last executing test programs: 4.75599758s ago: executing program 1 (id=609): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x634, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 4.522080042s ago: executing program 1 (id=611): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f000000540b455018"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000000)={0x3, 0x100, 0x20, 0x20000004, 0x7fffc}) 3.063310313s ago: executing program 3 (id=614): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000002c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000480)='hybla', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000004c0), 0x4) sendto$inet(r0, &(0x7f0000000500)="51289c001e00cca9072e1f21dc867f59d038a0f9dc5b491af28acb49ed57cb078a3854ba6868de75dc4dd4d6a6a2d4a93d08d65b9b9d4c1909c16ea574ed6c7f963425e749ef6246edeed157020743116d90c2b00900859863e1c07ab839fb7830ecd04df21f1356b0ad0d9b157d22bcf0", 0x9d0aeebe0bd281d3, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000640)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.781889342s ago: executing program 1 (id=615): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) fcntl$setlease(r1, 0x400, 0x1) open$dir(&(0x7f0000000100)='./file0\x00', 0x4000, 0xc) creat(&(0x7f0000001300)='./file0\x00', 0x9) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x38) prlimit64(0x0, 0xb, 0x0, 0x0) read$watch_queue(r2, &(0x7f00000001c0)=""/178, 0xb2) 2.745583917s ago: executing program 2 (id=616): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000000), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000080)={0x1, 0x5}, 0x8) prlimit64(0x0, 0x8, &(0x7f00000000c0)={0x8, 0x10}, 0x0) setuid(0xee00) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2.682550448s ago: executing program 2 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000200000100001c"], 0x4a) 2.54198638s ago: executing program 2 (id=619): mmap$IORING_OFF_SQ_RING(0x110c230000, 0xc, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_create_resource$futex(&(0x7f0000000180)) futex(0x0, 0xc, 0x1, 0x0, r0, 0x1) r1 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000200)) futex(r1, 0xb, 0x1, 0x0, r2, 0x2) futex(r2, 0xd, 0x2, 0x0, r1, 0x0) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) exit(0x3) 2.035358987s ago: executing program 3 (id=624): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r2, &(0x7f000000aa40)={0x2e, 0x6f, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f000000aac0)) setsockopt$ALG_SET_KEY(r1, 0x6a, 0x1, 0x0, 0xc) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f000000ab00)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f000000ab40)={0x1d, r4, 0x8000000000000003, {0x0, 0xf}}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 1.974381557s ago: executing program 3 (id=625): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x20000000, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x8400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5, 0x0, 0x0, 0x0, 0x6, 0x3, 0x4, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0x8}, [@tmpl={0xc4, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d2, 0x2b}, 0xa, @in=@broadcast, 0x0, 0x0, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@broadcast, 0x0, 0x3, 0x2, 0x48, 0x4, 0x8000, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x3, 0x0, 0x5, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000780)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.887015753s ago: executing program 1 (id=627): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000640)=[@increfs], 0x37}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000700)={0x8, 0x0, &(0x7f0000000740)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000007c0)=[@decrefs={0x40046307, 0x1}]}) 1.819507117s ago: executing program 3 (id=628): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0xffff, 0xa222209, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="50010000000000000600000000000000070000000000000003000000000000000080020000000000020000000000000009000000010001000600000000000000090000000000000004000000000000000b000000000000000000008000000000000000000000000006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="018000000000008000000000010000000000000001000000000000000100000094015432000000000000000004"], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 1.796675483s ago: executing program 1 (id=629): syz_usb_connect(0x5, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)=0xdfe5) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) 1.6523762s ago: executing program 2 (id=632): socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000080)='&\xaf\x12}N\xf3oW\'\x00', 0x9998bdb00e53b971, 0x80, 0x0) mq_open(&(0x7f0000000140)='&\xaf\x12}N\xf3oW\'\x00', 0x1, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40241, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.367361979s ago: executing program 0 (id=635): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r1, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r2, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x880) 1.303076433s ago: executing program 0 (id=636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000002c0)={"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"}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000d80)={{0x3000, 0x3000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x3c, 0x80}, {0x5000, 0xeeee8000, 0x3, 0x5, 0x40, 0x5, 0x14, 0x42, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xb, 0x0, 0x3, 0x5, 0x0, 0xc1, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x5, 0x48, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xf000, 0x200000, 0x0, 0x3, 0x16, 0x87, 0xab, 0x8, 0x9, 0x40, 0xf6, 0x6}, {0xeeefa000, 0xfec22000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x0, 0x7}, {0x3000, 0xe000, 0xc, 0x5, 0x7, 0x5, 0x7, 0x3, 0x9d, 0x1, 0x43, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0x2, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x10000, 0x30}, {0x60000, 0x7}, 0x80000031, 0x0, 0x10000, 0x2024, 0x2, 0x0, 0x100c00, [0x7, 0x4, 0x7, 0x8]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000ec0)={0x2, 0x0, @ioapic={0x0, 0x0, 0xfffffffe, 0x7fffffff, 0x0, [{}, {0xff, 0x7, 0x10}, {0x0, 0x0, 0x3, '\x00', 0x3}, {}, {0x0, 0xdc, 0x2, '\x00', 0x6}, {0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x0, 0x8}, {0x0, 0x1}, {0x0, 0x0, 0x9}, {0x0, 0xf, 0x0, '\x00', 0xff}, {0x0, 0x8d, 0x0, '\x00', 0xff}, {0x0, 0xfe, 0x0, '\x00', 0xff}, {0x70, 0x0, 0x1}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x4}, {0x9}, {0xa4}, {0x0, 0x7}, {0x0, 0x0, 0x0, '\x00', 0xbb}, {0x20}, {0xb}, {0x7, 0x9}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 901.380416ms ago: executing program 3 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x0, 0x1}]}) socket$inet6_udp(0xa, 0x2, 0x0) close_range(r2, 0xffffffffffffffff, 0x600000000000000) 393.075528ms ago: executing program 0 (id=638): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x3}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x1, 0x2}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10) close(r0) 362.04821ms ago: executing program 0 (id=639): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}], 0x10) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_batadv\x00', 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @private2}], 0x1c) 313.716485ms ago: executing program 0 (id=640): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000076c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007700)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000007740)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000007840)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 260.833129ms ago: executing program 0 (id=641): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@wr_crn={0x46, 0x20, {0x8}}, @code={0xa, 0x60, {"b805000000b9e8d100000f01c1f045802bbdc4417f5edd66b8dc008ed8660f104c878766460f38802cf26764440f01df266743250000008066baf80cb8289d308fef66bafc0cb81c350000ef660f08"}}], 0x80}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 259.64279ms ago: executing program 2 (id=642): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/65, 0x41}], 0x1) r2 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x10000}], 0x38) 101.578277ms ago: executing program 2 (id=643): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x7, 0x10000000000001, 0x15, 0x1000, 0x9, 0x1000, 0x4b, 0x0, 0x4, 0x0, 0x1, 0x0, 0x6, 0x5, 0xfffffffffffffffe, 0x4], 0x0, 0x1019c4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.026226ms ago: executing program 1 (id=644): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="f30f7f3527af253fea8c9600001201c4e27d79a63d000000ddea66baf80cb89458ec84ef66bafc0cb8f7ffffffef662ef2f2d9fac4e3896d2b0b3eab66b8d8008ec066baf80cb815aef28bef66bafc0cec", 0x51}], 0x1, 0xa4b6d3c70067e686, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=645): unshare(0x6020400) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) r3 = fsmount(r0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) kernel console output (not intermixed with test programs): 5 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.766954][ T6611] RSP: 002b:00007fd4bfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.766968][ T6611] RAX: ffffffffffffffda RBX: 00007fd4c1e25fa0 RCX: 00007fd4c1b9fb19 [ 122.766977][ T6611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.766983][ T6611] RBP: 00007fd4c1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 122.766990][ T6611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.766997][ T6611] R13: 00007fd4c1e26038 R14: 00007fd4c1e25fa0 R15: 00007ffcab11e7c8 [ 122.767017][ T6611] [ 122.914665][ T5715] usb 2-1: USB disconnect, device number 8 [ 122.925392][ T5715] idmouse 2-1:1.0: disconnected [ 123.051252][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.052296][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.052763][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.053339][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.053776][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.054313][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.054745][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.055170][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.055666][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 123.056093][ T6615] kvm_intel: kvm [6613]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x6b [ 124.083395][ T6637] FAULT_INJECTION: forcing a failure. [ 124.083395][ T6637] name failslab, interval 1, probability 0, space 0, times 0 [ 124.083431][ T6637] CPU: 1 UID: 0 PID: 6637 Comm: syz.0.293 Not tainted syzkaller #0 PREEMPT(full) [ 124.083453][ T6637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 124.083466][ T6637] Call Trace: [ 124.083474][ T6637] [ 124.083483][ T6637] dump_stack_lvl+0xe8/0x150 [ 124.083519][ T6637] should_fail_ex+0x3eb/0x540 [ 124.083549][ T6637] should_failslab+0xa8/0x100 [ 124.083580][ T6637] __kmalloc_noprof+0xf9/0x710 [ 124.083605][ T6637] ? init_skcipher_req+0x83/0x1c0 [ 124.083629][ T6637] ? init_skcipher_req+0x83/0x1c0 [ 124.083662][ T6637] init_skcipher_req+0x83/0x1c0 [ 124.083690][ T6637] encrypted_read+0x2ff/0xe70 [ 124.083725][ T6637] ? __pfx_encrypted_read+0x10/0x10 [ 124.083762][ T6637] ? lruvec_stat_mod_folio+0x7a/0x2d0 [ 124.083786][ T6637] ? lruvec_stat_mod_folio+0x7a/0x2d0 [ 124.083816][ T6637] ? lock_acquire+0x115/0x350 [ 124.083860][ T6637] ? down_read+0x2b9/0x320 [ 124.083894][ T6637] ? __pfx_encrypted_read+0x10/0x10 [ 124.083917][ T6637] keyctl_read_key+0x25a/0x470 [ 124.083949][ T6637] __se_sys_keyctl+0x38f/0xbc0 [ 124.083980][ T6637] ? __pfx___se_sys_keyctl+0x10/0x10 [ 124.084021][ T6637] ? __pfx_do_futex+0x10/0x10 [ 124.084048][ T6637] ? __fget_files+0x3a2/0x420 [ 124.084072][ T6637] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 124.084109][ T6637] ? __se_sys_futex+0x3a8/0x450 [ 124.084143][ T6637] ? ksys_write+0x242/0x270 [ 124.084169][ T6637] ? __pfx___se_sys_futex+0x10/0x10 [ 124.084199][ T6637] ? __pfx_ksys_write+0x10/0x10 [ 124.084234][ T6637] ? __x64_sys_keyctl+0x20/0xc0 [ 124.084264][ T6637] do_syscall_64+0x16a/0x530 [ 124.084290][ T6637] ? trace_irq_disable+0x3b/0x140 [ 124.084314][ T6637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.084335][ T6637] ? clear_bhb_loop+0x70/0xc0 [ 124.084360][ T6637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.084380][ T6637] RIP: 0033:0x00007f0a5b59fb19 [ 124.084402][ T6637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.084419][ T6637] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 124.084441][ T6637] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 124.084455][ T6637] RDX: 0000200000000240 RSI: 0000000019dc6ffa RDI: 000000000000000b [ 124.084469][ T6637] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 124.084480][ T6637] R10: 00000000349b7f55 R11: 0000000000000246 R12: 0000000000000000 [ 124.084492][ T6637] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 124.084525][ T6637] [ 124.085284][ T6637] trusted_key: encrypted_key: failed to allocate request for cbc(aes) [ 124.112618][ T6639] netlink: 'syz.3.294': attribute type 10 has an invalid length. [ 124.192613][ T6639] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 124.207308][ T6639] team0: Port device netdevsim1 added [ 124.220478][ T5725] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.440539][ T5725] usb 3-1: New USB device found: idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 124.442642][ T5725] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 124.442666][ T5725] usb 3-1: config 0 has no interface number 0 [ 124.459138][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.459167][ T5725] usb 3-1: Product: syz [ 124.459180][ T5725] usb 3-1: Manufacturer: syz [ 124.459193][ T5725] usb 3-1: SerialNumber: syz [ 124.500095][ T5725] usb 3-1: config 0 descriptor?? [ 124.532138][ T6650] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 124.637958][ T6654] syzkaller1: entered promiscuous mode [ 124.637984][ T6654] syzkaller1: entered allmulticast mode [ 124.714356][ T5725] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 124.734620][ T5725] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 124.735095][ T5725] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 124.735155][ T5725] usb 3-1: media controller created [ 124.777932][ T5725] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.908139][ T5747] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 124.915759][ T5725] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 125.058641][ T5747] usb 1-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 125.059593][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.059615][ T5747] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.059644][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.061403][ T5747] usb 1-1: config 0 descriptor?? [ 125.088466][ T5732] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 125.270429][ T5732] usb 4-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 125.271812][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.273764][ T5732] usb 4-1: config 0 descriptor?? [ 125.276784][ T5732] cp210x 4-1:0.0: cp210x converter detected [ 125.315782][ T5725] usb 3-1: USB disconnect, device number 6 [ 125.475618][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475657][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475712][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475737][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475761][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475786][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.475809][ T5747] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 125.504287][ T5747] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 125.670955][ T5747] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 125.800515][ T6670] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 125.800534][ T6670] overlayfs: failed to set xattr on upper [ 125.800537][ T6670] overlayfs: ...falling back to redirect_dir=nofollow. [ 125.800541][ T6670] overlayfs: ...falling back to index=off. [ 125.800544][ T6670] overlayfs: ...falling back to uuid=null. [ 125.800547][ T6670] overlayfs: ...falling back to xino=off. [ 125.890323][ T5732] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 