probing failed: -71 [ 369.070007][ T6201] uclogic 0003:2179:0053.001C: failed probing parameters: -71 [ 369.070129][ T6201] uclogic 0003:2179:0053.001C: probe with driver uclogic failed with error -71 [ 369.115881][ T6201] usb 3-1: USB disconnect, device number 15 [ 369.153209][ T6091] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 369.158266][ T6091] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.158291][ T6091] usb 1-1: config 0 has no interface number 0 [ 369.158331][ T6091] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.158357][ T6091] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.158380][ T6091] usb 1-1: config 0 interface 1 has no altsetting 0 [ 369.158411][ T6091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.224482][ T6091] usb 1-1: config 0 descriptor?? [ 369.519394][ T8456] FAULT_INJECTION: forcing a failure. [ 369.519394][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.521376][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.3.793 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 369.521401][ T8456] Tainted: [L]=SOFTLOCKUP [ 369.521406][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 369.521417][ T8456] Call Trace: [ 369.521425][ T8456] [ 369.521434][ T8456] dump_stack_lvl+0xe8/0x150 [ 369.521470][ T8456] should_fail_ex+0x46b/0x600 [ 369.521495][ T8456] _copy_to_iter+0x404/0x1810 [ 369.521526][ T8456] ? __pfx__copy_to_iter+0x10/0x10 [ 369.521552][ T8456] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 369.521575][ T8456] copy_page_to_iter+0x23f/0x330 [ 369.521598][ T8456] shmem_file_read_iter+0x4f3/0x8a0 [ 369.521702][ T8456] do_iter_readv_writev+0x624/0x8d0 [ 369.521737][ T8456] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 369.521764][ T8456] ? rw_verify_area+0x250/0x4d0 [ 369.521783][ T8456] vfs_readv+0x293/0x850 [ 369.521812][ T8456] ? __pfx_vfs_readv+0x10/0x10 [ 369.521846][ T8456] ? __fget_files+0x2a/0x420 [ 369.521867][ T8456] ? __fget_files+0x3a8/0x420 [ 369.521883][ T8456] ? __fget_files+0x2a/0x420 [ 369.521905][ T8456] __x64_sys_preadv+0x19f/0x2c0 [ 369.521928][ T8456] ? __pfx___x64_sys_preadv+0x10/0x10 [ 369.521959][ T8456] do_syscall_64+0x166/0x520 [ 369.521979][ T8456] ? trace_irq_disable+0x3b/0x140 [ 369.522000][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.522019][ T8456] ? clear_bhb_loop+0x70/0xc0 [ 369.522041][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.522059][ T8456] RIP: 0033:0x7fb36117e159 [ 369.522078][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.522095][ T8456] RSP: 002b:00007fb35f394028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 369.522115][ T8456] RAX: ffffffffffffffda RBX: 00007fb361406180 RCX: 00007fb36117e159 [ 369.522129][ T8456] RDX: 000000000000003e RSI: 00002000000015c0 RDI: 0000000000000005 [ 369.522140][ T8456] RBP: 00007fb35f394090 R08: 0000000000000000 R09: 0000000000000000 [ 369.522151][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.522162][ T8456] R13: 00007fb361406218 R14: 00007fb361406180 R15: 00007ffc4eebdbd8 [ 369.522191][ T8456] [ 369.893297][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.912679][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.861733][ T6091] uclogic 0003:2179:0053.001D: failed retrieving string descriptor #100: -71 [ 371.861846][ T6091] uclogic 0003:2179:0053.001D: failed retrieving pen parameters: -71 [ 371.861875][ T6091] uclogic 0003:2179:0053.001D: pen probing failed: -71 [ 371.861892][ T6091] uclogic 0003:2179:0053.001D: failed probing parameters: -71 [ 371.862000][ T6091] uclogic 0003:2179:0053.001D: probe with driver uclogic failed with error -71 [ 371.887819][ T6091] usb 1-1: USB disconnect, device number 21 [ 372.006068][ T36] audit: type=1326 audit(1788078461.998:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.034995][ T36] audit: type=1326 audit(1788078462.018:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.076864][ T36] audit: type=1326 audit(1788078462.068:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.078437][ T36] audit: type=1326 audit(1788078462.068:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.116275][ T36] audit: type=1326 audit(1788078462.078:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.116326][ T36] audit: type=1326 audit(1788078462.088:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.116376][ T36] audit: type=1326 audit(1788078462.108:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.219456][ T36] audit: type=1326 audit(1788078462.208:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.222573][ T36] audit: type=1326 audit(1788078462.208:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 372.272053][ T36] audit: type=1326 audit(1788078462.258:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8484 comm="syz.2.803" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=446 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 373.368858][ T6091] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 373.402784][ T8502] FAULT_INJECTION: forcing a failure. [ 373.402784][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 373.417561][ T8502] CPU: 0 UID: 0 PID: 8502 Comm: syz.1.806 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 373.417590][ T8502] Tainted: [L]=SOFTLOCKUP [ 373.417596][ T8502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.417605][ T8502] Call Trace: [ 373.417612][ T8502] [ 373.417620][ T8502] dump_stack_lvl+0xe8/0x150 [ 373.417646][ T8502] should_fail_ex+0x46b/0x600 [ 373.417665][ T8502] should_failslab+0xa8/0x100 [ 373.417686][ T8502] __kmalloc_noprof+0xfb/0x790 [ 373.417719][ T8502] ? tomoyo_encode+0x2ad/0x570 [ 373.417735][ T8502] ? tomoyo_encode+0x2ad/0x570 [ 373.417755][ T8502] tomoyo_encode+0x2ad/0x570 [ 373.417776][ T8502] tomoyo_realpath_from_path+0x5fa/0x640 [ 373.417802][ T8502] ? tomoyo_path_number_perm+0x219/0x5f0 [ 373.417816][ T8502] tomoyo_path_number_perm+0x246/0x5f0 [ 373.417833][ T8502] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 373.417846][ T8502] ? __lock_acquire+0x6df/0x2e40 [ 373.417877][ T8502] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 373.417893][ T8502] ? hook_file_ioctl+0x1f5/0x610 [ 373.417929][ T8502] ? __fget_files+0x2a/0x420 [ 373.417945][ T8502] ? __fget_files+0x2a/0x420 [ 373.417958][ T8502] ? __fget_files+0x3a8/0x420 [ 373.417972][ T8502] ? __fget_files+0x2a/0x420 [ 373.417990][ T8502] security_file_ioctl+0xc3/0x2a0 [ 373.418009][ T8502] __se_sys_ioctl+0x47/0x170 [ 373.418032][ T8502] do_syscall_64+0x166/0x520 [ 373.418048][ T8502] ? trace_irq_disable+0x3b/0x140 [ 373.418066][ T8502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.418081][ T8502] ? clear_bhb_loop+0x70/0xc0 [ 373.418099][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.418115][ T8502] RIP: 0033:0x7fd1a50be159 [ 373.418131][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.418143][ T8502] RSP: 002b:00007fd1a3316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.418160][ T8502] RAX: ffffffffffffffda RBX: 00007fd1a5345fa0 RCX: 00007fd1a50be159 [ 373.418172][ T8502] RDX: 0000000000000000 RSI: 00000000c048aeca RDI: 0000000000000005 [ 373.418183][ T8502] RBP: 00007fd1a3316090 R08: 0000000000000000 R09: 0000000000000000 [ 373.418193][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.418203][ T8502] R13: 00007fd1a5346038 R14: 00007fd1a5345fa0 R15: 00007ffc3c9733d8 [ 373.418226][ T8502] [ 373.419869][ T8502] ERROR: Out of memory at tomoyo_realpath_from_path. [ 373.534528][ T6091] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 373.549952][ T6091] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.549980][ T6091] usb 1-1: config 0 has no interface number 0 [ 373.550096][ T6091] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.550123][ T6091] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.550146][ T6091] usb 1-1: config 0 interface 1 has no altsetting 0 [ 373.550179][ T6091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.588083][ T6091] usb 1-1: config 0 descriptor?? [ 374.031343][ T8511] netlink: 40 bytes leftover after parsing attributes in process `syz.1.808'. [ 374.091772][ T8506] syzkaller1: entered promiscuous mode [ 374.091844][ T8506] syzkaller1: entered allmulticast mode [ 374.284632][ T8489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.294819][ T8489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.933338][ T5916] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 376.106356][ T5916] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 376.114514][ T5916] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.114542][ T5916] usb 5-1: config 0 has no interface number 0 [ 376.114586][ T5916] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 376.114613][ T5916] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.114634][ T5916] usb 5-1: config 0 interface 1 has no altsetting 0 [ 376.114667][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.157785][ T5916] usb 5-1: config 0 descriptor?? [ 376.625043][ T6091] uclogic 0003:2179:0053.001E: failed retrieving string descriptor #100: -71 [ 376.634147][ T6091] uclogic 0003:2179:0053.001E: failed retrieving pen parameters: -71 [ 376.634172][ T6091] uclogic 0003:2179:0053.001E: pen probing failed: -71 [ 376.634189][ T6091] uclogic 0003:2179:0053.001E: failed probing parameters: -71 [ 376.634297][ T6091] uclogic 0003:2179:0053.001E: probe with driver uclogic failed with error -71 [ 376.727762][ T6091] usb 1-1: USB disconnect, device number 22 [ 377.444061][ T8521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.449023][ T8521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.024106][ T8555] Invalid source name [ 378.032608][ T8555] UBIFS error (pid: 8555): cannot open "ubifs", error -22 [ 378.148977][ T8558] batman_adv: batadv0: Adding interface: veth0 [ 378.149930][ T8558] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.149971][ T8558] batman_adv: batadv0: Interface activated: veth0 [ 378.525518][ T6201] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 378.697554][ T6201] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 378.700661][ T6201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.794101][ T6201] usb 1-1: config 0 descriptor?? [ 379.024764][ T6201] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 379.031392][ T6091] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 379.208108][ T5916] uclogic 0003:2179:0053.001F: failed retrieving string descriptor #100: -71 [ 379.208278][ T5916] uclogic 0003:2179:0053.001F: failed retrieving pen parameters: -71 [ 379.208355][ T5916] uclogic 0003:2179:0053.001F: pen probing failed: -71 [ 379.208373][ T5916] uclogic 0003:2179:0053.001F: failed probing parameters: -71 [ 379.208545][ T5916] uclogic 0003:2179:0053.001F: probe with driver uclogic failed with error -71 [ 379.239646][ T5916] usb 5-1: USB disconnect, device number 30 [ 379.364570][ T6091] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 379.377150][ T6201] gspca_cpia1: usb_control_msg 03, error -32 [ 380.346225][ T6091] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 380.354483][ T6091] usb 4-1: config 0 has no interface number 0 [ 380.354565][ T6091] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.354592][ T6091] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.354614][ T6091] usb 4-1: config 0 interface 1 has no altsetting 0 [ 380.354648][ T6091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.439534][ T6201] gspca_cpia1: usb_control_msg 03, error -110 [ 380.440012][ T6201] gspca_cpia1: usb_control_msg 01, error -32 [ 380.442223][ T6201] gspca_cpia1: usb_control_msg 01, error -32 [ 380.442626][ T6201] gspca_cpia1: usb_control_msg 01, error -32 [ 380.443008][ T6201] gspca_cpia1: usb_control_msg 01, error -32 [ 380.443022][ T6201] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 380.544691][ T6091] usb 4-1: config 0 descriptor?? [ 380.623905][ T8558] pim6reg: entered allmulticast mode [ 380.818498][ T5916] usb 1-1: USB disconnect, device number 23 [ 381.211601][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.225684][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.701991][ T8611] FAULT_INJECTION: forcing a failure. [ 382.701991][ T8611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.702079][ T8611] CPU: 0 UID: 0 PID: 8611 Comm: syz.4.836 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 382.702104][ T8611] Tainted: [L]=SOFTLOCKUP [ 382.702116][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.702126][ T8611] Call Trace: [ 382.702131][ T8611] [ 382.702137][ T8611] dump_stack_lvl+0xe8/0x150 [ 382.702167][ T8611] should_fail_ex+0x46b/0x600 [ 382.702190][ T8611] _copy_from_user+0x2d/0xb0 [ 382.702213][ T8611] kstrtouint_from_user+0xd6/0x180 [ 382.702242][ T8611] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 382.702267][ T8611] ? __lock_acquire+0x6df/0x2e40 [ 382.702287][ T8611] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 382.702319][ T8611] ? lock_acquire+0x115/0x350 [ 382.702344][ T8611] proc_fail_nth_write+0x8e/0x210 [ 382.702365][ T8611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.702393][ T8611] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 382.702414][ T8611] vfs_write+0x29f/0xbb0 [ 382.702442][ T8611] ? __pfx_vfs_write+0x10/0x10 [ 382.702464][ T8611] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 382.702486][ T8611] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 382.702505][ T8611] ? mutex_lock_nested+0x152/0x1d0 [ 382.702527][ T8611] ? fdget_pos+0x252/0x320 [ 382.702554][ T8611] ksys_write+0x156/0x270 [ 382.702576][ T8611] ? __pfx_ksys_write+0x10/0x10 [ 382.702607][ T8611] do_syscall_64+0x166/0x520 [ 382.702625][ T8611] ? trace_irq_disable+0x3b/0x140 [ 382.702645][ T8611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.702663][ T8611] ? clear_bhb_loop+0x70/0xc0 [ 382.702685][ T8611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.702703][ T8611] RIP: 0033:0x7f12e795e98e [ 382.702721][ T8611] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 382.702737][ T8611] RSP: 002b:00007f12e5bd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 382.702756][ T8611] RAX: ffffffffffffffda RBX: 00007f12e5bd56c0 RCX: 00007f12e795e98e [ 382.702769][ T8611] RDX: 0000000000000001 RSI: 00007f12e5bd50a0 RDI: 0000000000000005 [ 382.702789][ T8611] RBP: 00007f12e5bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 382.702800][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.702811][ T8611] R13: 00007f12e7c26128 R14: 00007f12e7c26090 R15: 00007ffed68cae48 [ 382.702842][ T8611] [ 383.479924][ T6091] uclogic 0003:2179:0053.0020: failed retrieving string descriptor #100: -71 [ 383.485445][ T6091] uclogic 0003:2179:0053.0020: failed retrieving pen parameters: -71 [ 383.485471][ T6091] uclogic 0003:2179:0053.0020: pen probing failed: -71 [ 383.485487][ T6091] uclogic 0003:2179:0053.0020: failed probing parameters: -71 [ 383.485597][ T6091] uclogic 0003:2179:0053.0020: probe with driver uclogic failed with error -71 [ 384.185689][ T6091] usb 4-1: USB disconnect, device number 16 [ 384.495479][ T8627] FAULT_INJECTION: forcing a failure. [ 384.495479][ T8627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.534581][ T8627] CPU: 0 UID: 0 PID: 8627 Comm: syz.2.839 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.534614][ T8627] Tainted: [L]=SOFTLOCKUP [ 384.534620][ T8627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.534631][ T8627] Call Trace: [ 384.534639][ T8627] [ 384.534647][ T8627] dump_stack_lvl+0xe8/0x150 [ 384.534681][ T8627] should_fail_ex+0x46b/0x600 [ 384.534718][ T8627] _copy_from_iter+0x1d3/0x1660 [ 384.534752][ T8627] ? __pfx__copy_from_iter+0x10/0x10 [ 384.534771][ T8627] ? trace_kmalloc+0x2a/0xf0 [ 384.534794][ T8627] ? __kmalloc_noprof+0x43e/0x790 [ 384.534816][ T8627] ? kernfs_fop_write_iter+0x158/0x540 [ 384.534845][ T8627] kernfs_fop_write_iter+0x19b/0x540 [ 384.534874][ T8627] vfs_write+0x61e/0xbb0 [ 384.534900][ T8627] ? __pfx_vfs_write+0x10/0x10 [ 384.534921][ T8627] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 384.534946][ T8627] ? mutex_lock_nested+0x152/0x1d0 [ 384.534969][ T8627] ? fdget_pos+0x252/0x320 [ 384.535009][ T8627] ksys_write+0x156/0x270 [ 384.535032][ T8627] ? __pfx_ksys_write+0x10/0x10 [ 384.535064][ T8627] do_syscall_64+0x166/0x520 [ 384.535084][ T8627] ? trace_irq_disable+0x3b/0x140 [ 384.535104][ T8627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.535123][ T8627] ? clear_bhb_loop+0x70/0xc0 [ 384.535147][ T8627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.535165][ T8627] RIP: 0033:0x7f900201e159 [ 384.535183][ T8627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.535198][ T8627] RSP: 002b:00007f9000276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.535219][ T8627] RAX: ffffffffffffffda RBX: 00007f90022a5fa0 RCX: 00007f900201e159 [ 384.535232][ T8627] RDX: 0000000000000006 RSI: 0000200000000340 RDI: 0000000000000005 [ 384.535244][ T8627] RBP: 00007f9000276090 R08: 0000000000000000 R09: 0000000000000000 [ 384.535254][ T8627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.535265][ T8627] R13: 00007f90022a6038 R14: 00007f90022a5fa0 R15: 00007fffb1721fd8 [ 384.535296][ T8627] [ 384.805522][ T6091] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 384.956112][ T6091] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 384.970162][ T6091] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.970190][ T6091] usb 4-1: config 0 has no interface number 0 [ 384.970236][ T6091] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 384.970263][ T6091] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.970286][ T6091] usb 4-1: config 0 interface 1 has no altsetting 0 [ 384.970320][ T6091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.029476][ T6091] usb 4-1: config 0 descriptor?? [ 385.184959][ T8638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.750935][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.751562][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.991123][ T6091] uclogic 0003:2179:0053.0021: failed retrieving string descriptor #100: -71 [ 385.993101][ T6091] uclogic 0003:2179:0053.0021: failed retrieving pen parameters: -71 [ 385.993125][ T6091] uclogic 0003:2179:0053.0021: pen probing failed: -71 [ 385.993143][ T6091] uclogic 0003:2179:0053.0021: failed probing parameters: -71 [ 385.993251][ T6091] uclogic 0003:2179:0053.0021: probe with driver uclogic failed with error -71 [ 386.044101][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 386.044231][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.072133][ T6091] usb 4-1: USB disconnect, device number 17 [ 386.257329][ T8651] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 386.495801][ T49] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 386.806853][ T49] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 386.822850][ T49] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.822887][ T49] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 386.822915][ T49] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 386.823988][ T49] usb 2-1: config 0 interface 0 has no altsetting 0 [ 386.824034][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.951678][ T49] usb 2-1: config 0 descriptor?? [ 386.984597][ T8655] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.195504][ T5697] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 387.319381][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.320445][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.226669][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.240904][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.260503][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.270744][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.287848][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.316367][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.328752][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.339599][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.345241][ T5697] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 388.359118][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.359145][ T5697] usb 1-1: config 0 has no interface number 0 [ 388.359248][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 388.359275][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.359298][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 388.359327][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.479380][ T5697] usb 1-1: config 0 descriptor?? [ 388.552982][ T49] usbhid 2-1:0.0: can't add hid device: -71 [ 388.553323][ T49] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.641800][ T49] usb 2-1: USB disconnect, device number 22 [ 389.385262][ T8663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.393711][ T8663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.695656][ T5916] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 390.855445][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 390.863106][ T5916] usb 4-1: unable to get BOS descriptor or descriptor too short [ 390.863155][ T5916] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 390.888606][ T5916] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 390.889322][ T5916] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 390.889346][ T5916] usb 4-1: config 14 has no interface number 0 [ 390.889362][ T5916] usb 4-1: config 14 has no interface number 1 [ 390.889418][ T5916] usb 4-1: config 14 interface 57 has no altsetting 0 [ 390.889437][ T5916] usb 4-1: config 14 interface 228 has no altsetting 0 [ 390.938173][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.939591][ T5916] usb 4-1: Product: syz [ 390.939612][ T5916] usb 4-1: Manufacturer: syz [ 390.939626][ T5916] usb 4-1: SerialNumber: syz [ 391.219432][ T8693] netlink: NAT attribute has 4 unknown bytes [ 391.219475][ T8693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.462309][ T5916] legousbtower 4-1:14.57: interrupt endpoints not found [ 391.481343][ T5916] legousbtower 4-1:14.228: interrupt endpoints not found [ 391.504146][ T5916] usb 4-1: USB disconnect, device number 18 [ 391.573599][ T5697] uclogic 0003:2179:0053.0022: failed retrieving string descriptor #100: -71 [ 391.573665][ T5697] uclogic 0003:2179:0053.0022: failed retrieving pen parameters: -71 [ 391.573682][ T5697] uclogic 0003:2179:0053.0022: pen probing failed: -71 [ 391.573699][ T5697] uclogic 0003:2179:0053.0022: failed probing parameters: -71 [ 391.573809][ T5697] uclogic 0003:2179:0053.0022: probe with driver uclogic failed with error -71 [ 391.651418][ T5697] usb 1-1: USB disconnect, device number 24 [ 391.855769][ T8702] ima: policy update failed [ 391.861125][ T36] kauditd_printk_skb: 70 callbacks suppressed [ 391.867809][ T36] audit: type=1802 audit(1788078481.848:181): pid=8702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=policy_update cause=failed comm="syz.1.861" res=0 errno=0 [ 392.430776][ T5697] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 392.486346][ T8713] netlink: 72 bytes leftover after parsing attributes in process `syz.2.865'. [ 393.300819][ T5697] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 393.306411][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.306478][ T5697] usb 1-1: config 0 has no interface number 0 [ 393.306609][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 393.306664][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.306713][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 393.306774][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.486927][ T5697] usb 1-1: config 0 descriptor?? [ 394.225440][ T8705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.226124][ T8705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.482972][ T5697] uclogic 0003:2179:0053.0023: failed retrieving string descriptor #100: -71 [ 394.495040][ T5697] uclogic 0003:2179:0053.0023: failed retrieving pen parameters: -71 [ 394.495066][ T5697] uclogic 0003:2179:0053.0023: pen probing failed: -71 [ 394.495083][ T5697] uclogic 0003:2179:0053.0023: failed probing parameters: -71 [ 394.495183][ T5697] uclogic 0003:2179:0053.0023: probe with driver uclogic failed with error -71 [ 394.562395][ T8734] FAULT_INJECTION: forcing a failure. [ 394.562395][ T8734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.562484][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.4.868 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 394.562508][ T8734] Tainted: [L]=SOFTLOCKUP [ 394.562513][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.562521][ T8734] Call Trace: [ 394.562527][ T8734] [ 394.562534][ T8734] dump_stack_lvl+0xe8/0x150 [ 394.562565][ T8734] should_fail_ex+0x46b/0x600 [ 394.562591][ T8734] _copy_from_user+0x2d/0xb0 [ 394.562613][ T8734] kstrtouint_from_user+0xd6/0x180 [ 394.562641][ T8734] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 394.562664][ T8734] ? __lock_acquire+0x6df/0x2e40 [ 394.562687][ T8734] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 394.562719][ T8734] ? lock_acquire+0x115/0x350 [ 394.562744][ T8734] proc_fail_nth_write+0x8e/0x210 [ 394.562765][ T8734] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.562793][ T8734] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 394.562812][ T8734] vfs_write+0x29f/0xbb0 [ 394.562840][ T8734] ? __pfx_vfs_write+0x10/0x10 [ 394.562862][ T8734] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 394.562884][ T8734] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 394.562903][ T8734] ? mutex_lock_nested+0x152/0x1d0 [ 394.562924][ T8734] ? fdget_pos+0x252/0x320 [ 394.562950][ T8734] ksys_write+0x156/0x270 [ 394.562972][ T8734] ? __pfx_ksys_write+0x10/0x10 [ 394.563001][ T8734] do_syscall_64+0x166/0x520 [ 394.563020][ T8734] ? trace_irq_disable+0x3b/0x140 [ 394.563040][ T8734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.563058][ T8734] ? clear_bhb_loop+0x70/0xc0 [ 394.563079][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.563105][ T8734] RIP: 0033:0x7f12e795e98e [ 394.563123][ T8734] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.563142][ T8734] RSP: 002b:00007f12e5bd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 394.563161][ T8734] RAX: ffffffffffffffda RBX: 00007f12e5bd56c0 RCX: 00007f12e795e98e [ 394.563174][ T8734] RDX: 0000000000000001 RSI: 00007f12e5bd50a0 RDI: 0000000000000005 [ 394.563185][ T8734] RBP: 00007f12e5bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 394.563196][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.563207][ T8734] R13: 00007f12e7c26128 R14: 00007f12e7c26090 R15: 00007ffed68cae48 [ 394.563237][ T8734] [ 394.910723][ T5697] usb 1-1: USB disconnect, device number 25 [ 395.334129][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 395.346061][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.872'. [ 395.443785][ T8747] 9p: Bad value for 'wfdno' [ 397.527034][ T5697] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 397.703567][ T5697] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 397.719787][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 397.722978][ T5697] usb 1-1: config 0 has no interface number 0 [ 397.723032][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 397.723059][ T5697] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.723082][ T5697] usb 1-1: config 0 interface 1 has no altsetting 0 [ 397.723116][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.725465][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 397.742174][ T8775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 397.793106][ T5697] usb 1-1: config 0 descriptor?? [ 398.345486][ T8783] FAULT_INJECTION: forcing a failure. [ 398.345486][ T8783] name failslab, interval 1, probability 0, space 0, times 0 [ 398.347177][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.1.886 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.347210][ T8783] Tainted: [L]=SOFTLOCKUP [ 398.347226][ T8783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.347237][ T8783] Call Trace: [ 398.347245][ T8783] [ 398.347254][ T8783] dump_stack_lvl+0xe8/0x150 [ 398.347292][ T8783] should_fail_ex+0x46b/0x600 [ 398.347318][ T8783] should_failslab+0xa8/0x100 [ 398.347346][ T8783] __kmalloc_noprof+0xfb/0x790 [ 398.347369][ T8783] ? tomoyo_encode+0x2ad/0x570 [ 398.347390][ T8783] ? tomoyo_encode+0x2ad/0x570 [ 398.347417][ T8783] tomoyo_encode+0x2ad/0x570 [ 398.347444][ T8783] tomoyo_realpath_from_path+0x5fa/0x640 [ 398.347476][ T8783] ? tomoyo_path_number_perm+0x219/0x5f0 [ 398.347495][ T8783] tomoyo_path_number_perm+0x246/0x5f0 [ 398.347518][ T8783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 398.347535][ T8783] ? __lock_acquire+0x6df/0x2e40 [ 398.347572][ T8783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 398.347591][ T8783] ? hook_file_ioctl+0x1f5/0x610 [ 398.347635][ T8783] ? __fget_files+0x2a/0x420 [ 398.347657][ T8783] ? __fget_files+0x2a/0x420 [ 398.347674][ T8783] ? __fget_files+0x3a8/0x420 [ 398.347690][ T8783] ? __fget_files+0x2a/0x420 [ 398.347711][ T8783] security_file_ioctl+0xc3/0x2a0 [ 398.347729][ T8783] __se_sys_ioctl+0x47/0x170 [ 398.347749][ T8783] do_syscall_64+0x166/0x520 [ 398.347766][ T8783] ? trace_irq_disable+0x3b/0x140 [ 398.347787][ T8783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.347806][ T8783] ? clear_bhb_loop+0x70/0xc0 [ 398.347829][ T8783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.347848][ T8783] RIP: 0033:0x7fd1a50be159 [ 398.347866][ T8783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.347885][ T8783] RSP: 002b:00007fd1a3316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 398.347906][ T8783] RAX: ffffffffffffffda RBX: 00007fd1a5345fa0 RCX: 00007fd1a50be159 [ 398.347919][ T8783] RDX: 0000200000002540 RSI: 00000000c048aeca RDI: 0000000000000005 [ 398.347932][ T8783] RBP: 00007fd1a3316090 R08: 0000000000000000 R09: 0000000000000000 [ 398.347943][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.347955][ T8783] R13: 00007fd1a5346038 R14: 00007fd1a5345fa0 R15: 00007ffc3c9733d8 [ 398.347986][ T8783] [ 398.349551][ T8783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 398.450423][ T8772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.458428][ T8772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.735633][ T5697] uclogic 0003:2179:0053.0024: failed retrieving string descriptor #100: -71 [ 398.746255][ T5697] uclogic 0003:2179:0053.0024: failed retrieving pen parameters: -71 [ 398.746280][ T5697] uclogic 0003:2179:0053.0024: pen probing failed: -71 [ 398.746298][ T5697] uclogic 0003:2179:0053.0024: failed probing parameters: -71 [ 398.746403][ T5697] uclogic 0003:2179:0053.0024: probe with driver uclogic failed with error -71 [ 398.838812][ T5697] usb 1-1: USB disconnect, device number 26 [ 399.167097][ T8787] FAULT_INJECTION: forcing a failure. [ 399.167097][ T8787] name failslab, interval 1, probability 0, space 0, times 0 [ 399.167796][ T8787] CPU: 0 UID: 0 PID: 8787 Comm: syz.1.887 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 399.167823][ T8787] Tainted: [L]=SOFTLOCKUP [ 399.167829][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.167840][ T8787] Call Trace: [ 399.167848][ T8787] [ 399.167856][ T8787] dump_stack_lvl+0xe8/0x150 [ 399.167886][ T8787] should_fail_ex+0x46b/0x600 [ 399.167912][ T8787] should_failslab+0xa8/0x100 [ 399.167938][ T8787] __kmalloc_noprof+0xfb/0x790 [ 399.167960][ T8787] ? tomoyo_encode+0x2ad/0x570 [ 399.167980][ T8787] ? tomoyo_encode+0x2ad/0x570 [ 399.168006][ T8787] tomoyo_encode+0x2ad/0x570 [ 399.168031][ T8787] tomoyo_realpath_from_path+0x5fa/0x640 [ 399.168062][ T8787] ? tomoyo_path_number_perm+0x219/0x5f0 [ 399.168080][ T8787] tomoyo_path_number_perm+0x246/0x5f0 [ 399.168101][ T8787] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 399.168118][ T8787] ? __lock_acquire+0x6df/0x2e40 [ 399.168152][ T8787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 399.168171][ T8787] ? hook_file_ioctl+0x1f5/0x610 [ 399.168214][ T8787] ? __fget_files+0x2a/0x420 [ 399.168234][ T8787] ? __fget_files+0x2a/0x420 [ 399.168249][ T8787] ? __fget_files+0x3a8/0x420 [ 399.168265][ T8787] ? __fget_files+0x2a/0x420 [ 399.168286][ T8787] security_file_ioctl+0xc3/0x2a0 [ 399.168307][ T8787] __se_sys_ioctl+0x47/0x170 [ 399.168331][ T8787] do_syscall_64+0x166/0x520 [ 399.168348][ T8787] ? trace_irq_disable+0x3b/0x140 [ 399.168369][ T8787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.168387][ T8787] ? clear_bhb_loop+0x70/0xc0 [ 399.168409][ T8787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.168426][ T8787] RIP: 0033:0x7fd1a50be159 [ 399.168443][ T8787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.168458][ T8787] RSP: 002b:00007fd1a3316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 399.168477][ T8787] RAX: ffffffffffffffda RBX: 00007fd1a5345fa0 RCX: 00007fd1a50be159 [ 399.168490][ T8787] RDX: 0000200000000080 RSI: 000000008010640b RDI: 0000000000000003 [ 399.168502][ T8787] RBP: 00007fd1a3316090 R08: 0000000000000000 R09: 0000000000000000 [ 399.168515][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.168526][ T8787] R13: 00007fd1a5346038 R14: 00007fd1a5345fa0 R15: 00007ffc3c9733d8 [ 399.168556][ T8787] [ 399.172567][ T8787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 400.793370][ T6201] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 401.018640][ T6201] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 401.021005][ T6201] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 401.021075][ T6201] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 401.021116][ T6201] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.351870][ T8810] netlink: 28 bytes leftover after parsing attributes in process `syz.0.897'. [ 401.828604][ T6201] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 403.185694][ T6201] usb 4-1: USB disconnect, device number 19 [ 403.196566][ T5916] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 403.370770][ T5916] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 403.372300][ T8835] FAULT_INJECTION: forcing a failure. [ 403.372300][ T8835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.372335][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.2.902 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.372361][ T8835] Tainted: [L]=SOFTLOCKUP [ 403.372367][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.372378][ T8835] Call Trace: [ 403.372386][ T8835] [ 403.372392][ T8835] dump_stack_lvl+0xe8/0x150 [ 403.372423][ T8835] should_fail_ex+0x46b/0x600 [ 403.372446][ T8835] _copy_from_user+0x2d/0xb0 [ 403.372467][ T8835] kstrtouint_from_user+0xd6/0x180 [ 403.372495][ T8835] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 403.372517][ T8835] ? __lock_acquire+0x6df/0x2e40 [ 403.372540][ T8835] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 403.372568][ T8835] ? lock_acquire+0x115/0x350 [ 403.372592][ T8835] proc_fail_nth_write+0x8e/0x210 [ 403.372611][ T8835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.372640][ T8835] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 403.372660][ T8835] vfs_write+0x29f/0xbb0 [ 403.372688][ T8835] ? __pfx_vfs_write+0x10/0x10 [ 403.372708][ T8835] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 403.372731][ T8835] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 403.372750][ T8835] ? mutex_lock_nested+0x152/0x1d0 [ 403.372772][ T8835] ? fdget_pos+0x252/0x320 [ 403.372797][ T8835] ksys_write+0x156/0x270 [ 403.372818][ T8835] ? __pfx_ksys_write+0x10/0x10 [ 403.372848][ T8835] do_syscall_64+0x166/0x520 [ 403.372866][ T8835] ? trace_irq_disable+0x3b/0x140 [ 403.372887][ T8835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.372904][ T8835] ? clear_bhb_loop+0x70/0xc0 [ 403.372926][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.372943][ T8835] RIP: 0033:0x7f9001fde98e [ 403.372961][ T8835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 403.372976][ T8835] RSP: 002b:00007f9000275fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.372996][ T8835] RAX: ffffffffffffffda RBX: 00007f90002766c0 RCX: 00007f9001fde98e [ 403.373009][ T8835] RDX: 0000000000000001 RSI: 00007f90002760a0 RDI: 0000000000000005 [ 403.373020][ T8835] RBP: 00007f9000276090 R08: 0000000000000000 R09: 0000000000000000 [ 403.373031][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.373042][ T8835] R13: 00007f90022a6038 R14: 00007f90022a5fa0 R15: 00007fffb1721fd8 [ 403.373073][ T8835] [ 403.406227][ T5916] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 403.406253][ T5916] usb 2-1: config 0 has no interface number 0 [ 403.406292][ T5916] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 403.406318][ T5916] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.406340][ T5916] usb 2-1: config 0 interface 1 has no altsetting 0 [ 403.406371][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.712435][ T5916] usb 2-1: config 0 descriptor?? [ 404.405040][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.416766][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.819793][ T5916] uclogic 0003:2179:0053.0025: failed retrieving string descriptor #100: -71 [ 405.823111][ T5916] uclogic 0003:2179:0053.0025: failed retrieving pen parameters: -71 [ 405.823133][ T5916] uclogic 0003:2179:0053.0025: pen probing failed: -71 [ 405.823149][ T5916] uclogic 0003:2179:0053.0025: failed probing parameters: -71 [ 405.823258][ T5916] uclogic 0003:2179:0053.0025: probe with driver uclogic failed with error -71 [ 405.898608][ T5916] usb 2-1: USB disconnect, device number 23 [ 406.065857][ T8864] syzkaller0: entered promiscuous mode [ 406.071583][ T8864] syzkaller0: entered allmulticast mode [ 406.375481][ T5697] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 406.546251][ T5697] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 406.548010][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.548067][ T5697] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 406.548087][ T5697] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 406.548130][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.646133][ T5697] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 408.710293][ T5329] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 408.867193][ T5329] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 408.881380][ T5329] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.881408][ T5329] usb 1-1: config 0 has no interface number 0 [ 408.881453][ T5329] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 408.881481][ T5329] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.881504][ T5329] usb 1-1: config 0 interface 1 has no altsetting 0 [ 408.881537][ T5329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.990024][ T5329] usb 1-1: config 0 descriptor?? [ 409.198189][ T5697] usb 2-1: USB disconnect, device number 24 [ 409.663753][ T8900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.666412][ T8900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.662932][ T5329] uclogic 0003:2179:0053.0026: failed retrieving string descriptor #100: -71 [ 411.675201][ T5329] uclogic 0003:2179:0053.0026: failed retrieving pen parameters: -71 [ 411.675276][ T5329] uclogic 0003:2179:0053.0026: pen probing failed: -71 [ 411.679997][ T5329] uclogic 0003:2179:0053.0026: failed probing parameters: -71 [ 411.948187][ T5329] uclogic 0003:2179:0053.0026: probe with driver uclogic failed with error -71 [ 412.139127][ T5329] usb 1-1: USB disconnect, device number 27 [ 412.745446][ T5329] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 412.886132][ T5329] usb 2-1: device descriptor read/64, error -71 [ 412.975503][ T1251] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 413.126555][ T5329] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 413.136290][ T1251] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 413.147585][ T1251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.147686][ T1251] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 413.147709][ T1251] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 413.147747][ T1251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.226316][ T1251] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19! [ 413.266253][ T5329] usb 2-1: device descriptor read/64, error -71 [ 413.377269][ T5329] usb usb2-port1: attempt power cycle [ 413.614997][ T8966] kvm [8965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x100000010 [ 413.653302][ T8966] kvm [8965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000004 [ 413.653825][ T8966] kvm [8965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 413.657954][ T8966] kvm [8965]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 413.683144][ T8969] syzkaller0: entered promiscuous mode [ 413.689684][ T8969] syzkaller0: entered allmulticast mode [ 413.735465][ T5329] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 413.756217][ T5329] usb 2-1: device descriptor read/8, error -71 [ 414.025740][ T5329] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 414.046150][ T5329] usb 2-1: device descriptor read/8, error -71 [ 414.155879][ T5329] usb usb2-port1: unable to enumerate USB device [ 414.636214][ T1251] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 415.579940][ T1251] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 415.587826][ T1251] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.587891][ T1251] usb 3-1: config 0 has no interface number 0 [ 415.587949][ T1251] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 415.587980][ T1251] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.588005][ T1251] usb 3-1: config 0 interface 1 has no altsetting 0 [ 415.588040][ T1251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.609719][ T1251] usb 3-1: config 0 descriptor?? [ 415.975042][ T197] usb 4-1: USB disconnect, device number 20 [ 416.447497][ T8977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.454782][ T8977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.900305][ T1251] uclogic 0003:2179:0053.0027: failed retrieving string descriptor #100: -71 [ 416.911344][ T1251] uclogic 0003:2179:0053.0027: failed retrieving pen parameters: -71 [ 416.912274][ T1251] uclogic 0003:2179:0053.0027: pen probing failed: -71 [ 416.914747][ T1251] uclogic 0003:2179:0053.0027: failed probing parameters: -71 [ 417.158291][ T1251] uclogic 0003:2179:0053.0027: probe with driver uclogic failed with error -71 [ 417.742957][ T1251] usb 3-1: USB disconnect, device number 16 [ 418.357047][ T1251] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 418.378811][ T9012] syzkaller0: entered promiscuous mode [ 418.384802][ T9012] syzkaller0: entered allmulticast mode [ 418.516651][ T1251] usb 2-1: Using ep0 maxpacket: 8 [ 418.523991][ T1251] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 418.547070][ T1251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.556636][ T1251] usb 2-1: Product: syz [ 418.556659][ T1251] usb 2-1: Manufacturer: syz [ 418.556674][ T1251] usb 2-1: SerialNumber: syz [ 418.587591][ T1251] usb 2-1: config 0 descriptor?? [ 418.896764][ T1251] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 420.888620][ T1251] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 420.941944][ T1251] usb 2-1: USB disconnect, device number 29 [ 422.337417][ T9040] FAULT_INJECTION: forcing a failure. [ 422.337417][ T9040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.337661][ T9040] CPU: 1 UID: 0 PID: 9040 Comm: syz.2.965 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 422.337689][ T9040] Tainted: [L]=SOFTLOCKUP [ 422.337696][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 422.337712][ T9040] Call Trace: [ 422.337720][ T9040] [ 422.337728][ T9040] dump_stack_lvl+0xe8/0x150 [ 422.337769][ T9040] should_fail_ex+0x46b/0x600 [ 422.337795][ T9040] _copy_from_user+0x2d/0xb0 [ 422.337824][ T9040] core_sys_select+0x673/0xb40 [ 422.337867][ T9040] ? __pfx_core_sys_select+0x10/0x10 [ 422.337914][ T9040] ? __pfx_timespec64_add_safe+0x10/0x10 [ 422.337949][ T9040] __se_sys_select+0x12c/0x2d0 [ 422.337973][ T9040] ? fput+0xa0/0xd0 [ 422.338000][ T9040] ? __pfx___se_sys_select+0x10/0x10 [ 422.338025][ T9040] ? __pfx_ksys_write+0x10/0x10 [ 422.338050][ T9040] ? __x64_sys_select+0x20/0xc0 [ 422.338076][ T9040] do_syscall_64+0x166/0x520 [ 422.338095][ T9040] ? trace_irq_disable+0x3b/0x140 [ 422.338116][ T9040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.338135][ T9040] ? clear_bhb_loop+0x70/0xc0 [ 422.338156][ T9040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.338178][ T9040] RIP: 0033:0x7f900201e159 [ 422.338197][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.338213][ T9040] RSP: 002b:00007f9000276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 422.338233][ T9040] RAX: ffffffffffffffda RBX: 00007f90022a5fa0 RCX: 00007f900201e159 [ 422.338247][ T9040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002a [ 422.338258][ T9040] RBP: 00007f9000276090 R08: 0000200000000440 R09: 0000000000000000 [ 422.338270][ T9040] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 422.338282][ T9040] R13: 00007f90022a6038 R14: 00007f90022a5fa0 R15: 00007fffb1721fd8 [ 422.338312][ T9040] [ 422.435566][ T6091] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 422.676582][ T6091] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 422.689630][ T6091] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.689686][ T6091] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 422.689717][ T6091] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 422.689760][ T6091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.797912][ T6091] cxacru 5-1:1.0: usbatm_usb_probe: bind failed: -19! [ 423.012013][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 423.021531][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 424.389114][ T197] usb 5-1: USB disconnect, device number 31 [ 424.902308][ T9063] syzkaller0: entered promiscuous mode [ 424.902384][ T9063] syzkaller0: entered allmulticast mode [ 427.228656][ T9082] jffs2: notice: (9082) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 427.675608][ T197] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 427.836390][ T197] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 427.852394][ T197] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 427.862608][ T197] usb 1-1: config 0 has no interface number 0 [ 427.862665][ T197] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 427.862692][ T197] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.862714][ T197] usb 1-1: config 0 interface 1 has no altsetting 0 [ 427.862767][ T197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.970443][ T197] usb 1-1: config 0 descriptor?? [ 429.826561][ T9086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.846561][ T9086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.004591][ T197] uclogic 0003:2179:0053.0028: failed retrieving string descriptor #100: -71 [ 430.013600][ T197] uclogic 0003:2179:0053.0028: failed retrieving pen parameters: -71 [ 430.015382][ T197] uclogic 0003:2179:0053.0028: pen probing failed: -71 [ 430.022134][ T197] uclogic 0003:2179:0053.0028: failed probing parameters: -71 [ 430.022250][ T197] uclogic 0003:2179:0053.0028: probe with driver uclogic failed with error -71 [ 430.061490][ T197] usb 1-1: USB disconnect, device number 28 [ 430.347727][ T9109] FAULT_INJECTION: forcing a failure. [ 430.347727][ T9109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.348872][ T9109] CPU: 0 UID: 0 PID: 9109 Comm: syz.2.983 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 430.348901][ T9109] Tainted: [L]=SOFTLOCKUP [ 430.348908][ T9109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 430.348919][ T9109] Call Trace: [ 430.348927][ T9109] [ 430.348937][ T9109] dump_stack_lvl+0xe8/0x150 [ 430.348969][ T9109] should_fail_ex+0x46b/0x600 [ 430.348993][ T9109] _copy_to_user+0x31/0xb0 [ 430.349017][ T9109] simple_read_from_buffer+0xe1/0x170 [ 430.349042][ T9109] proc_fail_nth_read+0x1be/0x230 [ 430.349066][ T9109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.349091][ T9109] ? rw_verify_area+0x250/0x4d0 [ 430.349112][ T9109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 430.349130][ T9109] vfs_read+0x219/0xa90 [ 430.349157][ T9109] ? __pfx_vfs_read+0x10/0x10 [ 430.349179][ T9109] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 430.349202][ T9109] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 430.349222][ T9109] ? mutex_lock_nested+0x152/0x1d0 [ 430.349244][ T9109] ? fdget_pos+0x252/0x320 [ 430.349271][ T9109] ksys_read+0x156/0x270 [ 430.349293][ T9109] ? __pfx_ksys_read+0x10/0x10 [ 430.349324][ T9109] do_syscall_64+0x166/0x520 [ 430.349344][ T9109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.349362][ T9109] ? clear_bhb_loop+0x70/0xc0 [ 430.349391][ T9109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.349410][ T9109] RIP: 0033:0x7f9001fde98e [ 430.349428][ T9109] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 430.349443][ T9109] RSP: 002b:00007f9000233fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 430.349464][ T9109] RAX: ffffffffffffffda RBX: 00007f90002346c0 RCX: 00007f9001fde98e [ 430.349478][ T9109] RDX: 000000000000000f RSI: 00007f90002340a0 RDI: 0000000000000006 [ 430.349490][ T9109] RBP: 00007f9000234090 R08: 0000000000000000 R09: 0000000000000000 [ 430.349501][ T9109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.349512][ T9109] R13: 00007f90022a6218 R14: 00007f90022a6180 R15: 00007fffb1721fd8 [ 430.349544][ T9109] [ 432.109017][ T9132] syzkaller0: entered promiscuous mode [ 432.110670][ T9132] syzkaller0: entered allmulticast mode [ 432.112100][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 432.166757][ T9136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'. [ 432.561107][ T9144] netlink: 56 bytes leftover after parsing attributes in process `syz.3.996'. [ 432.574513][ T9144] netlink: 68 bytes leftover after parsing attributes in process `syz.3.996'. [ 432.736238][ T6201] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 433.776649][ T6201] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 433.787566][ T6201] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 433.795406][ T6201] usb 1-1: config 0 has no interface number 0 [ 433.795473][ T6201] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 433.795497][ T6201] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.795519][ T6201] usb 1-1: config 0 interface 1 has no altsetting 0 [ 433.795551][ T6201] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.860195][ T6201] usb 1-1: config 0 descriptor?? [ 434.509591][ T9141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.514873][ T9141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.738168][ T6201] uclogic 0003:2179:0053.0029: failed retrieving string descriptor #100: -71 [ 434.740075][ T6201] uclogic 0003:2179:0053.0029: failed retrieving pen parameters: -71 [ 434.740099][ T6201] uclogic 0003:2179:0053.0029: pen probing failed: -71 [ 434.740126][ T6201] uclogic 0003:2179:0053.0029: failed probing parameters: -71 [ 434.740232][ T6201] uclogic 0003:2179:0053.0029: probe with driver uclogic failed with error -71 [ 434.813566][ T6201] usb 1-1: USB disconnect, device number 29 [ 436.025765][ T9161] syzkaller1: entered promiscuous mode [ 436.025842][ T9161] syzkaller1: entered allmulticast mode [ 438.537150][ T49] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 438.686335][ T49] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 438.696971][ T49] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 438.696999][ T49] usb 4-1: config 0 has no interface number 0 [ 438.697044][ T49] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 438.697071][ T49] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.697094][ T49] usb 4-1: config 0 interface 1 has no altsetting 0 [ 438.697128][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.770078][ T49] usb 4-1: config 0 descriptor?? [ 440.203031][ T9190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.218673][ T9190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.380142][ T49] uclogic 0003:2179:0053.002A: failed retrieving string descriptor #100: -71 [ 440.392174][ T49] uclogic 0003:2179:0053.002A: failed retrieving pen parameters: -71 [ 440.392190][ T49] uclogic 0003:2179:0053.002A: pen probing failed: -71 [ 440.392199][ T49] uclogic 0003:2179:0053.002A: failed probing parameters: -71 [ 440.392263][ T49] uclogic 0003:2179:0053.002A: probe with driver uclogic failed with error -71 [ 440.456175][ T49] usb 4-1: USB disconnect, device number 21 [ 441.080194][ T9215] syzkaller1: entered promiscuous mode [ 441.080421][ T9215] syzkaller1: entered allmulticast mode [ 441.111708][ T9214] FAULT_INJECTION: forcing a failure. [ 441.111708][ T9214] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.115582][ T9214] CPU: 0 UID: 0 PID: 9214 Comm: syz.2.1004 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 441.115615][ T9214] Tainted: [L]=SOFTLOCKUP [ 441.115621][ T9214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 441.115632][ T9214] Call Trace: [ 441.115640][ T9214] [ 441.115649][ T9214] dump_stack_lvl+0xe8/0x150 [ 441.115680][ T9214] should_fail_ex+0x46b/0x600 [ 441.115705][ T9214] _copy_from_iter+0x1d3/0x1660 [ 441.115734][ T9214] ? __pfx__copy_from_iter+0x10/0x10 [ 441.115751][ T9214] ? lock_acquire+0x115/0x350 [ 441.115787][ T9214] tun_get_user+0x52f/0x44e0 [ 441.115807][ T9214] ? is_bpf_text_address+0x292/0x2b0 [ 441.115838][ T9214] ? __kernel_text_address+0xd/0x30 [ 441.115866][ T9214] ? __lock_acquire+0x6df/0x2e40 [ 441.115887][ T9214] ? __pfx_tun_get_user+0x10/0x10 [ 441.115909][ T9214] ? __lock_acquire+0x6df/0x2e40 [ 441.115932][ T9214] ? kstrtoull+0x137/0x1d0 [ 441.115973][ T9214] ? ref_tracker_alloc+0x353/0x4c0 [ 441.115996][ T9214] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 441.116018][ T9214] ? lock_acquire+0x115/0x350 [ 441.116038][ T9214] ? tun_get+0x1c/0x2f0 [ 441.116061][ T9214] ? tun_get+0x1c/0x2f0 [ 441.116079][ T9214] ? tun_get+0x1c/0x2f0 [ 441.116102][ T9214] tun_chr_write_iter+0x119/0x200 [ 441.116124][ T9214] vfs_write+0x61e/0xbb0 [ 441.116152][ T9214] ? __pfx_vfs_write+0x10/0x10 [ 441.116180][ T9214] ? __fget_files+0x2a/0x420 [ 441.116206][ T9214] ksys_write+0x156/0x270 [ 441.116228][ T9214] ? __pfx_ksys_write+0x10/0x10 [ 441.116256][ T9214] do_syscall_64+0x166/0x520 [ 441.116275][ T9214] ? trace_irq_disable+0x3b/0x140 [ 441.116298][ T9214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.116317][ T9214] ? clear_bhb_loop+0x70/0xc0 [ 441.116338][ T9214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.116356][ T9214] RIP: 0033:0x7f900201e159 [ 441.116373][ T9214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.116389][ T9214] RSP: 002b:00007f9000276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 441.116409][ T9214] RAX: ffffffffffffffda RBX: 00007f90022a5fa0 RCX: 00007f900201e159 [ 441.116423][ T9214] RDX: 00000000000000dc RSI: 00002000000003c0 RDI: 0000000000000003 [ 441.116434][ T9214] RBP: 00007f9000276090 R08: 0000000000000000 R09: 0000000000000000 [ 441.116446][ T9214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.116456][ T9214] R13: 00007f90022a6038 R14: 00007f90022a5fa0 R15: 