last executing test programs: 9.49003965s ago: executing program 1 (id=1500): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001540)={0x30, 0x0, 0x1, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x64}]}, 0x30}}, 0x0) 9.447033181s ago: executing program 1 (id=1501): openat$nullb(0xffffffffffffff9c, &(0x7f00000017c0), 0x400000000a882, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000100)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='4', 0x1) 9.134453449s ago: executing program 1 (id=1502): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.801892597s ago: executing program 1 (id=1505): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b9066140000101020301090232000201008032090400"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)=ANY=[@ANYBLOB="2300020000000203"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x4, "c4481835"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "9a8c3bb62355d580f49858afd1678433caec023650a7100b350213372089140f63fe5894ad7cbbf67388469d441d8e168f600222dd33af360618623c8fb3966a75151632bc3f00aa31971c8db17f8c628f4b778846dfcf2772"}}}, 0x0) 6.360137439s ago: executing program 3 (id=1514): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000640)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc/thread-self/fail-nth\x00', 0x2, 0x8a) write(r0, &(0x7f00000006c0)='27', 0x2) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000700), 0x101000, 0x0) 5.875442882s ago: executing program 3 (id=1516): setns(0xc9, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000240)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}) 5.652308628s ago: executing program 1 (id=1518): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.568901439s ago: executing program 3 (id=1520): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000180)=@v1={0x1000000, [{0x90000000, 0x2}]}, 0xc, 0x2) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.153668605s ago: executing program 2 (id=1530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x19, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101}}}}}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x42101, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3314) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002900)={0x284, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "b3304da35a4ef0f4c83a712762aa0a3307f1c4cee5900e9dc331d25e3d5af1ab372bb6d88d365f0e7e572482d0918e7236a61b8ddc223fc02d3e6d3d2197811772c4a689c00e845cad04e1e95c6bbefc9945ca61f97c88890dd492619776dc5058b00fcae425250ff23329074e001e649987a246e32306d55bcaa0329ea6a730ae05e6fa08a438c2ce09e3c4fceb3454a6ff35d310766936fd282470e47ed1ff597331d9e1ecf7204b4977c469bcf7e6d449a28ee67491c275c6bf6e88b64f28096fec8a01a61d0b0118e36b8d71fa53f160"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000011}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 4.079237248s ago: executing program 0 (id=1531): r0 = syz_create_resource$futex(&(0x7f0000000380)) futex(0x0, 0xb, 0x1, 0x0, r0, 0x0) 4.003629279s ago: executing program 0 (id=1532): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x59, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000080009046900000e0100000824020102027c"], 0x0) 2.801962799s ago: executing program 0 (id=1533): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000700)=0x6e, 0x80000) recvmsg$unix(r1, &(0x7f0000000980)={&(0x7f0000000740)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/6, 0x6}, {&(0x7f0000000800)=""/30, 0x1e}, {&(0x7f0000000840)=""/151, 0x97}], 0x3, &(0x7f0000000940)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x200) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000100), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) readlink(&(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', &(0x7f0000000280)=""/130, 0x82) listen(0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000340), 0x4) mount(0x0, &(0x7f0000000380)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f00000003c0)='configfs\x00', 0x2208800, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./my_configfs\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='dummy_udc.0', 0xb) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x1, 0x1, 0x30}, 0xc) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x8010) 2.692204912s ago: executing program 2 (id=1534): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000300)={0x40000000, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ff1000/0x4000)=nil) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r1, 0x0) openat(r1, 0x0, 0x9850c1, 0x182) mremap(&(0x7f0000ff1000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff6000/0x1000)=nil) 2.690353063s ago: executing program 0 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x3f) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) socket$kcm(0x10, 0x2, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d06096086480165030402010500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) 2.520430837s ago: executing program 2 (id=1536): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x1000005, 0x180931, 0xffffffffffffffff, 0x20000000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000240)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) r3 = userfaultfd(0x80001) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001c0001042bfb68000000000000000000", @ANYRES32=r5, @ANYBLOB="8000f6050a0002000180c20000020000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x7b, 0x983a}, 0x90) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) write(r7, 0x0, 0x0) write(r7, &(0x7f0000000200)='1', 0x1) 2.243104474s ago: executing program 1 (id=1537): r0 = syz_usb_connect(0x0, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040b9066140000101020301090232000201008032090400"], 0x0) syz_usb_control_io(r0, &(0x7f0000003000)={0x2c, &(0x7f0000004000)=ANY=[@ANYBLOB="2300020000000203"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x40, 0x14, 0x4, "c4481835"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000880)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x5b, @string={0x5b, 0x3, "9a8c3bb62355d580f49858afd1678433caec023650a7100b350213372089140f63fe5894ad7cbbf67388469d441d8e168f600222dd33af360618623c8fb3966a75151632bc3f00aa31971c8db17f8c628f4b778846dfcf2772"}}}, 0x0) 2.242305574s ago: executing program 3 (id=1538): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) bind$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @vbi={0x9, 0x1000000, 0xb9, 0x3447504d, [0xb785, 0xfffffffd], [0x5, 0x3], 0x108}}) pipe(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000300), 0x18) connect$can_j1939(r2, &(0x7f0000000340), 0x18) writev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="b4000006004f709b905d6f66b826", 0xe}], 0x1) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/230, 0xe6}, 0x10000000}], 0x1, 0x0, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000000600), 0x800001d, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/diskstats\x00', 0x0, 0x0) write$cgroup_devices(r3, &(0x7f0000000680)=ANY=[@ANYBLOB="7187963f1969db987472df63e05daf8d6340a827a0b5717e31fa22ad99117ac80d53202a532af998fbff9a53c0cd0f0baa26c728540be941fc91d199552a15b01eecc67fa6ed"], 0x9) r4 = syz_open_dev$vim2m(&(0x7f0000000700), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, 0x0) syz_open_dev$vim2m(0x0, 0x800, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000800), 0x800, 0x2) r6 = syz_open_dev$video(0x0, 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000880)={0xa, 0x3, 0x3, {0xa, 0x1001, 0x4, 0x1}}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f00000008c0)={0x2, @win={{0x6, 0x1, 0x1ff, 0x70}, 0x5, 0x4, 0x0, 0x2, 0x0, 0x1}}) 1.264834048s ago: executing program 0 (id=1539): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000940)={0x18, 0x0, {0x4001, @multicast, 'batadv0\x00'}}, 0x1e) socket$packet(0x11, 0x2, 0x300) sendmmsg(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.175872901s ago: executing program 2 (id=1540): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000004, 0x1, 0xff, 0x0, 0x0, 0xf, 0x5, 0x6, 0x3, 0x9, 0x6, 0xf73c], 0x80a0000, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 736.492352ms ago: executing program 2 (id=1541): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000980)=ANY=[@ANYBLOB="000086dd0000110000080000000060ec97000f982c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfce) 548.316447ms ago: executing program 3 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000500)='7', 0x1) socket$kcm(0x29, 0x5, 0x0) 457.851869ms ago: executing program 2 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x19, 0x3, "07682c020b7b37f27f5101007f51010049f4e34e86"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @private=0xa010101}}}}}}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x42101, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3314) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008804}, 0xc810) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x2400000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002900)={0x284, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xdc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd6, 0x5, "b3304da35a4ef0f4c83a712762aa0a3307f1c4cee5900e9dc331d25e3d5af1ab372bb6d88d365f0e7e572482d0918e7236a61b8ddc223fc02d3e6d3d2197811772c4a689c00e845cad04e1e95c6bbefc9945ca61f97c88890dd492619776dc5058b00fcae425250ff23329074e001e649987a246e32306d55bcaa0329ea6a730ae05e6fa08a438c2ce09e3c4fceb3454a6ff35d310766936fd282470e47ed1ff597331d9e1ecf7204b4977c469bcf7e6d449a28ee67491c275c6bf6e88b64f28096fec8a01a61d0b0118e36b8d71fa53f160"}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x20000011}, 0x4080) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r5, 0x0, 0x0}, 0x10) 45.501219ms ago: executing program 3 (id=1544): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r0, &(0x7f0000000680)='0', 0x1) write$vga_arbiter(r0, &(0x7f00000006c0), 0xf) 0s ago: executing program 0 (id=1545): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x20, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): lookup_one_len+0x1a1/0x2e0 [ 358.819393][ T8434] ? lookup_one_common+0x450/0x450 [ 358.824541][ T8434] ? do_raw_spin_unlock+0x121/0x230 [ 358.829782][ T8434] ? mntput+0x65/0xc0 [ 358.833893][ T8434] start_creating+0x184/0x310 [ 358.838645][ T8434] __debugfs_create_file+0x6f/0x500 [ 358.843896][ T8434] binder_open+0x7ee/0xb30 [ 358.848472][ T8434] ? binder_mmap+0x560/0x560 [ 358.853106][ T8434] ? __rwlock_init+0x150/0x150 [ 358.857946][ T8434] ? fsnotify_perm+0x271/0x5e0 [ 358.862794][ T8434] do_dentry_open+0x880/0x14b0 [ 358.867605][ T8434] ? binder_mmap+0x560/0x560 [ 358.872270][ T8434] path_openat+0x284f/0x3270 [ 358.877036][ T8434] ? do_sys_openat2+0xda/0x1d0 [ 358.881852][ T8434] ? __x64_sys_openat+0x139/0x160 [ 358.886924][ T8434] ? verify_lock_unused+0x140/0x140 [ 358.892208][ T8434] ? do_filp_open+0x430/0x430 [ 358.896948][ T8434] do_filp_open+0x1f2/0x430 [ 358.901501][ T8434] ? vfs_tmpfile+0x620/0x620 [ 358.906251][ T8434] ? _raw_spin_unlock+0x28/0x40 [ 358.911280][ T8434] ? alloc_fd+0x590/0x640 [ 358.915669][ T8434] do_sys_openat2+0x134/0x1d0 [ 358.920406][ T8434] ? do_sys_open+0xe0/0xe0 [ 358.924891][ T8434] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 358.930912][ T8434] ? lock_chain_count+0x20/0x20 [ 358.935801][ T8434] __x64_sys_openat+0x139/0x160 [ 358.940698][ T8434] do_syscall_64+0x55/0xb0 [ 358.945168][ T8434] ? clear_bhb_loop+0x40/0x90 [ 358.950002][ T8434] ? clear_bhb_loop+0x40/0x90 [ 358.954734][ T8434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 358.960673][ T8434] RIP: 0033:0x7f4db9f9f559 [ 358.965193][ T8434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.984933][ T8434] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.993463][ T8434] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 359.001480][ T8434] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 359.009489][ T8434] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 359.017491][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.025498][ T8434] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 359.033531][ T8434] [ 359.039678][ T5786] Bluetooth: hci1: command 0x041b tx timeout [ 359.168070][ T8] usb 2-1: USB disconnect, device number 14 [ 359.194015][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 359.226212][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.247367][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.373845][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 359.999420][ T9] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 360.114915][ T9] usb 3-1: config 0 has no interface number 0 [ 360.124392][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 360.135903][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.144082][ T9] usb 3-1: Product: syz [ 360.148838][ T9] usb 3-1: Manufacturer: syz [ 360.154666][ T9] usb 3-1: SerialNumber: syz [ 360.164507][ T9] usb 3-1: config 0 descriptor?? [ 360.174082][ T9] hub 3-1:0.132: bad descriptor, ignoring hub [ 360.180301][ T9] hub: probe of 3-1:0.132 failed with error -5 [ 360.191222][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input7 [ 360.344940][ T8446] FAULT_INJECTION: forcing a failure. [ 360.344940][ T8446] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 360.359497][ T8446] CPU: 0 PID: 8446 Comm: syz.3.798 Not tainted syzkaller #0 [ 360.366851][ T8446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 360.377028][ T8446] Call Trace: [ 360.380353][ T8446] [ 360.383330][ T8446] dump_stack_lvl+0x18c/0x250 [ 360.388079][ T8446] ? show_regs_print_info+0x20/0x20 [ 360.393387][ T8446] ? load_image+0x420/0x420 [ 360.398104][ T8446] ? __lock_acquire+0x7eb0/0x7eb0 [ 360.403214][ T8446] should_fail_ex+0x394/0x4c0 [ 360.408048][ T8446] prepare_alloc_pages+0x1e1/0x5b0 [ 360.413260][ T8446] __alloc_pages+0x134/0x460 [ 360.418015][ T8446] ? zone_statistics+0x170/0x170 [ 360.423014][ T8446] alloc_pages_exact+0x39/0x70 [ 360.427816][ T8446] snd_pcm_attach_substream+0x622/0xad0 [ 360.433510][ T8446] snd_pcm_open_substream+0xbb/0x2540 [ 360.438980][ T8446] ? snd_pcm_drop+0x250/0x250 [ 360.443715][ T8446] snd_pcm_oss_open+0xf6d/0x1bf0 [ 360.448778][ T8446] ? snd_pcm_oss_mmap+0x680/0x680 [ 360.453858][ T8446] ? soundcore_open+0x274/0x4c0 [ 360.458816][ T8446] ? do_task_dead+0xd0/0xd0 [ 360.463367][ T8446] chrdev_open+0x58c/0x600 [ 360.467825][ T8446] ? cd_forget+0x160/0x160 [ 360.472375][ T8446] ? fsnotify_perm+0x3ed/0x5e0 [ 360.477191][ T8446] do_dentry_open+0x880/0x14b0 [ 360.482010][ T8446] ? cd_forget+0x160/0x160 [ 360.486567][ T8446] path_openat+0x284f/0x3270 [ 360.491349][ T8446] ? do_sys_openat2+0xda/0x1d0 [ 360.496161][ T8446] ? __x64_sys_openat+0x139/0x160 [ 360.501232][ T8446] ? verify_lock_unused+0x140/0x140 [ 360.506560][ T8446] ? do_filp_open+0x430/0x430 [ 360.511779][ T8446] do_filp_open+0x1f2/0x430 [ 360.516422][ T8446] ? vfs_tmpfile+0x620/0x620 [ 360.521161][ T8446] ? _raw_spin_unlock+0x28/0x40 [ 360.526063][ T8446] ? alloc_fd+0x590/0x640 [ 360.530543][ T8446] do_sys_openat2+0x134/0x1d0 [ 360.535265][ T8446] ? do_sys_open+0xe0/0xe0 [ 360.539896][ T8446] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 360.545913][ T8446] ? lock_chain_count+0x20/0x20 [ 360.550893][ T8446] __x64_sys_openat+0x139/0x160 [ 360.555791][ T8446] do_syscall_64+0x55/0xb0 [ 360.560258][ T8446] ? clear_bhb_loop+0x40/0x90 [ 360.565017][ T8446] ? clear_bhb_loop+0x40/0x90 [ 360.569747][ T8446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 360.575690][ T8446] RIP: 0033:0x7fa159d9f559 [ 360.580144][ T8446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.600061][ T8446] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.608538][ T8446] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 360.616551][ T8446] RDX: 0000000000101000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 360.624589][ T8446] RBP: 00007fa159e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 360.632769][ T8446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.640778][ T8446] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 360.648902][ T8446] [ 361.420269][ T5790] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 361.526259][ T8271] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 361.538277][ T8271] usb 3-1: device reset changed ep0 maxpacket size! [ 361.550415][ T5772] usb 3-1: USB disconnect, device number 18 [ 361.743945][ T5772] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 361.933926][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 361.955492][ T5772] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 361.964315][ T5772] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 361.976457][ T5772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 361.996205][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 362.007043][ T5772] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 362.022261][ T5772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 362.032737][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.092541][ T5772] usbtmc 3-1:16.0: bulk endpoints not found [ 363.523863][ T5772] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 363.703822][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 363.711428][ T5772] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 363.720293][ T5772] usb 2-1: config 0 has no interface number 0 [ 363.729287][ T5772] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 363.738603][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.747061][ T5772] usb 2-1: Product: syz [ 363.751339][ T5772] usb 2-1: Manufacturer: syz [ 363.756175][ T5772] usb 2-1: SerialNumber: syz [ 363.763793][ T5772] usb 2-1: config 0 descriptor?? [ 363.772456][ T5772] hub 2-1:0.132: bad descriptor, ignoring hub [ 363.779252][ T5772] hub: probe of 2-1:0.132 failed with error -5 [ 363.790405][ T5772] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input8 [ 364.403845][ T8] usb 3-1: USB disconnect, device number 19 [ 364.690747][ T8497] overlayfs: failed to resolve './bus': -2 [ 364.816635][ T5889] usb 2-1: USB disconnect, device number 15 [ 365.633789][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 365.833968][ T8] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 365.844864][ T5889] usb 3-1: Using ep0 maxpacket: 8 [ 365.853010][ T5889] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 365.862079][ T5889] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 365.872327][ T5889] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 365.882652][ T5889] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 365.897321][ T5889] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 365.915321][ T5889] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 365.941529][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.964976][ T5889] usbtmc 3-1:16.0: bulk endpoints not found [ 366.033914][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 366.041201][ T8] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 366.060102][ T8] usb 2-1: config 0 has no interface number 0 [ 366.072966][ T8] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 366.088848][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.104180][ T8] usb 2-1: Product: syz [ 366.114027][ T8] usb 2-1: Manufacturer: syz [ 366.124301][ T8] usb 2-1: SerialNumber: syz [ 366.140426][ T8] usb 2-1: config 0 descriptor?? [ 366.160073][ T8] hub 2-1:0.132: bad descriptor, ignoring hub [ 366.180910][ T8] hub: probe of 2-1:0.132 failed with error -5 [ 366.196090][ T8] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input9 [ 366.261691][ T8525] overlayfs: failed to resolve './bus': -2 [ 366.321080][ T8526] ptp ptp0: guarantee physical clock free running [ 366.622829][ T8] usb 2-1: USB disconnect, device number 16 [ 367.675339][ T8539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.694280][ T8539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.754003][ T8545] netlink: 'syz.3.837': attribute type 10 has an invalid length. [ 368.414676][ T8] usb 3-1: USB disconnect, device number 20 [ 369.251441][ T8579] tipc: New replicast peer: 172.20.20.187 [ 369.260930][ T8579] tipc: Enabled bearer , priority 10 [ 369.633844][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 369.663188][ T8585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.672385][ T8585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.733791][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 369.830490][ T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 369.841652][ T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 369.851817][ T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 369.861076][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.874485][ T8581] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 369.890389][ T8] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 370.159092][ T8] usb 2-1: USB disconnect, device number 17 [ 370.379843][ T9] tipc: Node number set to 3145728 [ 371.116629][ T8] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 371.343900][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 371.355737][ T8] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.374267][ T8] usb 2-1: config 0 has no interface number 0 [ 371.382670][ T8] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.405213][ T8] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.421266][ T8] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.439154][ T8] usb 2-1: config 0 interface 1 has no altsetting 0 [ 371.446368][ T8] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 371.460566][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.495008][ T8] usb 2-1: config 0 descriptor?? [ 371.511082][ T8] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 371.530761][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.541564][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.880748][ T8611] FAULT_INJECTION: forcing a failure. [ 371.880748][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 371.893553][ T8611] CPU: 1 PID: 8611 Comm: syz.3.867 Not tainted syzkaller #0 [ 371.900903][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 371.911016][ T8611] Call Trace: [ 371.914351][ T8611] [ 371.917328][ T8611] dump_stack_lvl+0x18c/0x250 [ 371.922088][ T8611] ? show_regs_print_info+0x20/0x20 [ 371.927387][ T8611] ? load_image+0x420/0x420 [ 371.931954][ T8611] ? __lock_acquire+0x7eb0/0x7eb0 [ 371.937055][ T8611] should_fail_ex+0x394/0x4c0 [ 371.941811][ T8611] should_failslab+0x9/0x20 [ 371.946382][ T8611] slab_pre_alloc_hook+0x59/0x300 [ 371.951468][ T8611] kmem_cache_alloc_lru+0x4d/0x2c0 [ 371.956651][ T8611] ? sock_alloc_inode+0x28/0xc0 [ 371.961695][ T8611] sock_alloc_inode+0x28/0xc0 [ 371.966576][ T8611] ? sockfs_init_fs_context+0xb0/0xb0 [ 371.972013][ T8611] new_inode_pseudo+0x63/0x1d0 [ 371.976853][ T8611] __sock_create+0x12d/0x940 [ 371.981596][ T8611] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 371.987842][ T8611] __sys_socket+0xd7/0x1b0 [ 371.992504][ T8611] __x64_sys_socket+0x7a/0x90 [ 371.997253][ T8611] do_syscall_64+0x55/0xb0 [ 372.001739][ T8611] ? clear_bhb_loop+0x40/0x90 [ 372.006528][ T8611] ? clear_bhb_loop+0x40/0x90 [ 372.011354][ T8611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 372.017310][ T8611] RIP: 0033:0x7fa159d9f559 [ 372.021792][ T8611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.042086][ T8611] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 372.050575][ T8611] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 372.058738][ T8611] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 372.066772][ T8611] RBP: 00007fa159e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 372.074815][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.082871][ T8611] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 372.090936][ T8611] [ 372.142194][ T8] elan 0003:04F3:074D.0001: failed to start in urb: -90 [ 372.154027][ T8611] socket: no more sockets [ 372.249216][ T8611] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 372.277173][ T8611] C: renamed from Cð (while UP) [ 372.306059][ T8611] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 372.441288][ T8621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.458230][ T8621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.523362][ T8] elan 0003:04F3:074D.0001: Get report error for parm 6: 0 [ 372.893799][ T5772] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 372.928819][ T8] elan 0003:04F3:074D.0001: Get report error for parm 7: 0 [ 373.140827][ T8] elan 0003:04F3:074D.0001: Set report error for parm 8: -71 [ 373.206383][ T8] elan 0003:04F3:074D.0001: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 373.250717][ T8] elan 0003:04F3:074D.0001: Input device is not registered [ 373.269543][ T8632] udevd[8632]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 373.299095][ T8] elan: probe of 0003:04F3:074D.0001 failed with error -119 [ 373.334873][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 373.361595][ T8] usb 2-1: USB disconnect, device number 18 [ 373.712830][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.723564][ T5772] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 373.734951][ T5772] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 373.753917][ T5772] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 373.763184][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.023854][ T5889] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 374.187813][ T5772] cxacru 3-1:1.0: send of cm 0x90 failed (-71) [ 374.226076][ T5772] usb 3-1: USB disconnect, device number 21 [ 374.264007][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 374.340975][ T8650] ptp ptp0: guarantee physical clock free running [ 375.064415][ T5889] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 375.083792][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 375.094322][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 375.104394][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 375.114379][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 375.124628][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 375.137946][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 375.147154][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.165074][ T5889] usbtmc: probe of 2-1:16.0 failed with error -22 [ 375.413912][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 377.493837][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 377.735364][ T5837] usb 2-1: USB disconnect, device number 19 [ 378.887475][ T8686] ptp ptp0: guarantee physical clock free running [ 378.939939][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.948455][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.192639][ T8698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.210646][ T8698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.653822][ T5837] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 380.900537][ T5837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 381.733506][ T5837] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 381.745467][ T5837] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 381.754902][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.767359][ T8705] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 381.779568][ T5837] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 382.158384][ T8] usb 2-1: USB disconnect, device number 20 [ 382.341361][ T8714] ptp ptp0: guarantee physical clock free running [ 382.882090][ T8736] random: crng reseeded on system resumption [ 383.781822][ T8739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.990103][ T8739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.043356][ T8752] tipc: Enabling of bearer rejected, failed to enable media [ 384.072751][ T8753] ptp ptp0: guarantee physical clock free running [ 384.190766][ T8744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.229199][ T8744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.274537][ T8739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.463926][ T8739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.316904][ T8739] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.361212][ T8739] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.420703][ T8739] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.468282][ T8739] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.066420][ T8786] tipc: Enabled bearer , priority 0 [ 388.082080][ T8783] ptp ptp0: guarantee physical clock free running [ 388.192561][ T8784] tipc: Disabling bearer [ 388.773880][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 389.310247][ T8800] FAULT_INJECTION: forcing a failure. [ 389.310247][ T8800] name failslab, interval 1, probability 0, space 0, times 0 [ 389.357421][ T8800] CPU: 0 PID: 8800 Comm: syz.3.925 Not tainted syzkaller #0 [ 389.364907][ T8800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 389.375135][ T8800] Call Trace: [ 389.378486][ T8800] [ 389.381466][ T8800] dump_stack_lvl+0x18c/0x250 [ 389.386246][ T8800] ? show_regs_print_info+0x20/0x20 [ 389.391542][ T8800] ? load_image+0x420/0x420 [ 389.396138][ T8800] ? __might_sleep+0xe0/0xe0 [ 389.400796][ T8800] ? __lock_acquire+0x7eb0/0x7eb0 [ 389.405900][ T8800] should_fail_ex+0x394/0x4c0 [ 389.410645][ T8800] should_failslab+0x9/0x20 [ 389.415211][ T8800] slab_pre_alloc_hook+0x59/0x300 [ 389.420294][ T8800] ? pkcs7_digest+0x1c7/0x8a0 [ 389.425231][ T8800] ? pkcs7_digest+0x1c7/0x8a0 [ 389.430058][ T8800] __kmem_cache_alloc_node+0x53/0x260 [ 389.435514][ T8800] ? pkcs7_digest+0x1c7/0x8a0 [ 389.440238][ T8800] __kmalloc+0xa7/0x240 [ 389.444501][ T8800] pkcs7_digest+0x1c7/0x8a0 [ 389.449233][ T8800] ? pkcs7_get_digest+0x200/0x200 [ 389.454297][ T8800] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 389.460313][ T8800] ? lock_chain_count+0x20/0x20 [ 389.465205][ T8800] pkcs7_verify+0x1df/0x1340 [ 389.469841][ T8800] ? lockdep_hardirqs_on+0x98/0x150 [ 389.475336][ T8800] verify_pkcs7_message_sig+0xf8/0x2b0 [ 389.480839][ T8800] ? slab_free_freelist_hook+0x154/0x240 [ 389.486516][ T8800] ? pkcs7_preparse+0xc0/0xc0 [ 389.491225][ T8800] ? restrict_link_by_digsig_builtin_and_secondary+0x80/0x80 [ 389.498664][ T8800] ? pkcs7_parse_message+0x4c6/0x520 [ 389.504064][ T8800] ? pkcs7_parse_message+0x4c6/0x520 [ 389.509406][ T8800] ? pkcs7_preparse+0xc0/0xc0 [ 389.514129][ T8800] verify_pkcs7_signature+0x6a/0x90 [ 389.519383][ T8800] pkcs7_preparse+0x8b/0xc0 [ 389.524041][ T8800] ? pkcs7_preparse+0xc0/0xc0 [ 389.528795][ T8800] __key_create_or_update+0x351/0xa60 [ 389.534262][ T8800] ? key_create_or_update+0x60/0x60 [ 389.539673][ T8800] ? bpf_lsm_key_permission+0x9/0x10 [ 389.545208][ T8800] ? lookup_user_key+0xb66/0x1140 [ 389.550285][ T8800] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 389.556402][ T8800] key_create_or_update+0x42/0x60 [ 389.561500][ T8800] __se_sys_add_key+0x34f/0x410 [ 389.566397][ T8800] ? __x64_sys_add_key+0xc0/0xc0 [ 389.571402][ T8800] ? lockdep_hardirqs_on+0x98/0x150 [ 389.576634][ T8800] ? __x64_sys_add_key+0x20/0xc0 [ 389.581616][ T8800] do_syscall_64+0x55/0xb0 [ 389.586081][ T8800] ? clear_bhb_loop+0x40/0x90 [ 389.590804][ T8800] ? clear_bhb_loop+0x40/0x90 [ 389.595559][ T8800] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 389.601589][ T8800] RIP: 0033:0x7fa159d9f559 [ 389.606049][ T8800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.625867][ T8800] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 389.634444][ T8800] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 389.642450][ T8800] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 389.650582][ T8800] RBP: 00007fa159e36b20 R08: ffffffffffffffff R09: 0000000000000000 [ 389.658606][ T8800] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 389.666619][ T8800] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 389.674660][ T8800] [ 390.060987][ T8805] Invalid ELF header magic: != ELF [ 390.088173][ T8805] overlayfs: overlapping lowerdir path [ 390.813820][ T5889] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 390.823977][ T8810] netlink: 64 bytes leftover after parsing attributes in process `syz.2.928'. [ 391.028945][ T5889] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.072390][ T5889] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 391.238163][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.394653][ T5889] usb 2-1: Product: syz [ 391.446220][ T5889] usb 2-1: Manufacturer: syz [ 391.487877][ T5889] usb 2-1: SerialNumber: syz [ 391.668375][ T5889] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 391.961299][ T8823] tipc: Enabled bearer , priority 0 [ 392.006346][ T5889] gspca_mr97310a: reg write [19] error -71 [ 392.012489][ T5889] mr97310a: probe of 2-1:1.0 failed with error -71 [ 392.040588][ T8822] tipc: Disabling bearer [ 392.069260][ T5889] usb 2-1: USB disconnect, device number 21 [ 393.283910][ T8838] Invalid ELF header magic: != ELF [ 393.824791][ T8839] overlayfs: overlapping lowerdir path [ 394.926788][ T8858] tipc: Enabling of bearer rejected, failed to enable media [ 394.938288][ T8860] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 395.376617][ T8873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.406308][ T8873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.434880][ T8880] Invalid ELF header magic: != ELF [ 397.024762][ T8879] overlayfs: overlapping lowerdir path [ 397.485206][ T8877] tipc: Started in network mode [ 397.490219][ T8877] tipc: Node identity 0010000000000000002, cluster identity 1 [ 398.159421][ T8895] overlayfs: missing 'lowerdir' [ 398.401890][ T8897] tipc: Enabling of bearer rejected, failed to enable media [ 399.723888][ T8911] Invalid ELF header magic: != ELF [ 400.025001][ T8913] overlayfs: overlapping lowerdir path [ 400.834447][ T8919] tipc: Enabling of bearer rejected, already enabled [ 400.891208][ T8923] overlayfs: missing 'lowerdir' [ 401.201875][ T8931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.218934][ T8931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.719042][ T8936] tipc: Enabling of bearer rejected, failed to enable media [ 403.883648][ C0] sched: RT throttling activated [ 404.326468][ T8950] netlink: 16 bytes leftover after parsing attributes in process `syz.2.975'. [ 404.491595][ T8954] syz0: rxe_newlink: already configured on bond0 [ 404.574607][ T8956] tipc: New replicast peer: 172.20.20.187 [ 404.594573][ T8956] tipc: Enabled bearer , priority 10 [ 404.605007][ T8955] overlayfs: missing 'lowerdir' [ 404.869300][ T8961] tipc: Enabling of bearer rejected, failed to enable media [ 405.613936][ T5859] tipc: Node number set to 3145728 [ 406.534458][ T8974] Invalid ELF header magic: != ELF [ 407.124692][ T8973] overlayfs: overlapping lowerdir path [ 410.091081][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.125892][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.267084][ T8989] overlayfs: missing 'lowerdir' [ 410.827439][ T8994] tipc: Enabling of bearer rejected, failed to enable media [ 411.464885][ T9009] syz0: rxe_newlink: already configured on bond0 [ 412.213940][ T9010] Invalid ELF header magic: != ELF [ 412.554660][ T9010] overlayfs: overlapping lowerdir path [ 415.292345][ T8648] cxacru 3-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 415.302050][ T8332] cxacru 4-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?) [ 416.070493][ T5772] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 416.293685][ T5772] usb 4-1: Using ep0 maxpacket: 16 [ 416.337147][ T5772] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 416.356882][ T5772] usb 4-1: config 0 has no interface number 0 [ 416.363170][ T5772] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.375120][ T5772] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.394760][ T5772] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.412908][ T5772] usb 4-1: config 0 interface 1 has no altsetting 0 [ 416.429793][ T5772] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 416.449693][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.481709][ T5772] usb 4-1: config 0 descriptor?? [ 416.498153][ T5772] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 417.319930][ T9034] tipc: Enabling of bearer rejected, failed to enable media [ 417.389220][ T9038] overlayfs: missing 'lowerdir' [ 417.509406][ T5772] elan 0003:04F3:074D.0002: failed to start in urb: -90 [ 418.953894][ T9049] Invalid ELF header magic: != ELF [ 419.664574][ T9049] overlayfs: overlapping lowerdir path [ 421.972960][ T5772] elan 0003:04F3:074D.0002: Set report error for parm 6: -71 [ 422.092754][ T5772] elan 0003:04F3:074D.0002: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 422.126375][ T9054] udevd[9054]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 422.157948][ T5772] elan 0003:04F3:074D.0002: Input device is not registered [ 422.186775][ T5772] elan: probe of 0003:04F3:074D.0002 failed with error -119 [ 422.216185][ T5772] usb 4-1: USB disconnect, device number 14 [ 422.663774][ T5837] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 422.866419][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.903867][ T5837] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 422.923735][ T5837] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.959664][ T5837] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 422.980905][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.004113][ T5837] usb 3-1: Product: syz [ 423.008368][ T5837] usb 3-1: Manufacturer: syz [ 423.013287][ T5837] usb 3-1: SerialNumber: syz [ 423.095048][ T9072] tipc: Enabling of bearer rejected, failed to enable media [ 423.300365][ T9079] syz0: rxe_newlink: already configured on bond0 [ 423.485133][ T9064] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 424.131454][ T5837] ATM dev 0: failed to start ADSL synchronisation: -71 [ 424.154400][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802743ab00 failed (-71)! [ 424.162546][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802743a600 failed (-71)! [ 424.170652][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802fae1d00 failed (-71)! [ 424.178669][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802fae1a00 failed (-71)! [ 424.199082][ T5837] usb 3-1: USB disconnect, device number 22 [ 426.410015][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.422056][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.801688][ T9092] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1018'. [ 426.961308][ T9094] tipc: Enabling of bearer rejected, failed to enable media [ 429.369212][ T9105] FAULT_INJECTION: forcing a failure. [ 429.369212][ T9105] name failslab, interval 1, probability 0, space 0, times 0 [ 429.420549][ T9105] CPU: 0 PID: 9105 Comm: syz.2.1023 Not tainted syzkaller #0 [ 429.428042][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.438213][ T9105] Call Trace: [ 429.441541][ T9105] [ 429.444549][ T9105] dump_stack_lvl+0x18c/0x250 [ 429.449305][ T9105] ? show_regs_print_info+0x20/0x20 [ 429.454598][ T9105] ? load_image+0x420/0x420 [ 429.459190][ T9105] ? __might_sleep+0xe0/0xe0 [ 429.463900][ T9105] ? __lock_acquire+0x7eb0/0x7eb0 [ 429.469036][ T9105] should_fail_ex+0x394/0x4c0 [ 429.473787][ T9105] should_failslab+0x9/0x20 [ 429.478346][ T9105] slab_pre_alloc_hook+0x59/0x300 [ 429.483523][ T9105] ? security_task_alloc+0x46/0x130 [ 429.488799][ T9105] ? security_task_alloc+0x46/0x130 [ 429.494066][ T9105] __kmem_cache_alloc_node+0x53/0x260 [ 429.499538][ T9105] ? security_task_alloc+0x46/0x130 [ 429.504982][ T9105] __kmalloc+0xa7/0x240 [ 429.509252][ T9105] security_task_alloc+0x46/0x130 [ 429.514356][ T9105] copy_process+0x14fb/0x3da0 [ 429.519111][ T9105] ? copy_process+0x98e/0x3da0 [ 429.524243][ T9105] ? __pidfd_prepare+0x140/0x140 [ 429.529260][ T9105] ? __raw_spin_lock_init+0x45/0x100 [ 429.534630][ T9105] vhost_task_create+0x1fb/0x370 [ 429.539630][ T9105] ? vhost_run_work_list+0x1b0/0x1b0 [ 429.545096][ T9105] ? __vhost_worker_flush+0x290/0x290 [ 429.550539][ T9105] ? vhost_task_stop+0x190/0x190 [ 429.555549][ T9105] ? vhost_task_create+0x370/0x370 [ 429.560714][ T9105] ? vscnprintf+0x80/0x80 [ 429.565151][ T9105] vhost_worker_create+0x15e/0x350 [ 429.570327][ T9105] ? vhost_dev_set_owner+0x9b0/0x9b0 [ 429.575678][ T9105] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 429.581024][ T9105] ? rcu_is_watching+0x15/0xb0 [ 429.585848][ T9105] ? vhost_dev_set_owner+0x2a5/0x9b0 [ 429.591182][ T9105] ? trace_kmalloc+0x1f/0xa0 [ 429.595842][ T9105] ? __kmalloc+0x159/0x240 [ 429.600325][ T9105] vhost_dev_set_owner+0x5c8/0x9b0 [ 429.605506][ T9105] vhost_net_ioctl+0x6c7/0x1280 [ 429.610510][ T9105] ? vhost_net_chr_poll+0x50/0x50 [ 429.615607][ T9105] ? bpf_lsm_file_ioctl+0x9/0x10 [ 429.620596][ T9105] ? security_file_ioctl+0x80/0xa0 [ 429.625760][ T9105] ? vhost_net_chr_poll+0x50/0x50 [ 429.630867][ T9105] __se_sys_ioctl+0xfd/0x170 [ 429.635527][ T9105] do_syscall_64+0x55/0xb0 [ 429.640032][ T9105] ? clear_bhb_loop+0x40/0x90 [ 429.644782][ T9105] ? clear_bhb_loop+0x40/0x90 [ 429.649532][ T9105] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 429.655585][ T9105] RIP: 0033:0x7f9a13b9f559 [ 429.660058][ T9105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.679923][ T9105] RSP: 002b:00007f9a14a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.688423][ T9105] RAX: ffffffffffffffda RBX: 00007f9a13e25fa0 RCX: 00007f9a13b9f559 [ 429.696455][ T9105] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004 [ 429.704491][ T9105] RBP: 00007f9a13c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 429.712523][ T9105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.720551][ T9105] R13: 00007f9a13e26038 R14: 00007f9a13e25fa0 R15: 00007ffee1e78718 [ 429.728633][ T9105] [ 430.103869][ T5837] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 430.284344][ T5837] usb 2-1: Using ep0 maxpacket: 16 [ 430.292072][ T5837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.301289][ T5837] usb 2-1: config 0 has no interface number 0 [ 430.319077][ T9118] syz0: rxe_newlink: already configured on bond0 [ 430.333743][ T5837] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.373759][ T5837] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.403968][ T5837] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.438388][ T5837] usb 2-1: config 0 interface 1 has no altsetting 0 [ 430.458650][ T5837] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 430.489011][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.515985][ T5837] usb 2-1: config 0 descriptor?? [ 430.536793][ T5837] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 430.956597][ T5837] elan 0003:04F3:074D.0003: failed to start in urb: -90 [ 431.043056][ T9122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.060104][ T9122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.073784][ T971] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 431.263770][ T971] usb 4-1: Using ep0 maxpacket: 16 [ 431.273319][ T971] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 431.288052][ T971] usb 4-1: config 0 has no interface number 0 [ 431.296393][ T971] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.312226][ T971] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.324202][ T971] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 431.342879][ T971] usb 4-1: config 0 interface 1 has no altsetting 0 [ 431.351720][ T971] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 431.358898][ T5837] elan 0003:04F3:074D.0003: Get report error for parm 6: 0 [ 431.376755][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.392625][ T971] usb 4-1: config 0 descriptor?? [ 431.412383][ T971] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 431.546129][ T9126] tipc: Enabling of bearer rejected, failed to enable media [ 431.832352][ T971] elan 0003:04F3:074D.0004: failed to start in urb: -90 [ 431.976819][ T5837] elan 0003:04F3:074D.0003: Set report error for parm 8: -71 [ 431.994990][ T5837] elan 0003:04F3:074D.0003: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 432.015351][ T5837] elan 0003:04F3:074D.0003: Input device is not registered [ 432.035870][ T5837] elan: probe of 0003:04F3:074D.0003 failed with error -119 [ 432.058824][ T5837] usb 2-1: USB disconnect, device number 22 [ 432.076187][ T9140] udevd[9140]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 432.224924][ T971] elan 0003:04F3:074D.0004: Get report error for parm 6: 0 [ 432.531743][ T9148] syz0: rxe_newlink: already configured on bond0 [ 432.628057][ T971] elan 0003:04F3:074D.0004: Get report error for parm 7: -71 [ 432.664879][ T971] elan 0003:04F3:074D.0004: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 432.706350][ T971] elan 0003:04F3:074D.0004: Input device is not registered [ 432.732676][ T971] elan: probe of 0003:04F3:074D.0004 failed with error -119 [ 432.742669][ T9150] udevd[9150]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 432.766869][ T971] usb 4-1: USB disconnect, device number 15 [ 433.072412][ T9156] FAULT_INJECTION: forcing a failure. [ 433.072412][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 433.094345][ T9156] CPU: 1 PID: 9156 Comm: syz.1.1040 Not tainted syzkaller #0 [ 433.101835][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.111953][ T9156] Call Trace: [ 433.115281][ T9156] [ 433.118254][ T9156] dump_stack_lvl+0x18c/0x250 [ 433.123015][ T9156] ? show_regs_print_info+0x20/0x20 [ 433.128378][ T9156] ? load_image+0x420/0x420 [ 433.132961][ T9156] ? __might_sleep+0xe0/0xe0 [ 433.137818][ T9156] ? __lock_acquire+0x7eb0/0x7eb0 [ 433.142935][ T9156] should_fail_ex+0x394/0x4c0 [ 433.147699][ T9156] should_failslab+0x9/0x20 [ 433.152293][ T9156] slab_pre_alloc_hook+0x59/0x300 [ 433.157403][ T9156] ? blk_alloc_queue_stats+0x4c/0xf0 [ 433.162807][ T9156] __kmem_cache_alloc_node+0x53/0x260 [ 433.168263][ T9156] ? blk_alloc_queue_stats+0x4c/0xf0 [ 433.173630][ T9156] kmalloc_trace+0x2a/0xe0 [ 433.178118][ T9156] blk_alloc_queue_stats+0x4c/0xf0 [ 433.183324][ T9156] blk_alloc_queue+0xab/0x4c0 [ 433.188092][ T9156] __blk_mq_alloc_disk+0x47/0x190 [ 433.193200][ T9156] ? loop_add+0x2f7/0x990 [ 433.197646][ T9156] loop_add+0x322/0x990 [ 433.201874][ T9156] loop_control_ioctl+0x128/0x590 [ 433.206961][ T9156] ? loop_set_hw_queue_depth+0x110/0x110 [ 433.212754][ T9156] ? bpf_lsm_file_ioctl+0x9/0x10 [ 433.217775][ T9156] ? security_file_ioctl+0x80/0xa0 [ 433.223040][ T9156] ? loop_set_hw_queue_depth+0x110/0x110 [ 433.228755][ T9156] __se_sys_ioctl+0xfd/0x170 [ 433.233488][ T9156] do_syscall_64+0x55/0xb0 [ 433.238003][ T9156] ? clear_bhb_loop+0x40/0x90 [ 433.242760][ T9156] ? clear_bhb_loop+0x40/0x90 [ 433.247526][ T9156] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 433.253635][ T9156] RIP: 0033:0x7f666779f559 [ 433.258199][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.277876][ T9156] RSP: 002b:00007f66685ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.286359][ T9156] RAX: ffffffffffffffda RBX: 00007f6667a25fa0 RCX: 00007f666779f559 [ 433.294426][ T9156] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 433.302454][ T9156] RBP: 00007f6667836b20 R08: 0000000000000000 R09: 0000000000000000 [ 433.310573][ T9156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.318704][ T9156] R13: 00007f6667a26038 R14: 00007f6667a25fa0 R15: 00007fff30807fb8 [ 433.326769][ T9156] [ 433.734122][ T9162] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1044'. [ 434.429684][ T9184] Invalid ELF header magic: != ELF [ 434.455205][ T9184] overlayfs: overlapping lowerdir path [ 435.048086][ T9185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1053'. [ 435.137578][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 435.286629][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.298330][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.324201][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 435.334294][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 435.352864][ T9] usb 4-1: config 0 has no interface number 0 [ 435.359885][ T9] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.373739][ T9] usb 4-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.385435][ T9] usb 4-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 435.399256][ T9] usb 4-1: config 0 interface 1 has no altsetting 0 [ 435.406341][ T9] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 435.433681][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.454682][ T9] usb 4-1: config 0 descriptor?? [ 435.477048][ T9] usbhid 4-1:0.1: fixing wrong optional hid class descriptors count [ 435.696848][ T9204] syz0: rxe_newlink: already configured on bond0 [ 435.896860][ T9] elan 0003:04F3:074D.0005: failed to start in urb: -90 [ 436.293427][ T9] elan 0003:04F3:074D.0005: Get report error for parm 6: 0 [ 436.677067][ T9212] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1064'. [ 436.781724][ T9215] Invalid ELF header magic: != ELF [ 436.803351][ T9215] overlayfs: overlapping lowerdir path [ 437.447800][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 437.519784][ T9] elan 0003:04F3:074D.0005: Get report error for parm 7: -71 [ 437.531775][ T9] elan 0003:04F3:074D.0005: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.3-1/input1 [ 437.544163][ T9] elan 0003:04F3:074D.0005: Input device is not registered [ 437.555794][ T9] elan: probe of 0003:04F3:074D.0005 failed with error -119 [ 437.582212][ T9] usb 4-1: USB disconnect, device number 16 [ 437.616787][ T9221] udevd[9221]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 438.003507][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1074'. [ 438.048371][ T9242] syz0: rxe_newlink: already configured on bond0 [ 439.014102][ T9248] Invalid ELF header magic: != ELF [ 439.424819][ T9249] overlayfs: overlapping lowerdir path [ 439.937431][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1077'. [ 440.353962][ T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 440.382047][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.388548][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.516483][ T9267] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1083'. [ 440.595808][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.608799][ T8] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 440.634104][ T8] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.659294][ T8] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 440.673066][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.681327][ T8] usb 4-1: Product: syz [ 440.701580][ T8] usb 4-1: Manufacturer: syz [ 440.717292][ T8] usb 4-1: SerialNumber: syz [ 440.814384][ T9274] FAULT_INJECTION: forcing a failure. [ 440.814384][ T9274] name failslab, interval 1, probability 0, space 0, times 0 [ 441.118789][ T9274] CPU: 1 PID: 9274 Comm: syz.2.1086 Not tainted syzkaller #0 [ 441.126370][ T9274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 441.136488][ T9274] Call Trace: [ 441.139823][ T9274] [ 441.142801][ T9274] dump_stack_lvl+0x18c/0x250 [ 441.147564][ T9274] ? show_regs_print_info+0x20/0x20 [ 441.152879][ T9274] ? load_image+0x420/0x420 [ 441.157458][ T9274] ? __might_sleep+0xe0/0xe0 [ 441.162125][ T9274] ? __lock_acquire+0x7eb0/0x7eb0 [ 441.167236][ T9274] should_fail_ex+0x394/0x4c0 [ 441.172013][ T9274] should_failslab+0x9/0x20 [ 441.176654][ T9274] slab_pre_alloc_hook+0x59/0x300 [ 441.181769][ T9274] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 441.187833][ T9274] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 441.193778][ T9274] __kmem_cache_alloc_node+0x53/0x260 [ 441.199274][ T9274] ? tomoyo_realpath_from_path+0xe6/0x5c0 [ 441.205078][ T9274] __kmalloc+0xa7/0x240 [ 441.209321][ T9274] tomoyo_realpath_from_path+0xe6/0x5c0 [ 441.214943][ T9274] ? tomoyo_domain+0xd6/0x120 [ 441.219711][ T9274] tomoyo_path_number_perm+0x248/0x5e0 [ 441.225243][ T9274] ? tomoyo_path_number_perm+0x217/0x5e0 [ 441.230949][ T9274] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 441.236520][ T9274] ? __fget_files+0x28/0x460 [ 441.241366][ T9274] security_file_ioctl+0x70/0xa0 [ 441.246368][ T9274] __se_sys_ioctl+0x48/0x170 [ 441.251020][ T9274] do_syscall_64+0x55/0xb0 [ 441.255587][ T9274] ? clear_bhb_loop+0x40/0x90 [ 441.260323][ T9274] ? clear_bhb_loop+0x40/0x90 [ 441.265062][ T9274] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.271102][ T9274] RIP: 0033:0x7f9a13b9f559 [ 441.275819][ T9274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.295484][ T9274] RSP: 002b:00007f9a14a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 441.303965][ T9274] RAX: ffffffffffffffda RBX: 00007f9a13e25fa0 RCX: 00007f9a13b9f559 [ 441.311989][ T9274] RDX: 0000000000000000 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 441.320012][ T9274] RBP: 00007f9a13c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 441.328131][ T9274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 441.336158][ T9274] R13: 00007f9a13e26038 R14: 00007f9a13e25fa0 R15: 00007ffee1e78718 [ 441.344228][ T9274] [ 441.348756][ T9274] ERROR: Out of memory at tomoyo_realpath_from_path. [ 441.369952][ T9255] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 442.284238][ T9278] Invalid ELF header magic: != ELF [ 442.485275][ T9278] overlayfs: overlapping lowerdir path [ 442.953785][ T8] ATM dev 0: failed to start ADSL synchronisation: -71 [ 442.974020][ C0] ATM dev 0: usbatm_complete: urb 