125.890417][ T5732] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 125.898802][ T5732] usb 4-1: cp210x converter now attached to ttyUSB0 [ 125.917926][ T5732] usb 4-1: USB disconnect, device number 7 [ 125.930542][ T5732] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 125.935074][ T5732] cp210x 4-1:0.0: device disconnected [ 126.278304][ T6658] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 126.280087][ T5747] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 126.291996][ T5747] usb 1-1: USB disconnect, device number 9 [ 126.522828][ T5715] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 126.668872][ T5715] usb 3-1: New USB device found: idVendor=a257, idProduct=2013, bcdDevice=0.01 [ 126.673341][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.109945][ T5715] dln2 3-1:1.0: failed to initialize hardware [ 127.129946][ C0] dln2 3-1:1.0: failed to resubmit RX URB: -1 [ 127.134491][ T5715] dln2 3-1:1.0: probe with driver dln2 failed with error -110 [ 127.156895][ T5715] usb 3-1: USB disconnect, device number 7 [ 127.955779][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.332'. [ 127.979064][ T5739] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 128.128984][ T5739] usb 2-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 128.130837][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.130885][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.135541][ T5739] usb 2-1: config 0 descriptor?? [ 128.368552][ T5739] usbhid 2-1:0.0: can't add hid device: -71 [ 128.368667][ T5739] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 128.374671][ T5739] usb 2-1: USB disconnect, device number 9 [ 128.821162][ T5739] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 128.975052][ T5739] usb 2-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 128.984147][ T5739] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.984195][ T5739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.996154][ T5739] usb 2-1: config 0 descriptor?? [ 129.438594][ T6724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.462368][ T6724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.879926][ T5739] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 129.881578][ T5739] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 130.339493][ T5747] usb 2-1: USB disconnect, device number 10 [ 130.339567][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 130.589363][ T6767] FAULT_INJECTION: forcing a failure. [ 130.589363][ T6767] name failslab, interval 1, probability 0, space 0, times 0 [ 130.589394][ T6767] CPU: 1 UID: 0 PID: 6767 Comm: syz.0.346 Not tainted syzkaller #0 PREEMPT(full) [ 130.589415][ T6767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 130.589427][ T6767] Call Trace: [ 130.589434][ T6767] [ 130.589442][ T6767] dump_stack_lvl+0xe8/0x150 [ 130.589477][ T6767] should_fail_ex+0x3eb/0x540 [ 130.589503][ T6767] should_failslab+0xa8/0x100 [ 130.589534][ T6767] __kmalloc_cache_noprof+0x9e/0x600 [ 130.589557][ T6767] ? unix_autobind+0xee/0xa10 [ 130.589577][ T6767] ? unix_autobind+0xee/0xa10 [ 130.589604][ T6767] unix_autobind+0xee/0xa10 [ 130.589630][ T6767] ? tomoyo_check_unix_address+0x16d/0x7e0 [ 130.589652][ T6767] ? __pfx_tomoyo_check_unix_address+0x10/0x10 [ 130.589670][ T6767] ? futex_wait+0x2a2/0x390 [ 130.589699][ T6767] unix_stream_connect+0x296/0x1000 [ 130.589734][ T6767] ? __pfx_unix_stream_connect+0x10/0x10 [ 130.589756][ T6767] ? apparmor_socket_connect+0x123/0x210 [ 130.589787][ T6767] ? bpf_lsm_socket_connect+0x9/0x20 [ 130.589813][ T6767] __sys_connect+0x316/0x450 [ 130.589836][ T6767] ? __pfx___sys_connect+0x10/0x10 [ 130.589869][ T6767] ? rcu_is_watching+0x16/0xb0 [ 130.589907][ T6767] __x64_sys_connect+0x7a/0x90 [ 130.589928][ T6767] do_syscall_64+0x16a/0x530 [ 130.589952][ T6767] ? trace_irq_disable+0x3b/0x140 [ 130.589974][ T6767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.589994][ T6767] ? clear_bhb_loop+0x70/0xc0 [ 130.590019][ T6767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.590038][ T6767] RIP: 0033:0x00007f0a5b59fb19 [ 130.590058][ T6767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.590073][ T6767] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 130.590095][ T6767] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 130.590109][ T6767] RDX: 000000000000006e RSI: 00002000000004c0 RDI: 0000000000000003 [ 130.590121][ T6767] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 130.590133][ T6767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.590144][ T6767] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 130.590179][ T6767] [ 131.183699][ T6758] C: renamed from lo (while UP) [ 131.183766][ T6758] FAULT_INJECTION: forcing a failure. [ 131.183766][ T6758] name failslab, interval 1, probability 0, space 0, times 0 [ 131.183791][ T6758] CPU: 0 UID: 0 PID: 6758 Comm: syz.3.343 Not tainted syzkaller #0 PREEMPT(full) [ 131.183815][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 131.183827][ T6758] Call Trace: [ 131.183835][ T6758] [ 131.183844][ T6758] dump_stack_lvl+0xe8/0x150 [ 131.183885][ T6758] should_fail_ex+0x3eb/0x540 [ 131.183915][ T6758] should_failslab+0xa8/0x100 [ 131.183946][ T6758] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 131.183970][ T6758] ? __up_read+0x29c/0x930 [ 131.183995][ T6758] ? kernfs_rename_ns+0x6c/0x9e0 [ 131.184016][ T6758] ? kernfs_rename_ns+0x6c/0x9e0 [ 131.184045][ T6758] kstrdup+0x42/0x100 [ 131.184067][ T6758] kernfs_rename_ns+0x6c/0x9e0 [ 131.184098][ T6758] sysfs_rename_link_ns+0x16e/0x1b0 [ 131.184132][ T6758] device_rename+0x110/0x210 [ 131.184161][ T6758] netif_change_name+0x27a/0x970 [ 131.184196][ T6758] ? do_setlink+0xb66/0x47a0 [ 131.184217][ T6758] ? trace_hrtimer_start+0x82/0x200 [ 131.184244][ T6758] ? __pfx_netif_change_name+0x10/0x10 [ 131.184283][ T6758] ? nla_strscpy+0x10f/0x170 [ 131.184312][ T6758] do_setlink+0xb66/0x47a0 [ 131.184346][ T6758] ? __lock_acquire+0x747/0x2de0 [ 131.184372][ T6758] ? __pfx_do_setlink+0x10/0x10 [ 131.184418][ T6758] ? do_raw_spin_lock+0x12b/0x2f0 [ 131.184478][ T6758] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 131.184509][ T6758] ? __mutex_lock+0x10de/0x15a0 [ 131.184541][ T6758] ? __mutex_lock+0x5cd/0x15a0 [ 131.184574][ T6758] ? rtnl_newlink+0xc1d/0x1c30 [ 131.184599][ T6758] ? __pfx___mutex_lock+0x10/0x10 [ 131.184637][ T6758] ? ns_capable+0x84/0xe0 [ 131.184664][ T6758] ? rtnl_nets_add+0x16c/0x300 [ 131.184686][ T6758] ? refcount_inc+0x46/0x70 [ 131.184719][ T6758] rtnl_newlink+0x15b0/0x1c30 [ 131.184755][ T6758] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.184775][ T6758] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 131.184804][ T6758] ? netlink_deliver_tap+0x19c/0x1b0 [ 131.184831][ T6758] ? netlink_unicast+0x8c1/0xa80 [ 131.184856][ T6758] ? netlink_sendmsg+0x7f0/0xb20 [ 131.184873][ T6758] ? sock_sendmsg_nosec+0x14e/0x190 [ 131.184899][ T6758] ? ____sys_sendmsg+0x54e/0x850 [ 131.184918][ T6758] ? ___sys_sendmsg+0x2a6/0x360 [ 131.184938][ T6758] ? __x64_sys_sendmsg+0x1b1/0x290 [ 131.184958][ T6758] ? do_syscall_64+0x16a/0x530 [ 131.184982][ T6758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.185045][ T6758] ? kasan_quarantine_put+0xbb/0x1f0 [ 131.185069][ T6758] ? lockdep_hardirqs_on+0x7b/0x110 [ 131.185100][ T6758] ? nlmon_xmit+0xb0/0x100 [ 131.185125][ T6758] ? kmem_cache_free+0x184/0x660 [ 131.185159][ T6758] ? __lock_acquire+0x747/0x2de0 [ 131.185189][ T6758] ? __pfx_hook_capable+0x10/0x10 [ 131.185209][ T6758] ? __dev_queue_xmit+0x29b/0x3920 [ 131.185238][ T6758] ? __pfx_hook_capable+0x10/0x10 [ 131.185259][ T6758] ? lockdep_hardirqs_on+0x7b/0x110 [ 131.185294][ T6758] ? lock_acquire+0x115/0x350 [ 131.185317][ T6758] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.185353][ T6758] ? __pfx_rtnl_newlink+0x10/0x10 [ 131.185374][ T6758] rtnetlink_rcv_msg+0x802/0xc00 [ 131.185401][ T6758] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 131.185423][ T6758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.185448][ T6758] ? __copy_skb_header+0xa3/0x4a0 [ 131.185481][ T6758] ? __asan_memcpy+0x40/0x70 [ 131.185513][ T6758] netlink_rcv_skb+0x226/0x4a0 [ 131.185545][ T6758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 131.185570][ T6758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.185614][ T6758] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.185644][ T6758] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.185680][ T6758] netlink_unicast+0x8ef/0xa80 [ 131.185726][ T6758] netlink_sendmsg+0x7f0/0xb20 [ 131.185754][ T6758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.185778][ T6758] ? aa_sock_msg_perm+0x144/0x210 [ 131.185804][ T6758] ? apparmor_socket_sendmsg+0x98/0x360 [ 131.185835][ T6758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.185852][ T6758] sock_sendmsg_nosec+0x14e/0x190 [ 131.185883][ T6758] ____sys_sendmsg+0x54e/0x850 [ 131.185913][ T6758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.185945][ T6758] ? import_iovec+0x73/0xa0 [ 131.185971][ T6758] ___sys_sendmsg+0x2a6/0x360 [ 131.185990][ T6758] ? __lock_acquire+0x747/0x2de0 [ 131.186016][ T6758] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.186044][ T6758] ? futex_wait+0x2a2/0x390 [ 131.186099][ T6758] ? __fget_files+0x3a2/0x420 [ 131.186121][ T6758] ? __fget_files+0x2a/0x420 [ 131.186155][ T6758] __x64_sys_sendmsg+0x1b1/0x290 [ 131.186181][ T6758] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.186229][ T6758] do_syscall_64+0x16a/0x530 [ 131.186254][ T6758] ? trace_irq_disable+0x3b/0x140 [ 131.186278][ T6758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.186298][ T6758] ? clear_bhb_loop+0x70/0xc0 [ 131.186324][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.186344][ T6758] RIP: 0033:0x00007fbcf4d9fb19 [ 131.186367][ T6758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.186383][ T6758] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.186406][ T6758] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 131.186421][ T6758] RDX: 0000000000008040 RSI: 0000200000000940 RDI: 0000000000000005 [ 131.186434][ T6758] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 131.186447][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.186467][ T6758] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 131.186503][ T6758] [ 132.489631][ T6805] FAULT_INJECTION: forcing a failure. [ 132.489631][ T6805] name failslab, interval 1, probability 0, space 0, times 0 [ 132.489657][ T6805] CPU: 0 UID: 0 PID: 6805 Comm: syz.1.360 Not tainted syzkaller #0 PREEMPT(full) [ 132.489677][ T6805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 132.489683][ T6805] Call Trace: [ 132.489688][ T6805] [ 132.489692][ T6805] dump_stack_lvl+0xe8/0x150 [ 132.489712][ T6805] should_fail_ex+0x3eb/0x540 [ 132.489726][ T6805] should_failslab+0xa8/0x100 [ 132.489741][ T6805] __kmalloc_cache_noprof+0x9e/0x600 [ 132.489754][ T6805] ? userfaultfd_unmap_prep+0x1db/0x3e0 [ 132.489764][ T6805] ? userfaultfd_unmap_prep+0x1db/0x3e0 [ 132.489777][ T6805] userfaultfd_unmap_prep+0x1db/0x3e0 [ 132.489791][ T6805] vms_gather_munmap_vmas+0x936/0x1370 [ 132.489811][ T6805] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 132.489825][ T6805] ? mas_walk+0x37e/0x490 [ 132.489842][ T6805] mmap_region+0x90a/0x2820 [ 132.489860][ T6805] ? __lock_acquire+0x747/0x2de0 [ 132.489872][ T6805] ? __lock_acquire+0x747/0x2de0 [ 132.489882][ T6805] ? __pfx_mmap_region+0x10/0x10 [ 132.489896][ T6805] ? pick_task_fair+0x1112/0x15a0 [ 132.489913][ T6805] ? lock_acquire+0x115/0x350 [ 132.489955][ T6805] ? futex_unqueue+0x22/0x240 [ 132.489967][ T6805] ? futex_unqueue+0x22/0x240 [ 132.489978][ T6805] ? futex_unqueue+0x22/0x240 [ 132.490000][ T6805] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 132.490015][ T6805] ? __lock_acquire+0x747/0x2de0 [ 132.490026][ T6805] ? cap_mmap_addr+0xaa/0xf0 [ 132.490039][ T6805] ? bpf_lsm_mmap_addr+0x9/0x50 [ 132.490050][ T6805] ? security_mmap_addr+0x71/0x240 [ 132.490067][ T6805] do_mmap+0xe0a/0x1300 [ 132.490084][ T6805] ? __pfx_do_mmap+0x10/0x10 [ 132.490102][ T6805] ? vm_mmap_pgoff+0x1ed/0x520 [ 132.490111][ T6805] ? down_write_killable+0x179/0x230 [ 132.490126][ T6805] ? __pfx_down_write_killable+0x10/0x10 [ 132.490139][ T6805] ? apparmor_mmap_file+0x1cc/0x390 [ 132.490150][ T6805] ? security_mmap_file+0x4df/0xa20 [ 132.490164][ T6805] vm_mmap_pgoff+0x27a/0x520 [ 132.490179][ T6805] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 132.490187][ T6805] ? ksys_write+0x242/0x270 [ 132.490198][ T6805] ? __pfx___se_sys_futex+0x10/0x10 [ 132.490211][ T6805] ? __pfx_ksys_write+0x10/0x10 [ 132.490230][ T6805] ? ksys_mmap_pgoff+0xf3/0x760 [ 132.490252][ T6805] ? __x64_sys_mmap+0x7f/0x140 [ 132.490271][ T6805] do_syscall_64+0x16a/0x530 [ 132.490298][ T6805] ? trace_irq_disable+0x3b/0x140 [ 132.490315][ T6805] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.490325][ T6805] ? clear_bhb_loop+0x70/0xc0 [ 132.490336][ T6805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.490346][ T6805] RIP: 0033:0x00007fe334d9fb19 [ 132.490357][ T6805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.490364][ T6805] RSP: 002b:00007fe332ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 132.490377][ T6805] RAX: ffffffffffffffda RBX: 00007fe335025fa0 RCX: 00007fe334d9fb19 [ 132.490383][ T6805] RDX: 0000000000000000 RSI: 0000000000fff002 RDI: 0000200000000000 [ 132.490390][ T6805] RBP: 00007fe334e37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 132.490396][ T6805] R10: 0002000000000032 R11: 0000000000000246 R12: 0000000000000000 [ 132.490401][ T6805] R13: 00007fe335026038 R14: 00007fe335025fa0 R15: 00007ffcab8c1088 [ 132.490417][ T6805] [ 132.618609][ T5715] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.819185][ T5747] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 132.832878][ T5715] usb 1-1: Using ep0 maxpacket: 32 [ 132.852193][ T5715] usb 1-1: New USB device found: idVendor=046d, idProduct=c31c, bcdDevice=0.40 [ 132.878583][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.878606][ T5715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.878630][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.880455][ T5715] usb 1-1: config 0 descriptor?? [ 132.917167][ T5715] hub 1-1:0.0: USB hub found [ 132.970008][ T5747] usb 2-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=5.00 [ 132.971127][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.971143][ T5747] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.971173][ T5747] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 132.971213][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.976823][ T5747] pl2303 2-1:1.0: required endpoints missing [ 133.087927][ T5715] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 133.189018][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 133.250539][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.250630][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.340420][ T27] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 133.342443][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 133.345126][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 133.345149][ T27] usb 3-1: SerialNumber: syz [ 133.503230][ T5715] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 133.530103][ T5715] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 133.720399][ T5640] usb 2-1: USB disconnect, device number 11 [ 134.002159][ T27] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 134.205972][ T5640] usb 3-1: USB disconnect, device number 8 [ 134.220374][ T5640] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 134.421653][ T6800] usb 1-1: reset high-speed USB device number 10 using dummy_hcd [ 134.579145][ T6800] usb 1-1: device firmware changed [ 134.587312][ T5747] usb 1-1: USB disconnect, device number 10 [ 134.758222][ T5747] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 134.908247][ T5747] usb 1-1: Using ep0 maxpacket: 32 [ 134.912235][ T5747] usb 1-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 134.913118][ T5747] usb 1-1: config 0 has no interfaces? [ 134.913155][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.934575][ T5747] usb 1-1: config 0 descriptor?? [ 135.062754][ T6834] FAULT_INJECTION: forcing a failure. [ 135.062754][ T6834] name failslab, interval 1, probability 