00007fffb1721fd8 [ 441.116483][ T9214] [ 441.755773][ T197] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 441.915601][ T197] usb 4-1: Using ep0 maxpacket: 8 [ 441.916911][ T197] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 441.932877][ T197] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 441.932959][ T197] usb 4-1: Product: syz [ 441.932973][ T197] usb 4-1: Manufacturer: syz [ 441.932986][ T197] usb 4-1: SerialNumber: syz [ 441.953778][ T197] usb 4-1: config 0 descriptor?? [ 441.975283][ T197] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 442.206945][ T9224] FAULT_INJECTION: forcing a failure. [ 442.206945][ T9224] name failslab, interval 1, probability 0, space 0, times 0 [ 442.215644][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.1.1022 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 442.215677][ T9224] Tainted: [L]=SOFTLOCKUP [ 442.215684][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 442.215695][ T9224] Call Trace: [ 442.215702][ T9224] [ 442.215710][ T9224] dump_stack_lvl+0xe8/0x150 [ 442.215742][ T9224] should_fail_ex+0x46b/0x600 [ 442.215767][ T9224] should_failslab+0xa8/0x100 [ 442.215795][ T9224] __kmalloc_noprof+0xfb/0x790 [ 442.215828][ T9224] ? tomoyo_encode+0x2ad/0x570 [ 442.215848][ T9224] ? tomoyo_encode+0x2ad/0x570 [ 442.215873][ T9224] tomoyo_encode+0x2ad/0x570 [ 442.215898][ T9224] tomoyo_realpath_from_path+0x5fa/0x640 [ 442.215929][ T9224] ? tomoyo_path_number_perm+0x219/0x5f0 [ 442.215948][ T9224] tomoyo_path_number_perm+0x246/0x5f0 [ 442.215968][ T9224] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 442.215986][ T9224] ? __lock_acquire+0x6df/0x2e40 [ 442.216022][ T9224] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 442.216042][ T9224] ? hook_file_ioctl+0x1f5/0x610 [ 442.216083][ T9224] ? __fget_files+0x2a/0x420 [ 442.216105][ T9224] ? __fget_files+0x2a/0x420 [ 442.216121][ T9224] ? __fget_files+0x3a8/0x420 [ 442.216140][ T9224] ? __fget_files+0x2a/0x420 [ 442.216162][ T9224] security_file_ioctl+0xc3/0x2a0 [ 442.216183][ T9224] __se_sys_ioctl+0x47/0x170 [ 442.216208][ T9224] do_syscall_64+0x166/0x520 [ 442.216227][ T9224] ? trace_irq_disable+0x3b/0x140 [ 442.216248][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.216266][ T9224] ? clear_bhb_loop+0x70/0xc0 [ 442.216289][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.216306][ T9224] RIP: 0033:0x7fd1a50be159 [ 442.216359][ T9224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.216374][ T9224] RSP: 002b:00007fd1a3316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.216394][ T9224] RAX: ffffffffffffffda RBX: 00007fd1a5345fa0 RCX: 00007fd1a50be159 [ 442.216407][ T9224] RDX: 0000200000000280 RSI: 00000000c0884123 RDI: 0000000000000005 [ 442.216419][ T9224] RBP: 00007fd1a3316090 R08: 0000000000000000 R09: 0000000000000000 [ 442.216430][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.216441][ T9224] R13: 00007fd1a5346038 R14: 00007fd1a5345fa0 R15: 00007ffc3c9733d8 [ 442.216470][ T9224] [ 442.376865][ T9224] ERROR: Out of memory at tomoyo_realpath_from_path. [ 442.506569][ T197] gspca_sn9c2028: read1 error -110 [ 442.507048][ T197] gspca_sn9c2028: read1 error -32 [ 442.509189][ T197] gspca_sn9c2028: read1 error -32 [ 442.509293][ T197] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -32 [ 442.719888][ T9226] 9pnet_fd: Insufficient options for proto=fd [ 442.974342][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.989429][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.261507][ T5916] usb 4-1: USB disconnect, device number 22 [ 443.845590][ T49] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 444.007706][ T49] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 444.025118][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 444.025146][ T49] usb 3-1: config 0 has no interface number 0 [ 444.025190][ T49] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 444.025217][ T49] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.025239][ T49] usb 3-1: config 0 interface 1 has no altsetting 0 [ 444.025272][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.096914][ T49] usb 3-1: config 0 descriptor?? [ 444.385822][ T9259] FAULT_INJECTION: forcing a failure. [ 444.385822][ T9259] name failslab, interval 1, probability 0, space 0, times 0 [ 444.399661][ T9259] CPU: 1 UID: 0 PID: 9259 Comm: syz.3.1033 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 444.399692][ T9259] Tainted: [L]=SOFTLOCKUP [ 444.399699][ T9259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.399709][ T9259] Call Trace: [ 444.399716][ T9259] [ 444.399723][ T9259] dump_stack_lvl+0xe8/0x150 [ 444.399758][ T9259] should_fail_ex+0x46b/0x600 [ 444.399782][ T9259] should_failslab+0xa8/0x100 [ 444.399808][ T9259] __kmalloc_noprof+0xfb/0x790 [ 444.399830][ T9259] ? bpf_test_init+0x9f/0x150 [ 444.399850][ T9259] ? bpf_test_init+0x9f/0x150 [ 444.399878][ T9259] bpf_test_init+0x9f/0x150 [ 444.399903][ T9259] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 444.399939][ T9259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 444.399965][ T9259] ? __fget_files+0x2a/0x420 [ 444.399986][ T9259] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 444.400010][ T9259] bpf_prog_test_run+0x2cb/0x340 [ 444.400073][ T9259] __sys_bpf+0xa22/0xd90 [ 444.400103][ T9259] ? __pfx___sys_bpf+0x10/0x10 [ 444.400127][ T9259] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 444.400152][ T9259] ? rt_mutex_slowunlock+0x219/0x460 [ 444.400194][ T9259] ? ksys_write+0x248/0x270 [ 444.400217][ T9259] ? __pfx_ksys_write+0x10/0x10 [ 444.400240][ T9259] __x64_sys_bpf+0xba/0xd0 [ 444.400266][ T9259] do_syscall_64+0x166/0x520 [ 444.400285][ T9259] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.400303][ T9259] ? clear_bhb_loop+0x70/0xc0 [ 444.400326][ T9259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.400357][ T9259] RIP: 0033:0x7fb36117e159 [ 444.400375][ T9259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.400390][ T9259] RSP: 002b:00007fb35f3d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 444.400412][ T9259] RAX: ffffffffffffffda RBX: 00007fb361405fa0 RCX: 00007fb36117e159 [ 444.400425][ T9259] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 444.400437][ T9259] RBP: 00007fb35f3d6090 R08: 0000000000000000 R09: 0000000000000000 [ 444.400448][ T9259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.400469][ T9259] R13: 00007fb361406038 R14: 00007fb361405fa0 R15: 00007ffc4eebdbd8 [ 444.400500][ T9259] [ 444.766323][ T9247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.766979][ T9247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.175555][ T5603] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 445.325477][ T5603] usb 4-1: device descriptor read/64, error -71 [ 445.450981][ T9279] FAULT_INJECTION: forcing a failure. [ 445.450981][ T9279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.451668][ T9279] CPU: 0 UID: 0 PID: 9279 Comm: syz.0.1038 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 445.451696][ T9279] Tainted: [L]=SOFTLOCKUP [ 445.451703][ T9279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.451713][ T9279] Call Trace: [ 445.451721][ T9279] [ 445.451729][ T9279] dump_stack_lvl+0xe8/0x150 [ 445.451762][ T9279] should_fail_ex+0x46b/0x600 [ 445.451787][ T9279] _copy_from_user+0x2d/0xb0 [ 445.451809][ T9279] kstrtouint_from_user+0xd6/0x180 [ 445.451838][ T9279] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 445.451861][ T9279] ? __lock_acquire+0x6df/0x2e40 [ 445.451884][ T9279] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 445.451915][ T9279] ? lock_acquire+0x115/0x350 [ 445.451942][ T9279] proc_fail_nth_write+0x8e/0x210 [ 445.451962][ T9279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.451990][ T9279] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 445.452009][ T9279] vfs_write+0x29f/0xbb0 [ 445.452037][ T9279] ? __pfx_vfs_write+0x10/0x10 [ 445.452059][ T9279] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 445.452082][ T9279] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 445.452101][ T9279] ? mutex_lock_nested+0x152/0x1d0 [ 445.452122][ T9279] ? fdget_pos+0x252/0x320 [ 445.452149][ T9279] ksys_write+0x156/0x270 [ 445.452170][ T9279] ? __pfx_ksys_write+0x10/0x10 [ 445.452200][ T9279] do_syscall_64+0x166/0x520 [ 445.452219][ T9279] ? trace_irq_disable+0x3b/0x140 [ 445.452240][ T9279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.452259][ T9279] ? clear_bhb_loop+0x70/0xc0 [ 445.452281][ T9279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.452299][ T9279] RIP: 0033:0x7f9d9e86e98e [ 445.452316][ T9279] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.452331][ T9279] RSP: 002b:00007f9d9cae4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.452351][ T9279] RAX: ffffffffffffffda RBX: 00007f9d9cae56c0 RCX: 00007f9d9e86e98e [ 445.452365][ T9279] RDX: 0000000000000001 RSI: 00007f9d9cae50a0 RDI: 0000000000000004 [ 445.452377][ T9279] RBP: 00007f9d9cae5090 R08: 0000000000000000 R09: 0000000000000000 [ 445.452388][ T9279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.452399][ T9279] R13: 00007f9d9eb36128 R14: 00007f9d9eb36090 R15: 00007ffe505a5868 [ 445.452429][ T9279] [ 445.588752][ T5603] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 445.725551][ T5603] usb 4-1: device descriptor read/64, error -71 [ 445.836653][ T5603] usb usb4-port1: attempt power cycle [ 446.176480][ T5603] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 446.233024][ T5603] usb 4-1: device descriptor read/8, error -71 [ 446.415641][ T6091] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 446.511336][ T5603] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 446.526966][ T5603] usb 4-1: device descriptor read/8, error -71 [ 446.577414][ T6091] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 446.590126][ T6091] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 446.592168][ T6091] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 446.592215][ T6091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.614905][ T49] uclogic 0003:2179:0053.002B: failed retrieving string descriptor #100: -71 [ 446.614974][ T49] uclogic 0003:2179:0053.002B: failed retrieving pen parameters: -71 [ 446.614991][ T49] uclogic 0003:2179:0053.002B: pen probing failed: -71 [ 446.615007][ T49] uclogic 0003:2179:0053.002B: failed probing parameters: -71 [ 446.615109][ T49] uclogic 0003:2179:0053.002B: probe with driver uclogic failed with error -71 [ 446.691801][ T49] usb 3-1: USB disconnect, device number 17 [ 446.695751][ T5603] usb usb4-port1: unable to enumerate USB device [ 447.002447][ T9301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1043'. [ 447.005072][ T9294] syzkaller1: entered promiscuous mode [ 447.005101][ T9294] syzkaller1: entered allmulticast mode [ 447.188345][ T36] audit: type=1326 audit(1788078796.174:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.188448][ T36] audit: type=1326 audit(1788078796.174:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.188482][ T36] audit: type=1326 audit(1788078796.174:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.188529][ T36] audit: type=1326 audit(1788078796.174:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.190112][ T36] audit: type=1326 audit(1788078796.174:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.190155][ T36] audit: type=1326 audit(1788078796.174:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.190193][ T36] audit: type=1326 audit(1788078796.174:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.191552][ T36] audit: type=1326 audit(1788078796.174:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.192472][ T36] audit: type=1326 audit(1788078796.174:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.192515][ T36] audit: type=1326 audit(1788078796.174:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9300 comm="syz.2.1043" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f900201e159 code=0x7ffc0000 [ 447.485564][ T5603] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 447.496198][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.496331][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.581323][ T6091] gud 5-1:1.0: Failed to get connectors (error=-71) [ 447.588351][ T6091] gud 5-1:1.0: probe with driver gud failed with error -71 [ 447.637374][ T5603] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 447.641475][ T5603] usb 3-1: config 1 has an invalid descriptor of length 125, skipping remainder of the config [ 447.641529][ T5603] usb 3-1: config 1 interface 0 altsetting 37 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.641556][ T5603] usb 3-1: config 1 interface 0 has no altsetting 0 [ 447.649841][ T5603] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.649868][ T5603] usb 3-1: Product: syz [ 447.649882][ T5603] usb 3-1: Manufacturer: syz [ 447.649896][ T5603] usb 3-1: SerialNumber: syz [ 447.716499][ T6091] usb 5-1: USB disconnect, device number 32 [ 448.313461][ T5603] usb 3-1: USB disconnect, device number 18 [ 448.386840][ T9316] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.1047' sets config #0 [ 449.416995][ T197] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 449.587793][ T197] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 449.590328][ T197] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 449.590355][ T197] usb 3-1: config 0 has no interface number 0 [ 449.590400][ T197] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 449.590427][ T197] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.590450][ T197] usb 3-1: config 0 interface 1 has no altsetting 0 [ 449.590483][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.614194][ T197] usb 3-1: config 0 descriptor?? [ 450.089304][ T9351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1056'. [ 