0xffff88801b3bbc00 failed (-71)! [ 442.982109][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802606c700 failed (-71)! [ 442.990145][ C0] ATM dev 0: usbatm_complete: urb 0xffff88814ccbbf00 failed (-71)! [ 442.998277][ C0] ATM dev 0: usbatm_complete: urb 0xffff88814ccbbe00 failed (-71)! [ 443.012061][ T8] usb 4-1: USB disconnect, device number 17 [ 443.407516][ T9296] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1094'. [ 443.483440][ T9303] device-mapper: table: 248:3: cache: Device size larger than cached device (-EINVAL) [ 443.494334][ T9303] device-mapper: ioctl: error adding target to table [ 443.554946][ T9305] syz0: rxe_newlink: already configured on bond0 [ 443.650707][ T9309] FAULT_INJECTION: forcing a failure. [ 443.650707][ T9309] name failslab, interval 1, probability 0, space 0, times 0 [ 443.666883][ T9309] CPU: 0 PID: 9309 Comm: syz.1.1097 Not tainted syzkaller #0 [ 443.674471][ T9309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 443.684602][ T9309] Call Trace: [ 443.687922][ T9309] [ 443.690910][ T9309] dump_stack_lvl+0x18c/0x250 [ 443.695663][ T9309] ? show_regs_print_info+0x20/0x20 [ 443.701225][ T9309] ? load_image+0x420/0x420 [ 443.705789][ T9309] ? __might_sleep+0xe0/0xe0 [ 443.710435][ T9309] ? __lock_acquire+0x7eb0/0x7eb0 [ 443.715517][ T9309] should_fail_ex+0x394/0x4c0 [ 443.720261][ T9309] should_failslab+0x9/0x20 [ 443.724805][ T9309] slab_pre_alloc_hook+0x59/0x300 [ 443.729888][ T9309] ? tomoyo_encode+0x2ad/0x570 [ 443.734700][ T9309] ? tomoyo_encode+0x2ad/0x570 [ 443.739536][ T9309] __kmem_cache_alloc_node+0x53/0x260 [ 443.744952][ T9309] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 443.750824][ T9309] ? tomoyo_encode+0x2ad/0x570 [ 443.755651][ T9309] __kmalloc+0xa7/0x240 [ 443.759877][ T9309] tomoyo_encode+0x2ad/0x570 [ 443.764546][ T9309] tomoyo_realpath_from_path+0x57c/0x5c0 [ 443.770241][ T9309] ? tomoyo_domain+0xd6/0x120 [ 443.774987][ T9309] tomoyo_path_number_perm+0x248/0x5e0 [ 443.780692][ T9309] ? tomoyo_path_number_perm+0x217/0x5e0 [ 443.786418][ T9309] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 443.791956][ T9309] ? futex_wake_mark+0x150/0x150 [ 443.797213][ T9309] ? __fget_files+0x28/0x460 [ 443.801930][ T9309] security_file_ioctl+0x70/0xa0 [ 443.806937][ T9309] __se_sys_ioctl+0x48/0x170 [ 443.811701][ T9309] do_syscall_64+0x55/0xb0 [ 443.816194][ T9309] ? clear_bhb_loop+0x40/0x90 [ 443.820933][ T9309] ? clear_bhb_loop+0x40/0x90 [ 443.825678][ T9309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.831635][ T9309] RIP: 0033:0x7f666779f559 [ 443.836121][ T9309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.856039][ T9309] RSP: 002b:00007f66685ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.864691][ T9309] RAX: ffffffffffffffda RBX: 00007f6667a25fa0 RCX: 00007f666779f559 [ 443.872803][ T9309] RDX: 0000000000000000 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 443.880926][ T9309] RBP: 00007f6667836b20 R08: 0000000000000000 R09: 0000000000000000 [ 443.888956][ T9309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.896987][ T9309] R13: 00007f6667a26038 R14: 00007f6667a25fa0 R15: 00007fff30807fb8 [ 443.905042][ T9309] [ 443.939911][ T9309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 444.263514][ T9315] Invalid ELF header magic: != ELF [ 444.289091][ T9315] overlayfs: overlapping lowerdir path [ 445.639383][ T9334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1105'. [ 446.013971][ T5772] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 446.401655][ T5772] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.412580][ T5772] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 446.422827][ T5772] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.363873][ T9349] Invalid ELF header magic: != ELF [ 447.924614][ T9349] overlayfs: overlapping lowerdir path [ 448.305123][ T5772] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 448.314708][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.323025][ T5772] usb 2-1: Product: syz [ 448.327594][ T5772] usb 2-1: Manufacturer: syz [ 448.332644][ T5772] usb 2-1: SerialNumber: syz [ 448.911770][ T9339] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 449.365705][ T5772] ATM dev 0: failed to start ADSL synchronisation: -71 [ 449.372976][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805b218800 failed (-71)! [ 449.381038][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805b218900 failed (-71)! [ 449.389121][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805b218a00 failed (-71)! [ 449.397353][ C1] ATM dev 0: usbatm_complete: urb 0xffff88805b218b00 failed (-71)! [ 449.440594][ T5772] usb 2-1: USB disconnect, device number 23 [ 450.417379][ T9387] syz0: rxe_newlink: already configured on bond0 [ 451.173897][ T9388] Invalid ELF header magic: != ELF [ 451.724637][ T9388] overlayfs: overlapping lowerdir path [ 452.867282][ T9409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.879652][ T9409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.883875][ T9425] Invalid ELF header magic: != ELF [ 455.325269][ T9427] overlayfs: overlapping lowerdir path [ 456.325954][ T9441] syz0: rxe_newlink: already configured on bond0 [ 456.783771][ T5885] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 456.976263][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.990570][ T5885] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 457.027792][ T5885] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 457.069677][ T5885] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 457.080484][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.096890][ T5885] usb 2-1: Product: syz [ 457.101487][ T5885] usb 2-1: Manufacturer: syz [ 457.106267][ T5885] usb 2-1: SerialNumber: syz [ 458.173933][ T9460] Invalid ELF header magic: != ELF [ 458.514910][ T9461] overlayfs: overlapping lowerdir path [ 458.919056][ T9446] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 459.356042][ T971] IPVS: starting estimator thread 0... [ 459.453976][ T9478] IPVS: using max 18 ests per chain, 43200 per kthread [ 460.583854][ T9506] Invalid ELF header magic: != ELF [ 461.025665][ T9508] overlayfs: overlapping lowerdir path [ 461.613997][ T5885] speedtch 2-1:1.0: speedtch_bind: device reset failed (-19)! [ 461.634336][ T5885] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 461.661647][ T5885] usb 2-1: USB disconnect, device number 24 [ 461.929023][ T9521] FAULT_INJECTION: forcing a failure. [ 461.929023][ T9521] name failslab, interval 1, probability 0, space 0, times 0 [ 461.942020][ T9521] CPU: 1 PID: 9521 Comm: syz.3.1164 Not tainted syzkaller #0 [ 461.949455][ T9521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 461.959689][ T9521] Call Trace: [ 461.963025][ T9521] [ 461.966017][ T9521] dump_stack_lvl+0x18c/0x250 [ 461.970786][ T9521] ? show_regs_print_info+0x20/0x20 [ 461.976088][ T9521] ? load_image+0x420/0x420 [ 461.980737][ T9521] ? __might_sleep+0xe0/0xe0 [ 461.985498][ T9521] ? __lock_acquire+0x7eb0/0x7eb0 [ 461.990767][ T9521] should_fail_ex+0x394/0x4c0 [ 461.995617][ T9521] should_failslab+0x9/0x20 [ 462.000184][ T9521] slab_pre_alloc_hook+0x59/0x300 [ 462.005376][ T9521] ? tomoyo_encode+0x2ad/0x570 [ 462.010248][ T9521] ? tomoyo_encode+0x2ad/0x570 [ 462.015068][ T9521] __kmem_cache_alloc_node+0x53/0x260 [ 462.020559][ T9521] ? tomoyo_realpath_from_path+0x5c0/0x5c0 [ 462.026417][ T9521] ? tomoyo_encode+0x2ad/0x570 [ 462.031211][ T9521] __kmalloc+0xa7/0x240 [ 462.035405][ T9521] tomoyo_encode+0x2ad/0x570 [ 462.040035][ T9521] tomoyo_realpath_from_path+0x57c/0x5c0 [ 462.045706][ T9521] ? tomoyo_domain+0xd6/0x120 [ 462.050424][ T9521] tomoyo_path_number_perm+0x248/0x5e0 [ 462.055910][ T9521] ? tomoyo_path_number_perm+0x217/0x5e0 [ 462.061575][ T9521] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 462.067065][ T9521] ? futex_wake_mark+0x150/0x150 [ 462.072060][ T9521] ? __fget_files+0x28/0x460 [ 462.076899][ T9521] security_file_ioctl+0x70/0xa0 [ 462.081873][ T9521] __se_sys_ioctl+0x48/0x170 [ 462.086502][ T9521] do_syscall_64+0x55/0xb0 [ 462.090967][ T9521] ? clear_bhb_loop+0x40/0x90 [ 462.095682][ T9521] ? clear_bhb_loop+0x40/0x90 [ 462.100411][ T9521] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.106344][ T9521] RIP: 0033:0x7fa159d9f559 [ 462.111065][ T9521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.130794][ T9521] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.139239][ T9521] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 462.147278][ T9521] RDX: 0000000000000000 RSI: 00000000c02064b9 RDI: 0000000000000003 [ 462.155464][ T9521] RBP: 00007fa159e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 462.163807][ T9521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.171886][ T9521] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 462.179908][ T9521] [ 462.192327][ T9522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1163'. [ 462.206050][ T9521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 462.639173][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.651987][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.353856][ T9537] Invalid ELF header magic: != ELF [ 464.124624][ T9537] overlayfs: overlapping lowerdir path [ 464.540571][ T5885] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 464.732916][ T5885] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 464.758864][ T5885] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 464.817505][ T5885] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.819146][ T9551] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 464.864506][ T5885] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 464.883776][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.892250][ T5885] usb 2-1: Product: syz [ 464.896625][ T5885] usb 2-1: Manufacturer: syz [ 464.901320][ T5885] usb 2-1: SerialNumber: syz [ 465.334347][ T9527] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 466.094794][ T9574] Invalid ELF header magic: != ELF [ 466.121172][ T9574] overlayfs: overlapping lowerdir path [ 466.647081][ T5885] speedtch 2-1:1.0: speedtch_bind: device reset failed (-19)! [ 466.785278][ T5885] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 466.816641][ T5885] usb 2-1: USB disconnect, device number 25 [ 466.912533][ T9581] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1182'. [ 466.922358][ T5837] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 467.126341][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.136809][ T5837] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 467.144261][ T5772] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 467.149319][ T5837] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 467.168987][ T5837] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 467.179677][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.343873][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 467.371340][ T5772] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 467.381721][ T5772] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 467.399260][ T5772] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 467.419267][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.442582][ T5772] usb 3-1: Product: syz [ 467.451548][ T5772] usb 3-1: Manufacturer: syz [ 467.476586][ T5772] usb 3-1: SerialNumber: syz [ 467.902538][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 468.014332][ T5885] usb 3-1: USB disconnect, device number 23 [ 468.240902][ T5837] cxacru 4-1:1.0: send of cm 0x91 failed (-71) [ 468.248249][ T5837] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 468.257538][ T5837] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 468.257782][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 468.273930][ T9] usb 2-1: config 0 has no interface number 0 [ 468.280256][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.291266][ T9] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.303304][ T5837] cxacru: probe of 4-1:1.0 failed with error -71 [ 468.314640][ T5837] usb 4-1: USB disconnect, device number 18 [ 468.323672][ T9] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 468.337364][ T9] usb 2-1: config 0 interface 1 has no altsetting 0 [ 468.344881][ T9] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 468.355268][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.404863][ T9] usb 2-1: config 0 descriptor?? [ 468.437620][ T9] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 468.873146][ T9] elan 0003:04F3:074D.0006: failed to start in urb: -90 [ 469.131951][ T9603] Invalid ELF header magic: != ELF [ 469.155663][ T9603] overlayfs: overlapping lowerdir path [ 469.832718][ T9] elan 0003:04F3:074D.0006: Get report error for parm 6: 0 [ 470.051435][ T9] elan 0003:04F3:074D.0006: Get report error for parm 7: -71 [ 470.077201][ T9] elan 0003:04F3:074D.0006: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 470.095489][ T9608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1191'. [ 470.117687][ T9] elan 0003:04F3:074D.0006: Input device is not registered [ 470.145632][ T9] elan: probe of 0003:04F3:074D.0006 failed with error -119 [ 470.161652][ T9611] udevd[9611]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 470.180997][ T9] usb 2-1: USB disconnect, device number 26 [ 471.027729][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.036758][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.183871][ T9630] Invalid ELF header magic: != ELF [ 473.784844][ T9631] overlayfs: overlapping lowerdir path [ 474.389940][ T9633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1202'. [ 476.106283][ T9659] block device autoloading is deprecated and will be removed. [ 476.224584][ T9659] md: md0 stopped. [ 476.514456][ T9670] Invalid ELF header magic: != ELF [ 476.537279][ T9670] overlayfs: overlapping lowerdir path [ 477.538564][ T9677] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1211'. [ 478.353764][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 478.568389][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 478.576188][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 478.589671][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 478.599951][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 478.609995][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 478.620913][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 478.634362][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 478.643461][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.903791][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 480.794355][ T9708] Invalid ELF header magic: != ELF [ 481.394682][ T9707] overlayfs: overlapping lowerdir path [ 481.901390][ T5837] usb 2-1: USB disconnect, device number 27 [ 482.064073][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 482.087362][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 482.104322][ T9] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 482.124271][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.132494][ T9] usb 4-1: Product: syz [ 482.142697][ T9] usb 4-1: Manufacturer: syz [ 482.147916][ T9] usb 4-1: SerialNumber: syz [ 482.225879][ T9716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.242611][ T9716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.371897][ T5772] usb 4-1: USB disconnect, device number 19 [ 485.683854][ T9740] Invalid ELF header magic: != ELF [ 485.955204][ T9742] overlayfs: overlapping lowerdir path [ 486.556336][ T5885] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 486.923801][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 486.936304][ T5885] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 486.953078][ T5885] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 486.966980][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 486.977553][ T5885] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.813488][ T5885] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.826685][ T5885] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 487.835868][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.853664][ T5885] usb 4-1: can't set config #16, error -71 [ 487.883849][ T5885] usb 4-1: USB disconnect, device number 20 [ 490.184513][ T9781] Invalid ELF header magic: != ELF [ 490.604688][ T9781] overlayfs: overlapping lowerdir path [ 491.593737][ T5837] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 491.793724][ T5837] usb 2-1: Using ep0 maxpacket: 8 [ 491.801292][ T5837] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 491.820459][ T5837] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 491.840885][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 491.857442][ T5837] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 491.871793][ T5837] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.886517][ T5837] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 491.896305][ T5837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.325445][ T9813] Invalid ELF header magic: != ELF [ 493.351518][ T9813] overlayfs: overlapping lowerdir path [ 493.813719][ T5790] Bluetooth: hci3: command 0x0406 tx timeout [ 494.910323][ T9] usb 2-1: USB disconnect, device number 28 [ 495.777136][ T9844] Invalid ELF header magic: != ELF [ 495.802910][ T9844] overlayfs: overlapping lowerdir path [ 496.573773][ T5885] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 497.527610][ T9865] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1273'. [ 497.544030][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 497.562006][ T5885] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 497.581084][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 497.593422][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 497.604059][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 