0, space 0, times 0 [ 135.063568][ T6834] CPU: 0 UID: 0 PID: 6834 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 135.063594][ T6834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.063607][ T6834] Call Trace: [ 135.063615][ T6834] [ 135.063623][ T6834] dump_stack_lvl+0xe8/0x150 [ 135.063659][ T6834] should_fail_ex+0x3eb/0x540 [ 135.063687][ T6834] should_failslab+0xa8/0x100 [ 135.063718][ T6834] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 135.063742][ T6834] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 135.063762][ T6834] ? xas_split_alloc+0x19c/0x4c0 [ 135.063787][ T6834] ? xas_split_alloc+0x19c/0x4c0 [ 135.063832][ T6834] xas_split_alloc+0x19c/0x4c0 [ 135.063875][ T6834] __folio_split+0xc2e/0x2250 [ 135.063920][ T6834] ? __pfx___folio_split+0x10/0x10 [ 135.063945][ T6834] ? __up_read+0x29c/0x930 [ 135.063979][ T6834] ? folio_alloc_swap+0x2cc/0x12e0 [ 135.064005][ T6834] shmem_writeout+0x571/0x1850 [ 135.064043][ T6834] ? __pfx_shmem_writeout+0x10/0x10 [ 135.064067][ T6834] ? folio_mapping+0x16f/0x1f0 [ 135.064094][ T6834] ? folio_clear_dirty_for_io+0x162/0x820 [ 135.064115][ T6834] ? try_to_unmap_flush_dirty+0x96/0x100 [ 135.064140][ T6834] shrink_folio_list+0x313a/0x4fa0 [ 135.064159][ T6834] ? ktime_get+0x1f5/0x220 [ 135.064220][ T6834] ? __pfx_shrink_folio_list+0x10/0x10 [ 135.064240][ T6834] ? __schedule+0x17f3/0x5830 [ 135.064267][ T6834] ? __lock_acquire+0x747/0x2de0 [ 135.064324][ T6834] ? __bfs+0x153/0x290 [ 135.064343][ T6834] ? __pfx_hlock_conflict+0x10/0x10 [ 135.064380][ T6834] ? delegate_show+0x450/0x4f0 [ 135.064417][ T6834] reclaim_folio_list+0x100/0x430 [ 135.064456][ T6834] ? __pfx_reclaim_folio_list+0x10/0x10 [ 135.064496][ T6834] reclaim_pages+0x452/0x530 [ 135.064526][ T6834] ? __pfx_reclaim_pages+0x10/0x10 [ 135.064549][ T6834] ? do_raw_spin_unlock+0xf5/0x200 [ 135.064582][ T6834] madvise_cold_or_pageout_pte_range+0x18de/0x2390 [ 135.064630][ T6834] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 135.064655][ T6834] ? __css_rstat_updated+0x237/0x540 [ 135.064686][ T6834] ? folios_put_refs+0x5bd/0x6d0 [ 135.064722][ T6834] walk_pgd_range+0x102d/0x1dc0 [ 135.064788][ T6834] ? __pfx_walk_pgd_range+0x10/0x10 [ 135.064813][ T6834] ? lock_acquire+0x115/0x350 [ 135.064851][ T6834] __walk_page_range+0x16d/0x720 [ 135.064900][ T6834] walk_page_range_vma_unsafe+0x309/0x410 [ 135.064936][ T6834] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 135.064967][ T6834] ? mlock_drain_local+0x79/0x490 [ 135.064994][ T6834] ? walk_page_range_vma+0x6b/0x90 [ 135.065022][ T6834] madvise_vma_behavior+0x2d41/0x4cb0 [ 135.065052][ T6834] ? __lock_acquire+0x747/0x2de0 [ 135.065074][ T6834] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 135.065115][ T6834] ? __lock_acquire+0x747/0x2de0 [ 135.065141][ T6834] ? __lock_acquire+0x747/0x2de0 [ 135.065181][ T6834] ? lock_acquire+0x115/0x350 [ 135.065238][ T6834] ? mas_prev_slot+0xa87/0xb10 [ 135.065280][ T6834] ? find_vma_prev+0x123/0x1b0 [ 135.065311][ T6834] ? __pfx_find_vma_prev+0x10/0x10 [ 135.065357][ T6834] madvise_walk_vmas+0x57d/0xb70 [ 135.065396][ T6834] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 135.065424][ T6834] ? blk_start_plug+0x6e/0x1b0 [ 135.065448][ T6834] madvise_do_behavior+0x385/0x540 [ 135.065481][ T6834] ? __pfx_madvise_do_behavior+0x10/0x10 [ 135.065515][ T6834] ? down_read+0x2b9/0x320 [ 135.065553][ T6834] do_madvise+0x327/0x3a0 [ 135.065582][ T6834] ? __pfx_do_madvise+0x10/0x10 [ 135.065621][ T6834] ? __se_sys_futex+0x3a8/0x450 [ 135.065661][ T6834] ? rcu_is_watching+0x16/0xb0 [ 135.065696][ T6834] __x64_sys_madvise+0xa6/0xc0 [ 135.065724][ T6834] do_syscall_64+0x16a/0x530 [ 135.065749][ T6834] ? trace_irq_disable+0x3b/0x140 [ 135.065772][ T6834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.065790][ T6834] ? clear_bhb_loop+0x70/0xc0 [ 135.065813][ T6834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.065841][ T6834] RIP: 0033:0x00007fbcf4d9fb19 [ 135.065864][ T6834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.065880][ T6834] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 135.065903][ T6834] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 135.065918][ T6834] RDX: 0000000000000015 RSI: 0000000000600000 RDI: 0000200000000000 [ 135.065930][ T6834] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 135.065942][ T6834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.065954][ T6834] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 135.065991][ T6834] [ 135.197812][ T6662] usb 1-1: USB disconnect, device number 11 [ 135.672549][ T6867] FAULT_INJECTION: forcing a failure. [ 135.672549][ T6867] name failslab, interval 1, probability 0, space 0, times 0 [ 135.672584][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.1.376 Not tainted syzkaller #0 PREEMPT(full) [ 135.672606][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 135.672618][ T6867] Call Trace: [ 135.672627][ T6867] [ 135.672635][ T6867] dump_stack_lvl+0xe8/0x150 [ 135.672671][ T6867] should_fail_ex+0x3eb/0x540 [ 135.672700][ T6867] should_failslab+0xa8/0x100 [ 135.672733][ T6867] __kmalloc_noprof+0xf9/0x710 [ 135.672758][ T6867] ? vmci_handle_arr_create+0x71/0x140 [ 135.672782][ T6867] ? vmci_handle_arr_create+0x71/0x140 [ 135.672813][ T6867] vmci_handle_arr_create+0x71/0x140 [ 135.672841][ T6867] vmci_ctx_put+0x11f/0xc00 [ 135.672870][ T6867] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 135.672901][ T6867] ? __pfx_vmci_ctx_put+0x10/0x10 [ 135.672970][ T6867] vmci_host_close+0x8e/0x140 [ 135.673019][ T6867] ? __pfx_vmci_host_close+0x10/0x10 [ 135.673045][ T6867] __fput+0x408/0xa40 [ 135.673075][ T6867] fput_close_sync+0x11f/0x240 [ 135.673097][ T6867] ? __pfx_fput_close_sync+0x10/0x10 [ 135.673121][ T6867] ? do_raw_spin_unlock+0xf5/0x200 [ 135.673159][ T6867] __se_sys_close+0xa2/0x160 [ 135.673185][ T6867] do_syscall_64+0x16a/0x530 [ 135.673211][ T6867] ? trace_irq_disable+0x3b/0x140 [ 135.673235][ T6867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.673254][ T6867] ? clear_bhb_loop+0x70/0xc0 [ 135.673280][ T6867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.673300][ T6867] RIP: 0033:0x00007fe334d9fb19 [ 135.673322][ T6867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.673345][ T6867] RSP: 002b:00007fe332ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.673369][ T6867] RAX: ffffffffffffffda RBX: 00007fe335025fa0 RCX: 00007fe334d9fb19 [ 135.673385][ T6867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 135.673398][ T6867] RBP: 00007fe334e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 135.673411][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.673424][ T6867] R13: 00007fe335026038 R14: 00007fe335025fa0 R15: 00007ffcab8c1088 [ 135.673456][ T6867] [ 135.917874][ T6873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.959375][ T993] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.110155][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 136.113621][ T993] usb 3-1: New USB device found: idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 136.128156][ T27] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 136.148108][ T993] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.148169][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.176898][ T993] usb 3-1: config 0 descriptor?? [ 136.189003][ T993] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 136.278300][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 136.279483][ T27] usb 2-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 136.281460][ T27] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 136.281486][ T27] usb 2-1: config 0 has no interface number 0 [ 136.281529][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 136.281554][ T27] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 136.287292][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.287320][ T27] usb 2-1: Product: syz [ 136.287335][ T27] usb 2-1: Manufacturer: syz [ 136.287348][ T27] usb 2-1: SerialNumber: syz [ 136.313130][ T27] usb 2-1: config 0 descriptor?? [ 136.315395][ T6871] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.315551][ T6871] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.476964][ T6890] FAULT_INJECTION: forcing a failure. [ 136.476964][ T6890] name failslab, interval 1, probability 0, space 0, times 0 [ 136.477001][ T6890] CPU: 1 UID: 0 PID: 6890 Comm: syz.3.383 Not tainted syzkaller #0 PREEMPT(full) [ 136.477025][ T6890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 136.477038][ T6890] Call Trace: [ 136.477046][ T6890] [ 136.477056][ T6890] dump_stack_lvl+0xe8/0x150 [ 136.477098][ T6890] should_fail_ex+0x3eb/0x540 [ 136.477128][ T6890] should_failslab+0xa8/0x100 [ 136.477160][ T6890] __kmalloc_cache_noprof+0x9e/0x600 [ 136.477186][ T6890] ? register_netdevice+0x588/0x2280 [ 136.477210][ T6890] ? register_netdevice+0x588/0x2280 [ 136.477244][ T6890] register_netdevice+0x588/0x2280 [ 136.477268][ T6890] ? lockdep_hardirqs_on+0x7b/0x110 [ 136.477296][ T6890] ? irqentry_exit+0x2a0/0x9b0 [ 136.477337][ T6890] ? __pfx_register_netdevice+0x10/0x10 [ 136.477368][ T6890] ? rcu_is_watching+0x16/0xb0 [ 136.477396][ T6890] ? kfree+0x4d/0x650 [ 136.477415][ T6890] ? __local_bh_enable_ip+0xd6/0x140 [ 136.477443][ T6890] slip_open+0xbbb/0xe60 [ 136.477487][ T6890] ? __pfx_slip_open+0x10/0x10 [ 136.477519][ T6890] ? up_write+0x19d/0x4a0 [ 136.477553][ T6890] tty_ldisc_open+0xa1/0x100 [ 136.477581][ T6890] tty_set_ldisc+0x365/0x540 [ 136.477609][ T6890] tty_ioctl+0xc30/0xde0 [ 136.477635][ T6890] ? __pfx_tty_ioctl+0x10/0x10 [ 136.477659][ T6890] __se_sys_ioctl+0xfc/0x170 [ 136.477691][ T6890] do_syscall_64+0x16a/0x530 [ 136.477715][ T6890] ? trace_irq_disable+0x3b/0x140 [ 136.477738][ T6890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.477758][ T6890] ? clear_bhb_loop+0x70/0xc0 [ 136.477784][ T6890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.477803][ T6890] RIP: 0033:0x00007fbcf4d9fb19 [ 136.477825][ T6890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.477842][ T6890] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.477865][ T6890] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 136.477880][ T6890] RDX: 0000200000000480 RSI: 0000000000005423 RDI: 0000000000000003 [ 136.477894][ T6890] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 136.477907][ T6890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.477929][ T6890] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 136.477964][ T6890] [ 136.533365][ T6871] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.533502][ T6871] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.561291][ T6662] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.708200][ T6662] usb 1-1: Using ep0 maxpacket: 8 [ 136.708954][ T6662] usb 1-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 136.717332][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.717358][ T6662] usb 1-1: Product: syz [ 136.717370][ T6662] usb 1-1: Manufacturer: syz [ 136.717382][ T6662] usb 1-1: SerialNumber: syz [ 136.725949][ T6662] usb 1-1: config 0 descriptor?? [ 136.742193][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 136.805737][ T55] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 136.936089][ T6662] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 137.614282][ T5640] usb 3-1: USB disconnect, device number 9 [ 137.658203][ T993] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 137.809931][ T993] usb 4-1: not running at top speed; connect to a high speed hub [ 137.809953][ T993] usb 4-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 137.810703][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.810733][ T993] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.834611][ T993] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 137.834679][ T993] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 137.949560][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 137.949593][ T27] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 137.949878][ T27] asix 2-1:0.34: probe with driver asix failed with error -71 [ 137.990074][ T27] usb 2-1: USB disconnect, device number 12 [ 138.023112][ T5732] usb 4-1: USB disconnect, device number 8 [ 138.149515][ T6662] usb write operation failed. (-71) [ 138.156471][ T6662] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.157085][ T6662] dvbdev: DVB: registering new adapter (Terratec H7) [ 138.157138][ T6662] usb 1-1: media controller created [ 138.157564][ T6662] usb read operation failed. (-71) [ 138.160243][ T6662] usb write operation failed. (-71) [ 138.197388][ T6662] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 138.205964][ T6662] usb 1-1: USB disconnect, device number 12 [ 138.216935][ T6901] overlayfs: failed to get inode (-116) [ 138.217054][ T6901] overlayfs: failed to get inode (-116) [ 138.790428][ T6924] FAULT_INJECTION: forcing a failure. [ 138.790428][ T6924] name failslab, interval 1, probability 0, space 0, times 0 [ 138.790466][ T6924] CPU: 1 UID: 0 PID: 6924 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(full) [ 138.790490][ T6924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 138.790503][ T6924] Call Trace: [ 138.790512][ T6924] [ 138.790521][ T6924] dump_stack_lvl+0xe8/0x150 [ 138.790558][ T6924] should_fail_ex+0x3eb/0x540 [ 138.790588][ T6924] should_failslab+0xa8/0x100 [ 138.790621][ T6924] __kmalloc_cache_noprof+0x9e/0x600 [ 138.790644][ T6924] ? kstrdup+0x81/0x100 [ 138.790665][ T6924] ? create_filter_start+0x144/0x1e0 [ 138.790685][ T6924] ? create_filter_start+0x144/0x1e0 [ 138.790714][ T6924] create_filter_start+0x144/0x1e0 [ 138.790754][ T6924] apply_subsystem_event_filter+0x16c/0x1780 [ 138.790784][ T6924] ? __might_fault+0xaf/0x130 [ 138.790826][ T6924] subsystem_filter_write+0x96/0xf0 [ 138.790854][ T6924] ? __pfx_subsystem_filter_write+0x10/0x10 [ 138.790881][ T6924] vfs_write+0x296/0xba0 [ 138.790918][ T6924] ? __pfx_vfs_write+0x10/0x10 [ 138.790945][ T6924] ? __fget_files+0x2a/0x420 [ 138.790967][ T6924] ? __fget_files+0x3a2/0x420 [ 138.790988][ T6924] ? __fget_files+0x2a/0x420 [ 138.791020][ T6924] ? fdget+0x1ac/0x250 [ 138.791052][ T6924] ksys_write+0x150/0x270 [ 138.791081][ T6924] ? __pfx_ksys_write+0x10/0x10 [ 138.791120][ T6924] do_syscall_64+0x16a/0x530 [ 138.791145][ T6924] ? trace_irq_disable+0x3b/0x140 [ 138.791166][ T6924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.791187][ T6924] ? clear_bhb_loop+0x70/0xc0 [ 138.791211][ T6924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.791230][ T6924] RIP: 0033:0x00007fd4c1b9fb19 [ 138.791252][ T6924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.791269][ T6924] RSP: 002b:00007fd4bfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 138.791294][ T6924] RAX: ffffffffffffffda RBX: 00007fd4c1e25fa0 RCX: 00007fd4c1b9fb19 [ 138.791309][ T6924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 138.791321][ T6924] RBP: 00007fd4c1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 138.791334][ T6924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.791346][ T6924] R13: 00007fd4c1e26038 R14: 00007fd4c1e25fa0 R15: 00007ffcab11e7c8 [ 138.791382][ T6924] [ 139.588144][ T5715] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 139.740557][ T5715] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 139.742243][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.742273][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.742298][ T5715] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 139.742321][ T5715] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 139.742363][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.745277][ T5715] usb 3-1: config 0 descriptor?? [ 140.213570][ T5715] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 140.864037][ T6966] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.947436][ T6970] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 140.947451][ T6970] overlayfs: failed to set xattr on upper [ 140.947455][ T6970] overlayfs: ...falling back to index=off. [ 140.947459][ T6970] overlayfs: ...falling back to uuid=null. [ 140.947474][ T6970] overlayfs: conflicting lowerdir path [ 141.017304][ T5732] usb 3-1: USB disconnect, device number 10 [ 141.062399][ T6973] FAULT_INJECTION: forcing a failure. [ 141.062399][ T6973] name failslab, interval 1, probability 