last executing test programs: 6.264091472s ago: executing program 2 (id=449): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 6.13965473s ago: executing program 0 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000000a000009040000000000000000020000020b00074007e04b674530fb00fbff000073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.778404925s ago: executing program 0 (id=451): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0x5f5e6000) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) mbind(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0xa, 0x2) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) (fail_nth: 4) 5.526933307s ago: executing program 0 (id=453): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x10}], 0x1, 0x0, 0x0, 0x20004880}, 0xc080) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 5.363725199s ago: executing program 0 (id=454): r0 = socket(0x2, 0x80805, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) writev(r1, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) io_setup(0x8, &(0x7f0000000600)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) epoll_create1(0x80000) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r2], 0x7) accept4$nfc_llcp(r0, 0x0, &(0x7f00000000c0), 0x80800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETVESABLANK(r4, 0x4b4b, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) 4.616980356s ago: executing program 3 (id=460): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x26e1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x282}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 4.347806633s ago: executing program 0 (id=461): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x6d, 0xfa, 0xf6, 0x40, 0x61c, 0xc084, 0x8273, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x1c, 0xe8, 0x2, 0x45, 0x26, 0x81, 0x6, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0x77, 0x10, 0x3}}, {{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x10, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x25}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_SET_PHYS(r1, 0x4008556c, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e65740000000014000780080006400000020008000840"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000040)={0x0, 0x23, 0xc, {0xc, 0x23, "0000000000000000578b"}}, 0x0}, 0x0) 4.347629497s ago: executing program 3 (id=462): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x10}], 0x1, 0x0, 0x0, 0x20004880}, 0xc080) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 4.291998808s ago: executing program 3 (id=463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x3e, 0x7, 0x1, 0x0, "8e0e998f392ccb647306cbe607e6024dabdc7da9350dfab3254645559110fc6b2361c9b189a24b992e9fdaf01e3a560d3147c73759d551f36359"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc0}, 0x1, 0x0, 0x0, 0x840}, 0x0) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10, 0x800) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast2, 0x4e23, 0x7, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x16, 0x0, r2}, {0x3e, 0x8, 0xffffffffffffff00, 0x5, 0x1, 0xdb8, 0x8, 0xfffffffffffffffa}, {0x3, 0x7e8dee4d, 0x4ab, 0x77e7}, 0x7fffffff, 0x6e6bb6, 0x0, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d4, 0x2b}, 0x2, @in=@empty, 0x0, 0x4, 0x3, 0x0, 0x1, 0x3, 0xfffffffc}}, 0xe8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514000cc00800040081000200457601c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597f", 0x51}, {&(0x7f0000000180)="a8067d08f2ada5f799c1dd", 0xb}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4054) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000500)={0x0, 0x59, "e3e60d11e4571bc9c94662719a05f6ed133c63351f582e685c5097f43009b979966e920688c8522aa7f92481cbdb3d447b951844658a3b4966575301ce7faa685fc20aa0190e31d93388114de47ea4cc3380743608c6c73729"}, &(0x7f0000000580)=0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000005c0)={r6, 