497.614305][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 497.627969][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 497.637726][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.696430][ T9869] syz0: rxe_newlink: already configured on bond0 [ 499.660936][ T9] usb 3-1: USB disconnect, device number 24 [ 500.303786][ T9901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.322234][ T9901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.497542][ T9905] FAULT_INJECTION: forcing a failure. [ 500.497542][ T9905] name failslab, interval 1, probability 0, space 0, times 0 [ 500.510895][ T9905] CPU: 0 PID: 9905 Comm: syz.1.1287 Not tainted syzkaller #0 [ 500.518435][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 500.528557][ T9905] Call Trace: [ 500.531896][ T9905] [ 500.534879][ T9905] dump_stack_lvl+0x18c/0x250 [ 500.539622][ T9905] ? show_regs_print_info+0x20/0x20 [ 500.544883][ T9905] ? load_image+0x420/0x420 [ 500.549456][ T9905] ? __might_sleep+0xe0/0xe0 [ 500.554096][ T9905] ? __lock_acquire+0x7eb0/0x7eb0 [ 500.559188][ T9905] should_fail_ex+0x394/0x4c0 [ 500.564035][ T9905] should_failslab+0x9/0x20 [ 500.568592][ T9905] slab_pre_alloc_hook+0x59/0x300 [ 500.573791][ T9905] ? pkcs7_sig_note_signature+0x35/0x120 [ 500.579542][ T9905] ? pkcs7_sig_note_signature+0x35/0x120 [ 500.585247][ T9905] __kmem_cache_alloc_node+0x53/0x260 [ 500.590709][ T9905] ? pkcs7_sig_note_signature+0x35/0x120 [ 500.596418][ T9905] __kmalloc_node_track_caller+0xa4/0x230 [ 500.602222][ T9905] kmemdup+0x2b/0x70 [ 500.606190][ T9905] pkcs7_sig_note_signature+0x35/0x120 [ 500.611727][ T9905] asn1_ber_decoder+0xf89/0x2390 [ 500.616732][ T9905] ? key_create_or_update+0x42/0x60 [ 500.622010][ T9905] ? ref_tracker_free+0x830/0x830 [ 500.627123][ T9905] pkcs7_parse_message+0x250/0x520 [ 500.632486][ T9905] verify_pkcs7_signature+0x30/0x90 [ 500.637751][ T9905] pkcs7_preparse+0x8b/0xc0 [ 500.642355][ T9905] ? pkcs7_preparse+0xc0/0xc0 [ 500.647100][ T9905] __key_create_or_update+0x351/0xa60 [ 500.652542][ T9905] ? key_create_or_update+0x60/0x60 [ 500.657800][ T9905] ? bpf_lsm_key_permission+0x9/0x10 [ 500.663158][ T9905] ? lookup_user_key+0xb66/0x1140 [ 500.668262][ T9905] ? search_process_keyrings_rcu+0x2b0/0x2b0 [ 500.674316][ T9905] key_create_or_update+0x42/0x60 [ 500.679418][ T9905] __se_sys_add_key+0x34f/0x410 [ 500.684334][ T9905] ? __x64_sys_add_key+0xc0/0xc0 [ 500.689341][ T9905] ? lockdep_hardirqs_on+0x98/0x150 [ 500.694681][ T9905] ? __x64_sys_add_key+0x20/0xc0 [ 500.699679][ T9905] do_syscall_64+0x55/0xb0 [ 500.704162][ T9905] ? clear_bhb_loop+0x40/0x90 [ 500.708949][ T9905] ? clear_bhb_loop+0x40/0x90 [ 500.713715][ T9905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 500.719676][ T9905] RIP: 0033:0x7f666779f559 [ 500.724145][ T9905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.743914][ T9905] RSP: 002b:00007f66685ff028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 500.752413][ T9905] RAX: ffffffffffffffda RBX: 00007f6667a25fa0 RCX: 00007f666779f559 [ 500.760449][ T9905] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 0000200000000000 [ 500.768481][ T9905] RBP: 00007f6667836b20 R08: ffffffffffffffff R09: 0000000000000000 [ 500.776517][ T9905] R10: 00000000000000be R11: 0000000000000246 R12: 0000000000000000 [ 500.784548][ T9905] R13: 00007f6667a26038 R14: 00007f6667a25fa0 R15: 00007fff30807fb8 [ 500.792601][ T9905] [ 500.795834][ C0] vkms_vblank_simulate: vblank timer overrun [ 501.448380][ T9908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.486058][ T9908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.639913][ T9919] syz0: rxe_newlink: already configured on bond0 [ 501.818828][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.825417][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.415754][ T9928] FAULT_INJECTION: forcing a failure. [ 502.415754][ T9928] name failslab, interval 1, probability 0, space 0, times 0 [ 502.429124][ T9928] CPU: 1 PID: 9928 Comm: syz.0.1297 Not tainted syzkaller #0 [ 502.436578][ T9928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.447032][ T9928] Call Trace: [ 502.450368][ T9928] [ 502.453351][ T9928] dump_stack_lvl+0x18c/0x250 [ 502.458122][ T9928] ? show_regs_print_info+0x20/0x20 [ 502.463386][ T9928] ? load_image+0x420/0x420 [ 502.467954][ T9928] ? __might_sleep+0xe0/0xe0 [ 502.472620][ T9928] ? __lock_acquire+0x7eb0/0x7eb0 [ 502.477707][ T9928] should_fail_ex+0x394/0x4c0 [ 502.482450][ T9928] should_failslab+0x9/0x20 [ 502.487186][ T9928] slab_pre_alloc_hook+0x59/0x300 [ 502.492293][ T9928] ? io_alloc_hash_table+0x2d/0xb0 [ 502.497464][ T9928] ? io_alloc_hash_table+0x2d/0xb0 [ 502.502634][ T9928] __kmem_cache_alloc_node+0x53/0x260 [ 502.508075][ T9928] ? io_alloc_hash_table+0x2d/0xb0 [ 502.513258][ T9928] __kmalloc+0xa7/0x240 [ 502.517498][ T9928] io_alloc_hash_table+0x2d/0xb0 [ 502.522648][ T9928] io_ring_ctx_alloc+0x132/0xc10 [ 502.527684][ T9928] io_uring_create+0x2df/0x1330 [ 502.532653][ T9928] ? __might_fault+0xc6/0x120 [ 502.537397][ T9928] ? __might_fault+0xaa/0x120 [ 502.542149][ T9928] __se_sys_io_uring_setup+0x29f/0x2b0 [ 502.547678][ T9928] ? __x64_sys_io_uring_setup+0x60/0x60 [ 502.553302][ T9928] ? lockdep_hardirqs_on+0x98/0x150 [ 502.558569][ T9928] do_syscall_64+0x55/0xb0 [ 502.563074][ T9928] ? clear_bhb_loop+0x40/0x90 [ 502.567820][ T9928] ? clear_bhb_loop+0x40/0x90 [ 502.572566][ T9928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 502.578520][ T9928] RIP: 0033:0x7f4db9f9f559 [ 502.583074][ T9928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.602836][ T9928] RSP: 002b:00007f4dbaec5fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 502.611303][ T9928] RAX: ffffffffffffffda RBX: 00002000000000c0 RCX: 00007f4db9f9f559 [ 502.619321][ T9928] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000020 [ 502.627349][ T9928] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 502.635365][ T9928] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 502.643373][ T9928] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffef61e5718 [ 502.651390][ T9928] [ 504.134454][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 504.847490][ T9961] syz0: rxe_newlink: already configured on bond0 [ 504.932298][ T9962] FAULT_INJECTION: forcing a failure. [ 504.932298][ T9962] name failslab, interval 1, probability 0, space 0, times 0 [ 505.003889][ T9962] CPU: 0 PID: 9962 Comm: syz.2.1307 Not tainted syzkaller #0 [ 505.011397][ T9962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 505.021511][ T9962] Call Trace: [ 505.024847][ T9962] [ 505.027837][ T9962] dump_stack_lvl+0x18c/0x250 [ 505.032580][ T9962] ? show_regs_print_info+0x20/0x20 [ 505.037884][ T9962] ? load_image+0x420/0x420 [ 505.042460][ T9962] ? __might_sleep+0xe0/0xe0 [ 505.047105][ T9962] ? __lock_acquire+0x7eb0/0x7eb0 [ 505.052199][ T9962] should_fail_ex+0x394/0x4c0 [ 505.056935][ T9962] should_failslab+0x9/0x20 [ 505.061480][ T9962] slab_pre_alloc_hook+0x59/0x300 [ 505.066634][ T9962] kmem_cache_alloc+0x5a/0x2d0 [ 505.071476][ T9962] ? __kernfs_new_node+0xe5/0x7f0 [ 505.076599][ T9962] __kernfs_new_node+0xe5/0x7f0 [ 505.081533][ T9962] ? kernfs_new_node+0x260/0x260 [ 505.086558][ T9962] ? up_write+0x1be/0x410 [ 505.090957][ T9962] kernfs_new_node+0x14c/0x260 [ 505.095781][ T9962] __kernfs_create_file+0x4b/0x2e0 [ 505.101040][ T9962] sysfs_add_file_mode_ns+0x237/0x2f0 [ 505.106458][ T9962] sysfs_merge_group+0x184/0x320 [ 505.111528][ T9962] ? sysfs_remove_groups+0xa0/0xa0 [ 505.116939][ T9962] ? device_add_class_symlinks+0x240/0x240 [ 505.122917][ T9962] dpm_sysfs_add+0xd2/0x270 [ 505.127489][ T9962] device_add+0x55c/0xc40 [ 505.131858][ T9962] iommufd_test+0x121d/0x2a20 [ 505.136618][ T9962] ? iommufd_selftest_destroy+0xf0/0xf0 [ 505.142293][ T9962] ? __lock_acquire+0x7eb0/0x7eb0 [ 505.147365][ T9962] ? __lock_acquire+0x7eb0/0x7eb0 [ 505.152423][ T9962] ? __might_fault+0xaa/0x120 [ 505.157132][ T9962] ? __might_fault+0xaa/0x120 [ 505.161847][ T9962] iommufd_fops_ioctl+0x48b/0x540 [ 505.166924][ T9962] ? iommufd_ctx_put+0x40/0x40 [ 505.171732][ T9962] ? __fget_files+0x28/0x460 [ 505.176403][ T9962] ? bpf_lsm_file_ioctl+0x9/0x10 [ 505.181373][ T9962] ? security_file_ioctl+0x80/0xa0 [ 505.186524][ T9962] ? iommufd_ctx_put+0x40/0x40 [ 505.191324][ T9962] __se_sys_ioctl+0xfd/0x170 [ 505.195960][ T9962] do_syscall_64+0x55/0xb0 [ 505.200416][ T9962] ? clear_bhb_loop+0x40/0x90 [ 505.205134][ T9962] ? clear_bhb_loop+0x40/0x90 [ 505.209911][ T9962] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 505.215883][ T9962] RIP: 0033:0x7f9a13b9f559 [ 505.220336][ T9962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.240095][ T9962] RSP: 002b:00007f9a14a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.248833][ T9962] RAX: ffffffffffffffda RBX: 00007f9a13e25fa0 RCX: 00007f9a13b9f559 [ 505.256843][ T9962] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 505.264942][ T9962] RBP: 00007f9a13c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 505.273131][ T9962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.281151][ T9962] R13: 00007f9a13e26038 R14: 00007f9a13e25fa0 R15: 00007ffee1e78718 [ 505.289186][ T9962] [ 505.292365][ C0] vkms_vblank_simulate: vblank timer overrun [ 505.360220][ T9964] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1308'. [ 506.376081][ T9989] FAULT_INJECTION: forcing a failure. [ 506.376081][ T9989] name failslab, interval 1, probability 0, space 0, times 0 [ 506.403785][ T9989] CPU: 1 PID: 9989 Comm: syz.0.1317 Not tainted syzkaller #0 [ 506.411346][ T9989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 506.421464][ T9989] Call Trace: [ 506.424883][ T9989] [ 506.427859][ T9989] dump_stack_lvl+0x18c/0x250 [ 506.432699][ T9989] ? show_regs_print_info+0x20/0x20 [ 506.437965][ T9989] ? load_image+0x420/0x420 [ 506.442614][ T9989] ? __might_sleep+0xe0/0xe0 [ 506.447272][ T9989] ? __lock_acquire+0x7eb0/0x7eb0 [ 506.452358][ T9989] ? percpu_ref_put+0x12/0x100 [ 506.457200][ T9989] should_fail_ex+0x394/0x4c0 [ 506.461952][ T9989] should_failslab+0x9/0x20 [ 506.466538][ T9989] slab_pre_alloc_hook+0x59/0x300 [ 506.471624][ T9989] kmem_cache_alloc+0x5a/0x2d0 [ 506.476466][ T9989] ? vm_area_dup+0x61/0x270 [ 506.481035][ T9989] vm_area_dup+0x61/0x270 [ 506.485460][ T9989] __split_vma+0x1a8/0xc20 [ 506.489947][ T9989] ? mmap_write_unlock+0x160/0x160 [ 506.495156][ T9989] do_vmi_align_munmap+0x3a3/0x16a0 [ 506.500448][ T9989] ? move_page_tables+0x18c3/0x19d0 [ 506.505869][ T9989] ? do_vmi_munmap+0x2d0/0x2d0 [ 506.510697][ T9989] ? mtree_range_walk+0x68c/0x7b0 [ 506.515804][ T9989] ? mas_find_setup+0x47f/0x590 [ 506.520735][ T9989] do_vmi_munmap+0x252/0x2d0 [ 506.525396][ T9989] move_vma+0xe99/0x1940 [ 506.529700][ T9989] ? vma_expandable+0xf0/0xf0 [ 506.534426][ T9989] ? arch_get_unmapped_area+0x7c0/0x7c0 [ 506.540059][ T9989] ? bpf_lsm_mmap_addr+0x9/0x10 [ 506.544955][ T9989] ? security_mmap_addr+0x72/0x90 [ 506.550054][ T9989] ? get_unmapped_area+0x2f9/0x360 [ 506.555241][ T9989] mremap_to+0x51f/0x5d0 [ 506.559582][ T9989] __se_sys_mremap+0x6a8/0x11a0 [ 506.564513][ T9989] ? __x64_sys_mremap+0xc0/0xc0 [ 506.569429][ T9989] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 506.575470][ T9989] ? lock_chain_count+0x20/0x20 [ 506.580385][ T9989] ? lockdep_hardirqs_on+0x98/0x150 [ 506.585634][ T9989] ? __x64_sys_mremap+0x20/0xc0 [ 506.590546][ T9989] do_syscall_64+0x55/0xb0 [ 506.595125][ T9989] ? clear_bhb_loop+0x40/0x90 [ 506.599856][ T9989] ? clear_bhb_loop+0x40/0x90 [ 506.604647][ T9989] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 506.610609][ T9989] RIP: 0033:0x7f4db9f9f559 [ 506.615163][ T9989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.634917][ T9989] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 506.643389][ T9989] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 506.651672][ T9989] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000ff1000 [ 506.659793][ T9989] RBP: 00007f4dba036b20 R08: 0000200000ff6000 R09: 0000000000000000 [ 506.667815][ T9989] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 506.675849][ T9989] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 506.683889][ T9989] [ 507.943851][T10003] Invalid ELF header magic: != ELF [ 508.085014][T10005] overlayfs: overlapping lowerdir path [ 508.902491][T10008] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 509.283260][T10023] random: crng reseeded on system resumption [ 509.403488][T10031] syz0: rxe_newlink: already configured on bond0 [ 509.439548][T10030] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.334305][T10030] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.434708][T10030] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.538600][T10030] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.708787][T10030] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.750038][T10030] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.807281][T10030] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.832079][T10030] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.892417][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.902999][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.043802][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 511.051810][ T5889] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 511.254982][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 511.263979][ T5889] usb 4-1: config 0 has no interfaces? [ 511.281803][ T5889] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 511.292212][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 511.301204][ T9] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 511.310552][ T5889] usb 4-1: Product: syz [ 511.315250][ T5889] usb 4-1: Manufacturer: syz [ 511.319909][ T5889] usb 4-1: SerialNumber: syz [ 511.324832][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.336343][ T9] usb 2-1: Product: syz [ 511.340615][ T9] usb 2-1: Manufacturer: syz [ 511.346894][ T5889] usb 4-1: config 0 descriptor?? [ 511.363862][ T9] usb 2-1: SerialNumber: syz [ 511.372105][ T9] usb 2-1: config 0 descriptor?? [ 511.381278][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 511.542221][T10058] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 511.594086][ T5859] usb 4-1: USB disconnect, device number 21 [ 512.856886][T10077] syz0: rxe_newlink: already configured on bond0 [ 512.917068][T10075] syzkaller0: entered promiscuous mode [ 512.922873][T10075] syzkaller0: entered allmulticast mode [ 513.485885][ T9] gspca_ov534_9: reg_r err -71 [ 513.803763][ T9] gspca_ov534_9: Unknown sensor 0000 [ 513.803870][ T9] ov534_9: probe of 2-1:0.0 failed with error -22 [ 513.826648][ T9] usb 2-1: USB disconnect, device number 29 [ 515.050600][T10100] device-mapper: table: 248:4: thin: Error opening origin device (-ENOENT) [ 515.060175][T10100] device-mapper: ioctl: error adding target to table [ 515.854828][T10116] syz0: rxe_newlink: already configured on bond0 [ 517.619832][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.635246][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.661493][T10144] syz0: rxe_newlink: already configured on bond0 [ 518.887529][T10155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.939953][T10155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.080129][T10153] syzkaller0: entered promiscuous mode [ 519.104010][T10153] syzkaller0: entered allmulticast mode [ 523.295592][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 523.494908][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 523.528409][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 523.536850][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 523.557164][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 523.567400][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 523.585590][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.609127][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 523.618428][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.454282][T10199] syz0: rxe_newlink: already configured on bond0 [ 525.543817][ T8] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 525.758220][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.773769][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 525.795017][T10182] Bluetooth: hci4: Frame reassembly failed (-84) [ 525.804772][T10206] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 525.812194][ T8] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 525.823529][T10206] veth1_vlan: entered allmulticast mode [ 525.848148][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.860665][T10208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.877354][ T8] usb 4-1: Product: syz [ 525.881604][ T8] usb 4-1: Manufacturer: syz [ 525.891792][T10206] team0: Device veth1_vlan failed to register rx_handler [ 525.901758][T10208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.914698][ T8] usb 4-1: SerialNumber: syz [ 525.946836][ T8] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 525.953441][ T8] gspca_mr97310a: reg write [21] error -8 [ 525.983788][ T8] mr97310a: probe of 4-1:1.0 failed with error -8 [ 526.079924][ T5859] usb 3-1: USB disconnect, device number 25 [ 526.367904][ T8] usb 4-1: USB disconnect, device number 22 [ 527.250195][T10216] syzkaller0: entered promiscuous mode [ 527.258477][T10216] syzkaller0: entered allmulticast mode [ 527.813796][T10207] Bluetooth: hci4: command 0x1003 tx timeout [ 527.814030][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 528.773794][ T5885] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 528.862480][T10238] syz0: rxe_newlink: already configured on bond0 [ 528.993113][ T5885] usb 3-1: Using ep0 maxpacket: 8 [ 529.011067][ T5885] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 529.019752][ T5885] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 529.029772][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 529.050223][ T5885] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 529.071271][ T5885] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 529.100755][ T5885] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 529.121571][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.543348][ T5859] usb 3-1: USB disconnect, device number 26 [ 532.071635][T10267] FAULT_INJECTION: forcing a failure. [ 532.071635][T10267] name failslab, interval 1, probability 0, space 0, times 0 [ 532.090266][T10267] CPU: 0 PID: 10267 Comm: syz.0.1411 Not tainted syzkaller #0 [ 532.097852][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 532.108057][T10267] Call Trace: [ 532.111393][T10267] [ 532.114662][T10267] dump_stack_lvl+0x18c/0x250 [ 532.119448][T10267] ? show_regs_print_info+0x20/0x20 [ 532.124768][T10267] ? load_image+0x420/0x420 [ 532.129360][T10267] ? __might_sleep+0xe0/0xe0 [ 532.134032][T10267] ? __lock_acquire+0x7eb0/0x7eb0 [ 532.139227][T10267] should_fail_ex+0x394/0x4c0 [ 532.143987][T10267] should_failslab+0x9/0x20 [ 532.148562][T10267] slab_pre_alloc_hook+0x59/0x300 [ 532.153791][T10267] kmem_cache_alloc+0x5a/0x2d0 [ 532.158623][T10267] ? __kernfs_new_node+0xe5/0x7f0 [ 532.163729][T10267] __kernfs_new_node+0xe5/0x7f0 [ 532.168669][T10267] ? kernfs_new_node+0x260/0x260 [ 532.173704][T10267] ? up_write+0x1be/0x410 [ 532.178216][T10267] kernfs_new_node+0x14c/0x260 [ 532.183162][T10267] __kernfs_create_file+0x4b/0x2e0 [ 532.188355][T10267] sysfs_add_file_mode_ns+0x237/0x2f0 [ 532.193901][T10267] sysfs_merge_group+0x184/0x320 [ 532.198918][T10267] ? sysfs_remove_groups+0xa0/0xa0 [ 532.204108][T10267] ? device_add_class_symlinks+0x240/0x240 [ 532.209994][T10267] dpm_sysfs_add+0xd2/0x270 [ 532.214584][T10267] device_add+0x55c/0xc40 [ 532.218997][T10267] iommufd_test+0x121d/0x2a20 [ 532.223758][T10267] ? iommufd_selftest_destroy+0xf0/0xf0 [ 532.229380][T10267] ? __lock_acquire+0x7eb0/0x7eb0 [ 532.234616][T10267] ? __lock_acquire+0x7eb0/0x7eb0 [ 532.239746][T10267] ? __might_fault+0xaa/0x120 [ 532.244508][T10267] ? __might_fault+0xaa/0x120 [ 532.249439][T10267] iommufd_fops_ioctl+0x48b/0x540 [ 532.254553][T10267] ? iommufd_ctx_put+0x40/0x40 [ 532.259425][T10267] ? __fget_files+0x28/0x460 [ 532.264108][T10267] ? bpf_lsm_file_ioctl+0x9/0x10 [ 532.269125][T10267] ? security_file_ioctl+0x80/0xa0 [ 532.274314][T10267] ? iommufd_ctx_put+0x40/0x40 [ 532.279143][T10267] __se_sys_ioctl+0xfd/0x170 [ 532.283816][T10267] do_syscall_64+0x55/0xb0 [ 532.288327][T10267] ? clear_bhb_loop+0x40/0x90 [ 532.293182][T10267] ? clear_bhb_loop+0x40/0x90 [ 532.297945][T10267] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 532.303947][T10267] RIP: 0033:0x7f4db9f9f559 [ 532.308430][T10267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.328112][T10267] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.336604][T10267] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 532.344746][T10267] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000004 [ 532.352785][T10267] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 532.360816][T10267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.368953][T10267] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 532.377025][T10267] [ 532.683971][ T8] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 532.883893][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 532.928345][T10280] nvme_fabrics: missing parameter 'transport=%s' [ 532.946122][ T8] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 532.973785][ T8] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 532.989894][T10280] nvme_fabrics: missing parameter 'nqn=%s' [ 533.056179][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 533.141236][ T8] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 533.648477][ T8] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.000324][ T8] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 534.010272][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.273406][T10290] syzkaller0: entered promiscuous mode [ 534.279618][T10290] syzkaller0: entered allmulticast mode [ 534.673745][ T971] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 534.873765][ T971] usb 3-1: Using ep0 maxpacket: 8 [ 534.883833][ T971] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 534.904228][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 534.915219][ T971] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 534.926215][ T971] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.953739][ T971] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 534.973986][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.233914][ T971] usb 3-1: GET_CAPABILITIES returned 0 [ 535.239637][ T971] usbtmc 3-1:16.0: can't read capabilities [ 535.502355][ T971] usb 3-1: USB disconnect, device number 27 [ 535.881434][ T971] usb 2-1: USB disconnect, device number 30 [ 537.185085][ T5889] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 537.416673][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.437525][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 537.447344][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.476580][ T5889] usb 3-1: config 0 descriptor?? [ 537.504893][ T5889] pwc: Askey VC010 type 2 USB webcam detected. [ 537.942564][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00 [ 537.968180][ T5889] pwc: recv_control_msg error -32 req 02 val 2700 [ 537.977833][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00 [ 537.991985][ T5889] pwc: recv_control_msg error -32 req 04 val 1000 [ 538.001340][ T5889] pwc: recv_control_msg error -32 req 04 val 1300 [ 538.012059][ T5889] pwc: recv_control_msg error -32 req 04 val 1400 [ 538.026601][ T5889] pwc: recv_control_msg error -32 req 02 val 2000 [ 538.045271][ T5889] pwc: recv_control_msg error -32 req 02 val 2100 [ 538.466901][ T5889] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.486815][ T5889] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.505987][ T5889] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.522411][ T5889] pwc: recv_control_msg error -71 req 02 val 2800 [ 538.542060][ T5889] pwc: recv_control_msg error -71 req 04 val 1100 [ 538.549869][ T5889] pwc: recv_control_msg error -71 req 04 val 1200 [ 538.582601][ T5889] pwc: Registered as video103. [ 538.608429][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 538.638068][T10338] udevd[10338]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': Input/output error [ 538.649190][ T5889] usb 3-1: USB disconnect, device number 28 [ 538.833870][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 538.975712][T10349] FAULT_INJECTION: forcing a failure. [ 538.975712][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 538.989666][T10349] CPU: 1 PID: 10349 Comm: syz.0.1442 Not tainted syzkaller #0 [ 538.997214][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 539.007301][T10349] Call Trace: [ 539.010612][T10349] [ 539.013616][T10349] dump_stack_lvl+0x18c/0x250 [ 539.018370][T10349] ? show_regs_print_info+0x20/0x20 [ 539.023631][T10349] ? load_image+0x420/0x420 [ 539.028206][T10349] should_fail_ex+0x394/0x4c0 [ 539.032946][T10349] should_failslab+0x9/0x20 [ 539.037506][T10349] slab_pre_alloc_hook+0x59/0x300 [ 539.042590][T10349] ? stack_depot_init+0x36/0xe0 [ 539.047511][T10349] ? __hw_addr_add_ex+0x1f4/0x700 [ 539.052694][T10349] __kmem_cache_alloc_node+0x53/0x260 [ 539.058154][T10349] ? __hw_addr_add_ex+0x1f4/0x700 [ 539.063275][T10349] kmalloc_trace+0x2a/0xe0 [ 539.067786][T10349] __hw_addr_add_ex+0x1f4/0x700 [ 539.072810][T10349] dev_addr_init+0x15b/0x240 [ 539.077492][T10349] ? dev_addr_flush+0x210/0x210 [ 539.082436][T10349] alloc_netdev_mqs+0x2e1/0x1090 [ 539.087485][T10349] ? tun_get_tx_ring+0xa0/0xa0 [ 539.092399][T10349] tun_set_iff+0x546/0xea0 [ 539.094601][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 539.096876][T10349] __tun_chr_ioctl+0x7e0/0x2070 [ 539.107262][T10349] ? tun_flow_create+0x310/0x310 [ 539.112257][T10349] ? bpf_lsm_file_ioctl+0x9/0x10 [ 539.117389][T10349] ? security_file_ioctl+0x80/0xa0 [ 539.122539][T10349] ? tun_chr_poll+0x630/0x630 [ 539.127248][T10349] __se_sys_ioctl+0xfd/0x170 [ 539.131892][T10349] do_syscall_64+0x55/0xb0 [ 539.136352][T10349] ? clear_bhb_loop+0x40/0x90 [ 539.141072][T10349] ? clear_bhb_loop+0x40/0x90 [ 539.145788][T10349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 539.151716][T10349] RIP: 0033:0x7f4db9f9f559 [ 539.156224][T10349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.175878][T10349] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.184352][T10349] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 539.192384][T10349] RDX: 0000200000000840 RSI: 00000000400454ca RDI: 0000000000000005 [ 539.200422][T10349] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 539.208430][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.216445][T10349] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 539.224473][T10349] [ 539.260517][ T9] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 539.269247][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 539.303692][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 539.314064][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 539.339361][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 539.355094][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 539.387054][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.400793][T10357] syzkaller0: entered promiscuous mode [ 540.410498][T10357] syzkaller0: entered allmulticast mode [ 541.074039][ T971] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 541.310299][ T971] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.393345][ T971] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.455156][ T971] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.466426][ T971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.490959][T10370] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 541.508569][ T971] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 541.569070][ T5885] usb 2-1: USB disconnect, device number 31 [ 541.936847][T10376] ptp ptp0: guarantee physical clock free running [ 544.701223][ T5889] usb 4-1: USB disconnect, device number 23 [ 544.857193][T10379] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 545.296064][T10396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.404599][T10396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.443934][ T5885] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 546.641859][ T5885] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 546.663688][ T5885] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 546.688125][ T5885] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 546.705008][ T5885] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 546.735814][ T5885] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 546.751600][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.893697][ T5889] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 547.763688][ T5889] usb 4-1: device descriptor read/64, error -71 [ 548.073829][ T5889] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 548.095961][T10437] comedi comedi0: 8255: I/O port conflict (0x4f23,4) [ 548.102835][T10437] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 548.110076][T10437] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 548.133848][T10437] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 548.140636][T10437] comedi comedi0: 8255: I/O port conflict (0xfff,4) [ 548.154214][T10437] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 548.160769][T10437] comedi comedi0: 8255: I/O port conflict (0x3ff,4) [ 548.228578][T10440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.246576][ T5889] usb 4-1: device descriptor read/64, error -71 [ 548.257332][T10440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.354322][T10444] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 548.363991][ T5889] usb usb4-port1: attempt power cycle [ 548.656589][ T5885] gud 3-1:1.0: USB-2: Failed to add properties (ret=-71) [ 548.669839][ T5885] gud 3-1:1.0: Failed to get connectors (error=-71) [ 548.676935][ T5885] gud: probe of 3-1:1.0 failed with error -71 [ 548.711116][ T5885] usb 3-1: USB disconnect, device number 29 [ 548.793672][ T5889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 548.803767][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 548.858106][ T5889] usb 4-1: device descriptor read/8, error -71 [ 548.939072][T10452] netlink: 'syz.0.1482': attribute type 21 has an invalid length. [ 548.947363][T10452] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1482'. [ 548.957718][T10452] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1482'. [ 548.969985][T10452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 548.981866][T10452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.005901][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.023130][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 549.040705][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.050054][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.066176][T10448] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 549.083417][ T9] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 549.143862][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 549.202286][ T5889] usb 4-1: device descriptor read/8, error -71 [ 549.324112][ T5889] usb usb4-port1: unable to enumerate USB device [ 549.409672][ T9] usb 2-1: USB disconnect, device number 32 [ 550.133788][ T5885] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 550.326428][ T5885] usb 4-1: config 4 has an invalid interface number: 44 but max is 0 [ 550.329615][ T5889] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 550.336291][ T5885] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 550.353659][ T5885] usb 4-1: config 4 has no interface number 0 [ 550.360007][ T5885] usb 4-1: config 4 interface 44 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 550.377117][ T5885] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 550.389725][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.398072][ T5885] usb 4-1: Product: syz [ 550.402357][ T5885] usb 4-1: Manufacturer: syz [ 550.411002][ T5885] usb 4-1: SerialNumber: syz [ 550.503789][ T5889] usb 2-1: device descriptor read/64, error -71 [ 550.783955][ T5889] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 550.832246][ T5885] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 550.852132][ T5885] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 550.863748][ T5885] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 550.871518][ T5885] usb 4-1: media controller created [ 550.882427][ T5885] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 550.905285][ T5885] DVB: Unable to find symbol dib7000p_attach() [ 550.911552][ T5885] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 550.921511][ T5885] rc_core: Couldn't load IR keymap rc-dib0700-rc5 [ 550.928133][ T5885] Registered IR keymap rc-empty [ 550.934240][ T5885] dvb-usb: could not initialize remote control. [ 550.940584][ T5885] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 550.958193][ T5889] usb 2-1: device descriptor read/64, error -71 [ 551.083975][ T5889] usb usb2-port1: attempt power cycle [ 551.513854][ T5889] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 551.544617][ T5889] usb 2-1: device descriptor read/8, error -71 [ 551.814380][ T5889] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 551.844764][ T5889] usb 2-1: device descriptor read/8, error -71 [ 551.939820][T10452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 551.984071][ T5889] usb usb2-port1: unable to enumerate USB device [ 552.663776][ T5889] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 552.813957][ T5889] usb 3-1: device descriptor read/64, error -71 [ 552.929199][T10510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.940152][T10510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.083718][ T5889] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 553.434351][ T5889] usb 3-1: device descriptor read/64, error -71 [ 553.563787][ T5889] usb usb3-port1: attempt power cycle [ 553.983916][ T5889] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 554.036560][ T5889] usb 3-1: device descriptor read/8, error -71 [ 554.083039][T10527] FAULT_INJECTION: forcing a failure. [ 554.083039][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 554.096509][T10527] CPU: 1 PID: 10527 Comm: syz.0.1506 Not tainted syzkaller #0 [ 554.104319][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 554.114437][T10527] Call Trace: [ 554.117777][T10527] [ 554.120768][T10527] dump_stack_lvl+0x18c/0x250 [ 554.125524][T10527] ? show_regs_print_info+0x20/0x20 [ 554.130808][T10527] ? load_image+0x420/0x420 [ 554.135418][T10527] ? __might_sleep+0xe0/0xe0 [ 554.140092][T10527] ? __lock_acquire+0x7eb0/0x7eb0 [ 554.145217][T10527] should_fail_ex+0x394/0x4c0 [ 554.149978][T10527] should_failslab+0x9/0x20 [ 554.154555][T10527] slab_pre_alloc_hook+0x59/0x300 [ 554.159731][T10527] ? vfs_write+0x5de/0x9a0 [ 554.164241][T10527] kmem_cache_alloc+0x5a/0x2d0 [ 554.169068][T10527] ? getname_flags+0xbb/0x500 [ 554.173817][T10527] getname_flags+0xbb/0x500 [ 554.178383][T10527] do_sys_openat2+0xda/0x1d0 [ 554.183034][T10527] ? do_sys_open+0xe0/0xe0 [ 554.187515][T10527] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 554.193561][T10527] ? lock_chain_count+0x20/0x20 [ 554.198485][T10527] __x64_sys_openat+0x139/0x160 [ 554.203423][T10527] do_syscall_64+0x55/0xb0 [ 554.207893][T10527] ? clear_bhb_loop+0x40/0x90 [ 554.212619][T10527] ? clear_bhb_loop+0x40/0x90 [ 