0, space 0, times 0 [ 141.062433][ T6973] CPU: 1 UID: 0 PID: 6973 Comm: syz.0.414 Not tainted syzkaller #0 PREEMPT(full) [ 141.062455][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.062468][ T6973] Call Trace: [ 141.062477][ T6973] [ 141.062486][ T6973] dump_stack_lvl+0xe8/0x150 [ 141.062523][ T6973] should_fail_ex+0x3eb/0x540 [ 141.062550][ T6973] should_failslab+0xa8/0x100 [ 141.062582][ T6973] __kmalloc_cache_noprof+0x9e/0x600 [ 141.062606][ T6973] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.062635][ T6973] ? sctp_auth_init+0xc5/0x400 [ 141.062661][ T6973] ? sctp_auth_init+0xc5/0x400 [ 141.062697][ T6973] sctp_auth_init+0xc5/0x400 [ 141.062722][ T6973] ? sctp_setsockopt+0x21c/0x12c0 [ 141.062755][ T6973] sctp_setsockopt_auth_supported+0x302/0x530 [ 141.062786][ T6973] sctp_setsockopt+0x599/0x12c0 [ 141.062815][ T6973] ? sock_common_setsockopt+0x36/0xc0 [ 141.062846][ T6973] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 141.062876][ T6973] do_sock_setsockopt+0x17c/0x1b0 [ 141.062904][ T6973] __x64_sys_setsockopt+0x13d/0x1b0 [ 141.062933][ T6973] do_syscall_64+0x16a/0x530 [ 141.062958][ T6973] ? trace_irq_disable+0x3b/0x140 [ 141.062981][ T6973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.063001][ T6973] ? clear_bhb_loop+0x70/0xc0 [ 141.063025][ T6973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.063045][ T6973] RIP: 0033:0x00007f0a5b59fb19 [ 141.063066][ T6973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.063083][ T6973] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.063106][ T6973] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 141.063120][ T6973] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000006 [ 141.063133][ T6973] RBP: 00007f0a5b637b70 R08: 0000000000000008 R09: 0000000000000000 [ 141.063146][ T6973] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 141.063160][ T6973] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 141.063192][ T6973] [ 141.358940][ T6982] FAULT_INJECTION: forcing a failure. [ 141.358940][ T6982] name failslab, interval 1, probability 0, space 0, times 0 [ 141.358975][ T6982] CPU: 1 UID: 0 PID: 6982 Comm: syz.1.418 Not tainted syzkaller #0 PREEMPT(full) [ 141.358998][ T6982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 141.359009][ T6982] Call Trace: [ 141.359018][ T6982] [ 141.359027][ T6982] dump_stack_lvl+0xe8/0x150 [ 141.359063][ T6982] should_fail_ex+0x3eb/0x540 [ 141.359091][ T6982] should_failslab+0xa8/0x100 [ 141.359121][ T6982] __kmalloc_cache_noprof+0x9e/0x600 [ 141.359147][ T6982] ? rdma_restrack_init+0x4f/0x5b0 [ 141.359167][ T6982] ? rdma_restrack_init+0x4f/0x5b0 [ 141.359187][ T6982] ? _ib_alloc_device+0x40/0x680 [ 141.359218][ T6982] rdma_restrack_init+0x4f/0x5b0 [ 141.359239][ T6982] _ib_alloc_device+0x53/0x680 [ 141.359268][ T6982] siw_newlink+0xea/0xde0 [ 141.359294][ T6982] nldev_newlink+0x5be/0x650 [ 141.359332][ T6982] ? __pfx_nldev_newlink+0x10/0x10 [ 141.359437][ T6982] ? __pfx_hook_capable+0x10/0x10 [ 141.359455][ T6982] ? __pfx_hook_capable+0x10/0x10 [ 141.359484][ T6982] ? apparmor_capable+0x126/0x170 [ 141.359508][ T6982] ? security_capable+0x7e/0x2c0 [ 141.359536][ T6982] ? __pfx_nldev_newlink+0x10/0x10 [ 141.359555][ T6982] rdma_nl_rcv+0x6ef/0xa40 [ 141.359588][ T6982] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 141.359629][ T6982] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.359653][ T6982] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.359683][ T6982] netlink_unicast+0x8ef/0xa80 [ 141.359728][ T6982] netlink_sendmsg+0x7f0/0xb20 [ 141.359752][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.359771][ T6982] ? aa_sock_msg_perm+0x144/0x210 [ 141.359792][ T6982] ? apparmor_socket_sendmsg+0x98/0x360 [ 141.359817][ T6982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.359830][ T6982] sock_sendmsg_nosec+0x14e/0x190 [ 141.359855][ T6982] ____sys_sendmsg+0x54e/0x850 [ 141.359878][ T6982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.359904][ T6982] ? import_iovec+0x73/0xa0 [ 141.359925][ T6982] ___sys_sendmsg+0x2a6/0x360 [ 141.359941][ T6982] ? __lock_acquire+0x747/0x2de0 [ 141.359963][ T6982] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.359984][ T6982] ? futex_wait+0x2a2/0x390 [ 141.360031][ T6982] ? __fget_files+0x3a2/0x420 [ 141.360053][ T6982] ? __fget_files+0x2a/0x420 [ 141.360087][ T6982] __x64_sys_sendmsg+0x1b1/0x290 [ 141.360113][ T6982] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.360162][ T6982] do_syscall_64+0x16a/0x530 [ 141.360187][ T6982] ? trace_irq_disable+0x3b/0x140 [ 141.360211][ T6982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.360232][ T6982] ? clear_bhb_loop+0x70/0xc0 [ 141.360259][ T6982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.360281][ T6982] RIP: 0033:0x00007fe334d9fb19 [ 141.360302][ T6982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.360327][ T6982] RSP: 002b:00007fe332ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.360351][ T6982] RAX: ffffffffffffffda RBX: 00007fe335025fa0 RCX: 00007fe334d9fb19 [ 141.360366][ T6982] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 141.360379][ T6982] RBP: 00007fe334e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 141.360393][ T6982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.360405][ T6982] R13: 00007fe335026038 R14: 00007fe335025fa0 R15: 00007ffcab8c1088 [ 141.360441][ T6982] [ 141.533757][ T6984] syzkaller1: entered promiscuous mode [ 141.533778][ T6984] syzkaller1: entered allmulticast mode [ 142.011494][ T7001] FAULT_INJECTION: forcing a failure. [ 142.011494][ T7001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.011528][ T7001] CPU: 0 UID: 0 PID: 7001 Comm: syz.2.427 Not tainted syzkaller #0 PREEMPT(full) [ 142.011551][ T7001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 142.011562][ T7001] Call Trace: [ 142.011571][ T7001] [ 142.011580][ T7001] dump_stack_lvl+0xe8/0x150 [ 142.011617][ T7001] should_fail_ex+0x3eb/0x540 [ 142.011647][ T7001] prepare_alloc_pages+0x21e/0x5f0 [ 142.011681][ T7001] __alloc_frozen_pages_noprof+0x189/0x450 [ 142.011717][ T7001] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 142.011755][ T7001] ? policy_nodemask+0x31b/0x980 [ 142.011793][ T7001] alloc_pages_mpol+0x21e/0x390 [ 142.011838][ T7001] alloc_pages_noprof+0xb1/0x2b0 [ 142.011870][ T7001] crypt_page_alloc+0x6c/0x110 [ 142.011894][ T7001] ? __pfx_crypt_page_alloc+0x10/0x10 [ 142.011917][ T7001] mempool_init_node+0x1f4/0x510 [ 142.011958][ T7001] ? __pfx_crypt_page_free+0x10/0x10 [ 142.011981][ T7001] ? __pfx_crypt_page_alloc+0x10/0x10 [ 142.012003][ T7001] mempool_init_noprof+0x3a/0x50 [ 142.012036][ T7001] crypt_ctr+0x28fb/0x3c20 [ 142.012080][ T7001] ? __pfx_crypt_ctr+0x10/0x10 [ 142.012120][ T7001] ? __kasan_kmalloc+0x93/0xb0 [ 142.012149][ T7001] ? rcu_is_watching+0x16/0xb0 [ 142.012176][ T7001] ? kfree+0x4d/0x650 [ 142.012199][ T7001] ? skip_spaces+0x8a/0xa0 [ 142.012227][ T7001] ? dm_split_args+0x4c0/0x5d0 [ 142.012269][ T7001] dm_table_add_target+0x58d/0xc70 [ 142.012320][ T7001] table_load+0x325/0x8a0 [ 142.012360][ T7001] ? __pfx_table_load+0x10/0x10 [ 142.012401][ T7001] ? __might_fault+0xaf/0x130 [ 142.012436][ T7001] dm_ctl_ioctl+0x9ec/0xe10 [ 142.012475][ T7001] ? __pfx_table_load+0x10/0x10 [ 142.012504][ T7001] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 142.012568][ T7001] ? __fget_files+0x2a/0x420 [ 142.012597][ T7001] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.012624][ T7001] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 142.012652][ T7001] __se_sys_ioctl+0xfc/0x170 [ 142.012684][ T7001] do_syscall_64+0x16a/0x530 [ 142.012708][ T7001] ? trace_irq_disable+0x3b/0x140 [ 142.012732][ T7001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.012751][ T7001] ? clear_bhb_loop+0x70/0xc0 [ 142.012774][ T7001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.012792][ T7001] RIP: 0033:0x00007fd4c1b9fb19 [ 142.012822][ T7001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.012839][ T7001] RSP: 002b:00007fd4bfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.012863][ T7001] RAX: ffffffffffffffda RBX: 00007fd4c1e25fa0 RCX: 00007fd4c1b9fb19 [ 142.012876][ T7001] RDX: 0000200000000340 RSI: 00000000c138fd09 RDI: 0000000000000004 [ 142.012889][ T7001] RBP: 00007fd4c1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.012902][ T7001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.012933][ T7001] R13: 00007fd4c1e26038 R14: 00007fd4c1e25fa0 R15: 00007ffcab11e7c8 [ 142.012964][ T7001] [ 142.045277][ T7001] device-mapper: table: 248:1: crypt: Cannot allocate page mempool (-ENOMEM) [ 142.045302][ T7001] device-mapper: ioctl: error adding target to table [ 142.086636][ T7000] input: syz0 as /devices/virtual/input/input14 [ 142.292056][ T6662] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 142.469476][ T6662] usb 4-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 142.471697][ T6662] usb 4-1: config 1 has too many interfaces: 241, using maximum allowed: 32 [ 142.471724][ T6662] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 241 [ 142.471805][ T6662] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 142.474088][ T7014] FAULT_INJECTION: forcing a failure. [ 142.474088][ T7014] name failslab, interval 1, probability 0, space 0, times 0 [ 142.474111][ T7014] CPU: 0 UID: 0 PID: 7014 Comm: syz.1.432 Not tainted syzkaller #0 PREEMPT(full) [ 142.474130][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 142.474140][ T7014] Call Trace: [ 142.474146][ T7014] [ 142.474154][ T7014] dump_stack_lvl+0xe8/0x150 [ 142.474181][ T7014] should_fail_ex+0x3eb/0x540 [ 142.474204][ T7014] should_failslab+0xa8/0x100 [ 142.474233][ T7014] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 142.474260][ T7014] ? __pfx_hook_capable+0x10/0x10 [ 142.474278][ T7014] ? nfs_get_tree+0xc28/0x1520 [ 142.474298][ T7014] ? nfs_get_tree+0xc28/0x1520 [ 142.474326][ T7014] kmemdup_nul+0x36/0xf0 [ 142.474343][ T6662] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.474344][ T7014] nfs_get_tree+0xc28/0x1520 [ 142.474360][ T6662] usb 4-1: Product: syz [ 142.474371][ T6662] usb 4-1: Manufacturer: syz [ 142.474373][ T7014] vfs_get_tree+0x92/0x2a0 [ 142.474382][ T6662] usb 4-1: SerialNumber: syz [ 142.474399][ T7014] vfs_cmd_create+0xa2/0x200 [ 142.474421][ T7014] __se_sys_fsconfig+0x6b9/0x810 [ 142.474458][ T7014] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 142.474489][ T7014] ? rcu_is_watching+0x16/0xb0 [ 142.474525][ T7014] ? __x64_sys_fsconfig+0x20/0xc0 [ 142.474558][ T7014] do_syscall_64+0x16a/0x530 [ 142.474584][ T7014] ? trace_irq_disable+0x3b/0x140 [ 142.474610][ T7014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.474631][ T7014] ? clear_bhb_loop+0x70/0xc0 [ 142.474657][ T7014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.474677][ T7014] RIP: 0033:0x00007fe334d9fb19 [ 142.474699][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.474715][ T7014] RSP: 002b:00007fe332ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 142.474738][ T7014] RAX: ffffffffffffffda RBX: 00007fe335025fa0 RCX: 00007fe334d9fb19 [ 142.474753][ T7014] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 142.474765][ T7014] RBP: 00007fe334e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 142.474778][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.474791][ T7014] R13: 00007fe335026038 R14: 00007fe335025fa0 R15: 00007ffcab8c1088 [ 142.474827][ T7014] [ 142.986573][ T7002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 143.336296][ T7027] FAULT_INJECTION: forcing a failure. [ 143.336296][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 143.336331][ T7027] CPU: 1 UID: 0 PID: 7027 Comm: syz.0.435 Not tainted syzkaller #0 PREEMPT(full) [ 143.336357][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 143.336371][ T7027] Call Trace: [ 143.336379][ T7027] [ 143.336398][ T7027] dump_stack_lvl+0xe8/0x150 [ 143.336435][ T7027] should_fail_ex+0x3eb/0x540 [ 143.336463][ T7027] ? __pfx_proc_alloc_inode+0x10/0x10 [ 143.336485][ T7027] should_failslab+0xa8/0x100 [ 143.336513][ T7027] ? __pfx_proc_alloc_inode+0x10/0x10 [ 143.336532][ T7027] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 143.336556][ T7027] ? proc_alloc_inode+0x2a/0xc0 [ 143.336573][ T7027] ? proc_alloc_inode+0x2a/0xc0 [ 143.336594][ T7027] ? __pfx_proc_alloc_inode+0x10/0x10 [ 143.336605][ T7027] proc_alloc_inode+0x2a/0xc0 [ 143.336616][ T7027] alloc_inode+0x6a/0x1b0 [ 143.336630][ T7027] new_inode+0x1f/0x170 [ 143.336642][ T7027] ? proc_pid_make_inode+0x19/0x130 [ 143.336657][ T7027] proc_pid_make_inode+0x21/0x130 [ 143.336672][ T7027] proc_ns_instantiate+0x53/0xf0 [ 143.336692][ T7027] proc_fill_cache+0x2a8/0x390 [ 143.336706][ T7027] ? __pfx_proc_ns_instantiate+0x10/0x10 [ 143.336723][ T7027] ? __pfx_proc_fill_cache+0x10/0x10 [ 143.336744][ T7027] proc_ns_dir_readdir+0x2f1/0x3d0 [ 143.336765][ T7027] iterate_dir+0x3db/0x880 [ 143.336785][ T7027] __se_sys_getdents64+0xf1/0x280 [ 143.336804][ T7027] ? __pfx___se_sys_getdents64+0x10/0x10 [ 143.336820][ T7027] ? __pfx_filldir64+0x10/0x10 [ 143.336836][ T7027] ? rcu_is_watching+0x16/0xb0 [ 143.336860][ T7027] do_syscall_64+0x16a/0x530 [ 143.336875][ T7027] ? trace_irq_disable+0x3b/0x140 [ 143.336893][ T7027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.336905][ T7027] ? clear_bhb_loop+0x70/0xc0 [ 143.336919][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.336930][ T7027] RIP: 0033:0x00007f0a5b59fb19 [ 143.336944][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.336954][ T7027] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 143.336974][ T7027] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 143.336988][ T7027] RDX: 00000000000000a6 RSI: 0000200000000040 RDI: 0000000000000004 [ 143.337002][ T7027] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 143.337014][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 143.337023][ T7027] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 143.337044][ T7027] [ 143.835344][ T7002] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.037845][ T6662] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 144.037874][ T6662] cdc_ncm 4-1:1.0: setting rx_max = 16384 [ 144.237365][ T6662] cdc_ncm 4-1:1.0: setting tx_max = 16384 [ 144.269670][ T6662] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 144.299598][ T6662] usb 4-1: USB disconnect, device number 9 [ 144.302154][ T6662] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 144.614602][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 144.614621][ T7049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.442'. [ 144.883615][ T7058] FAULT_INJECTION: forcing a failure. [ 144.883615][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 144.883634][ T7058] CPU: 1 UID: 0 PID: 7058 Comm: syz.3.446 Not tainted syzkaller #0 PREEMPT(full) [ 144.883645][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 144.883652][ T7058] Call Trace: [ 144.883656][ T7058] [ 144.883661][ T7058] dump_stack_lvl+0xe8/0x150 [ 144.883681][ T7058] should_fail_ex+0x3eb/0x540 [ 144.883699][ T7058] should_failslab+0xa8/0x100 [ 144.883712][ T7058] ? __kernfs_new_node+0xe6/0x980 [ 144.883723][ T7058] kmem_cache_alloc_noprof+0x9c/0x600 [ 144.883735][ T7058] ? __kernfs_new_node+0xe6/0x980 [ 144.883747][ T7058] __kernfs_new_node+0xe6/0x980 [ 144.883761][ T7058] ? __pfx___kernfs_new_node+0x10/0x10 [ 144.883770][ T7058] ? kernfs_root+0x1c/0x230 [ 144.883787][ T7058] ? kernfs_root+0x1c/0x230 [ 144.883800][ T7058] ? kernfs_root+0x1c/0x230 [ 144.883812][ T7058] ? kernfs_root+0x1c/0x230 [ 144.883827][ T7058] kernfs_new_node+0xea/0x140 [ 144.883844][ T7058] __kernfs_create_file+0x4b/0x2e0 [ 144.883857][ T7058] sysfs_add_file_mode_ns+0x237/0x300 [ 144.883872][ T7058] internal_create_group+0x679/0x1180 [ 144.883893][ T7058] ? __pfx_internal_create_group+0x10/0x10 [ 144.883907][ T7058] ? up_write+0x19d/0x4a0 [ 144.883923][ T7058] sysfs_create_groups+0x59/0x120 [ 144.883939][ T7058] device_add_attrs+0x1b1/0x600 [ 144.883951][ T7058] ? __pfx_device_add_attrs+0x10/0x10 [ 144.883961][ T7058] ? kobject_put+0x50f/0x550 [ 144.883973][ T7058] ? device_add_class_symlinks+0x21f/0x240 [ 144.883984][ T7058] device_add+0x488/0xb80 [ 144.883996][ T7058] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 144.884009][ T7058] wakeup_source_register+0x17f/0x380 [ 144.884022][ T7058] ep_modify+0x277/0xbf0 [ 144.884033][ T7058] ? __lock_acquire+0x747/0x2de0 [ 144.884046][ T7058] ? __pfx_ep_modify+0x10/0x10 [ 144.884062][ T7058] ? bpf_lsm_capable+0x9/0x20 [ 144.884075][ T7058] ? security_capable+0x7e/0x2c0 [ 144.884093][ T7058] do_epoll_ctl_file+0x782/0xee0 [ 144.884116][ T7058] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 144.884139][ T7058] ? __fget_files+0x3a2/0x420 [ 144.884155][ T7058] ? __fget_files+0x2a/0x420 [ 144.884174][ T7058] ? fdget+0x1ac/0x250 [ 144.884193][ T7058] __se_sys_epoll_ctl+0x162/0x230 [ 144.884216][ T7058] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 144.884246][ T7058] do_syscall_64+0x16a/0x530 [ 144.884260][ T7058] ? trace_irq_disable+0x3b/0x140 [ 144.884271][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.884280][ T7058] ? clear_bhb_loop+0x70/0xc0 [ 144.884292][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.884301][ T7058] RIP: 0033:0x00007fbcf4d9fb19 [ 144.884320][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.884329][ T7058] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 144.884343][ T7058] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 144.884351][ T7058] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004 [ 144.884357][ T7058] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 144.884364][ T7058] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 144.884370][ T7058] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 144.884386][ T7058] [ 144.985865][ T7060] FAULT_INJECTION: forcing a failure. [ 144.985865][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 144.985894][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.3.447 Not tainted syzkaller #0 PREEMPT(full) [ 144.985916][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 144.985927][ T7060] Call Trace: [ 144.985935][ T7060] [ 144.985943][ T7060] dump_stack_lvl+0xe8/0x150 [ 144.985974][ T7060] should_fail_ex+0x3eb/0x540 [ 144.986001][ T7060] should_failslab+0xa8/0x100 [ 144.986028][ T7060] __kmalloc_cache_noprof+0x9e/0x600 [ 144.986048][ T7060] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 144.986075][ T7060] ? reuseport_alloc+0x11e/0x4d0 [ 144.986096][ T7060] ? reuseport_alloc+0x11e/0x4d0 [ 144.986124][ T7060] reuseport_alloc+0x11e/0x4d0 [ 144.986148][ T7060] inet_hash+0x747/0xdb0 [ 144.986185][ T7060] inet_csk_listen_start+0x27a/0x380 [ 144.986209][ T7060] __inet_listen_sk+0x1f1/0x300 [ 144.986232][ T7060] inet_listen+0xa5/0x110 [ 144.986254][ T7060] __x64_sys_listen+0x1c7/0x240 [ 144.986285][ T7060] do_syscall_64+0x16a/0x530 [ 144.986309][ T7060] ? trace_irq_disable+0x3b/0x140 [ 144.986329][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.986357][ T7060] ? clear_bhb_loop+0x70/0xc0 [ 144.986380][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.986398][ T7060] RIP: 0033:0x00007fbcf4d9fb19 [ 144.986417][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.986436][ T7060] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 144.986455][ T7060] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 144.986469][ T7060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 144.986479][ T7060] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 144.986491][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.986502][ T7060] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 144.986533][ T7060] [ 146.138335][ T5640] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 146.292213][ T5640] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a7, bcdDevice=1.00 [ 146.300024][ T5640] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 18 [ 146.300191][ T5640] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.523469][ T5640] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 146.790724][ T5640] usb 1-1: USB disconnect, device number 13 [ 147.190124][ T7127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.537745][ T7073] IPVS: starting estimator thread 0... [ 147.619067][ T7143] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 147.638169][ T7141] IPVS: using max 26 ests per chain, 62400 per kthread [ 147.673471][ T7145] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 148.006639][ T7155] FAULT_INJECTION: forcing a failure. [ 148.006639][ T7155] name failslab, interval 1, probability 0, space 0, times 0 [ 148.006680][ T7155] CPU: 1 UID: 0 PID: 7155 Comm: syz.3.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.006709][ T7155] Tainted: [L]=SOFTLOCKUP [ 148.006717][ T7155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 148.006730][ T7155] Call Trace: [ 148.006738][ T7155] [ 148.006748][ T7155] dump_stack_lvl+0xe8/0x150 [ 148.006785][ T7155] should_fail_ex+0x3eb/0x540 [ 148.006814][ T7155] should_failslab+0xa8/0x100 [ 148.006842][ T7155] ? skb_ext_add+0x148/0x8e0 [ 148.006866][ T7155] kmem_cache_alloc_noprof+0x9c/0x600 [ 148.006890][ T7155] ? __alloc_skb+0x27a/0x7a0 [ 148.006910][ T7155] ? skb_ext_add+0x148/0x8e0 [ 148.006938][ T7155] skb_ext_add+0x148/0x8e0 [ 148.006963][ T7155] ? __alloc_skb+0x4d0/0x7a0 [ 148.006987][ T7155] bcm_can_tx+0x2f0/0xba0 [ 148.007016][ T7155] ? __pfx_bcm_can_tx+0x10/0x10 [ 148.007047][ T7155] ? hrtimer_try_to_cancel+0x1f7/0x680 [ 148.007085][ T7155] bcm_tx_setup+0x127d/0x1c00 [ 148.007122][ T7155] bcm_sendmsg+0x50d/0x7a0 [ 148.007159][ T7155] ? __pfx_bcm_sendmsg+0x10/0x10 [ 148.007194][ T7155] ? apparmor_socket_sendmsg+0x98/0x360 [ 148.007226][ T7155] ? __pfx_bcm_sendmsg+0x10/0x10 [ 148.007245][ T7155] sock_sendmsg_nosec+0x14e/0x190 [ 148.007276][ T7155] ____sys_sendmsg+0x54e/0x850 [ 148.007303][ T7155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.007336][ T7155] ? import_iovec+0x73/0xa0 [ 148.007367][ T7155] ___sys_sendmsg+0x2a6/0x360 [ 148.007387][ T7155] ? __lock_acquire+0x747/0x2de0 [ 148.007412][ T7155] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.007438][ T7155] ? futex_wait+0x2a2/0x390 [ 148.007488][ T7155] ? __fget_files+0x3a2/0x420 [ 148.007510][ T7155] ? __fget_files+0x2a/0x420 [ 148.007540][ T7155] __x64_sys_sendmsg+0x1b1/0x290 [ 148.007565][ T7155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.007611][ T7155] do_syscall_64+0x16a/0x530 [ 148.007637][ T7155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.007657][ T7155] ? clear_bhb_loop+0x70/0xc0 [ 148.007681][ T7155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.007699][ T7155] RIP: 0033:0x00007fbcf4d9fb19 [ 148.007721][ T7155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.007737][ T7155] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.007760][ T7155] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 148.007775][ T7155] RDX: 0000000000008001 RSI: 0000200000000200 RDI: 0000000000000004 [ 148.007788][ T7155] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 148.007801][ T7155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.007813][ T7155] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 148.007847][ T7155] [ 148.348144][ T6662] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 148.501472][ T6662] usb 1-1: Using ep0 maxpacket: 16 [ 148.502257][ T6662] usb 1-1: New USB device found: idVendor=04f3, idProduct=074d, bcdDevice=0.00 [ 148.503344][ T6662] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 148.503369][ T6662] usb 1-1: config 0 has no interface number 0 [ 148.503411][ T6662] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.503436][ T6662] usb 1-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.503457][ T6662] usb 1-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.503482][ T6662] usb 1-1: config 0 interface 1 has no altsetting 0 [ 148.503514][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.588163][ T6662] usb 1-1: config 0 descriptor?? [ 148.600627][ T6662] usbhid 1-1:0.1: fixing wrong optional hid class descriptors count [ 149.010168][ T6662] elan 0003:04F3:074D.0006: failed to start in urb: -90 [ 149.088159][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 149.413837][ T6662] elan 0003:04F3:074D.0006: Get report error for parm 6: 0 [ 149.538141][ T27] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 149.560519][ T993] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 149.608158][ T5640] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 149.690160][ T27] usb 3-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 149.691618][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.691667][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.695174][ T27] usb 3-1: config 0 descriptor?? [ 149.735001][ T993] usb 2-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 149.737123][ T993] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.760942][ T993] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 149.779894][ T5640] usb 4-1: Using ep0 maxpacket: 32 [ 149.780094][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.780192][ T993] usb 2-1: Product: syz [ 149.780207][ T993] usb 2-1: Manufacturer: syz [ 149.780220][ T993] usb 2-1: SerialNumber: syz [ 149.785193][ T5640] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.785247][ T5640] usb 4-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 149.818949][ T6662] elan 0003:04F3:074D.0006: Get report error for parm 7: 0 [ 149.841544][ T5640] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 149.841575][ T5640] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 149.841594][ T5640] usb 4-1: config 14 has no interface number 0 [ 149.841609][ T5640] usb 4-1: config 14 has no interface number 1 [ 149.841672][ T5640] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 149.841696][ T5640] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 149.841720][ T5640] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 149.841754][ T5640] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 149.841780][ T5640] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 149.841804][ T5640] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.841828][ T5640] usb 4-1: config 14 interface 57 has no altsetting 0 [ 149.841846][ T5640] usb 4-1: config 14 interface 228 has no altsetting 0 [ 149.892478][ T5640] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.892508][ T5640] usb 4-1: Product: syz [ 149.892522][ T5640] usb 4-1: Manufacturer: syz [ 149.892535][ T5640] usb 4-1: SerialNumber: syz [ 149.922201][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 149.922335][ T27] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 149.929039][ T27] usb 3-1: USB disconnect, device number 11 [ 149.931101][ T993] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 150.031559][ T6662] elan 0003:04F3:074D.0006: Set report error for parm 8: -71 [ 150.057686][ T993] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 150.080003][ T993] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 150.089615][ T6662] elan 0003:04F3:074D.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 04f3:074d] on usb-dummy_hcd.0-1/input1 [ 150.089647][ T6662] elan 0003:04F3:074D.0006: Input device is not registered [ 150.144648][ T6662] elan 0003:04F3:074D.0006: probe with driver elan failed with error -119 [ 150.162447][ T6662] usb 1-1: USB disconnect, device number 14 [ 150.224858][ T7178] fido_id[7178]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 150.428161][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 150.477725][ T5640] legousbtower 4-1:14.57: interrupt endpoints not found [ 150.579793][ T27] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.40 [ 150.581710][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.581788][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.584336][ T27] usb 3-1: config 0 descriptor?? [ 150.878123][ T5640] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 150.882465][ T5640] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 151.098200][ T6662] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 151.250126][ T6662] usb 1-1: Using ep0 maxpacket: 32 [ 151.251952][ T6662] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.251985][ T6662] usb 1-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 151.252841][ T6662] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 151.252853][ T6662] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 151.252862][ T6662] usb 1-1: config 14 has no interface number 0 [ 151.252870][ T6662] usb 1-1: config 14 has no interface number 1 [ 151.252898][ T6662] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 151.252908][ T6662] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 151.252919][ T6662] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 151.252947][ T6662] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 151.252959][ T6662] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 151.252969][ T6662] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.252981][ T6662] usb 1-1: config 14 interface 57 has no altsetting 0 [ 151.252989][ T6662] usb 1-1: config 14 interface 228 has no altsetting 0 [ 151.254711][ T6662] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.254725][ T6662] usb 1-1: Product: syz [ 151.254733][ T6662] usb 1-1: Manufacturer: syz [ 151.254761][ T6662] usb 1-1: SerialNumber: syz [ 151.417367][ T27] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 151.427641][ T27] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 151.666477][ T993] usb 4-1: USB disconnect, device number 10 [ 151.684114][ T993] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 151.700252][ T6662] legousbtower 1-1:14.57: interrupt endpoints not found [ 151.759040][ T27] usb 3-1: USB disconnect, device number 12 [ 151.759451][ C1] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 151.812350][ T7174] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 151.817325][ T5725] usb 2-1: USB disconnect, device number 13 [ 151.846709][ T5725] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 151.863454][ T5725] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 151.864004][ T5725] ti_usb_3410_5052 2-1:2.0: device disconnected [ 152.101776][ T6662] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 152.104649][ T6662] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 152.476938][ T7196] FAULT_INJECTION: forcing a failure. [ 152.476938][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 152.476963][ T7196] CPU: 1 UID: 0 PID: 7196 Comm: syz.3.494 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.476981][ T7196] Tainted: [L]=SOFTLOCKUP [ 152.476986][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.476993][ T7196] Call Trace: [ 152.476998][ T7196] [ 152.477004][ T7196] dump_stack_lvl+0xe8/0x150 [ 152.477028][ T7196] should_fail_ex+0x3eb/0x540 [ 152.477046][ T7196] should_failslab+0xa8/0x100 [ 152.477064][ T7196] __kmalloc_cache_noprof+0x9e/0x600 [ 152.477079][ T7196] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 152.477095][ T7196] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 152.477114][ T7196] wakeup_source_sysfs_add+0x57/0x2c0 [ 152.477133][ T7196] wakeup_source_register+0x17f/0x380 [ 152.477149][ T7196] ep_insert+0xfaf/0x1af0 [ 152.477174][ T7196] ? __pfx_ep_insert+0x10/0x10 [ 152.477199][ T7196] ? do_epoll_ctl_file+0xacd/0xee0 [ 152.477218][ T7196] do_epoll_ctl_file+0x8c2/0xee0 [ 152.477235][ T7196] ? do_epoll_ctl_file+0xacd/0xee0 [ 152.477264][ T7196] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 152.477282][ T7196] ? __fget_files+0x3a2/0x420 [ 152.477295][ T7196] ? __fget_files+0x2a/0x420 [ 152.477312][ T7196] ? fdget+0x1ac/0x250 [ 152.477327][ T7196] __se_sys_epoll_ctl+0x162/0x230 [ 152.477346][ T7196] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 152.477370][ T7196] do_syscall_64+0x16a/0x530 [ 152.477386][ T7196] ? trace_irq_disable+0x3b/0x140 [ 152.477399][ T7196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.477411][ T7196] ? clear_bhb_loop+0x70/0xc0 [ 152.477425][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.477436][ T7196] RIP: 0033:0x00007fbcf4d9fb19 [ 152.477450][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.477460][ T7196] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 152.477475][ T7196] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 152.477484][ T7196] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000004 [ 152.477491][ T7196] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 152.477498][ T7196] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 152.477506][ T7196] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 