451.124739][ T9341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.146636][ T9341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.755577][ T5603] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 451.919664][ T5603] usb 5-1: New USB device found, idVendor=9710, idProduct=7840, bcdDevice= 0.00 [ 451.924795][ T5603] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 451.925786][ T5603] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 451.936824][ T5603] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.936852][ T5603] usb 5-1: Product: syz [ 451.937577][ T5603] usb 5-1: Manufacturer: syz [ 451.937594][ T5603] usb 5-1: SerialNumber: syz [ 452.196455][ T5603] mos7840 5-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 452.561412][ T5603] mos7840 ttyUSB0: probe with driver mos7840 failed with error -71 [ 452.666266][ T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 452.688671][ T197] uclogic 0003:2179:0053.002C: failed retrieving string descriptor #100: -71 [ 452.688818][ T197] uclogic 0003:2179:0053.002C: failed retrieving pen parameters: -71 [ 452.688835][ T197] uclogic 0003:2179:0053.002C: pen probing failed: -71 [ 452.688848][ T197] uclogic 0003:2179:0053.002C: failed probing parameters: -71 [ 452.688941][ T197] uclogic 0003:2179:0053.002C: probe with driver uclogic failed with error -71 [ 452.721919][ T197] usb 3-1: USB disconnect, device number 19 [ 452.740478][ T5603] mos7840 ttyUSB1: probe with driver mos7840 failed with error -71 [ 452.757039][ T5603] mos7840 ttyUSB2: probe with driver mos7840 failed with error -71 [ 452.826269][ T31] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 452.939969][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 452.950236][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.950265][ T31] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 452.950294][ T31] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 452.950336][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.986682][ T5603] mos7840 ttyUSB3: probe with driver mos7840 failed with error -71 [ 453.046408][ T31] cxacru_cm: 81 callbacks suppressed [ 453.053382][ T31] cxacru 1-1:1.0: submit of read urb for cm 0x90 failed (-90) [ 453.061373][ T31] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 453.061585][ T31] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 453.178812][ T5603] usb 5-1: USB disconnect, device number 33 [ 453.409182][ T5603] mos7840 5-1:1.0: device disconnected [ 454.482945][ T9398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1069'. [ 455.423013][ T49] usb 1-1: USB disconnect, device number 30 [ 455.900088][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1073'. [ 456.055951][ T49] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 456.226577][ T49] usb 3-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 456.242962][ T49] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 456.245117][ T49] usb 3-1: config 0 has no interface number 0 [ 456.245172][ T49] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.245199][ T49] usb 3-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.245222][ T49] usb 3-1: config 0 interface 1 has no altsetting 0 [ 456.245440][ T49] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.313504][ T49] usb 3-1: config 0 descriptor?? [ 457.964433][ T9437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.970003][ T9437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.359883][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1082'. [ 460.025588][ T49] uclogic 0003:2179:0053.002D: failed retrieving string descriptor #100: -71 [ 460.034749][ T49] uclogic 0003:2179:0053.002D: failed retrieving pen parameters: -71 [ 460.034775][ T49] uclogic 0003:2179:0053.002D: pen probing failed: -71 [ 460.034793][ T49] uclogic 0003:2179:0053.002D: failed probing parameters: -71 [ 460.034902][ T49] uclogic 0003:2179:0053.002D: probe with driver uclogic failed with error -71 [ 460.114752][ T49] usb 3-1: USB disconnect, device number 20 [ 460.327298][ T9455] FAULT_INJECTION: forcing a failure. [ 460.327298][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.340815][ T9455] CPU: 1 UID: 0 PID: 9455 Comm: syz.4.1088 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 460.340846][ T9455] Tainted: [L]=SOFTLOCKUP [ 460.340852][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.340863][ T9455] Call Trace: [ 460.340870][ T9455] [ 460.340878][ T9455] dump_stack_lvl+0xe8/0x150 [ 460.340911][ T9455] should_fail_ex+0x46b/0x600 [ 460.340937][ T9455] _copy_to_iter+0x404/0x1810 [ 460.340970][ T9455] ? __pfx__copy_to_iter+0x10/0x10 [ 460.340997][ T9455] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 460.341021][ T9455] copy_page_to_iter+0x23f/0x330 [ 460.341053][ T9455] shmem_file_read_iter+0x4f3/0x8a0 [ 460.341093][ T9455] do_iter_readv_writev+0x624/0x8d0 [ 460.341116][ T9455] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 460.341145][ T9455] ? rw_verify_area+0x250/0x4d0 [ 460.341168][ T9455] vfs_readv+0x293/0x850 [ 460.341200][ T9455] ? __pfx_vfs_readv+0x10/0x10 [ 460.341237][ T9455] ? __fget_files+0x2a/0x420 [ 460.341261][ T9455] ? __fget_files+0x3a8/0x420 [ 460.341277][ T9455] ? __fget_files+0x2a/0x420 [ 460.341303][ T9455] __x64_sys_preadv+0x19f/0x2c0 [ 460.341326][ T9455] ? __pfx___x64_sys_preadv+0x10/0x10 [ 460.341358][ T9455] do_syscall_64+0x166/0x520 [ 460.341378][ T9455] ? trace_irq_disable+0x3b/0x140 [ 460.341398][ T9455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.341416][ T9455] ? clear_bhb_loop+0x70/0xc0 [ 460.341438][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.341456][ T9455] RIP: 0033:0x7f12e799e159 [ 460.341474][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.341490][ T9455] RSP: 002b:00007f12e5bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 460.341510][ T9455] RAX: ffffffffffffffda RBX: 00007f12e7c26090 RCX: 00007f12e799e159 [ 460.341524][ T9455] RDX: 000000000000003e RSI: 00002000000015c0 RDI: 0000000000000005 [ 460.341536][ T9455] RBP: 00007f12e5bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 460.341546][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.341558][ T9455] R13: 00007f12e7c26128 R14: 00007f12e7c26090 R15: 00007ffed68cae48 [ 460.341587][ T9455] [ 460.715204][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 460.731792][ T9457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 462.847201][ T9484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1094'. [ 463.695182][ T9493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1098'. [ 463.737532][ T9490] device-mapper: ioctl: Invalid ioctl structure: uuid À, name , dev 7b [ 463.962791][ T9493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 464.287647][ T9497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 464.338334][ T31] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 464.414115][ T9497] bond1: (slave bond2): Enslaving as an active interface with an up link [ 464.499435][ T31] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 464.509458][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 464.511093][ T31] usb 1-1: config 0 has no interface number 0 [ 464.511257][ T31] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 464.511287][ T31] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.511360][ T31] usb 1-1: config 0 interface 1 has no altsetting 0 [ 464.511459][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.571407][ T31] usb 1-1: config 0 descriptor?? [ 464.930452][ T9515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 464.982566][ T9518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1103'. [ 465.711858][ T9502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.717821][ T9502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.153587][ T9507] syzkaller1: entered promiscuous mode [ 466.153681][ T9507] syzkaller1: entered allmulticast mode [ 466.483241][ T9529] jffs2: notice: (9529) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 467.167376][ T31] uclogic 0003:2179:0053.002E: failed retrieving string descriptor #100: -71 [ 467.176888][ T31] uclogic 0003:2179:0053.002E: failed retrieving pen parameters: -71 [ 467.176994][ T31] uclogic 0003:2179:0053.002E: pen probing failed: -71 [ 467.177044][ T31] uclogic 0003:2179:0053.002E: failed probing parameters: -71 [ 467.177409][ T31] uclogic 0003:2179:0053.002E: probe with driver uclogic failed with error -71 [ 467.443055][ T9541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1109'. [ 467.846349][ T31] usb 1-1: USB disconnect, device number 31 [ 468.167912][ T9548] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1114'. [ 469.154521][ T9552] null_blk: nullb1: using native zone append [ 469.403264][ T31] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 469.438409][ T9552] null_blk: disk nullb1 created [ 469.716324][ T31] usb 1-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 469.728843][ T31] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 469.728862][ T31] usb 1-1: config 0 has no interface number 0 [ 469.728887][ T31] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 469.728902][ T31] usb 1-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.728914][ T31] usb 1-1: config 0 interface 1 has no altsetting 0 [ 469.728933][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.431886][ T31] usb 1-1: config 0 descriptor?? [ 470.929673][ T9571] Bluetooth: hci0: unsupported parameter 255 [ 470.975383][ T9571] Bluetooth: hci0: unsupported parameter 255 [ 471.137453][ T9553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.142808][ T9553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.754519][ T9579] overlay: Bad value for 'nfs_export' [ 472.946270][ T5603] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 473.136974][ T5603] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 473.138546][ T5603] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 473.138571][ T5603] usb 5-1: config 0 has no interface number 0 [ 473.138614][ T5603] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 473.138640][ T5603] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.138662][ T5603] usb 5-1: config 0 interface 1 has no altsetting 0 [ 473.138693][ T5603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.167490][ T5603] usb 5-1: config 0 descriptor?? [ 473.310317][ T31] uclogic 0003:2179:0053.002F: failed retrieving string descriptor #100: -71 [ 473.310376][ T31] uclogic 0003:2179:0053.002F: failed retrieving pen parameters: -71 [ 473.310393][ T31] uclogic 0003:2179:0053.002F: pen probing failed: -71 [ 473.310410][ T31] uclogic 0003:2179:0053.002F: failed probing parameters: -71 [ 473.310513][ T31] uclogic 0003:2179:0053.002F: probe with driver uclogic failed with error -71 [ 473.421109][ T31] usb 1-1: USB disconnect, device number 32 [ 473.569072][ T5329] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 473.790317][ T5329] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 474.068545][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1125'. [ 474.518373][ T5329] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 474.518503][ T5329] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 474.518526][ T5329] usb 3-1: config 150 has no interface number 0 [ 474.518572][ T5329] usb 3-1: config 150 interface 204 has no altsetting 0 [ 474.547996][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.549667][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.552236][ T5329] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.552343][ T5329] usb 3-1: Product: syz [ 474.552369][ T5329] usb 3-1: Manufacturer: syz [ 474.552383][ T5329] usb 3-1: SerialNumber: syz [ 475.096999][ T9588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.109299][ T9588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.316152][ T5603] uclogic 0003:2179:0053.0030: failed retrieving string descriptor #100: -71 [ 476.316280][ T5603] uclogic 0003:2179:0053.0030: failed retrieving pen parameters: -71 [ 476.316300][ T5603] uclogic 0003:2179:0053.0030: pen probing failed: -71 [ 476.316319][ T5603] uclogic 0003:2179:0053.0030: failed probing parameters: -71 [ 476.316430][ T5603] uclogic 0003:2179:0053.0030: probe with driver uclogic failed with error -71 [ 476.347783][ T5603] usb 5-1: USB disconnect, device number 34 [ 476.629141][ T9621] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1131'. [ 476.646019][ T9621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 476.794155][ T9627] FAULT_INJECTION: forcing a failure. [ 476.794155][ T9627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.798305][ T9627] CPU: 0 UID: 0 PID: 9627 Comm: syz.1.1132 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.798339][ T9627] Tainted: [L]=SOFTLOCKUP [ 476.798346][ T9627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.798357][ T9627] Call Trace: [ 476.798365][ T9627] [ 476.798373][ T9627] dump_stack_lvl+0xe8/0x150 [ 476.798536][ T9627] should_fail_ex+0x46b/0x600 [ 476.798563][ T9627] _copy_from_iter+0x1d3/0x1660 [ 476.798586][ T9627] ? rcu_is_watching+0x16/0xb0 [ 476.798611][ T9627] ? trace_kmalloc+0x2a/0xf0 [ 476.798634][ T9627] ? __pfx__copy_from_iter+0x10/0x10 [ 476.798649][ T9627] ? netlink_sendmsg+0x5d4/0xb40 [ 476.798672][ T9627] ? netlink_sendmsg+0x5d4/0xb40 [ 476.798699][ T9627] ? netlink_sendmsg+0x650/0xb40 [ 476.798722][ T9627] ? skb_put+0x112/0x210 [ 476.798746][ T9627] netlink_sendmsg+0x6c0/0xb40 [ 476.798780][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.798807][ T9627] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 476.798832][ T9627] ? __kernel_text_address+0xd/0x30 [ 476.798853][ T9627] ? unwind_get_return_address+0x4d/0x90 [ 476.798877][ T9627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.798901][ T9627] sock_sendmsg_nosec+0x13a/0x180 [ 