554.217350][T10527] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 554.223307][T10527] RIP: 0033:0x7f4db9f9f559 [ 554.227776][T10527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.247515][T10527] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.255974][T10527] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 554.264009][T10527] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 554.272110][T10527] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 554.280118][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.288116][T10527] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 554.296130][T10527] [ 554.313925][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 554.383857][ T5889] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 554.406265][T10530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.415482][T10530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.429445][ T5889] usb 3-1: device descriptor read/8, error -71 [ 554.506153][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 554.516900][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 554.530167][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 554.540461][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.548642][ T9] usb 2-1: Product: syz [ 554.552879][ T9] usb 2-1: Manufacturer: syz [ 554.558395][ T5889] usb usb3-port1: unable to enumerate USB device [ 554.564983][ T9] usb 2-1: SerialNumber: syz [ 554.790565][ T9] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 554.798190][ T9] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 555.765378][T10546] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 556.185858][ T9] usb 4-1: USB disconnect, device number 28 [ 556.248447][ T9] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 556.317752][T10556] FAULT_INJECTION: forcing a failure. [ 556.317752][T10556] name failslab, interval 1, probability 0, space 0, times 0 [ 556.333344][T10556] CPU: 0 PID: 10556 Comm: syz.3.1514 Not tainted syzkaller #0 [ 556.340884][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 556.350994][T10556] Call Trace: [ 556.354325][T10556] [ 556.357299][T10556] dump_stack_lvl+0x18c/0x250 [ 556.362048][T10556] ? show_regs_print_info+0x20/0x20 [ 556.367317][T10556] ? load_image+0x420/0x420 [ 556.371889][T10556] ? __might_sleep+0xe0/0xe0 [ 556.376553][T10556] ? __lock_acquire+0x7eb0/0x7eb0 [ 556.381637][T10556] should_fail_ex+0x394/0x4c0 [ 556.386379][T10556] should_failslab+0x9/0x20 [ 556.391028][T10556] slab_pre_alloc_hook+0x59/0x300 [ 556.396638][T10556] ? snd_pcm_hw_rule_add+0x18c/0x7f0 [ 556.401996][T10556] ? snd_pcm_hw_rule_add+0x18c/0x7f0 [ 556.407352][T10556] __kmem_cache_alloc_node+0x53/0x260 [ 556.412796][T10556] ? snd_pcm_hw_rule_add+0x18c/0x7f0 [ 556.418151][T10556] __kmalloc_node_track_caller+0xa4/0x230 [ 556.424070][T10556] krealloc+0x86/0x120 [ 556.428211][T10556] snd_pcm_hw_rule_add+0x18c/0x7f0 [ 556.433393][T10556] ? snd_pcm_hw_rule_mulkdiv+0x2b0/0x2b0 [ 556.439093][T10556] ? snd_pcm_post_pause+0x290/0x290 [ 556.444354][T10556] ? __raw_spin_lock_init+0x45/0x100 [ 556.449698][T10556] ? snd_interval_ranges+0x300/0x300 [ 556.455050][T10556] ? snd_pcm_attach_substream+0x841/0xad0 [ 556.460839][T10556] snd_pcm_open_substream+0xef7/0x2540 [ 556.466379][T10556] ? snd_pcm_drop+0x250/0x250 [ 556.471133][T10556] snd_pcm_oss_open+0xf6d/0x1bf0 [ 556.476161][T10556] ? snd_pcm_oss_mmap+0x680/0x680 [ 556.481264][T10556] ? soundcore_open+0x274/0x4c0 [ 556.486191][T10556] ? do_task_dead+0xd0/0xd0 [ 556.490769][T10556] chrdev_open+0x58c/0x600 [ 556.495254][T10556] ? cd_forget+0x160/0x160 [ 556.499740][T10556] ? fsnotify_perm+0x3ed/0x5e0 [ 556.504564][T10556] do_dentry_open+0x880/0x14b0 [ 556.509391][T10556] ? cd_forget+0x160/0x160 [ 556.513863][T10556] path_openat+0x284f/0x3270 [ 556.518584][T10556] ? do_sys_openat2+0xda/0x1d0 [ 556.523410][T10556] ? __x64_sys_openat+0x139/0x160 [ 556.528567][T10556] ? verify_lock_unused+0x140/0x140 [ 556.533824][T10556] ? do_filp_open+0x430/0x430 [ 556.538932][T10556] do_filp_open+0x1f2/0x430 [ 556.543901][T10556] ? vfs_tmpfile+0x620/0x620 [ 556.548622][T10556] ? _raw_spin_unlock+0x28/0x40 [ 556.553548][T10556] ? alloc_fd+0x590/0x640 [ 556.557951][T10556] do_sys_openat2+0x134/0x1d0 [ 556.562716][T10556] ? do_sys_open+0xe0/0xe0 [ 556.567235][T10556] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 556.573287][T10556] ? lock_chain_count+0x20/0x20 [ 556.578214][T10556] __x64_sys_openat+0x139/0x160 [ 556.583146][T10556] do_syscall_64+0x55/0xb0 [ 556.587650][T10556] ? clear_bhb_loop+0x40/0x90 [ 556.592396][T10556] ? clear_bhb_loop+0x40/0x90 [ 556.597144][T10556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.603103][T10556] RIP: 0033:0x7fa159d9f559 [ 556.607695][T10556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.627374][T10556] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 556.635962][T10556] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 556.644171][T10556] RDX: 0000000000101000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 556.652208][T10556] RBP: 00007fa159e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 556.660242][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.668272][T10556] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 556.676327][T10556] [ 556.888844][T10562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.909247][T10562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.946945][ T5889] usb 2-1: USB disconnect, device number 37 [ 557.335263][T10574] tipc: Enabling of bearer rejected, already enabled [ 557.346401][T10574] tipc: Disabling bearer [ 557.373791][ T971] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 557.485865][ T5889] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 557.563939][ T971] usb 4-1: Using ep0 maxpacket: 32 [ 557.578799][ T971] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 557.600227][ T971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.608936][ T971] usb 4-1: Product: syz [ 557.613233][ T971] usb 4-1: Manufacturer: syz [ 557.618702][ T971] usb 4-1: SerialNumber: syz [ 557.627690][ T971] usb 4-1: config 0 descriptor?? [ 557.639836][ T971] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 557.663701][ T5889] usb 2-1: device descriptor read/64, error -71 [ 557.682433][T10585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.692056][T10585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.943848][ T5889] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 558.104840][ T5889] usb 2-1: device descriptor read/64, error -71 [ 558.234157][ T5889] usb usb2-port1: attempt power cycle [ 558.494380][T10592] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.573059][T10592] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.643766][ T5889] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 558.657859][T10592] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.684629][ T5889] usb 2-1: device descriptor read/8, error -71 [ 558.730865][T10592] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.813680][ T9] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 558.871756][T10592] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.901616][T10592] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.925175][T10592] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.945991][T10592] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.973745][ T5889] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 559.007306][ T5889] usb 2-1: device descriptor read/8, error -71 [ 559.014007][ T9] usb 3-1: config 0 has no interfaces? [ 559.028304][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 559.043114][ T9] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 559.063009][T10597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.064864][ T971] gspca_ov534_9: reg_r err -32 [ 559.078750][ T9] usb 3-1: Product: syz [ 559.100951][ T9] usb 3-1: Manufacturer: syz [ 559.105791][ T9] usb 3-1: SerialNumber: syz [ 559.125812][ T9] usb 3-1: config 0 descriptor?? [ 559.134903][T10597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.163919][ T5889] usb usb2-port1: unable to enumerate USB device [ 559.344344][ T5889] usb 3-1: USB disconnect, device number 34 [ 559.473837][ T971] gspca_ov534_9: Unknown sensor 0000 [ 559.473967][ T971] ov534_9: probe of 4-1:0.0 failed with error -22 [ 560.062890][T10605] FAULT_INJECTION: forcing a failure. [ 560.062890][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 560.130345][T10605] CPU: 0 PID: 10605 Comm: syz.0.1535 Not tainted syzkaller #0 [ 560.138000][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 560.148116][T10605] Call Trace: [ 560.151541][T10605] [ 560.154557][T10605] dump_stack_lvl+0x18c/0x250 [ 560.159317][T10605] ? show_regs_print_info+0x20/0x20 [ 560.164587][T10605] ? load_image+0x420/0x420 [ 560.169239][T10605] ? __lock_acquire+0x7eb0/0x7eb0 [ 560.174335][T10605] should_fail_ex+0x394/0x4c0 [ 560.179175][T10605] should_failslab+0x9/0x20 [ 560.183723][T10605] slab_pre_alloc_hook+0x59/0x300 [ 560.188801][T10605] kmem_cache_alloc_lru+0x4d/0x2c0 [ 560.193965][T10605] ? sock_alloc_inode+0x28/0xc0 [ 560.198974][T10605] sock_alloc_inode+0x28/0xc0 [ 560.203816][T10605] ? sockfs_init_fs_context+0xb0/0xb0 [ 560.209256][T10605] new_inode_pseudo+0x63/0x1d0 [ 560.214087][T10605] __sock_create+0x12d/0x940 [ 560.218733][T10605] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 560.224775][T10605] __sys_socket+0xd7/0x1b0 [ 560.229441][T10605] __x64_sys_socket+0x7a/0x90 [ 560.234284][T10605] do_syscall_64+0x55/0xb0 [ 560.238802][T10605] ? clear_bhb_loop+0x40/0x90 [ 560.243655][T10605] ? clear_bhb_loop+0x40/0x90 [ 560.248417][T10605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 560.254370][T10605] RIP: 0033:0x7f4db9f9f559 [ 560.258827][T10605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.278587][T10605] RSP: 002b:00007f4dbaec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 560.287185][T10605] RAX: ffffffffffffffda RBX: 00007f4dba225fa0 RCX: 00007f4db9f9f559 [ 560.295386][T10605] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 560.303504][T10605] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 560.311608][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.319624][T10605] R13: 00007f4dba226038 R14: 00007f4dba225fa0 R15: 00007ffef61e5718 [ 560.327944][T10605] [ 560.360066][ T971] usb 4-1: USB disconnect, device number 29 [ 560.456651][T10605] socket: no more sockets [ 560.635796][T10615] ptp ptp0: guarantee physical clock free running [ 560.973748][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 561.518325][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 561.582607][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 561.627731][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 561.640611][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.652667][ T9] usb 2-1: Product: syz [ 561.680837][ T9] usb 2-1: Manufacturer: syz [ 561.696318][ T9] usb 2-1: SerialNumber: syz [ 561.939581][ T9] speedtch 2-1:1.0: speedtch_bind: data interface not found! [ 561.962310][ T9] speedtch 2-1:1.0: usbatm_usb_probe: bind failed: -19! [ 562.229932][T10629] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.240134][T10627] FAULT_INJECTION: forcing a failure. [ 562.240134][T10627] name failslab, interval 1, probability 0, space 0, times 0 [ 562.266007][T10627] CPU: 1 PID: 10627 Comm: syz.3.1542 Not tainted syzkaller #0 [ 562.273587][T10627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 562.283684][T10627] Call Trace: [ 562.287014][T10627] [ 562.290010][T10627] dump_stack_lvl+0x18c/0x250 [ 562.294744][T10627] ? show_regs_print_info+0x20/0x20 [ 562.299982][T10627] ? load_image+0x420/0x420 [ 562.304525][T10627] ? __might_sleep+0xe0/0xe0 [ 562.309242][T10627] ? __lock_acquire+0x7eb0/0x7eb0 [ 562.314333][T10627] should_fail_ex+0x394/0x4c0 [ 562.319135][T10627] should_failslab+0x9/0x20 [ 562.323768][T10627] slab_pre_alloc_hook+0x59/0x300 [ 562.328837][T10627] ? sock_update_netprioidx+0x4e/0x390 [ 562.334347][T10627] kmem_cache_alloc+0x5a/0x2d0 [ 562.339135][T10627] ? kcm_create+0x11b/0x550 [ 562.343946][T10627] kcm_create+0x11b/0x550 [ 562.348345][T10627] __sock_create+0x49e/0x940 [ 562.353007][T10627] __sys_socket+0xd7/0x1b0 [ 562.357461][T10627] __x64_sys_socket+0x7a/0x90 [ 562.362260][T10627] do_syscall_64+0x55/0xb0 [ 562.366715][T10627] ? clear_bhb_loop+0x40/0x90 [ 562.371436][T10627] ? clear_bhb_loop+0x40/0x90 [ 562.376160][T10627] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.382094][T10627] RIP: 0033:0x7fa159d9f559 [ 562.386543][T10627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.406186][T10627] RSP: 002b:00007fa15ad14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 562.414730][T10627] RAX: ffffffffffffffda RBX: 00007fa15a025fa0 RCX: 00007fa159d9f559 [ 562.422736][T10627] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000029 [ 562.430765][T10627] RBP: 00007fa159e36b20 R08: 0000000000000000 R09: 0000000000000000 [ 562.438858][T10627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.446883][T10627] R13: 00007fa15a026038 R14: 00007fa15a025fa0 R15: 00007ffc2e40e438 [ 562.455097][T10627] [ 562.525405][T10629] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.624739][T10629] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.730991][T10629] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.765474][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.802106][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.823863][ T971] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 562.848706][ T21] IRQ fixup: irq 11 move in progress, old vector 34 [ 562.865829][ T9] smpboot: CPU 1 is now offline [ 562.990331][T10637] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 563.014342][ T971] usb 3-1: config 0 has no interfaces? [ 563.029324][ T971] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.046312][T10599] ------------[ cut here ]------------ [ 563.047387][T10599] [ 563.047393][T10599] ====================================================== [ 563.047399][T10599] WARNING: possible circular locking dependency detected [ 563.047414][T10599] syzkaller #0 Not tainted [ 563.047423][T10599] ------------------------------------------------------ [ 563.047428][T10599] syz.0.1532/10599 is trying to acquire lock: [ 563.047437][T10599] ffffffff8df26620 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 563.047493][T10599] [ 563.047493][T10599] but task is already holding lock: [ 563.047497][T10599] ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 563.047545][T10599] [ 563.047545][T10599] which lock already depends on the new lock. [ 563.047545][T10599] [ 563.047550][T10599] [ 563.047550][T10599] the existing dependency chain (in reverse order) is: [ 563.047555][T10599] [ 563.047555][T10599] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 563.047577][T10599] _raw_spin_lock_nested+0x32/0x50 [ 563.047600][T10599] raw_spin_rq_lock_nested+0x29/0x130 [ 563.047625][T10599] task_fork_fair+0x62/0x1f0 [ 563.047652][T10599] sched_cgroup_fork+0x352/0x3e0 [ 563.047669][T10599] copy_process+0x21fd/0x3da0 [ 563.047688][T10599] kernel_clone+0x24b/0x8a0 [ 563.047707][T10599] user_mode_thread+0x111/0x180 [ 563.047726][T10599] rest_init+0x27/0x300 [ 563.047800][T10599] arch_call_rest_init+0xe/0x10 [ 563.047879][T10599] start_kernel+0x461/0x4e0 [ 563.047896][T10599] x86_64_start_reservations+0x2a/0x30 [ 563.047929][T10599] copy_bootdata+0x0/0xd0 [ 563.047944][T10599] secondary_startup_64_no_verify+0x179/0x17b [ 563.047979][T10599] [ 563.047979][T10599] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 563.048002][T10599] _raw_spin_lock_irqsave+0xb4/0x100 [ 563.048022][T10599] try_to_wake_up+0x5b/0x10e0 [ 563.048038][T10599] task_work_add+0x37a/0x470 [ 563.048061][T10599] __io_req_task_work_add+0x2f7/0x890 [ 563.048082][T10599] io_poll_wake+0x375/0x480 [ 563.048100][T10599] __wake_up_common+0x28e/0x4d0 [ 563.048119][T10599] __wake_up+0x125/0x1a0 [ 563.048136][T10599] tty_ldisc_lock+0x60/0xb0 [ 563.048165][T10599] tty_set_ldisc+0x5c/0x530 [ 563.048188][T10599] tty_ioctl+0xc22/0xdc0 [ 563.048205][T10599] __se_sys_ioctl+0xfd/0x170 [ 563.048229][T10599] do_syscall_64+0x55/0xb0 [ 563.048254][T10599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.048278][T10599] [ 563.048278][T10599] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 563.048300][T10599] _raw_spin_lock_irqsave+0xb4/0x100 [ 563.048320][T10599] __wake_up+0x10b/0x1a0 [ 563.048338][T10599] tty_port_default_wakeup+0xa2/0xf0 [ 563.048363][T10599] serial8250_tx_chars+0x6a2/0x8b0 [ 563.048381][T10599] serial8250_handle_irq+0x6c3/0x8c0 [ 563.048400][T10599] serial8250_default_handle_irq+0xb8/0x1a0 [ 563.048421][T10599] serial8250_interrupt+0x9f/0x1c0 [ 563.048438][T10599] __handle_irq_event_percpu+0x271/0x940 [ 563.048463][T10599] handle_irq_event+0x8b/0x1e0 [ 563.048488][T10599] handle_edge_irq+0x246/0xb20 [ 563.048507][T10599] __common_interrupt+0x13b/0x230 [ 563.048534][T10599] common_interrupt+0xb4/0xd0 [ 563.048559][T10599] asm_common_interrupt+0x26/0x40 [ 563.048582][T10599] _raw_spin_unlock_irqrestore+0xc0/0x120 [ 563.048602][T10599] uart_write+0x45b/0x5d0 [ 563.048624][T10599] n_tty_write+0xd3d/0x11e0 [ 563.048651][T10599] file_tty_write+0x529/0x960 [ 563.048667][T10599] vfs_write+0x474/0x9a0 [ 563.048692][T10599] ksys_write+0x151/0x260 [ 563.048716][T10599] do_syscall_64+0x55/0xb0 [ 563.048739][T10599] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 563.048762][T10599] [ 563.048762][T10599] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 563.048785][T10599] _raw_spin_lock_irqsave+0xb4/0x100 [ 563.048805][T10599] serial8250_console_write+0x181/0x18b0 [ 563.048825][T10599] console_flush_all+0x6ad/0xcf0 [ 563.048846][T10599] console_unlock+0xad/0x350 [ 563.048867][T10599] vprintk_emit+0x497/0x610 [ 563.048888][T10599] _printk+0xde/0x130 [ 563.048908][T10599] register_console+0xb96/0xf00 [ 563.048930][T10599] univ8250_console_init+0x45/0x50 [ 563.048963][T10599] console_init+0x17b/0x5d0 [ 563.048992][T10599] start_kernel+0x2c8/0x4e0 [ 563.049009][T10599] x86_64_start_reservations+0x2a/0x30 [ 563.049025][T10599] copy_bootdata+0x0/0xd0 [ 563.049039][T10599] secondary_startup_64_no_verify+0x179/0x17b [ 563.049062][T10599] [ 563.049062][T10599] -> #0 (console_owner){-.