152.477526][ T7196] [ 152.569525][ T5725] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 152.707807][ T27] usb 1-1: USB disconnect, device number 15 [ 152.707877][ C1] usb 1-1: tower_interrupt_in_callback: usb_submit_urb failed (-19) [ 152.752009][ T5725] usb 3-1: unable to get BOS descriptor or descriptor too short [ 152.761540][ T5725] usb 3-1: New USB device found: idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 152.761580][ T5725] usb 3-1: no configurations [ 152.761592][ T5725] usb 3-1: can't read configurations, error -22 [ 152.784712][ T27] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 152.908606][ T6662] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.058641][ T6662] usb 4-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 153.059529][ T6662] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.059545][ T6662] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 153.059556][ T6662] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 153.059576][ T6662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.061599][ T7199] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 153.325175][ T7205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.325251][ T7205] FAULT_INJECTION: forcing a failure. [ 153.325251][ T7205] name failslab, interval 1, probability 0, space 0, times 0 [ 153.325283][ T7205] CPU: 1 UID: 0 PID: 7205 Comm: syz.2.497 Tainted: G L syzkaller #0 PREEMPT(full) [ 153.325310][ T7205] Tainted: [L]=SOFTLOCKUP [ 153.325318][ T7205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.325329][ T7205] Call Trace: [ 153.325338][ T7205] [ 153.325346][ T7205] dump_stack_lvl+0xe8/0x150 [ 153.325382][ T7205] should_fail_ex+0x3eb/0x540 [ 153.325411][ T7205] should_failslab+0xa8/0x100 [ 153.325441][ T7205] __kmalloc_noprof+0xf9/0x710 [ 153.325463][ T7205] ? kobject_get_path+0xc5/0x2f0 [ 153.325482][ T7205] ? kobject_get_path+0xc5/0x2f0 [ 153.325509][ T7205] kobject_get_path+0xc5/0x2f0 [ 153.325536][ T7205] kobject_uevent_env+0x29e/0x9e0 [ 153.325561][ T7205] ? kobject_put+0x50f/0x550 [ 153.325587][ T7205] device_add+0x544/0xb80 [ 153.325615][ T7205] iommu_mock_device_add+0x83/0x1e0 [ 153.325649][ T7205] iommufd_test+0x38d1/0x6360 [ 153.325689][ T7205] ? __lock_acquire+0x747/0x2de0 [ 153.325712][ T7205] ? __pfx_iommufd_test+0x10/0x10 [ 153.325746][ T7205] ? tomoyo_path_number_perm+0x219/0x5f0 [ 153.325776][ T7205] ? tomoyo_path_number_perm+0x219/0x5f0 [ 153.325806][ T7205] ? lock_acquire+0x115/0x350 [ 153.325843][ T7205] ? __might_fault+0xaf/0x130 [ 153.325877][ T7205] iommufd_fops_ioctl+0x465/0x600 [ 153.325909][ T7205] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 153.325936][ T7205] ? __fget_files+0x2a/0x420 [ 153.325972][ T7205] ? bpf_lsm_file_ioctl+0x9/0x20 [ 153.325997][ T7205] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 153.326022][ T7205] __se_sys_ioctl+0xfc/0x170 [ 153.326053][ T7205] do_syscall_64+0x16a/0x530 [ 153.326078][ T7205] ? trace_irq_disable+0x3b/0x140 [ 153.326100][ T7205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.326120][ T7205] ? clear_bhb_loop+0x70/0xc0 [ 153.326143][ T7205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.326162][ T7205] RIP: 0033:0x00007fd4c1b9fb19 [ 153.326183][ T7205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.326200][ T7205] RSP: 002b:00007fd4bfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.326223][ T7205] RAX: ffffffffffffffda RBX: 00007fd4c1e25fa0 RCX: 00007fd4c1b9fb19 [ 153.326237][ T7205] RDX: 0000200000002280 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 153.326250][ T7205] RBP: 00007fd4c1c37b70 R08: 0000000000000000 R09: 0000000000000000 [ 153.326262][ T7205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.326273][ T7205] R13: 00007fd4c1e26038 R14: 00007fd4c1e25fa0 R15: 00007ffcab11e7c8 [ 153.326305][ T7205] [ 153.724023][ T7216] Bluetooth: MGMT ver 1.23 [ 153.897210][ T7223] syz.2.504 (7223) used obsolete PPPIOCDETACH ioctl [ 153.990885][ T7225] capability: warning: `syz.2.505' uses 32-bit capabilities (legacy support in use) [ 154.269962][ T993] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 154.357932][ T7233] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 154.418176][ T993] usb 3-1: Using ep0 maxpacket: 32 [ 154.420004][ T993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.420031][ T993] usb 3-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 154.420904][ T993] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 154.420918][ T993] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 154.420930][ T993] usb 3-1: config 14 has no interface number 0 [ 154.420939][ T993] usb 3-1: config 14 has no interface number 1 [ 154.420975][ T993] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 154.420989][ T993] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 154.421002][ T993] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 154.421016][ T993] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 154.421060][ T993] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 154.421085][ T993] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.421118][ T993] usb 3-1: config 14 interface 57 has no altsetting 0 [ 154.421135][ T993] usb 3-1: config 14 interface 228 has no altsetting 0 [ 154.422785][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.422798][ T993] usb 3-1: Product: syz [ 154.422806][ T993] usb 3-1: Manufacturer: syz [ 154.422814][ T993] usb 3-1: SerialNumber: syz [ 154.648457][ T7238] VFS: Lookup of 'file0' in fuse fuse would have caused loop [ 154.834570][ T993] legousbtower 3-1:14.57: interrupt endpoints not found [ 155.190213][ T6662] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 155.195235][ T6662] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input17 [ 155.235324][ T993] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 170.80 build 16178 [ 155.244726][ T6662] usb 4-1: USB disconnect, device number 11 [ 155.244830][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 155.247906][ T993] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 155.694619][ T7263] FAULT_FLAG_ALLOW_RETRY missing 801 [ 155.694637][ T7263] CPU: 0 UID: 0 PID: 7263 Comm: syz.0.519 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.694651][ T7263] Tainted: [L]=SOFTLOCKUP [ 155.694655][ T7263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 155.694662][ T7263] Call Trace: [ 155.694665][ T7263] [ 155.694670][ T7263] dump_stack_lvl+0xe8/0x150 [ 155.694689][ T7263] handle_userfault+0x12ed/0x1ab0 [ 155.694715][ T7263] ? __pfx_handle_userfault+0x10/0x10 [ 155.694741][ T7263] handle_mm_fault+0x1807/0x2f80 [ 155.694761][ T7263] ? handle_mm_fault+0xee/0x2f80 [ 155.694777][ T7263] ? follow_page_pte+0x660/0xf10 [ 155.694790][ T7263] ? __pfx_handle_mm_fault+0x10/0x10 [ 155.694804][ T7263] ? follow_page_pte+0x748/0xf10 [ 155.694820][ T7263] ? __pfx_follow_page_pte+0x10/0x10 [ 155.694834][ T7263] ? follow_pmd_mask+0x185/0x780 [ 155.694849][ T7263] __get_user_pages+0x102b/0x1ea0 [ 155.694874][ T7263] populate_vma_page_range+0x311/0x3f0 [ 155.694888][ T7263] ? __pfx_populate_vma_page_range+0x10/0x10 [ 155.694899][ T7263] ? vma_wants_writenotify+0xb2/0x340 [ 155.694915][ T7263] ? vma_set_page_prot+0xc3/0x100 [ 155.694935][ T7263] mprotect_fixup+0xb06/0xf20 [ 155.694959][ T7263] ? __pfx_mprotect_fixup+0x10/0x10 [ 155.694976][ T7263] ? mas_next_slot+0xa9f/0xc20 [ 155.695003][ T7263] ? apparmor_file_mprotect+0x1ec/0x3a0 [ 155.695021][ T7263] ? security_file_mprotect+0x1a/0x290 [ 155.695044][ T7263] do_mprotect_pkey+0x8e7/0xd40 [ 155.695074][ T7263] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 155.695126][ T7263] ? rcu_is_watching+0x16/0xb0 [ 155.695157][ T7263] __x64_sys_mprotect+0x80/0x90 [ 155.695175][ T7263] do_syscall_64+0x16a/0x530 [ 155.695193][ T7263] ? trace_irq_disable+0x3b/0x140 [ 155.695210][ T7263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.695226][ T7263] ? clear_bhb_loop+0x70/0xc0 [ 155.695252][ T7263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.695271][ T7263] RIP: 0033:0x00007f0a5b59fb19 [ 155.695292][ T7263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.695309][ T7263] RSP: 002b:00007f0a5c455028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 155.695332][ T7263] RAX: ffffffffffffffda RBX: 00007f0a5b826090 RCX: 00007f0a5b59fb19 [ 155.695347][ T7263] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 155.695361][ T7263] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 155.695374][ T7263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.695385][ T7263] R13: 00007f0a5b826128 R14: 00007f0a5b826090 R15: 00007ffcc91e8968 [ 155.695420][ T7263] [ 156.079606][ T993] usb 3-1: USB disconnect, device number 15 [ 156.108938][ T993] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 156.246838][ T7272] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 158.696053][ T7286] FAULT_INJECTION: forcing a failure. [ 158.696053][ T7286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.696091][ T7286] CPU: 0 UID: 0 PID: 7286 Comm: syz.0.528 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.696121][ T7286] Tainted: [L]=SOFTLOCKUP [ 158.696129][ T7286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 158.696140][ T7286] Call Trace: [ 158.696147][ T7286] [ 158.696155][ T7286] dump_stack_lvl+0xe8/0x150 [ 158.696203][ T7286] should_fail_ex+0x3eb/0x540 [ 158.696233][ T7286] _copy_from_user+0x2d/0xb0 [ 158.696259][ T7286] copy_from_sockptr+0x5e/0x90 [ 158.696289][ T7286] memdup_sockptr_noprof+0x44/0x90 [ 158.696318][ T7286] do_ip_setsockopt+0x1fb5/0x2e30 [ 158.696351][ T7286] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 158.696374][ T7286] ? do_futex+0x3e7/0x4e0 [ 158.696405][ T7286] ? lock_acquire+0x115/0x350 [ 158.696438][ T7286] ? aa_sock_opt_perm+0xe8/0x1e0 [ 158.696465][ T7286] ip_setsockopt+0x66/0x110 [ 158.696489][ T7286] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 158.696521][ T7286] do_sock_setsockopt+0x17c/0x1b0 [ 158.696548][ T7286] __x64_sys_setsockopt+0x13d/0x1b0 [ 158.696576][ T7286] do_syscall_64+0x16a/0x530 [ 158.696603][ T7286] ? trace_irq_disable+0x3b/0x140 [ 158.696626][ T7286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.696646][ T7286] ? clear_bhb_loop+0x70/0xc0 [ 158.696671][ T7286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.696689][ T7286] RIP: 0033:0x00007f0a5b59fb19 [ 158.696710][ T7286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.696727][ T7286] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 158.696750][ T7286] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 158.696764][ T7286] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 158.696776][ T7286] RBP: 00007f0a5b637b70 R08: 0000000000000057 R09: 0000000000000000 [ 158.696789][ T7286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.696801][ T7286] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 158.696835][ T7286] [ 158.730823][ T7290] FAULT_INJECTION: forcing a failure. [ 158.730823][ T7290] name failslab, interval 1, probability 0, space 0, times 0 [ 158.730855][ T7290] CPU: 1 UID: 0 PID: 7290 Comm: syz.3.530 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.730880][ T7290] Tainted: [L]=SOFTLOCKUP [ 158.730887][ T7290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 158.730898][ T7290] Call Trace: [ 158.730906][ T7290] [ 158.730914][ T7290] dump_stack_lvl+0xe8/0x150 [ 158.730948][ T7290] should_fail_ex+0x3eb/0x540 [ 158.730974][ T7290] should_failslab+0xa8/0x100 [ 158.731002][ T7290] __kmalloc_cache_noprof+0x9e/0x600 [ 158.731025][ T7290] ? resv_map_alloc+0x51/0x2c0 [ 158.731044][ T7290] ? resv_map_alloc+0x51/0x2c0 [ 158.731070][ T7290] resv_map_alloc+0x51/0x2c0 [ 158.731093][ T7290] hugetlbfs_get_inode+0x5f/0x680 [ 158.731122][ T7290] hugetlb_file_setup+0x21d/0x630 [ 158.731146][ T7290] ksys_mmap_pgoff+0x1ec/0x760 [ 158.731179][ T7290] do_syscall_64+0x16a/0x530 [ 158.731201][ T7290] ? trace_irq_disable+0x3b/0x140 [ 158.731222][ T7290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.731240][ T7290] ? clear_bhb_loop+0x70/0xc0 [ 158.731262][ T7290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.731279][ T7290] RIP: 0033:0x00007fbcf4d9fb19 [ 158.731297][ T7290] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.731314][ T7290] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 158.731334][ T7290] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 158.731347][ T7290] RDX: 0000000000000001 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 158.731359][ T7290] RBP: 00007fbcf4e37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 158.731372][ T7290] R10: 000200000005c832 R11: 0000000000000246 R12: 0000000000000000 [ 158.731384][ T7290] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 158.731414][ T7290] [ 158.799192][ T27] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.969108][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 158.971323][ T27] usb 3-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 158.973949][ T27] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 158.973971][ T27] usb 3-1: config 0 has no interface number 0 [ 158.974010][ T27] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 158.974032][ T27] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 158.979804][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.979827][ T27] usb 3-1: Product: syz [ 158.979839][ T27] usb 3-1: Manufacturer: syz [ 158.979852][ T27] usb 3-1: SerialNumber: syz [ 158.992651][ T27] usb 3-1: config 0 descriptor?? [ 158.994316][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.994463][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.217429][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.217539][ T7280] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.429692][ T27] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 159.659122][ T7318] FAULT_INJECTION: forcing a failure. [ 159.659122][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 159.659171][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.542 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.659200][ T7318] Tainted: [L]=SOFTLOCKUP [ 159.659207][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 159.659220][ T7318] Call Trace: [ 159.659228][ T7318] [ 159.659238][ T7318] dump_stack_lvl+0xe8/0x150 [ 159.659275][ T7318] should_fail_ex+0x3eb/0x540 [ 159.659305][ T7318] should_failslab+0xa8/0x100 [ 159.659334][ T7318] __kmalloc_cache_noprof+0x9e/0x600 [ 159.659360][ T7318] ? hugetlb_reserve_pages+0x22d/0x1160 [ 159.659389][ T7318] ? hugetlb_reserve_pages+0x22d/0x1160 [ 159.659426][ T7318] hugetlb_reserve_pages+0x22d/0x1160 [ 159.659464][ T7318] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 159.659490][ T7318] ? down_write+0x166/0x200 [ 159.659521][ T7318] ? touch_atime+0xf1/0x670 [ 159.659542][ T7318] ? mas_preallocate+0x55e/0x840 [ 159.659575][ T7318] hugetlbfs_file_mmap+0x475/0x630 [ 159.659605][ T7318] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 159.659630][ T7318] ? vma_set_pgoff+0x17d/0x4f0 [ 159.659659][ T7318] ? vma_set_range+0x136/0x2a0 [ 159.659688][ T7318] mmap_region+0x1d47/0x2820 [ 159.659740][ T7318] ? __pfx_mmap_region+0x10/0x10 [ 159.659770][ T7318] ? __lock_acquire+0x747/0x2de0 [ 159.659800][ T7318] ? __lock_acquire+0x747/0x2de0 [ 159.659830][ T7318] ? __lock_acquire+0x747/0x2de0 [ 159.659860][ T7318] ? __lock_acquire+0x747/0x2de0 [ 159.659890][ T7318] ? lock_acquire+0x115/0x350 [ 159.659921][ T7318] ? lock_acquire+0x115/0x350 [ 159.660040][ T7318] ? __pfx_hugetlb_get_unmapped_area+0x10/0x10 [ 159.660064][ T7318] ? cap_mmap_addr+0xb1/0xf0 [ 159.660092][ T7318] ? bpf_lsm_mmap_addr+0x9/0x50 [ 159.660114][ T7318] ? security_mmap_addr+0x71/0x240 [ 159.660155][ T7318] ? memfd_check_seals_mmap+0x138/0x1f0 [ 159.660181][ T7318] do_mmap+0xe0a/0x1300 [ 159.660220][ T7318] ? __pfx_do_mmap+0x10/0x10 [ 159.660261][ T7318] ? vm_mmap_pgoff+0x1ed/0x520 [ 159.660282][ T7318] ? down_write_killable+0x179/0x230 [ 159.660317][ T7318] ? __pfx_down_write_killable+0x10/0x10 [ 159.660345][ T7318] ? apparmor_mmap_file+0x2e7/0x390 [ 159.660379][ T7318] vm_mmap_pgoff+0x27a/0x520 [ 159.660410][ T7318] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 159.660447][ T7318] ? hugetlb_file_setup+0x42c/0x630 [ 159.660474][ T7318] ksys_mmap_pgoff+0x57d/0x760 [ 159.660509][ T7318] do_syscall_64+0x16a/0x530 [ 