0xfff}, &(0x7f0000000600)=0x8) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x7, "c4d02e39094de6f593870f4b00a606e687157a59422090c93a81650d64bed03b"}) dup3(r4, r3, 0x0) 4.10888226s ago: executing program 3 (id=464): r0 = dup(0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x4, 0x3ff, 0xf84}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket(0x8, 0x80005, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@preq={0x82, 0x1a, {{0x0, 0x1}, 0x7e, 0x81, 0x2, @device_a, 0xfffffffa, @void, 0x9, 0xe0c5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x15, 0x0, &(0x7f0000000280)) getsockopt(r2, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x4, 0x3ff, 0xf84}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket(0x8, 0x80005, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000140)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000640)={0x3c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0x20, 0x2a, [@preq={0x82, 0x1a, {{0x0, 0x1}, 0x7e, 0x81, 0x2, @device_a, 0xfffffffa, @void, 0x9, 0xe0c5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async) getsockopt(r2, 0x200000000114, 0x5, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffe73) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) (async) syz_usb_control_io(r8, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000003c0)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x3, "4d5ac8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 3.160371101s ago: executing program 2 (id=467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000400000003740006140006006970366772653000000000000000000008000700000000000800040064310101080005"], 0x40}, 0x1, 0xffffffff00000003}, 0x0) (fail_nth: 3) 3.039525822s ago: executing program 2 (id=468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) 3.022107419s ago: executing program 2 (id=469): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x26e1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x282}], 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 2.855028106s ago: executing program 3 (id=470): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0xc70, 0xf00a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x71, 0x2, 0x3, 0x1, 0x2, 0x80, {0x9, 0x21, 0x461, 0xf8, 0x1, {0x22, 0x9aa}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x0, 0x7, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x9, 0xc, 0xf2, 0xff, 0x4}, 0x29, &(0x7f0000000400)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x4, 0x6, 0x10000, 0xf000, 0x101, [0xc0c0, 0xcf, 0x0, 0xff0000, 0xff00, 0xcf]}]}, 0x6, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x54, &(0x7f0000000500)=@string={0x54, 0x3, "0cfcd6d19b9b15040163d5725fadd629687fd820dbe176aa3961ea8c7d9d306fab27f2187974bfbc31d66ca4c7f054004abe68c08583f46ff91b4a1beeaf3ffb1699ed0cad6205ac33006c63003fa785c5bb"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x1001}}, {0x47, &(0x7f00000005c0)=@string={0x47, 0x3, "5df0609e1148ca8b0f08b84340512147e59f241ca81e04adc7f5d3145a8cbfdd293406cbdba07ff8e2d3406a754aa20443676255e4a638281ed4f00b1f8722d8277d8711fa"}}]}) syz_usb_control_io$hid(r1, &(0x7f00000008c0)={0x24, &(0x7f00000006c0)={0x40, 0x1, 0x72, {0x72, 0xf, "1ce672b05866c7a45c28c07971fdea623f81eb76a4e4bd173dffb8c20ff2a8d3cea1dc893c49f58d2be17a87c54cd7d9f3fd4a9f1e490da7779059f2a07b45c68384f2816da7fdcb546cf6d00189b309f54234ba6154760fcd825889280ba4a93582d875154bf3fe20d2fbfca5a5a993"}}, &(0x7f0000000740)={0x0, 0x3, 0xdc, @string={0xdc, 0x3, "a39d30253f204a2ec67f6bb59fa2d4a2570d58b87486bb25f2c17473f730c0d93be0afb9e767569539088b6ce18b1bf5107d5776ea5fa672f3295bd76a8fc7f67a17ff72a17cb8e45acb86bc14f0f05a181066cd7dfadb0e9cd0a7edc7071e2ff293059b6a50c198bda5cebfa05c854f8c924996e5bb8fc78c18fc91a371ecd32dd36dc7c0826c0a0249ebb1683ba86b9bc061b82c8eefe281f70061f402ec4e797d1b53c8e60cc1baea46e92f8649e21ec8845e4fabe58fc0b17273007407c6965fc6a4bb2f185fa6945e819e60359b022ae1cbd06ccdd0b413"}}, &(0x7f0000000840)={0x0, 