-.}-{0:0}: [ 563.049084][T10599] __lock_acquire+0x3a07/0x7eb0 [ 563.049105][T10599] lock_acquire+0x19e/0x420 [ 563.049124][T10599] console_flush_all+0x676/0xcf0 [ 563.049145][T10599] console_unlock+0xad/0x350 [ 563.049166][T10599] vprintk_emit+0x497/0x610 [ 563.049186][T10599] _printk+0xde/0x130 [ 563.049204][T10599] report_bug+0x34e/0x4f0 [ 563.049258][T10599] handle_bug+0xcf/0x120 [ 563.049282][T10599] exc_invalid_op+0x1a/0x50 [ 563.049305][T10599] asm_exc_invalid_op+0x1a/0x20 [ 563.049327][T10599] update_rq_clock+0x32e/0x4b0 [ 563.049351][T10599] __schedule+0x2ca1/0x4700 [ 563.049377][T10599] preempt_schedule_common+0x82/0xc0 [ 563.049403][T10599] preempt_schedule+0xc0/0xd0 [ 563.049427][T10599] preempt_schedule_thunk+0x1a/0x30 [ 563.049452][T10599] up_write+0x1e7/0x410 [ 563.049467][T10599] shmem_file_write_iter+0x106/0x120 [ 563.049488][T10599] __kernel_write_iter+0x29f/0x6d0 [ 563.049512][T10599] dump_user_range+0x418/0x840 [ 563.049532][T10599] elf_core_dump+0x320e/0x37c0 [ 563.049558][T10599] do_coredump+0x1791/0x24a0 [ 563.049576][T10599] get_signal+0x10da/0x1390 [ 563.049592][T10599] arch_do_signal_or_restart+0xc2/0x7b0 [ 563.049618][T10599] exit_to_user_mode_loop+0x70/0x110 [ 563.049647][T10599] exit_to_user_mode_prepare+0xee/0x180 [ 563.049672][T10599] irqentry_exit_to_user_mode+0x9/0x30 [ 563.049690][T10599] exc_page_fault+0x8c/0x100 [ 563.049706][T10599] asm_exc_page_fault+0x26/0x30 [ 563.049728][T10599] [ 563.049728][T10599] other info that might help us debug this: [ 563.049728][T10599] [ 563.049733][T10599] Chain exists of: [ 563.049733][T10599] console_owner --> &p->pi_lock --> &rq->__lock [ 563.049733][T10599] [ 563.049757][T10599] Possible unsafe locking scenario: [ 563.049757][T10599] [ 563.049762][T10599] CPU0 CPU1 [ 563.049765][T10599] ---- ---- [ 563.049769][T10599] lock(&rq->__lock); [ 563.049778][T10599] lock(&p->pi_lock); [ 563.049788][T10599] lock(&rq->__lock); [ 563.049798][T10599] lock(console_owner); [ 563.049808][T10599] [ 563.049808][T10599] *** DEADLOCK *** [ 563.049808][T10599] [ 563.049811][T10599] 4 locks held by syz.0.1532/10599: [ 563.049822][T10599] #0: ffff888076e64418 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1774/0x24a0 [ 563.049869][T10599] #1: ffff8880b8c3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 563.049919][T10599] #2: ffffffff8df26700 (console_lock){+.+.}-{0:0}, at: _printk+0xde/0x130 [ 563.049962][T10599] #3: ffffffff8de0df10 (console_srcu){....}-{0:0}, at: console_flush_all+0x10b/0xcf0 [ 563.050008][T10599] [ 563.050008][T10599] stack backtrace: [ 563.050014][T10599] CPU: 0 PID: 10599 Comm: syz.0.1532 Not tainted syzkaller #0 [ 563.050031][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 563.050042][T10599] Call Trace: [ 563.050048][T10599] [ 563.050056][T10599] dump_stack_lvl+0x18c/0x250 [ 563.050083][T10599] ? load_image+0x420/0x420 [ 563.050105][T10599] ? show_regs_print_info+0x20/0x20 [ 563.050135][T10599] ? print_circular_bug+0x12b/0x1a0 [ 563.050161][T10599] check_noncircular+0x2fc/0x400 [ 563.050187][T10599] ? print_deadlock_bug+0x5d0/0x5d0 [ 563.050209][T10599] ? lockdep_lock+0xf5/0x230 [ 563.050236][T10599] __lock_acquire+0x3a07/0x7eb0 [ 563.050270][T10599] ? verify_lock_unused+0x140/0x140 [ 563.050304][T10599] lock_acquire+0x19e/0x420 [ 563.050324][T10599] ? console_flush_all+0x10b/0xcf0 [ 563.050352][T10599] ? __lock_acquire+0x7eb0/0x7eb0 [ 563.050372][T10599] ? do_raw_spin_lock+0x11f/0x2b0 [ 563.050397][T10599] ? read_lock_is_recursive+0x20/0x20 [ 563.050419][T10599] ? __rwlock_init+0x150/0x150 [ 563.050444][T10599] ? do_raw_spin_unlock+0x121/0x230 [ 563.050470][T10599] console_flush_all+0x676/0xcf0 [ 563.050493][T10599] ? console_flush_all+0x10b/0xcf0 [ 563.050517][T10599] ? console_flush_all+0x10b/0xcf0 [ 563.050545][T10599] ? is_console_locked+0x20/0x20 [ 563.050568][T10599] ? __lock_acquire+0x135d/0x7eb0 [ 563.050594][T10599] console_unlock+0xad/0x350 [ 563.050617][T10599] ? other_cpu_in_panic+0xf0/0xf0 [ 563.050640][T10599] ? __lock_acquire+0x1431/0x7eb0 [ 563.050673][T10599] vprintk_emit+0x497/0x610 [ 563.050698][T10599] ? printk_sprint+0x460/0x460 [ 563.050721][T10599] ? verify_lock_unused+0x140/0x140 [ 563.050743][T10599] ? verify_lock_unused+0x140/0x140 [ 563.050769][T10599] _printk+0xde/0x130 [ 563.050793][T10599] ? load_image+0x420/0x420 [ 563.050817][T10599] ? find_bug+0xa5/0x3a0 [ 563.050842][T10599] ? update_rq_clock+0x32e/0x4b0 [ 563.050870][T10599] report_bug+0x34e/0x4f0 [ 563.050897][T10599] ? update_rq_clock+0x32e/0x4b0 [ 563.050952][T10599] ? update_rq_clock+0x32e/0x4b0 [ 563.050980][T10599] ? update_rq_clock+0x330/0x4b0 [ 563.051007][T10599] handle_bug+0xcf/0x120 [ 563.051034][T10599] exc_invalid_op+0x1a/0x50 [ 563.051061][T10599] asm_exc_invalid_op+0x1a/0x20 [ 563.051085][T10599] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 563.051114][T10599] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 96 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 563.051130][T10599] RSP: 0018:ffffc900033fef80 EFLAGS: 00010046 [ 563.051145][T10599] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 40e22176a04f9d00 [ 563.051159][T10599] RDX: 0000000000000003 RSI: ffffffff8acae2c0 RDI: ffffffff8b1c5060 [ 563.051171][T10599] RBP: ffffc900033ff1d0 R08: ffffffff8f6bc82f R09: 1ffffffff1ed7905 [ 563.051185][T10599] R10: dffffc0000000000 R11: fffffbfff1ed7906 R12: ffffffff8ca9aa38 [ 563.051198][T10599] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240 [ 563.051223][T10599] __schedule+0x2ca1/0x4700 [ 563.051264][T10599] ? asan.module_dtor+0x20/0x20 [ 563.051295][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 563.051317][T10599] ? inode_to_bdi+0x69/0xf0 [ 563.051337][T10599] ? lock_chain_count+0x20/0x20 [ 563.051360][T10599] ? preempt_schedule+0xc0/0xd0 [ 563.051388][T10599] preempt_schedule_common+0x82/0xc0 [ 563.051417][T10599] preempt_schedule+0xc0/0xd0 [ 563.051445][T10599] ? schedule_preempt_disabled+0x20/0x20 [ 563.051478][T10599] preempt_schedule_thunk+0x1a/0x30 [ 563.051508][T10599] up_write+0x1e7/0x410 [ 563.051526][T10599] ? file_update_time+0x98/0x1a0 [ 563.051551][T10599] shmem_file_write_iter+0x106/0x120 [ 563.051577][T10599] __kernel_write_iter+0x29f/0x6d0 [ 563.051608][T10599] ? vfs_read+0x990/0x990 [ 563.051633][T10599] ? get_dump_page+0x156/0x200 [ 563.051669][T10599] ? __asan_memset+0x22/0x40 [ 563.051697][T10599] ? iov_iter_bvec+0xd4/0x1b0 [ 563.051720][T10599] dump_user_range+0x418/0x840 [ 563.051757][T10599] ? dump_skip+0x40/0x40 [ 563.051776][T10599] ? dump_emit+0x78/0xe0 [ 563.051803][T10599] ? dump_emit+0xa6/0xe0 [ 563.051822][T10599] ? elf_core_dump+0x2dbb/0x37c0 [ 563.051851][T10599] elf_core_dump+0x320e/0x37c0 [ 563.051894][T10599] ? load_elf_binary+0x2850/0x2850 [ 563.051926][T10599] ? verify_lock_unused+0x140/0x140 [ 563.051949][T10599] ? __lock_acquire+0x7eb0/0x7eb0 [ 563.051972][T10599] ? mas_next_slot+0x94c/0x980 [ 563.052015][T10599] ? rcu_read_lock_any_held+0xb4/0x140 [ 563.052038][T10599] ? 0xffffffffff600000 [ 563.052059][T10599] do_coredump+0x1791/0x24a0 [ 563.052090][T10599] ? nfs_stat_to_errno+0x170/0x170 [ 563.052123][T10599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 563.052159][T10599] get_signal+0x10da/0x1390 [ 563.052188][T10599] arch_do_signal_or_restart+0xc2/0x7b0 [ 563.052219][T10599] ? get_sigframe_size+0x20/0x20 [ 563.052248][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 563.052278][T10599] ? exit_to_user_mode_loop+0x3b/0x110 [ 563.052306][T10599] exit_to_user_mode_loop+0x70/0x110 [ 563.052334][T10599] exit_to_user_mode_prepare+0xee/0x180 [ 563.052360][T10599] irqentry_exit_to_user_mode+0x9/0x30 [ 563.052380][T10599] exc_page_fault+0x8c/0x100 [ 563.052401][T10599] asm_exc_page_fault+0x26/0x30 [ 563.052425][T10599] RIP: 0033:0x7f4db9f9f561 [ 563.052440][T10599] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 563.052456][T10599] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 563.052470][T10599] RAX: 0000000000000000 RBX: 00007f4dba226090 RCX: 00007f4db9f9f559 [ 563.052483][T10599] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 563.052494][T10599] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 563.052506][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 563.052516][T10599] R13: 00007f4dba226128 R14: 00007f4dba226090 R15: 00007ffef61e5718 [ 563.052547][T10599] [ 564.343206][T10599] WARNING: CPU: 0 PID: 10599 at kernel/sched/sched.h:1371 update_rq_clock+0x32e/0x4b0 [ 564.352807][T10599] Modules linked in: [ 564.356729][T10599] CPU: 0 PID: 10599 Comm: syz.0.1532 Not tainted syzkaller #0 [ 564.364300][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 564.374403][T10599] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 564.379994][T10599] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 96 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 564.399658][T10599] RSP: 0018:ffffc900033fef80 EFLAGS: 00010046 [ 564.405770][T10599] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 40e22176a04f9d00 [ 564.413771][T10599] RDX: 0000000000000003 RSI: ffffffff8acae2c0 RDI: ffffffff8b1c5060 [ 564.421791][T10599] RBP: ffffc900033ff1d0 R08: ffffffff8f6bc82f R09: 1ffffffff1ed7905 [ 564.429788][T10599] R10: dffffc0000000000 R11: fffffbfff1ed7906 R12: ffffffff8ca9aa38 [ 564.437817][T10599] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240 [ 564.445843][T10599] FS: 00007f4dbaea56c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 564.454801][T10599] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 564.461432][T10599] CR2: 000000110c2c2b6d CR3: 0000000024ddb000 CR4: 00000000003506f0 [ 564.469444][T10599] Call Trace: [ 564.472756][T10599] [ 564.475719][T10599] __schedule+0x2ca1/0x4700 [ 564.480461][T10599] ? asan.module_dtor+0x20/0x20 [ 564.485382][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.491399][T10599] ? inode_to_bdi+0x69/0xf0 [ 564.495973][T10599] ? lock_chain_count+0x20/0x20 [ 564.500865][T10599] ? preempt_schedule+0xc0/0xd0 [ 564.505752][T10599] preempt_schedule_common+0x82/0xc0 [ 564.511074][T10599] preempt_schedule+0xc0/0xd0 [ 564.515790][T10599] ? schedule_preempt_disabled+0x20/0x20 [ 564.521464][T10599] preempt_schedule_thunk+0x1a/0x30 [ 564.526727][T10599] up_write+0x1e7/0x410 [ 564.530910][T10599] ? file_update_time+0x98/0x1a0 [ 564.535883][T10599] shmem_file_write_iter+0x106/0x120 [ 564.541207][T10599] __kernel_write_iter+0x29f/0x6d0 [ 564.546357][T10599] ? vfs_read+0x990/0x990 [ 564.550732][T10599] ? get_dump_page+0x156/0x200 [ 564.555532][T10599] ? __asan_memset+0x22/0x40 [ 564.560152][T10599] ? iov_iter_bvec+0xd4/0x1b0 [ 564.564864][T10599] dump_user_range+0x418/0x840 [ 564.569673][T10599] ? dump_skip+0x40/0x40 [ 564.573948][T10599] ? dump_emit+0x78/0xe0 [ 564.578235][T10599] ? dump_emit+0xa6/0xe0 [ 564.582515][T10599] ? elf_core_dump+0x2dbb/0x37c0 [ 564.587497][T10599] elf_core_dump+0x320e/0x37c0 [ 564.592332][T10599] ? load_elf_binary+0x2850/0x2850 [ 564.597490][T10599] ? verify_lock_unused+0x140/0x140 [ 564.602719][T10599] ? __lock_acquire+0x7eb0/0x7eb0 [ 564.607777][T10599] ? mas_next_slot+0x94c/0x980 [ 564.612603][T10599] ? rcu_read_lock_any_held+0xb4/0x140 [ 564.618094][T10599] ? 0xffffffffff600000 [ 564.622283][T10599] do_coredump+0x1791/0x24a0 [ 564.626921][T10599] ? nfs_stat_to_errno+0x170/0x170 [ 564.632077][T10599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 564.638272][T10599] get_signal+0x10da/0x1390 [ 564.642818][T10599] arch_do_signal_or_restart+0xc2/0x7b0 [ 564.648495][T10599] ? get_sigframe_size+0x20/0x20 [ 564.653479][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.659504][T10599] ? exit_to_user_mode_loop+0x3b/0x110 [ 564.665021][T10599] exit_to_user_mode_loop+0x70/0x110 [ 564.670342][T10599] exit_to_user_mode_prepare+0xee/0x180 [ 564.675924][T10599] irqentry_exit_to_user_mode+0x9/0x30 [ 564.681422][T10599] exc_page_fault+0x8c/0x100 [ 564.686064][T10599] asm_exc_page_fault+0x26/0x30 [ 564.690949][T10599] RIP: 0033:0x7f4db9f9f561 [ 564.695388][T10599] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 564.715048][T10599] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 564.721145][T10599] RAX: 0000000000000000 RBX: 00007f4dba226090 RCX: 00007f4db9f9f559 [ 564.729147][T10599] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 564.737153][T10599] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 564.745241][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 564.753271][T10599] R13: 00007f4dba226128 R14: 00007f4dba226090 R15: 00007ffef61e5718 [ 564.761284][T10599] [ 564.764343][T10599] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 564.771649][T10599] CPU: 0 PID: 10599 Comm: syz.0.1532 Not tainted syzkaller #0 [ 564.779131][T10599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 564.789231][T10599] Call Trace: [ 564.792542][T10599] [ 564.795499][T10599] dump_stack_lvl+0x18c/0x250 [ 564.800240][T10599] ? show_regs_print_info+0x20/0x20 [ 564.805474][T10599] ? load_image+0x420/0x420 [ 564.810017][T10599] panic+0x2ca/0x720 [ 564.813940][T10599] ? bpf_jit_dump+0xd0/0xd0 [ 564.818493][T10599] __warn+0x2e0/0x470 [ 564.822502][T10599] ? update_rq_clock+0x32e/0x4b0 [ 564.827494][T10599] ? update_rq_clock+0x32e/0x4b0 [ 564.832481][T10599] report_bug+0x2be/0x4f0 [ 564.836853][T10599] ? update_rq_clock+0x32e/0x4b0 [ 564.841935][T10599] ? update_rq_clock+0x32e/0x4b0 [ 564.846911][T10599] ? update_rq_clock+0x330/0x4b0 [ 564.851885][T10599] handle_bug+0xcf/0x120 [ 564.856252][T10599] exc_invalid_op+0x1a/0x50 [ 564.860796][T10599] asm_exc_invalid_op+0x1a/0x20 [ 564.866029][T10599] RIP: 0010:update_rq_clock+0x32e/0x4b0 [ 564.871634][T10599] Code: 00 00 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 b4 96 83 00 48 01 2b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 <0f> 0b e9 62 fd ff ff 48 89 df 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 564.891269][T10599] RSP: 0018:ffffc900033fef80 EFLAGS: 00010046 [ 564.897362][T10599] RAX: 0000000000000000 RBX: ffff8880b8d3c240 RCX: 40e22176a04f9d00 [ 564.905358][T10599] RDX: 0000000000000003 RSI: ffffffff8acae2c0 RDI: ffffffff8b1c5060 [ 564.913370][T10599] RBP: ffffc900033ff1d0 R08: ffffffff8f6bc82f R09: 1ffffffff1ed7905 [ 564.921465][T10599] R10: dffffc0000000000 R11: fffffbfff1ed7906 R12: ffffffff8ca9aa38 [ 564.929663][T10599] R13: dffffc0000000000 R14: ffff8880b8d3cf88 R15: ffff8880b8d3c240 [ 564.937705][T10599] __schedule+0x2ca1/0x4700 [ 564.942261][T10599] ? asan.module_dtor+0x20/0x20 [ 564.947154][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 564.953167][T10599] ? inode_to_bdi+0x69/0xf0 [ 564.957716][T10599] ? lock_chain_count+0x20/0x20 [ 564.962612][T10599] ? preempt_schedule+0xc0/0xd0 [ 564.967498][T10599] preempt_schedule_common+0x82/0xc0 [ 564.972826][T10599] preempt_schedule+0xc0/0xd0 [ 564.977537][T10599] ? schedule_preempt_disabled+0x20/0x20 [ 564.983383][T10599] preempt_schedule_thunk+0x1a/0x30 [ 564.988628][T10599] up_write+0x1e7/0x410 [ 564.992819][T10599] ? file_update_time+0x98/0x1a0 [ 564.997794][T10599] shmem_file_write_iter+0x106/0x120 [ 565.003113][T10599] __kernel_write_iter+0x29f/0x6d0 [ 565.008382][T10599] ? vfs_read+0x990/0x990 [ 565.012752][T10599] ? get_dump_page+0x156/0x200 [ 565.017581][T10599] ? __asan_memset+0x22/0x40 [ 565.022210][T10599] ? iov_iter_bvec+0xd4/0x1b0 [ 565.026918][T10599] dump_user_range+0x418/0x840 [ 565.031720][T10599] ? dump_skip+0x40/0x40 [ 565.035990][T10599] ? dump_emit+0x78/0xe0 [ 565.040275][T10599] ? dump_emit+0xa6/0xe0 [ 565.044541][T10599] ? elf_core_dump+0x2dbb/0x37c0 [ 565.049522][T10599] elf_core_dump+0x320e/0x37c0 [ 565.054506][T10599] ? load_elf_binary+0x2850/0x2850 [ 565.059749][T10599] ? verify_lock_unused+0x140/0x140 [ 565.064981][T10599] ? __lock_acquire+0x7eb0/0x7eb0 [ 565.070041][T10599] ? mas_next_slot+0x94c/0x980 [ 565.074855][T10599] ? rcu_read_lock_any_held+0xb4/0x140 [ 565.080348][T10599] ? 0xffffffffff600000 [ 565.084650][T10599] do_coredump+0x1791/0x24a0 [ 565.089304][T10599] ? nfs_stat_to_errno+0x170/0x170 [ 565.094463][T10599] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 565.100664][T10599] get_signal+0x10da/0x1390 [ 565.105229][T10599] arch_do_signal_or_restart+0xc2/0x7b0 [ 565.110860][T10599] ? get_sigframe_size+0x20/0x20 [ 565.115939][T10599] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 565.122142][T10599] ? exit_to_user_mode_loop+0x3b/0x110 [ 565.127649][T10599] exit_to_user_mode_loop+0x70/0x110 [ 565.133149][T10599] exit_to_user_mode_prepare+0xee/0x180 [ 565.138733][T10599] irqentry_exit_to_user_mode+0x9/0x30 [ 565.144233][T10599] exc_page_fault+0x8c/0x100 [ 565.148858][T10599] asm_exc_page_fault+0x26/0x30 [ 565.153832][T10599] RIP: 0033:0x7f4db9f9f561 [ 565.158278][T10599] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 565.178630][T10599] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 565.184734][T10599] RAX: 0000000000000000 RBX: 00007f4dba226090 RCX: 00007f4db9f9f559 [ 565.192879][T10599] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 565.200953][T10599] RBP: 00007f4dba036b20 R08: 0000000000000000 R09: 0000000000000000 [ 565.209241][T10599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 565.217236][T10599] R13: 00007f4dba226128 R14: 00007f4dba226090 R15: 00007ffef61e5718 [ 565.225249][T10599] [ 565.228926][T10599] Kernel Offset: disabled [ 565.233289][T10599] Rebooting in 86400 seconds..