476.798952][ T9627] ____sys_sendmsg+0x565/0x870 [ 476.798985][ T9627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.799017][ T9627] ? import_iovec+0x73/0xa0 [ 476.799041][ T9627] ___sys_sendmsg+0x2a5/0x360 [ 476.799063][ T9627] ? __lock_acquire+0x6df/0x2e40 [ 476.799090][ T9627] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.799148][ T9627] ? __fget_files+0x2a/0x420 [ 476.799167][ T9627] ? __fget_files+0x3a8/0x420 [ 476.799195][ T9627] __x64_sys_sendmsg+0x1b7/0x290 [ 476.799220][ T9627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.799259][ T9627] do_syscall_64+0x166/0x520 [ 476.799279][ T9627] ? trace_irq_disable+0x3b/0x140 [ 476.799298][ T9627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.799316][ T9627] ? clear_bhb_loop+0x70/0xc0 [ 476.799334][ T9627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.799349][ T9627] RIP: 0033:0x7fd1a50be159 [ 476.799366][ T9627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.799382][ T9627] RSP: 002b:00007fd1a3316028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.799403][ T9627] RAX: ffffffffffffffda RBX: 00007fd1a5345fa0 RCX: 00007fd1a50be159 [ 476.799416][ T9627] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000003 [ 476.799428][ T9627] RBP: 00007fd1a3316090 R08: 0000000000000000 R09: 0000000000000000 [ 476.799440][ T9627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.799451][ T9627] R13: 00007fd1a5346038 R14: 00007fd1a5345fa0 R15: 00007ffc3c9733d8 [ 476.799476][ T9627] [ 476.987176][ T9625] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 477.284805][ T9632] netlink: 277 bytes leftover after parsing attributes in process `syz.3.1134'. [ 477.495591][ T6091] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 477.593011][ T9631] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 477.619889][ T5329] xr_serial 3-1:150.204: skipping garbage [ 477.620037][ T5329] xr_serial 3-1:150.204: xr_serial converter detected [ 477.626417][ T5329] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 477.626476][ T5329] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 477.656344][ T6091] usb 2-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 477.658252][ T6091] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 477.658277][ T6091] usb 2-1: config 0 has no interface number 0 [ 477.658317][ T6091] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 477.658345][ T6091] usb 2-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.658370][ T6091] usb 2-1: config 0 interface 1 has no altsetting 0 [ 477.658400][ T6091] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.721407][ T9629] ALSA: mixer_oss: invalid OSS volume '' [ 477.745490][ T6091] usb 2-1: config 0 descriptor?? [ 477.749480][ T5329] usb 3-1: USB disconnect, device number 21 [ 477.788470][ T5329] xr_serial 3-1:150.204: device disconnected [ 478.116053][ T9640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 478.141105][ T9640] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 478.191065][ T9640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 478.191158][ T9640] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 478.379561][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.445555][ T5329] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 478.578020][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.616136][ T5329] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 479.951366][ T5329] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.951605][ T5329] usb 4-1: config 0 has no interface number 0 [ 479.951646][ T5329] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.951670][ T5329] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.951691][ T5329] usb 4-1: config 0 interface 1 has no altsetting 0 [ 479.951829][ T5329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.203247][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 480.341657][ T5329] usb 4-1: config 0 descriptor?? [ 480.833395][ T9640] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 480.842508][ T9640] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 481.001048][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.016777][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.265208][ T9640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.265286][ T9640] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 481.351482][ T6091] uclogic 0003:2179:0053.0031: failed retrieving string descriptor #100: -71 [ 481.352251][ T6091] uclogic 0003:2179:0053.0031: failed retrieving pen parameters: -71 [ 481.352272][ T6091] uclogic 0003:2179:0053.0031: pen probing failed: -71 [ 481.352290][ T6091] uclogic 0003:2179:0053.0031: failed probing parameters: -71 [ 481.352417][ T6091] uclogic 0003:2179:0053.0031: probe with driver uclogic failed with error -71 [ 481.433740][ T6091] usb 2-1: USB disconnect, device number 30 [ 481.810726][ T9672] jffs2: notice: (9672) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 482.101243][ T9674] bond4 (unregistering): Released all slaves [ 482.638453][ T9685] FAULT_INJECTION: forcing a failure. [ 482.638453][ T9685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.638547][ T9685] CPU: 1 UID: 0 PID: 9685 Comm: syz.0.1149 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 482.638574][ T9685] Tainted: [L]=SOFTLOCKUP [ 482.638581][ T9685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 482.638592][ T9685] Call Trace: [ 482.638600][ T9685] [ 482.638610][ T9685] dump_stack_lvl+0xe8/0x150 [ 482.638642][ T9685] should_fail_ex+0x46b/0x600 [ 482.638669][ T9685] _copy_from_user+0x2d/0xb0 [ 482.638692][ T9685] kstrtouint_from_user+0xd6/0x180 [ 482.638720][ T9685] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 482.638753][ T9685] ? lock_acquire+0x115/0x350 [ 482.638779][ T9685] proc_fail_nth_write+0x8e/0x210 [ 482.638796][ T9685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 482.638915][ T9685] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 482.638945][ T9685] vfs_write+0x29f/0xbb0 [ 482.638965][ T9685] ? preempt_schedule_thunk+0x16/0x40 [ 482.638985][ T9685] ? __pfx_vfs_write+0x10/0x10 [ 482.638999][ T9685] ? preempt_schedule_thunk+0x16/0x40 [ 482.639019][ T9685] ? _raw_spin_unlock_irqrestore+0x76/0x80 [ 482.639036][ T9685] ? mutex_lock_nested+0x152/0x1d0 [ 482.639053][ T9685] ? fdget_pos+0x252/0x320 [ 482.639073][ T9685] ksys_write+0x156/0x270 [ 482.639090][ T9685] ? __pfx_ksys_write+0x10/0x10 [ 482.639114][ T9685] do_syscall_64+0x166/0x520 [ 482.639131][ T9685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.639146][ T9685] ? clear_bhb_loop+0x70/0xc0 [ 482.639163][ T9685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.639177][ T9685] RIP: 0033:0x7f9d9e86e98e [ 482.639192][ T9685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 482.639205][ T9685] RSP: 002b:00007f9d9cac3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 482.639222][ T9685] RAX: ffffffffffffffda RBX: 00007f9d9cac46c0 RCX: 00007f9d9e86e98e [ 482.639232][ T9685] RDX: 0000000000000001 RSI: 00007f9d9cac40a0 RDI: 0000000000000007 [ 482.639241][ T9685] RBP: 00007f9d9cac4090 R08: 0000000000000000 R09: 0000000000000000 [ 482.639251][ T9685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.639259][ T9685] R13: 00007f9d9eb36218 R14: 00007f9d9eb36180 R15: 00007ffe505a5868 [ 482.639282][ T9685] [ 482.815807][ T5329] uclogic 0003:2179:0053.0032: failed retrieving string descriptor #100: -71 [ 482.815873][ T5329] uclogic 0003:2179:0053.0032: failed retrieving pen parameters: -71 [ 482.815892][ T5329] uclogic 0003:2179:0053.0032: pen probing failed: -71 [ 482.815930][ T5329] uclogic 0003:2179:0053.0032: failed probing parameters: -71 [ 482.816037][ T5329] uclogic 0003:2179:0053.0032: probe with driver uclogic failed with error -71 [ 483.074192][ T5329] usb 4-1: USB disconnect, device number 27 [ 484.639247][ T9701] nbd0: detected capacity change from 0 to 63 [ 484.800302][ T5608] block nbd0: Receive control failed (result -104) [ 484.835518][ T197] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 484.986207][ T197] usb 4-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 485.003602][ T197] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 485.013867][ T197] usb 4-1: config 0 has no interface number 0 [ 485.013928][ T197] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 485.013956][ T197] usb 4-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.013980][ T197] usb 4-1: config 0 interface 1 has no altsetting 0 [ 485.014016][ T197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.070413][ T197] usb 4-1: config 0 descriptor?? [ 485.530207][ T9725] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1162'. [ 486.136220][ T9729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.136871][ T9729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.257819][ T9738] FAULT_INJECTION: forcing a failure. [ 487.257819][ T9738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.272091][ T9738] CPU: 0 UID: 0 PID: 9738 Comm: syz.2.1161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 487.272116][ T9738] Tainted: [L]=SOFTLOCKUP [ 487.272123][ T9738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 487.272134][ T9738] Call Trace: [ 487.272148][ T9738] [ 487.272157][ T9738] dump_stack_lvl+0xe8/0x150 [ 487.272180][ T9738] should_fail_ex+0x46b/0x600 [ 487.272195][ T9738] _copy_from_user+0x2d/0xb0 [ 487.272209][ T9738] kstrtouint_from_user+0xd6/0x180 [ 487.272226][ T9738] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 487.272240][ T9738] ? __lock_acquire+0x6df/0x2e40 [ 487.272254][ T9738] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 487.272273][ T9738] ? lock_acquire+0x115/0x350 [ 487.272288][ T9738] proc_fail_nth_write+0x8e/0x210 [ 487.272301][ T9738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 487.272317][ T9738] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 487.272328][ T9738] vfs_write+0x29f/0xbb0 [ 487.272352][ T9738] ? __pfx_vfs_write+0x10/0x10 [ 487.272372][ T9738] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 487.272393][ T9738] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 487.272410][ T9738] ? mutex_lock_nested+0x152/0x1d0 [ 487.272432][ T9738] ? fdget_pos+0x252/0x320 [ 487.272447][ T9738] ksys_write+0x156/0x270 [ 487.272459][ T9738] ? __pfx_ksys_write+0x10/0x10 [ 487.272476][ T9738] do_syscall_64+0x166/0x520 [ 487.272488][ T9738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.272499][ T9738] ? clear_bhb_loop+0x70/0xc0 [ 487.272512][ T9738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.272523][ T9738] RIP: 0033:0x7f9001fde98e [ 487.272535][ T9738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 487.272544][ T9738] RSP: 002b:00007f9000233fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 487.272556][ T9738] RAX: ffffffffffffffda RBX: 00007f90002346c0 RCX: 00007f9001fde98e [ 487.272564][ T9738] RDX: 0000000000000001 RSI: 00007f90002340a0 RDI: 0000000000000008 [ 487.272571][ T9738] RBP: 00007f9000234090 R08: 0000000000000000 R09: 0000000000000000 [ 487.272577][ T9738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.272583][ T9738] R13: 00007f90022a6218 R14: 00007f90022a6180 R15: 00007fffb1721fd8 [ 487.272600][ T9738] [ 491.359847][ T9751] FAULT_INJECTION: forcing a failure. [ 491.359847][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.359969][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.0.1166 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.359997][ T9751] Tainted: [L]=SOFTLOCKUP [ 491.360004][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.360015][ T9751] Call Trace: [ 491.360024][ T9751] [ 491.360033][ T9751] dump_stack_lvl+0xe8/0x150 [ 491.360063][ T9751] should_fail_ex+0x46b/0x600 [ 491.360089][ T9751] _copy_from_iter+0x1d3/0x1660 [ 491.360115][ T9751] ? trace_kmem_cache_alloc+0x29/0xe0 [ 491.360141][ T9751] ? __pfx__copy_from_iter+0x10/0x10 [ 491.360159][ T9751] ? __alloc_skb+0x27a/0x7a0 [ 491.360179][ T9751] ? __alloc_skb+0x27a/0x7a0 [ 491.360204][ T9751] ? netlink_sendmsg+0x650/0xb40 [ 491.360228][ T9751] ? skb_put+0x112/0x210 [ 491.360253][ T9751] netlink_sendmsg+0x6c0/0xb40 [ 491.360286][ T9751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.360313][ T9751] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 491.360339][ T9751] ? __kernel_text_address+0xd/0x30 [ 491.360359][ T9751] ? unwind_get_return_address+0x4d/0x90 [ 491.360381][ T9751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 491.360404][ T9751] sock_sendmsg_nosec+0x13a/0x180 [ 491.360426][ T9751] ____sys_sendmsg+0x565/0x870 [ 491.360457][ T9751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.360489][ T9751] ? import_iovec+0x73/0xa0 [ 491.360513][ T9751] ___sys_sendmsg+0x2a5/0x360 [ 491.360539][ T9751] ? __lock_acquire+0x6df/0x2e40 [ 491.360580][ T9751] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.360638][ T9751] ? __fget_files+0x2a/0x420 [ 491.360656][ T9751] ? __fget_files+0x3a8/0x420 [ 491.360683][ T9751] __x64_sys_sendmsg+0x1b7/0x290 [ 491.360709][ T9751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.360752][ T9751] do_syscall_64+0x166/0x520 [ 491.360772][ T9751] ? trace_irq_disable+0x3b/0x140 [ 491.360793][ T9751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.360812][ T9751] ? clear_bhb_loop+0x70/0xc0 [ 491.360834][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.360853][ T9751] RIP: 0033:0x7f9d9e8ae159 [ 491.360870][ T9751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.360886][ T9751] RSP: 002b:00007f9d9cb06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.360908][ T9751] RAX: ffffffffffffffda RBX: 00007f9d9eb35fa0 RCX: 00007f9d9e8ae159 [ 491.360921][ T9751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 491.360933][ T9751] RBP: 00007f9d9cb06090 R08: 0000000000000000 R09: 0000000000000000 [ 