0x22, 0x22, {[@main=@item_4={0x3, 0x0, 0xa, "2cb3c1d7"}, @main=@item_012={0x2, 0x0, 0xa, "6094"}, @local=@item_4={0x3, 0x2, 0x7, "3fe3296e"}, @local=@item_4={0x3, 0x2, 0x9, "89060f5a"}, @local=@item_4={0x3, 0x2, 0x1, "8154837c"}, @main=@item_012={0x2, 0x0, 0xa, "5e90"}, @local=@item_012={0x2, 0x2, 0x1, "e855"}, @local=@item_4={0x3, 0x2, 0xa, '\t\x00'}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0xa, 0xc, 0x1, {0x22, 0x5d0}}}}, &(0x7f0000000c40)={0x2c, &(0x7f0000000a00)={0x40, 0x1, 0x77, "81040ffd1bf75e7dcf79c5ac5b2491d1518c5750899f6e28ae00a3496e40d42995facec7eef875fe260851820c5cee895191dc2d8856f1a3333fb70416e28999f08885029bbb2fdd33e7e3447142764f0e346be33a181b100580b6ada56c30b26635e76bb5ff3333ef909eb1ab3903c5af9ab168f5f8f1"}, &(0x7f0000000a80)={0x0, 0xa, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xae}, &(0x7f0000000b00)={0x20, 0x1, 0xbc, "5374c4d7e3645161544af31986486268af530f1fb448fd21f4feb732624726d2c0e313b91950942e22550c65f50539d9deac88ff40d260d541a4ac385cb128734e727bfa3faee9c7403c63d4d3c74838364402f481e7d7cd58a69cfefd8fecae0e26e10c7c2c12f39c5081f9f5456979a0638f76572af3bcdbd614886cbe8bd33cb66193583c84e949fa8a141b6900f9875d2078e2e0a6c142e67061f06deb238a0e4019152d9c31b42ac15bf494e04ee7a10f28db1c8fe5d6e169bf"}, &(0x7f0000000c00)={0x20, 0x3, 0x1, 0x3}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796c39923dd968bc65c268f42735fd1647e299f4e376fd205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x4d}, {&(0x7f0000000cc0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3", 0xa3}], 0x2, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @remote, 0xf}, 0x1c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) sendmsg$kcm(r4, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a0012000200142603600e12b00005000000000001000000e00002400500fa7c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd64fa1dba9bfe4edef3d93452a92954b43", 0xd8}], 0x1}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x3, 0x6c, {0x6c, 0x5, "43989e753d613c144669400a9b4f725de200f1387ba2ba5bce2e7a1af338ad0eb215df8d20064004241f9c667d32ff98164aec61d15e520c05bfe1702d224aae13c1ff78bcb3c089bf93d300c1c56111ed7235a791ef97bedaac3cdfe2a38e67d8836085a1a114215e56"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x444}}}, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x40, 0x17, 0x7f, "9ed28b487399055297b5a55a88c5fd8a2faf62035ee18e24d4ac29025917e7e0734f8639bd44578ddf5ff2ba71195edd543ecf96cbba46799c658d39ba9a6ae3e9a7c2a431105c16576f6cf5a4846045af4d555ab72d1b5bb6b140f98c05f13147d9954097df1533f4c1e702ee19a1abaf7f3e4135d94a15dde9d0d2742652"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000280)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x615}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "208db1afc764cd4702d0ab86ee8cf69fa7d2ac66166875c995a1f9db20c32efe5af7eb526d97732d85fd4d07d0b907"}}) 2.798706103s ago: executing program 2 (id=471): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x29, 0xf, {0xf, 0x29, 0xac, 0x8, 0x2e, 0xfa, "a4474141", "99c9d090"}}, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x51, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x76, 0x81, 0x70, 0x10, 0x1199, 0x683a, 0x864, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x7, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x59, 0x4, 0x5, 0x59, 0xf2, 0x96, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x8, 0x4, 0xa}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0xe, 0x5}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xb, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x0, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7f, 0xb, 0xe1}}]}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x51, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x76, 0x81, 0x70, 0x10, 