159.660532][ T7318] ? trace_irq_disable+0x3b/0x140 [ 159.660554][ T7318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.660573][ T7318] ? clear_bhb_loop+0x70/0xc0 [ 159.660598][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.660618][ T7318] RIP: 0033:0x00007fe334d9fb19 [ 159.660640][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.660656][ T7318] RSP: 002b:00007fe332ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 159.660679][ T7318] RAX: ffffffffffffffda RBX: 00007fe335025fa0 RCX: 00007fe334d9fb19 [ 159.660694][ T7318] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000000000000000 [ 159.660706][ T7318] RBP: 00007fe334e37b70 R08: ffffffffffffffff R09: 0000000000000000 [ 159.660720][ T7318] R10: 000000000005d031 R11: 0000000000000246 R12: 0000000000000000 [ 159.660733][ T7318] R13: 00007fe335026038 R14: 00007fe335025fa0 R15: 00007ffcab8c1088 [ 159.660766][ T7318] [ 159.665206][ T7318] HugeTLB: unable to allocate vma specific lock [ 160.043811][ T27] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 160.043849][ T27] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 160.068377][ T27] asix 3-1:0.34: probe with driver asix failed with error -71 [ 160.081616][ T27] usb 3-1: USB disconnect, device number 16 [ 160.558167][ T5640] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 160.708147][ T5640] usb 1-1: Using ep0 maxpacket: 8 [ 160.710774][ T5640] usb 1-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 160.712149][ T5640] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 160.712185][ T5640] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.712223][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.712248][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.712271][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.712293][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.712319][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.712343][ T5640] usb 1-1: config 168 interface 0 has no altsetting 0 [ 160.752061][ T5640] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 160.752118][ T5640] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.752161][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.752190][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.752216][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.752242][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.752269][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.752297][ T5640] usb 1-1: config 168 interface 0 has no altsetting 0 [ 160.895912][ T5640] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 160.896752][ T5640] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 160.896795][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 160.896824][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.896850][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.896877][ T5640] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.896903][ T5640] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 160.896930][ T5640] usb 1-1: config 168 interface 0 has no altsetting 0 [ 161.009247][ T5640] usb 1-1: string descriptor 0 read error: -22 [ 161.009406][ T5640] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.049341][ T5640] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 161.263197][ T5640] usb 1-1: USB disconnect, device number 16 [ 161.647478][ T7362] warning: `syz.2.559' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 162.237425][ T7389] FAULT_INJECTION: forcing a failure. [ 162.237425][ T7389] name failslab, interval 1, probability 0, space 0, times 0 [ 162.237472][ T7389] CPU: 0 UID: 0 PID: 7389 Comm: syz.3.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.237500][ T7389] Tainted: [L]=SOFTLOCKUP [ 162.237508][ T7389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 162.237520][ T7389] Call Trace: [ 162.237528][ T7389] [ 162.237537][ T7389] dump_stack_lvl+0xe8/0x150 [ 162.237572][ T7389] should_fail_ex+0x3eb/0x540 [ 162.237589][ T7389] should_failslab+0xa8/0x100 [ 162.237608][ T7389] __kmalloc_noprof+0xf9/0x710 [ 162.237623][ T7389] ? __register_sysctl_table+0xc02/0x1370 [ 162.237635][ T7389] ? __register_sysctl_table+0xc02/0x1370 [ 162.237659][ T7389] __register_sysctl_table+0xc02/0x1370 [ 162.237690][ T7389] __addrconf_sysctl_register+0x31c/0x4b0 [ 162.237719][ T7389] ? rcu_is_watching+0x16/0xb0 [ 162.237761][ T7389] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 162.237791][ T7389] ? kmemdup_noprof+0x55/0x70 [ 162.237807][ T7389] ? __asan_memcpy+0x40/0x70 [ 162.237823][ T7389] addrconf_init_net+0x4ce/0x790 [ 162.237843][ T7389] ops_init+0x35d/0x5d0 [ 162.237862][ T7389] setup_net+0x118/0x350 [ 162.237882][ T7389] ? __pfx_setup_net+0x10/0x10 [ 162.237899][ T7389] ? down_read_killable+0x1b6/0x3b0 [ 162.237917][ T7389] ? __ns_common_init+0x384/0x590 [ 162.237936][ T7389] copy_net_ns+0x536/0x770 [ 162.237955][ T7389] create_new_namespaces+0x3f0/0x6b0 [ 162.237968][ T7389] ? security_capable+0x7e/0x2c0 [ 162.237985][ T7389] unshare_nsproxy_namespaces+0x144/0x190 [ 162.237999][ T7389] ksys_unshare+0x532/0x890 [ 162.238024][ T7389] ? __pfx_ksys_unshare+0x10/0x10 [ 162.238044][ T7389] ? rcu_is_watching+0x16/0xb0 [ 162.238072][ T7389] __x64_sys_unshare+0x38/0x50 [ 162.238092][ T7389] do_syscall_64+0x16a/0x530 [ 162.238109][ T7389] ? trace_irq_disable+0x3b/0x140 [ 162.238120][ T7389] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.238130][ T7389] ? clear_bhb_loop+0x70/0xc0 [ 162.238141][ T7389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.238150][ T7389] RIP: 0033:0x00007fbcf4d9fb19 [ 162.238161][ T7389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.238169][ T7389] RSP: 002b:00007fbcf5bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 162.238181][ T7389] RAX: ffffffffffffffda RBX: 00007fbcf5025fa0 RCX: 00007fbcf4d9fb19 [ 162.238188][ T7389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 162.238193][ T7389] RBP: 00007fbcf4e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 162.238199][ T7389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.238204][ T7389] R13: 00007fbcf5026038 R14: 00007fbcf5025fa0 R15: 00007ffc80119638 [ 162.238219][ T7389] [ 162.263301][ T7389] sysctl could not get directory: /net/ipv6/conf/all -12 [ 162.869458][ T5640] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 163.019194][ T5640] usb 2-1: Using ep0 maxpacket: 16 [ 163.020118][ T5640] usb 2-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42 [ 163.022238][ T5640] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.022290][ T5640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.022316][ T5640] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 163.022336][ T5640] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 163.022359][ T5640] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.024943][ T5640] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 163.024967][ T5640] usb 2-1: Manufacturer: syz [ 163.202725][ T5640] usb 2-1: config 0 descriptor?? [ 163.548136][ T5640] rc_core: IR keymap rc-hauppauge not found [ 163.548161][ T5640] Registered IR keymap rc-empty [ 163.548610][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.570072][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.595019][ T5640] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 163.615197][ T5640] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 163.679077][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.698411][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.724361][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.738462][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.758279][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.780738][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.798271][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.818341][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.838598][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.858875][ T5640] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 163.891002][ T5640] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 163.891033][ T5640] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 164.011738][ T5747] usb 2-1: USB disconnect, device number 14 [ 164.788118][ T5747] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 164.885635][ T7435] netfs: Cache "CacheFiles" added (type cachefiles) [ 164.885672][ T7435] CacheFiles: File cache on CacheFiles registered [ 164.887171][ T7434] CacheFiles: File cache on CacheFiles unregistering [ 164.887186][ T7434] netfs: Withdrawing cache "CacheFiles" (0 objs) [ 164.949917][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 164.953012][ T5747] usb 4-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 164.955457][ T5747] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 164.955486][ T5747] usb 4-1: config 0 has no interface number 0 [ 164.959213][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.959237][ T5747] usb 4-1: Product: syz [ 164.959250][ T5747] usb 4-1: Manufacturer: syz [ 164.959263][ T5747] usb 4-1: SerialNumber: syz [ 164.993221][ T5747] usb 4-1: config 0 descriptor?? [ 165.413993][ T5747] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 165.414037][ T5747] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 165.578197][ T5725] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 165.729338][ T5725] usb 3-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 165.733087][ T5725] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.733146][ T5725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.767553][ T5725] keyspan 3-1:1.0: Keyspan 2 port adapter converter detected [ 165.767934][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 165.770806][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 165.778592][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 84 [ 165.778727][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 165.800020][ T5725] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 165.816292][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 165.816404][ T5725] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 165.847984][ T5725] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 166.220992][ T6662] usb 3-1: USB disconnect, device number 17 [ 166.236285][ T6662] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 166.256573][ T6662] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 166.261724][ T6662] keyspan 3-1:1.0: device disconnected [ 166.672345][ T5747] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 166.672673][ T5747] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 166.692674][ T5747] usb 4-1: USB disconnect, device number 12 [ 167.978248][ T5747] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 168.151992][ T5747] usb 3-1: New USB device found: idVendor=8086, idProduct=0000, bcdDevice=0.00 [ 168.153298][ T5747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.153331][ T5747] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.153369][ T5747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.283000][ T7497] FAULT_INJECTION: forcing a failure. [ 168.283000][ T7497] name failslab, interval 1, probability 0, space 0, times 0 [ 168.283038][ T7497] CPU: 1 UID: 0 PID: 7497 Comm: syz.0.606 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.283071][ T7497] Tainted: [L]=SOFTLOCKUP [ 168.283079][ T7497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.283091][ T7497] Call Trace: [ 168.283099][ T7497] [ 168.283109][ T7497] dump_stack_lvl+0xe8/0x150 [ 168.283145][ T7497] should_fail_ex+0x3eb/0x540 [ 168.283175][ T7497] should_failslab+0xa8/0x100 [ 168.283206][ T7497] __kmalloc_cache_noprof+0x9e/0x600 [ 168.283231][ T7497] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 168.283256][ T7497] ? io_uring_alloc_task_context+0x17d/0x6c0 [ 168.283277][ T7497] ? io_uring_alloc_task_context+0x17d/0x6c0 [ 168.283307][ T7497] io_uring_alloc_task_context+0x17d/0x6c0 [ 168.283334][ T7497] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 168.283362][ T7497] ? alloc_file_pseudo+0x151/0x1e0 [ 168.283386][ T7497] __io_uring_add_tctx_node+0x499/0x640 [ 168.283414][ T7497] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 168.283437][ T7497] ? __anon_inode_getfile+0x169/0x200 [ 168.283463][ T7497] io_uring_create+0x591/0x980 [ 168.283491][ T7497] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 168.283517][ T7497] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 168.283555][ T7497] ? rcu_is_watching+0x16/0xb0 [ 168.283597][ T7497] do_syscall_64+0x16a/0x530 [ 168.283624][ T7497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.283645][ T7497] ? clear_bhb_loop+0x70/0xc0 [ 168.283671][ T7497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.283691][ T7497] RIP: 0033:0x00007f0a5b59fb19 [ 168.283713][ T7497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.283730][ T7497] RSP: 002b:00007f0a5c475fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 168.283753][ T7497] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f0a5b59fb19 [ 168.283768][ T7497] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 00000000000008bf [ 168.283782][ T7497] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 168.283795][ T7497] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 168.283808][ T7497] R13: 0000200000000440 R14: 0000000000000000 R15: 00007ffcc91e8968 [ 168.283843][ T7497] [ 168.580412][ T7502] FAULT_INJECTION: forcing a failure. [ 168.580412][ T7502] name failslab, interval 1, probability 0, space 0, times 0 [ 168.580449][ T7502] CPU: 0 UID: 0 PID: 7502 Comm: syz.0.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.580476][ T7502] Tainted: [L]=SOFTLOCKUP [ 168.580483][ T7502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 168.580497][ T7502] Call Trace: [ 168.580505][ T7502] [ 168.580514][ T7502] dump_stack_lvl+0xe8/0x150 [ 168.580550][ T7502] should_fail_ex+0x3eb/0x540 [ 168.580589][ T7502] should_failslab+0xa8/0x100 [ 168.580618][ T7502] __kmalloc_cache_noprof+0x9e/0x600 [ 168.580641][ T7502] ? __igmp_group_dropped+0x34f/0x11a0 [ 168.580668][ T7502] ? __igmp_group_dropped+0x831/0x11a0 [ 168.580697][ T7502] ? __igmp_group_dropped+0x831/0x11a0 [ 168.580731][ T7502] __igmp_group_dropped+0x831/0x11a0 [ 168.580770][ T7502] ? __pfx___igmp_group_dropped+0x10/0x10 [ 168.580806][ T7502] ? lockdep_rtnl_is_held+0x26/0x40 [ 168.580833][ T7502] ? ip_mc_hash_remove+0x1c9/0x200 [ 168.580861][ T7502] __ip_mc_dec_group+0x1dd/0x3e0 [ 168.580893][ T7502] ip_mc_leave_group+0x3e9/0x4b0 [ 168.580929][ T7502] ip_mc_msfilter+0x25b/0xb00 [ 168.580959][ T7502] ? copy_from_sockptr+0x5e/0x90 [ 168.580990][ T7502] do_ip_setsockopt+0x2886/0x2e30 [ 168.581024][ T7502] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 168.581047][ T7502] ? do_futex+0x3e7/0x4e0 [ 168.581080][ T7502] ? lock_acquire+0x115/0x350 [ 168.581114][ T7502] ? aa_sock_opt_perm+0xe8/0x1e0 [ 168.581141][ T7502] ip_setsockopt+0x66/0x110 [ 168.581167][ T7502] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.581201][ T7502] do_sock_setsockopt+0x17c/0x1b0 [ 168.581228][ T7502] __x64_sys_setsockopt+0x13d/0x1b0 [ 168.581257][ T7502] do_syscall_64+0x16a/0x530 [ 168.581285][ T7502] ? trace_irq_disable+0x3b/0x140 [ 168.581310][ T7502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.581331][ T7502] ? clear_bhb_loop+0x70/0xc0 [ 168.581356][ T7502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.581376][ T7502] RIP: 0033:0x00007f0a5b59fb19 [ 168.581399][ T7502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.581415][ T7502] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 168.581438][ T7502] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 168.581453][ T7502] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000003 [ 168.581465][ T7502] RBP: 00007f0a5b637b70 R08: 0000000000000057 R09: 0000000000000000 [ 168.581478][ T7502] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 168.581491][ T7502] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 168.581525][ T7502] [ 168.878175][ T5747] hid-sensor-hub 0003:8086:0000.0007: unknown main item tag 0x0 [ 168.878211][ T5747] hid-sensor-hub 0003:8086:0000.0007: unknown main item tag 0x0 [ 168.912218][ T5747] hid-sensor-hub 0003:8086:0000.0007: hiddev0,hidraw0: USB HID v1.11 Device [HID 8086:0000] on usb-dummy_hcd.2-1/input0 [ 169.119144][ T993] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 169.268881][ T993] usb 2-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 169.269706][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 169.269722][ T993] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.269732][ T993] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 169.269751][ T993] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.271220][ T993] usb 2-1: config 0 descriptor?? [ 169.308189][ T5715] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 169.459668][ T5715] usb 1-1: New USB device found: idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.460471][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.460497][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.463009][ T5715] usb 1-1: config 0 descriptor?? [ 169.502798][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 169.692424][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692494][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692521][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692545][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692569][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692624][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692670][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.692695][ T993] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 169.763018][ T993] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 169.872918][ T5715] pwc: recv_control_msg error -32 req 02 val 2b00 [ 169.873723][ T5715] pwc: recv_control_msg error -32 req 02 val 2700 [ 169.874359][ T5715] pwc: recv_control_msg error -32 req 02 val 2c00 [ 169.875105][ T5715] pwc: recv_control_msg error -32 req 04 val 1000 [ 169.875698][ T5715] pwc: recv_control_msg error -32 req 04 val 1300 [ 169.876200][ T5715] pwc: recv_control_msg error -32 req 04 val 1400 [ 169.979953][ T993] usb 3-1: USB disconnect, device number 18 [ 169.981710][ T27] usb 2-1: USB disconnect, device number 15 [ 170.083979][ T5715] pwc: recv_control_msg error -71 req 02 val 2100 [ 170.085861][ T5715] pwc: recv_control_msg error -71 req 04 val 1500 [ 170.095372][ T5715] pwc: recv_control_msg error -71 req 02 val 2500 [ 170.096227][ T5715] pwc: recv_control_msg error -71 req 02 val 2400 [ 170.096655][ T5715] pwc: recv_control_msg error -71 req 02 val 2600 [ 170.097093][ T5715] pwc: recv_control_msg error -71 req 02 val 2900 [ 170.097515][ T5715] pwc: recv_control_msg error -71 req 02 val 2800 [ 170.098268][ T5715] pwc: recv_control_msg error -71 req 04 val 1100 [ 170.098695][ T5715] pwc: recv_control_msg error -71 req 04 val 1200 [ 170.115274][ T5715] pwc: Registered as video103. [ 170.123480][ T5715] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 170.167409][ T5715] usb 1-1: USB disconnect, device number 17 [ 170.995812][ T7545] FAULT_INJECTION: forcing a failure. [ 170.995812][ T7545] name failslab, interval 1, probability 0, space 0, times 0 [ 170.995855][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.0.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.995875][ T7545] Tainted: [L]=SOFTLOCKUP [ 170.995880][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 170.995889][ T7545] Call Trace: [ 170.995896][ T7545] [ 170.995903][ T7545] dump_stack_lvl+0xe8/0x150 [ 170.995929][ T7545] should_fail_ex+0x3eb/0x540 [ 170.995950][ T7545] should_failslab+0xa8/0x100 [ 170.995967][ T7545] __kmalloc_cache_noprof+0x9e/0x600 [ 170.995979][ T7545] ? fuse_chan_new+0x4e/0x2f0 [ 170.995992][ T7545] ? fuse_chan_new+0x4e/0x2f0 [ 170.996005][ T7545] ? __kmalloc_cache_noprof+0x31c/0x600 [ 170.996018][ T7545] fuse_chan_new+0x4e/0x2f0 [ 170.996032][ T7545] fuse_dev_chan_new+0x1c/0x4b0 [ 170.996048][ T7545] fuse_get_tree+0x44/0x3b0 [ 170.996062][ T7545] vfs_get_tree+0x92/0x2a0 [ 170.996076][ T7545] do_new_mount+0x325/0xb00 [ 170.996088][ T7545] ? __pfx_do_new_mount+0x10/0x10 [ 170.996099][ T7545] ? ns_capable+0x84/0xe0 [ 170.996111][ T7545] ? path_mount+0x647/0x1050 [ 170.996123][ T7545] ? user_path_at+0xd4/0x160 [ 170.996135][ T7545] __se_sys_mount+0x31d/0x420 [ 170.996148][ T7545] ? __pfx___se_sys_mount+0x10/0x10 [ 170.996160][ T7545] ? __x64_sys_mount+0x20/0xc0 [ 170.996171][ T7545] do_syscall_64+0x16a/0x530 [ 170.996183][ T7545] ? trace_irq_disable+0x3b/0x140 [ 170.996194][ T7545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.996203][ T7545] ? clear_bhb_loop+0x70/0xc0 [ 170.996214][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.996223][ T7545] RIP: 0033:0x00007f0a5b59fb19 [ 170.996233][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.996241][ T7545] RSP: 002b:00007f0a5c476028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 170.996252][ T7545] RAX: ffffffffffffffda RBX: 00007f0a5b825fa0 RCX: 00007f0a5b59fb19 [ 170.996259][ T7545] RDX: 00002000000004c0 RSI: 0000200000000480 RDI: 0000000000000000 [ 170.996265][ T7545] RBP: 00007f0a5b637b70 R08: 0000000000000000 R09: 0000000000000000 [ 170.996271][ T7545] R10: 0000000000000418 R11: 0000000000000246 R12: 0000000000000000 [ 170.996276][ T7545] R13: 00007f0a5b826038 R14: 00007f0a5b825fa0 R15: 00007ffcc91e8968 [ 170.996291][ T7545] [ 171.098696][ T7547] overlayfs: upper fs does not support file handles, falling back to index=off. [ 171.284091][ T7549] syzkaller1: entered promiscuous mode [ 171.284117][ T7549] syzkaller1: entered allmulticast mode [ 171.477489][ T7557] binder: Failure when writing BR_NOOP at beginning of buffer. [ 171.477592][ T7557] binder: Read failure Err(EFAULT) in pid:445 [ 171.958160][ T5715] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.981290][ T7579] netlink: 156 bytes leftover after parsing attributes in process `syz.0.635'. [ 172.082479][ T7581] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3223532450 (12894129800 ns) > initial count (12015864336 ns). Using initial count to start timer. [ 172.108709][ T5715] usb 3-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 172.111264][ T5715] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 172.111282][ T5715] usb 3-1: Product: syz [ 172.111290][ T5715] usb 3-1: SerialNumber: syz [ 172.113573][ T5715] usb 3-1: config 0 descriptor?? [ 172.320788][ T5715] hso 3-1:0.0: Failed to find BULK eps [ 172.441136][ T33] audit: type=1326 audit(1793830813.171:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7583 comm="syz.3.637" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbcf4d9fb19 code=0x0 [ 172.528684][ T5715] usb 3-1: USB disconnect, device number 19 [ 173.258149][ T6662] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 173.419345][ T6662] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 173.420236][ T6662] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.420277][ T6662] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 173.420316][ T6662] usb 1-1: Dual-Role OTG device on HNP port [ 173.420696][ T6662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.439393][ C1] ------------[ cut here ]------------ [ 173.439406][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 173.439422][ C1] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#1: klogd/4996 [ 173.495065][ C1] Modules linked in: [ 173.498975][ C1] CPU: 1 UID: 0 PID: 4996 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 173.509392][ C1] Tainted: [L]=SOFTLOCKUP [ 173.513720][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 173.523794][ C1] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 173.529270][ C1] Code: ea 08 5a fa 49 83 3f 00 48 c7 c0 a0 59 16 8d 49 c7 c0 c0 59 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 7a 0e c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 10 be e1 f9 65 8b [ 173.548967][ C1] RSP: 0018:ffffc90000a38910 EFLAGS: 00010082 [ 173.555036][ C1] RAX: ffffffff8d1659a0 RBX: ffff88802a1900e0 RCX: ffffffff8d167880 [ 173.563008][ C1] RDX: 0000000000000081 RSI: ffffffff8ec90e7a RDI: ffffffff91ef19f0 [ 173.570980][ C1] RBP: dffffc0000000000 R08: ffffffff8d1659c0 R09: 0000000000000002 [ 173.578956][ C1] R10: 0000000000000003 R11: 8000000000000100 R12: ffffffff8d167880 [ 173.586931][ C1] R13: 0000000000000081 R14: ffffffff91ef19f0 R15: ffff88802a1900f8 [ 173.594901][ C1] FS: 00007fba74cc3c80(0000) GS:ffff888123261000(0000) knlGS:0000000000000000 [ 173.603831][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 173.610418][ C1] CR2: 000055557d70b7d0 CR3: 000000007f166000 CR4: 00000000003526f0 [ 173.619178][ C1] Call Trace: [ 173.622466][ C1] [ 173.625316][ C1] hidg_set_alt+0x12a/0xa60 [ 173.629841][ C1] ? usb_gadget_set_state+0x12c/0x2d0 [ 173.635224][ C1] set_config+0x749/0x1160 [ 173.640266][ C1] composite_setup+0x1de7/0x3480 [ 173.645227][ C1] configfs_composite_setup+0xc7/0x100 [ 173.650703][ C1] dummy_timer+0x2f30/0x4ce0 [ 173.655314][ C1] ? __lock_acquire+0x747/0x2de0 [ 173.660287][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 173.665701][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 173.670648][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.676460][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 173.681405][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 173.686622][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 173.691740][ C1] handle_softirqs+0x265/0x8d0 [ 173.696519][ C1] __irq_exit_rcu+0xc6/0x220 [ 173.701113][ C1] irq_exit_rcu+0x9/0x30 [ 173.705357][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 173.710998][ C1] [ 173.713929][ C1] [ 173.716860][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 173.722840][ C1] RIP: 0010:fdget+0x126/0x250 [ 173.727530][ C1] Code: 00 e8 9e 53 6a ff 48 8d 1c dd 00 00 00 00 4c 01 eb 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1d 9e e2 ff 48 8b 1b <4c> 89 f6 48 21 de 31 ff e8 3d 59 6a ff 49 21 de 74 3d e8 63 53 6a [ 173.747145][ C1] RSP: 0018:ffffc90003137c88 EFLAGS: 00000246 [ 173.753221][ C1] RAX: 1ffff11006d85cd7 RBX: ffff88807f169500 RCX: ffff88807f2dbe80 [ 173.761194][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000003 [ 173.769167][ C1] RBP: 1ffff11006d85cbc R08: ffff888036c2e583 R09: 1ffff11006d85cb0 [ 173.777138][ C1] R10: dffffc0000000000 R11: ffffed1006d85cb1 R12: dffffc0000000000 [ 173.785110][ C1] R13: ffff888036c2e6a0 R14: ffffffffffffffff R15: 0000000000000040 [ 173.793101][ C1] ? fdget+0x102/0x250 [ 173.797182][ C1] __sys_sendto+0x137/0x5a0 [ 173.801694][ C1] ? bpf_lsm_capable+0x9/0x20 [ 173.806383][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 173.811423][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 173.816723][ C1] ? rcu_is_watching+0x16/0xb0 [ 173.821513][ C1] __x64_sys_sendto+0xde/0x100 [ 173.826305][ C1] do_syscall_64+0x16a/0x530 [ 173.830906][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.837007][ C1] ? clear_bhb_loop+0x70/0xc0 [ 173.841688][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.847584][ C1] RIP: 0033:0x00007fba74e13407 [ 173.852348][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 173.871953][ C1] RSP: 002b:00007fffceef56d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 173.880374][ C1] RAX: ffffffffffffffda RBX: 00007fba74cc3c80 RCX: 00007fba74e13407 [ 173.888346][ C1] RDX: 000000000000007e RSI: 00007fffceef5810 RDI: 0000000000000003 [ 173.896322][ C1] RBP: 00007fffceef5c40 R08: 0000000000000000 R09: 0000000000000000 [ 173.904299][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffceef5c58 [ 173.912271][ C1] R13: 00007fffceef5810 R14: 0000000000000063 R15: 00007fffceef5810 [ 173.920257][ C1] [ 173.923285][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 173.930591][ C1] CPU: 1 UID: 0 PID: 4996 Comm: klogd Tainted: G L syzkaller #0 PREEMPT(full) [ 173.941008][ C1] Tainted: [L]=SOFTLOCKUP [ 173.945332][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 173.955391][ C1] Call Trace: [ 173.958673][ C1] [ 173.961526][ C1] vpanic+0x26f/0x710 [ 173.965523][ C1] panic+0xc5/0xd0 [ 173.969250][ C1] ? __pfx_panic+0x10/0x10 [ 173.973684][ C1] __warn+0x315/0x4c0 [ 173.977668][ C1] ? usb_ep_enable+0x148/0x480 [ 173.982441][ C1] ? usb_ep_enable+0x148/0x480 [ 173.987215][ C1] __report_bug+0x276/0x570 [ 173.991740][ C1] ? usb_ep_enable+0x148/0x480 [ 173.996512][ C1] ? __pfx___report_bug+0x10/0x10 [ 174.001551][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 174.006683][ C1] report_bug_entry+0x19b/0x290 [ 174.011540][ C1] ? usb_ep_enable+0x1bc/0x480 [ 174.016317][ C1] ? usb_ep_enable+0x1c1/0x480 [ 174.021087][ C1] handle_bug+0xce/0x200 [ 174.025338][ C1] exc_invalid_op+0x1a/0x50 [ 174.029852][ C1] asm_exc_invalid_op+0x1a/0x20 [ 174.034710][ C1] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 174.040092][ C1] Code: ea 08 5a fa 49 83 3f 00 48 c7 c0 a0 59 16 8d 49 c7 c0 c0 59 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 7a 0e c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 10 be e1 f9 65 8b [ 174.059702][ C1] RSP: 0018:ffffc90000a38910 EFLAGS: 00010082 [ 174.065774][ C1] RAX: ffffffff8d1659a0 RBX: ffff88802a1900e0 RCX: ffffffff8d167880 [ 174.073764][ C1] RDX: 0000000000000081 RSI: ffffffff8ec90e7a RDI: ffffffff91ef19f0 [ 174.081825][ C1] RBP: dffffc0000000000 R08: ffffffff8d1659c0 R09: 0000000000000002 [ 174.089799][ C1] R10: 0000000000000003 R11: 8000000000000100 R12: ffffffff8d167880 [ 174.097769][ C1] R13: 0000000000000081 R14: ffffffff91ef19f0 R15: ffff88802a1900f8 [ 174.105760][ C1] hidg_set_alt+0x12a/0xa60 [ 174.110282][ C1] ? usb_gadget_set_state+0x12c/0x2d0 [ 174.115660][ C1] set_config+0x749/0x1160 [ 174.120096][ C1] composite_setup+0x1de7/0x3480 [ 174.125059][ C1] configfs_composite_setup+0xc7/0x100 [ 174.130536][ C1] dummy_timer+0x2f30/0x4ce0 [ 174.135148][ C1] ? __lock_acquire+0x747/0x2de0 [ 174.140117][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 174.145506][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 174.150538][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 174.156366][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 174.161323][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 174.166550][ C1] hrtimer_run_softirq+0x1e3/0x2e0 [ 174.171668][ C1] handle_softirqs+0x265/0x8d0 [ 174.176454][ C1] __irq_exit_rcu+0xc6/0x220 [ 174.181050][ C1] irq_exit_rcu+0x9/0x30 [ 174.185297][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 174.190941][ C1] [ 174.193878][ C1] [ 174.196813][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 174.202793][ C1] RIP: 0010:fdget+0x126/0x250 [ 174.207484][ C1] Code: 00 e8 9e 53 6a ff 48 8d 1c dd 00 00 00 00 4c 01 eb 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1d 9e e2 ff 48 8b 1b <4c> 89 f6 48 21 de 31 ff e8 3d 59 6a ff 49 21 de 74 3d e8 63 53 6a [ 174.227089][ C1] RSP: 0018:ffffc90003137c88 EFLAGS: 00000246 [ 174.233162][ C1] RAX: 1ffff11006d85cd7 RBX: ffff88807f169500 RCX: ffff88807f2dbe80 [ 174.241137][ C1] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 0000000000000003 [ 174.249150][ C1] RBP: 1ffff11006d85cbc R08: ffff888036c2e583 R09: 1ffff11006d85cb0 [ 174.257127][ C1] R10: dffffc0000000000 R11: ffffed1006d85cb1 R12: dffffc0000000000 [ 174.265098][ C1] R13: ffff888036c2e6a0 R14: ffffffffffffffff R15: 0000000000000040 [ 174.273090][ C1] ? fdget+0x102/0x250 [ 174.277172][ C1] __sys_sendto+0x137/0x5a0 [ 174.281682][ C1] ? bpf_lsm_capable+0x9/0x20 [ 174.286386][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 174.291452][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 174.296771][ C1] ? rcu_is_watching+0x16/0xb0 [ 174.301556][ C1] __x64_sys_sendto+0xde/0x100 [ 174.306329][ C1] do_syscall_64+0x16a/0x530 [ 174.310928][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.316997][ C1] ? clear_bhb_loop+0x70/0xc0 [ 174.321680][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.327573][ C1] RIP: 0033:0x00007fba74e13407 [ 174.332341][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 174.351955][ C1] RSP: 002b:00007fffceef56d0 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 174.360380][ C1] RAX: ffffffffffffffda RBX: 00007fba74cc3c80 RCX: 00007fba74e13407 [ 174.368357][ C1] RDX: 000000000000007e RSI: 00007fffceef5810 RDI: 0000000000000003 [ 174.376330][ C1] RBP: 00007fffceef5c40 R08: 0000000000000000 R09: 0000000000000000 [ 174.384304][ C1] R10: 0000000000004000 R11: 0000000000000202 R12: 00007fffceef5c58 [ 174.392273][ C1] R13: 00007fffceef5810 R14: 0000000000000063 R15: 00007fffceef5810 [ 174.400266][ C1] [ 174.403654][ C1] Kernel Offset: disabled [ 174.407984][ C1] Rebooting in 86400 seconds..