491.360945][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.360957][ T9751] R13: 00007f9d9eb36038 R14: 00007f9d9eb35fa0 R15: 00007ffe505a5868 [ 491.360987][ T9751] [ 491.512518][ T197] uclogic 0003:2179:0053.0033: failed retrieving string descriptor #100: -110 [ 491.512579][ T197] uclogic 0003:2179:0053.0033: failed retrieving pen parameters: -110 [ 491.512625][ T197] uclogic 0003:2179:0053.0033: pen probing failed: -110 [ 491.512641][ T197] uclogic 0003:2179:0053.0033: failed probing parameters: -110 [ 491.512751][ T197] uclogic 0003:2179:0053.0033: probe with driver uclogic failed with error -110 [ 492.136528][ T197] usb 4-1: USB disconnect, device number 28 [ 492.351372][ T9775] FAULT_INJECTION: forcing a failure. [ 492.351372][ T9775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.351418][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.0.1169 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 492.351443][ T9775] Tainted: [L]=SOFTLOCKUP [ 492.351449][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.351458][ T9775] Call Trace: [ 492.351466][ T9775] [ 492.351473][ T9775] dump_stack_lvl+0xe8/0x150 [ 492.351505][ T9775] should_fail_ex+0x46b/0x600 [ 492.351531][ T9775] _copy_from_user+0x2d/0xb0 [ 492.351553][ T9775] kstrtouint_from_user+0xd6/0x180 [ 492.351584][ T9775] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 492.351608][ T9775] ? __lock_acquire+0x6df/0x2e40 [ 492.351632][ T9775] ? trace_event_raw_event_btrfs_record_snapshot_destroy+0x260/0x3d0 [ 492.351665][ T9775] ? lock_acquire+0x115/0x350 [ 492.351691][ T9775] proc_fail_nth_write+0x8e/0x210 [ 492.351713][ T9775] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 492.351742][ T9775] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 492.351762][ T9775] vfs_write+0x29f/0xbb0 [ 492.351792][ T9775] ? __pfx_vfs_write+0x10/0x10 [ 492.351815][ T9775] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 492.351845][ T9775] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 492.351865][ T9775] ? mutex_lock_nested+0x152/0x1d0 [ 492.351888][ T9775] ? fdget_pos+0x252/0x320 [ 492.351915][ T9775] ksys_write+0x156/0x270 [ 492.351937][ T9775] ? __pfx_ksys_write+0x10/0x10 [ 492.351956][ T9775] ? __pfx_usbdev_ioctl+0x10/0x10 [ 492.351991][ T9775] do_syscall_64+0x166/0x520 [ 492.352009][ T9775] ? trace_irq_disable+0x3b/0x140 [ 492.352030][ T9775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.352051][ T9775] ? clear_bhb_loop+0x70/0xc0 [ 492.352072][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.352090][ T9775] RIP: 0033:0x7f9d9e86e98e [ 492.352107][ T9775] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.352123][ T9775] RSP: 002b:00007f9d9cae4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 492.352144][ T9775] RAX: ffffffffffffffda RBX: 00007f9d9cae56c0 RCX: 00007f9d9e86e98e [ 492.352157][ T9775] RDX: 0000000000000001 RSI: 00007f9d9cae50a0 RDI: 0000000000000009 [ 492.352169][ T9775] RBP: 00007f9d9cae5090 R08: 0000000000000000 R09: 0000000000000000 [ 492.352180][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.352191][ T9775] R13: 00007f9d9eb36128 R14: 00007f9d9eb36090 R15: 00007ffe505a5868 [ 492.352223][ T9775] [ 494.605515][ T31] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 494.806941][ T31] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 494.816388][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.816417][ T31] usb 5-1: Product: syz [ 494.816431][ T31] usb 5-1: Manufacturer: syz [ 494.816445][ T31] usb 5-1: SerialNumber: syz [ 494.881200][ T31] usb 5-1: config 0 descriptor?? [ 494.991482][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.172713][ T31] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 495.645223][ T9806] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1176'. [ 496.305825][ T49] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 496.476572][ T49] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 496.498280][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.513480][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.513500][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 496.513536][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.604205][ T49] usb 2-1: config 0 descriptor?? [ 497.150028][ T49] kye 0003:0458:5019.0034: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 497.183259][ T49] kye 0003:0458:5019.0034: ignoring exceeding usage max [ 497.377972][ T49] kye 0003:0458:5019.0034: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 497.400664][ T49] kye 0003:0458:5019.0034: tablet-enabling feature report not found [ 497.400688][ T49] kye 0003:0458:5019.0034: tablet enabling failed [ 497.615432][ T31] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 497.710512][ T31] usb 5-1: USB disconnect, device number 35 [ 497.741950][ T49] usb 2-1: USB disconnect, device number 31 [ 498.851150][ T9830] tipc: Cannot configure node identity twice [ 498.895434][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 499.053643][ T31] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 499.065486][ T49] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 499.076176][ T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 499.082970][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.218991][ T49] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 499.327302][ T49] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 499.336003][ T49] usb 5-1: config 0 has no interface number 0 [ 499.342402][ T49] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 499.353690][ T49] usb 5-1: config 0 interface 1 altsetting 19 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.363906][ T49] usb 5-1: config 0 interface 1 has no altsetting 0 [ 499.363953][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.974849][ T49] usb 5-1: config 0 descriptor?? [ 500.204197][ T31] as10x_usb: device has been detected [ 500.224917][ T31] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 500.728930][ T9829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.731536][ T9829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.735731][ T6091] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 502.952600][ T49] uclogic 0003:2179:0053.0035: failed retrieving string descriptor #100: -71 [ 502.952708][ T49] uclogic 0003:2179:0053.0035: failed retrieving pen parameters: -71 [ 502.952724][ T49] uclogic 0003:2179:0053.0035: pen probing failed: -71 [ 502.952737][ T49] uclogic 0003:2179:0053.0035: failed probing parameters: -71 [ 502.952834][ T49] uclogic 0003:2179:0053.0035: probe with driver uclogic failed with error -71 [ 502.957800][ T31] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 502.975859][ T6091] usb 1-1: Using ep0 maxpacket: 32 [ 502.976689][ T6091] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 502.978119][ T6091] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.978141][ T6091] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.980965][ T6091] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.980989][ T6091] usb 1-1: Product: syz [ 502.981002][ T6091] usb 1-1: Manufacturer: syz [ 502.981016][ T6091] usb 1-1: SerialNumber: syz [ 502.983895][ T49] usb 5-1: USB disconnect, device number 36 [ 503.667075][ T27] [ 503.669482][ T27] ====================================================== [ 503.677258][ T27] WARNING: possible circular locking dependency detected [ 503.684951][ T27] syzkaller #0 Tainted: G L [ 503.691032][ T27] ------------------------------------------------------ [ 503.698147][ T27] migration/1/27 is trying to acquire lock: [ 503.704086][ T27] ffff8880b8740998 (_T->lock){....}-{2:2}, at: rt_spin_trylock+0x56/0x2b0 [ 503.712684][ T27] [ 503.712684][ T27] but task is already holding lock: [ 503.720333][ T27] ffff888028bcc980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 503.730611][ T27] [ 503.730611][ T27] which lock already depends on the new lock. [ 503.730611][ T27] [ 503.741373][ T27] [ 503.741373][ T27] the existing dependency chain (in reverse order) is: [ 503.750661][ T27] [ 503.750661][ T27] -> #1 (&p->pi_lock){-...}-{2:2}: [ 503.759414][ T27] _raw_spin_lock+0x2e/0x40 [ 503.764863][ T27] rtlock_slowlock_locked+0x1ec/0x3c20 [ 503.772285][ T27] rt_spin_lock+0x165/0x400 [ 503.777465][ T27] finish_wait+0xbe/0x1e0 [ 503.782330][ T27] synchronize_rcu_expedited+0x63e/0x770 [ 503.788591][ T27] try_check_zero+0x2c1/0x4c0 [ 503.794525][ T27] process_srcu+0x328/0x16f0 [ 503.799945][ T27] process_scheduled_works+0xc3d/0x1630 [ 503.806919][ T27] worker_thread+0xa47/0xfb0 [ 503.812319][ T27] kthread+0x38b/0x470 [ 503.816948][ T27] ret_from_fork+0x514/0xb70 [ 503.822070][ T27] ret_from_fork_asm+0x1a/0x30 [ 503.827358][ T27] [ 503.827358][ T27] -> #0 (_T->lock){....}-{2:2}: [ 503.836517][ T27] __lock_acquire+0x15ff/0x2e40 [ 503.842449][ T27] lock_acquire+0x115/0x350 [ 503.848455][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 503.854573][ T27] rt_spin_trylock+0x56/0x2b0 [ 503.861735][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 503.867139][ T27] kvfree_call_rcu+0xa4/0x430 [ 503.873076][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 503.879343][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 503.887008][ T27] select_fallback_rq+0x11e/0x200 [ 503.894241][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 503.900770][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 503.906369][ T27] smpboot_thread_fn+0x565/0xa70 [ 503.912057][ T27] kthread+0x38b/0x470 [ 503.916745][ T27] ret_from_fork+0x514/0xb70 [ 503.921875][ T27] ret_from_fork_asm+0x1a/0x30 [ 503.928592][ T27] [ 503.928592][ T27] other info that might help us debug this: [ 503.928592][ T27] [ 503.939160][ T27] Possible unsafe locking scenario: [ 503.939160][ T27] [ 503.946884][ T27] CPU0 CPU1 [ 503.952259][ T27] ---- ---- [ 503.957726][ T27] lock(&p->pi_lock); [ 503.962144][ T27] lock(_T->lock); [ 503.968467][ T27] lock(&p->pi_lock); [ 503.975052][ T27] lock(_T->lock); [ 503.978864][ T27] [ 503.978864][ T27] *** DEADLOCK *** [ 503.978864][ T27] [ 503.987035][ T27] locks held by migration/1/27: 2, last CPU#1: [ 503.993654][ T27] #0: ffff888028bcc980 (&p->pi_lock){-...}-{2:2}, at: __balance_push_cpu_stop+0x78/0x410 [ 504.003600][ T27] #1: ffffffff8e1c3ac0 (rcu_read_lock){....}-{1:3}, at: cpuset_cpus_allowed_fallback+0x22/0x370 [ 504.014151][ T27] [ 504.014151][ T27] stack backtrace: [ 504.020054][ T27] CPU: 1 UID: 0 PID: 27 Comm: migration/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 504.031338][ T27] Tainted: [L]=SOFTLOCKUP [ 504.035657][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 504.045713][ T27] Stopper: __balance_push_cpu_stop+0x0/0x410 <- balance_push+0x28d/0x4f0 [ 504.054148][ T27] Call Trace: [ 504.057435][ T27] [ 504.060405][ T27] dump_stack_lvl+0xe8/0x150 [ 504.065023][ T27] print_circular_bug+0x2e2/0x300 [ 504.070060][ T27] check_noncircular+0x12f/0x150 [ 504.075003][ T27] __lock_acquire+0x15ff/0x2e40 [ 504.079870][ T27] ? __asan_memset+0x22/0x50 [ 504.084473][ T27] ? __enqueue_entity+0x30a/0xc60 [ 504.089516][ T27] lock_acquire+0x115/0x350 [ 504.094817][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 504.099675][ T27] ? enqueue_task_fair+0x1560/0x1b60 [ 504.104973][ T27] _raw_spin_lock_irqsave+0x40/0x60 [ 504.110174][ T27] ? rt_spin_trylock+0x56/0x2b0 [ 504.115060][ T27] rt_spin_trylock+0x56/0x2b0 [ 504.119754][ T27] __kfree_rcu_sheaf+0xd3/0x620 [ 504.124612][ T27] kvfree_call_rcu+0xa4/0x430 [ 504.129288][ T27] ? do_raw_spin_unlock+0xf5/0x200 [ 504.134408][ T27] set_cpus_allowed_force+0x1bd/0x2a0 [ 504.139789][ T27] ? __pfx_set_cpus_allowed_force+0x10/0x10 [ 504.145699][ T27] ? cpuset_cpus_allowed_fallback+0x22/0x370 [ 504.151701][ T27] cpuset_cpus_allowed_fallback+0x24a/0x370 [ 504.157630][ T27] select_fallback_rq+0x11e/0x200 [ 504.162665][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 504.168651][ T27] __balance_push_cpu_stop+0xa1/0x410 [ 504.174031][ T27] ? _raw_spin_unlock_irq+0x23/0x50 [ 504.179241][ T27] ? __pfx___balance_push_cpu_stop+0x10/0x10 [ 504.185421][ T27] cpu_stopper_thread+0x25e/0x3f0 [ 504.190646][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 504.195739][ T27] smpboot_thread_fn+0x565/0xa70 [ 504.200734][ T27] ? smpboot_thread_fn+0x4e/0xa70 [ 504.205775][ T27] kthread+0x38b/0x470 [ 504.209846][ T27] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 504.215340][ T27] ? __pfx_kthread+0x10/0x10 [ 504.219931][ T27] ret_from_fork+0x514/0xb70 [ 504.224529][ T27] ? __pfx_ret_from_fork+0x10/0x10 [ 504.229655][ T27] ? __switch_to+0xc89/0x1420 [ 504.234362][ T27] ? __pfx_kthread+0x10/0x10 [ 504.238964][ T27] ret_from_fork_asm+0x1a/0x30 [ 504.243745][ T27] [ 504.246767][ T27] process 9830 (syz.3.1183) no longer affine to cpu1 [ 504.337925][ T27] numa_remove_cpu cpu 1 node 0: mask now 0 [ 504.337951][ T27] numa_remove_cpu cpu 1 node 1: mask now 0 [ 504.356515][ T9872] smpboot: CPU 1 is now offline [ 504.373036][ T31] as10x_usb: error during firmware upload part1 [ 504.374118][ T9879] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 504.374184][ T31] Registered device Abilis Systems DVB-Titan [ 504.374312][ T9879] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.384014][ T31] usb 2-1: USB disconnect, device number 32 [ 504.404660][ T9875] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 504.405932][ T0] numa_add_cpu cpu 1 node 0: mask now 0-1 [ 504.405952][ T0] numa_add_cpu cpu 1 node 1: mask now 0-1 [ 504.451059][ T31] Unregistered device Abilis Systems DVB-Titan [ 504.466652][ T31] as10x_usb: device has been disconnected [ 505.228909][ T6091] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 505.234298][ T6091] usb 1-1: USB disconnect, device number 33 [ 508.915673][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 508.915755][ T1327] ieee802154 phy1 wpan1: encryption failed: -22