0x1199, 0x683a, 0x864, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3f, 0x1, 0x7, 0x0, 0x40, 0x9, "", [{{0x9, 0x4, 0x59, 0x4, 0x5, 0x59, 0xf2, 0x96, 0x9, [], [{{0x9, 0x5, 0x8, 0x2, 0x20, 0x8, 0x4, 0xa}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x2, 0xe, 0x5}}, {{0x9, 0x5, 0xf, 0x1, 0x40, 0xb, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x7f, 0x0, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7f, 0xb, 0xe1}}]}}]}}]}}, 0x0) 1.868166775s ago: executing program 1 (id=473): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[], 0x1c}}, 0x0) 1.826883914s ago: executing program 1 (id=474): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000100)={{&(0x7f00007ff000/0x800000)=nil, 0x800000}, 0x1}) (async) set_robust_list(0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8890) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[@ANYBLOB="9c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x19c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20004080) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000640)=ANY=[@ANYBLOB="736563757216ae2c69747900000000000000000000000000000000000000000000000004"], 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r2, &(0x7f00000000c0)=""/149, 0x95) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000002c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x20) (async) r4 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r5 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb10000000010200090502"], 0x0) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, &(0x7f0000000200)=0x5b) (async) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000780)={0x14, &(0x7f0000000680)={0x60, 0xe, 0x87, {0x87, 0xb, "56838bc22b58a953d7e6cc2d99fb1f460282d29fc2aafa136f1c858c7f35fe10ff252683f24e57a148bb046e7aade7323c77e855216083aed74b4aaf2f699dd03f304d16fe466011c17fb90c0e49eedcf3fe9794f47eed4f23f8e9de1b2db7d8e1d2d85a6e7d1c89ef39f030eb1cd1c8852b0e1249d4ad9ab047b899c79ba534133a33cb7d"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b80)={0x44, &(0x7f00000007c0)={0x40, 0x11, 0x2a, "6e1dd885c0be35bc4f876a2de95ad727a04a7d0974ee0c3b7c8d6b196e3cfc5ea3b44b92f4a287ee73da"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000880)={0x20, 0x80, 0x1c, {0x2e, 0x0, 0x56, 0x64e, 0x8, 0x8, 0x0, 0x1, 0x5, 0x2, 0x9, 0x7ff}}, &(0x7f00000008c0)={0x20, 0x85, 0x4, 0x7fff}, &(0x7f0000000900)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000940)={0x20, 0x87, 0x2}, &(0x7f0000000b40)={0x20, 0x89, 0x2, 0x1}}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) (async) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000340)={r3, 0x3}, &(0x7f0000000600)=0x8) 1.117682569s ago: executing program 0 (id=475): syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'dt2817\x00', [0x300, 0x1f, 0x1, 0x4, 0x9, 0x100, 0x3, 0xb219, 0x8, 0xb, 0x2, 0xb51, 0x1, 0x401, 0x10001, 0x1, 0x0, 0x11fa, 0xfe9, 0x401, 0x7, 0x3, 0xd, 0x9f, 0x6169, 0x9, 0x6, 0x6a73, 0x5, 0x7, 0xa]}) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 923.577949ms ago: executing program 1 (id=476): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300007541ef7100001100000008000300", @ANYRES32], 0x1c}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), r0) 898.304695ms ago: executing program 2 (id=477): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x20, 0x0}}], 0x40000cf, 0x0) 818.859476ms ago: executing program 1 (id=478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x4040800) 745.877888ms ago: executing program 1 (id=479): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.sectors\x00', 0x26e1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000300)="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", 0x282}, {0x0}], 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) 670.129178ms ago: executing program 1 (id=480): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_connect(0x0, 0xca0, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xd4, 0xd5, 0x5, 0xff, 0x83a, 0x5046, 0x74f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8e, 0x4, 0x6, 0x30, 0xa0, 0x7, "", [{{0x9, 0x4, 0xc6, 0x1, 0xa, 0x11, 0x29, 0xa4, 0x9, [@hid_hid={0x9, 0x21, 0x92, 0xf8, 0x1, {0x22, 0x512}}], [{{0x9, 0x5, 0x0, 0x0, 0x10, 0x60, 0x9, 0x7}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8e, 0xa, 0x9}}, {{0x9, 0x5, 0x5, 0xe, 0x10, 0x10, 0x1, 0x6, [@generic={0x35, 0x3, "d0cb405507ec046744e684bb21809fab4a18a41d25d8ffdb0b363dc13e047182d9d7fedc769ca35b76f18b1f3042234b1406ad"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x420, 0x0, 0x4, 0x3}}, {{0x9, 0x5, 0xf, 0x7d54d1fcbd370b68, 0x10, 0xc, 0x4, 0x20, [@generic={0xd, 0x9, "b93f690883405f129719ce"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x2}]}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x40, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x8}]}}, {{0x9, 0x5, 0xa, 0xc, 0x640, 0xff, 0x9, 0x5b, [@generic={0x3d, 0x8, "7d61e79fd23d8d3323543837fc170153aaa199578153b7e13aacead4a2abdae98f6c370bda41944ce6a716be9161f2c7ae85d5333467da452fc5de"}, @generic={0x80, 0x22, "fa4d36437ce04ea81ec7cca3231b4d743b6c681efcd2d65f4b39e2222b2cd4e1e3bfaeb74f9f881e7db6fa3dbd108ffe75bf386652c689f0bb650d4cc6f8e506ce922930fd00937a1db104e1aed7cb1cc5c0645e09b5df2dce6ed176e2b6793e90cb774e4061ad1e396f12a73ccc8b92662f0816eb93b0c80aef6ca6ef8e"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x6, 0x5, 0xf3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xfa, 0xe}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x5, 0x1, 0x5}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x3, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xa5, 0xfff}]}}]}}, {{0x9, 0x4, 0x21, 0x0, 0x3, 0xbf, 0x2f, 0x22, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "142235"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfff, 0x6, 0x6, 0xff}, [@ncm={0x6}, @dmm={0x7, 0x24, 0x14, 0x6}, @country_functional={0xa, 0x24, 0x7, 0x4, 0x5, [0x0, 0x8]}, @mdlm={0x15}, @network_terminal={0x7, 0x24, 0xa, 0xe, 0x7, 0x5, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}]}, @hid_hid={0x9, 0x21, 0xd, 0x10, 0x1, {0x22, 0x9}}], [{{0x9, 0x5, 0x80, 0x1, 0x200, 0x7, 0xa, 0x5}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x80, 0x8, 0xb2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0x7}, @generic={0x5a, 0x11, "3ecdd3d9168e358c0fb61ac9b2b2e52416e6e7d67c2359e8176f952ae0cfdb103c907c3368a4c0578ce87a032f903c99e723bbd30d34d6a758c1aeda07bf1ad0e3edfd4b2e100354dc609ebc650684d7c18f484f664405fb"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x20, 0x3, 0x7, 0x2}}]}}, {{0x9, 0x4, 0x2d, 0xd9, 0xb, 0xc7, 0x41, 0x75, 0x6b, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "cd5b71a7"}, {0x5, 0x24, 0x0, 0xdc4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x8, 0xd, 0x9}, {0x6, 0x24, 0x1a, 0x7f, 0x1}}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0x2d}, [@feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, 0x2, [0x2, 0x2], 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x204, 0x2, 0x7, 0xff00, 0x0, 0xa}, @selector_unit={0x5, 0x24, 0x5, 0x4, 0x5a}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x0, 0x8}]}], [{{0x9, 0x5, 0x4, 0x0, 0x8, 0x9, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0xd}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x7, 0x34, 0x7}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x0, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x4ce}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xaa, 0x0, 0x2}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xa4, 0x9, 0x7, [@generic={0x75, 0x1, "dd6776b20fcda87d13f9a6619a682f4d7a90fb8016d4879941c4abb959e30e436d6357354b8d06d414a611eb0a1197a9e61edbbd56efd6af8ebc70cf5fb29e9144929f4b35d098f93b777e407815bc5b9ba26f1cc36553d312553dcc4240971bf22434510c8a070fdfc70e80b459521c5b35b8"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0xd, 0x3, 0xfd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x18, 0xf}]}}, {{0x9, 0x5, 0xf, 0x0, 0x0, 0x1f, 0x40, 0x1, [@generic={0xf4, 0x30, "8b83e4d5a9dc41caad5eb13ae99fdf90edd2191f80cf23a4a2da07a4bd902096dc29eca3025f69f547c73d1662032962e0f6d2672bd9ca012588ef143df503394c6831c0ae92a335dea3b10b7267dc3ee170dfa7054527c698d5fbe0cf7dd94c78f1349699bbdf1597d754277514a250a7c289335998282825a5ffb7ed4471389d5422a182143c910e18513b8400681edb186705efceb5abdbd4dfb4ee4529517409c53c10383efa81eda02bcc0d4e0d92fe2c75587f9de1fcdb431438dd50a401dc224e15601bdbd2f0c0e10ed6f979bd5e99b2b22f3a104abbafe5ede26976398056fec7e2c425811c0b2acd204913ff5e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x9, 0xe3, 0x6, [@generic={0x7a, 0x2, "61d4de62fdc4853076228bba7dfafe49faa99baaf075c00b05608450e12d0032df54c63019dbe146459865a372f065d7f902b8da26fbb7c3b77bda33953c23c1324ffcbd0e3c71b4063661aa244a2beace569132afcf40acf27cd082276d4701c087d44934beea88e38de697cbdd96c3aea4d2ec7fc7ed94"}, @generic={0xc0, 0x21, "36e4f85665da35051ab1eab6cd70f66a1b4d3def51f861189b55e1a7a43e606390358be2fa1fd18fcc27539098931e7412b96d16835f2d43a69173f8d518f32b45f66be65e1f01b048bc494cd594cb0a225b4073403f7bdaaa5123df257cdce25b8d3ec31f95689738c49d80485fd13c8fb04ccf45b6e9aadb81ec6a20d7cb4e70ee7860c766c2a880ecff5df57bde1e77efd598f26f17c6e08ab4d0d7e73a903e2ad3238b9d44619f24e2b97b0ecd13e113afc71c70b9c78dd11b49791b"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x2, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xe3, 0x2}, @generic={0xef, 0xd, "71b3eec22ff5185879703af98c4884f8f22ec9d2b0817b9717538d4fceb9f33634580e5192a21f4c672bd57fb2249116c60c036842176bdafed7898bb6da8a9ae76342c7697b76311aa75b0521d2be520860966282a9dbfdc4e6a8d620cb4a9b4d652b01bcc60e88e5cc0a04a449e19e0d4dcae73d4f4f547dfb7ac3576882d85873b93b3aa0c0ce5ec0ed1761a10db0548ce22498df861cd207055ebbaa2745b4482c1fb96c565cbc5ea244f80ce0c2c08f61d9e0e8222d05e976b3a614b1837ff1408c977ae8b51402a117c079ca3909fc81be6e27a30903278715879165f1028275a603f1cdbc4f8f6e1b43"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x6, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0xccb4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x5}]}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0x0, 0xe, 0x80}}]}}, {{0x9, 0x4, 0xba, 0x6, 0x5, 0x32, 0xfe, 0x96, 0x2, [@hid_hid={0x9, 0x21, 0x3, 0xa, 0x1, {0x22, 0xe73}}], [{{0x9, 0x5, 0x7, 0x0, 0x100, 0xa, 0x3, 0x10, [@generic={0xc4, 0x1, "a1aae740e08fca3953edd2d3a78577246dde9833749791b59e10fe4cfcc9a20847476491e9690641ea27c681fe856b4c203e9a3ab2fcbf0d9e0ae74503f1693346ec1629052a18c34887509152648fbf8123b3d803abd8487ad55198768de858cbb4ab0261a561e6489a6e065df1dc2996dfadddcd69a776c383dcaece129f4bac886bbdfdab4d9f629dfd663a1691339a580645caa1714c84d564f30f9d1c7b7e1a470a8a92a0362dc4003e5a064fed94fd3a3341a4008aee130e32104adf2ee634"}, @generic={0xf5, 0x30, "35037e20235e80fc723276c6c65ac0c303d8e2485c0643b50a6edf287a09d33df29eec47c2ad657ddfa3127f0bbffbab54cf9a7cd4aa61e5038d2b3734bff2653e6b438bdad44a05edaeaa5c05fc54fa48d7f47943ca2cce74fab61e738f7a84b9d46dc7143d55ac73664daf778e27b732ca2547660a596d088277024c148a9a84ab9d6c73428cbaa55264a6ebe721087468f3f37140140d06d871e331f51b81dab05420b52e0d14e0cabccdfbbda3a73db3ff6ad29ee9254187bdb68bd47badf99054e2c322cb9dc9f855779403b3643e1426b3e1cb3c97dac5b4f2457b50ab5c7a7ba0030e7d018fed0d7b5f5c86bd321c81"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x5, 0x10, 0x10, [@generic={0x8f, 0xd95becccfa0f8e57, "38f6f859492ece18112c408a49b6dbb6fa9b4f1bc34032c3acc4cfea7810f3554edb24554f4774374ca581e07f4f3502d4e582c7f0760de1f2fd4ecb439a2359ba4cbe5caba358c5325048af03cbca0ac9fd1bf929da5df3c8a147a3e4f8390ea72c5052c043f70e789f890db9e23f0a7f56284c5cf6dac96b2735fad7cf15ec73fa86e12edf3ed4f4db1ced6b"}, @generic={0xf6, 0x4, "98d00619ced67af628fd7672a6ca34c20fe6e569283c386bb6f2dd8460f3837dc32ade62f2fd81be160a0ee1c7ce226d3bdc8a04f69078b67362eff06fdd708d3abf50a243d30863f9cfc22904f0926e62a8f7f4c4900d5dbac3f6836d0f58b05644ccb30d86604d1c05aca4c20b366694a849957d80b25ec7e41aa57ec09aca96b3a37d043cdea7c435f5fd0425e2bcf96df7c4ea1ed53a66a4f090811dc855d93588457fb6cbbfae366ac258b774a39e082d16f57b6eeea11a1fccecc3842206631cc90a32900b090e7f1438dd437432ad9be5678d8e66925db6ed4a3ed05e803ea262473905e16443250d0d815f801be93f07"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x1, 0x5, [@generic={0xaf, 0xe, "3c9e8e347daae9d8f379ac51379d17344e839e751060e506d7f5cf914ec4630d9069f501a2c5b4342b740d545ce4ff6cea84e9f68770f5c9e0c0a28355412a5297f3be9206e4a3f4c1be8e2c055035a8c3fbdffca4e9370a2bc5e385d1f2c64362682470e7a3769c1782cb69480d88aaa433942a047bf46a32b3e045e75e00f780dde2b5423684eb11a141197f2b2ae06cb003523b35327f8bfd4a9eb0943f932d8725e3e63a784d70adb94f37"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x40, 0xaa, 0x9, 0x8, [@generic={0x43, 0x21, "a08e17d2b78b48e427b9551666180a8fd472d68efddb3d56a2ad5af706d368987e50853ff1668a657bd360fb3f0eaaaea121734086dbf707912096c74324d63a2b"}, @generic={0xda, 0x2, "0766de8090b60d5334eca95abaeb980868390aed16bf3a155a544c2950c01b59559cc81533b27039e35972896e0f01cc8e1bbb08798a6d2884cd74116f7871e02eb1d2d9284a2b8da8890d6433e5c3c4207f2f7ec96a45be85bda7f44c0419225aa7f619f4ead2dbc0ee9f9689a2d300e4d6b1786b3b757e8003ea1174efbbeec96bc749bea342d73c548f6b63a2c5f37ba42b908afc8384d6426199cc9df36521d79dcae5d1d66010a366959b7985e83c407cdcbe0d4045109bf19ebb447e8a8c6c444a792eafdbf6674d5bfd0afeb0e7678b812971c104"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x3, 0xd3, 0x5, [@generic={0x4a, 0xd, "96f7b3f47d306f150a8934fa45c2f775a7226caa038e9d386dd44fd5e962915658dd145225c738631cfc858886461c90b18b8be175a8dbaa091d766cc7495c4ba05bc39965f2517e"}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000d40)={0xa, 0x6, 0x250, 0x7, 0xc9, 0x6, 0xff, 0x6}, 0x1c, &(0x7f0000000d80)={0x5, 0xf, 0x1c, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x89, "c60fb181c9ce07bbc2258131a7042e18"}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x44d}}]}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x604, &(0x7f0000000040)={r1, 0x4, 0xfffffffffffffffc, 0xb}) 0s ago: executing program 3 (id=481): r0 = syz_usb_connect(0x0, 0xaf, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101217ad620e71a039008440102030109029d00010000100009044a020288dcb20009050602000202000a090582"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): /0x7f [ 141.947649][ T6521] RIP: 0033:0x7fb33795ce59 [ 141.947667][ T6521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.947682][ T6521] RSP: 002b:00007fb335bae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.947701][ T6521] RAX: ffffffffffffffda RBX: 00007fb337bd5fa0 RCX: 00007fb33795ce59 [ 141.947715][ T6521] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 141.947725][ T6521] RBP: 00007fb335bae090 R08: 0000000000000000 R09: 0000000000000000 [ 141.947737][ T6521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.947748][ T6521] R13: 00007fb337bd6038 R14: 00007fb337bd5fa0 R15: 00007ffe49d95d88 [ 141.947775][ T6521] [ 142.101903][ T10] usb 3-1: USB disconnect, device number 13 [ 142.233169][ T6524] FAULT_INJECTION: forcing a failure. [ 142.233169][ T6524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.233201][ T6524] CPU: 0 UID: 0 PID: 6524 Comm: syz.1.246 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.233222][ T6524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.233233][ T6524] Call Trace: [ 142.233240][ T6524] [ 142.233247][ T6524] dump_stack_lvl+0xe8/0x150 [ 142.233277][ T6524] should_fail_ex+0x46b/0x600 [ 142.233309][ T6524] _copy_to_user+0x31/0xb0 [ 142.233331][ T6524] simple_read_from_buffer+0xe1/0x170 [ 142.233356][ T6524] proc_fail_nth_read+0x1be/0x230 [ 142.233379][ T6524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.233399][ T6524] ? rw_verify_area+0x2ac/0x4e0 [ 142.233420][ T6524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.233441][ T6524] vfs_read+0x212/0xa80 [ 142.233470][ T6524] ? __pfx_vfs_read+0x10/0x10 [ 142.233493][ T6524] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 142.233516][ T6524] ? lockdep_hardirqs_on+0x7a/0x110 [ 142.233539][ T6524] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.233570][ T6524] ? mutex_lock_nested+0x152/0x1d0 [ 142.233595][ T6524] ? fdget_pos+0x252/0x320 [ 142.233622][ T6524] ksys_read+0x156/0x270 [ 142.233646][ T6524] ? __pfx_ksys_read+0x10/0x10 [ 142.233675][ T6524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.233695][ T6524] do_syscall_64+0x174/0x580 [ 142.233717][ T6524] ? trace_irq_disable+0x3b/0x140 [ 142.233739][ T6524] ? clear_bhb_loop+0x40/0x90 [ 142.233761][ T6524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.233779][ T6524] RIP: 0033:0x7ff37ca0d68e [ 142.233796][ T6524] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.233812][ T6524] RSP: 002b:00007ff37aca5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.233833][ T6524] RAX: ffffffffffffffda RBX: 00007ff37aca66c0 RCX: 00007ff37ca0d68e [ 142.233846][ T6524] RDX: 000000000000000f RSI: 00007ff37aca60a0 RDI: 0000000000000004 [ 142.233858][ T6524] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.233869][ T6524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.233881][ T6524] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 142.233910][ T6524] [ 142.504048][ T6530] syzkaller1: entered promiscuous mode [ 142.504073][ T6530] syzkaller1: entered allmulticast mode [ 142.853333][ T6537] FAULT_INJECTION: forcing a failure. [ 142.853333][ T6537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.853380][ T6537] CPU: 0 UID: 0 PID: 6537 Comm: syz.1.252 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 142.853402][ T6537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 142.853413][ T6537] Call Trace: [ 142.853419][ T6537] [ 142.853428][ T6537] dump_stack_lvl+0xe8/0x150 [ 142.853454][ T6537] should_fail_ex+0x46b/0x600 [ 142.853485][ T6537] _copy_from_iter+0x1d3/0x1670 [ 142.853513][ T6537] ? rcu_is_watching+0x15/0xb0 [ 142.853547][ T6537] ? __pfx__copy_from_iter+0x10/0x10 [ 142.853573][ T6537] ? __alloc_skb+0x27d/0x7d0 [ 142.853589][ T6537] ? __alloc_skb+0x27d/0x7d0 [ 142.853614][ T6537] ? netlink_sendmsg+0x650/0xb40 [ 142.853635][ T6537] ? skb_put+0x11b/0x210 [ 142.853659][ T6537] netlink_sendmsg+0x6c0/0xb40 [ 142.853691][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.853714][ T6537] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 142.853739][ T6537] ? aa_sock_msg_perm+0x122/0x200 [ 142.853759][ T6537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.853782][ T6537] sock_sendmsg_nosec+0x13a/0x180 [ 142.853812][ T6537] ____sys_sendmsg+0x55c/0x870 [ 142.853834][ T6537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.853864][ T6537] ? import_iovec+0x73/0xa0 [ 142.853886][ T6537] ___sys_sendmsg+0x2a5/0x360 [ 142.853907][ T6537] ? __lock_acquire+0x6b5/0x2d10 [ 142.853933][ T6537] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.853995][ T6537] ? __fget_files+0x2a/0x420 [ 142.854014][ T6537] ? __fget_files+0x3a6/0x420 [ 142.854041][ T6537] __x64_sys_sendmsg+0x1b7/0x290 [ 142.854067][ T6537] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.854107][ T6537] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.854128][ T6537] do_syscall_64+0x174/0x580 [ 142.854151][ T6537] ? trace_irq_disable+0x3b/0x140 [ 142.854174][ T6537] ? clear_bhb_loop+0x40/0x90 [ 142.854198][ T6537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.854218][ T6537] RIP: 0033:0x7ff37ca4ce59 [ 142.854235][ T6537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.854252][ T6537] RSP: 002b:00007ff37aca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.854271][ T6537] RAX: ffffffffffffffda RBX: 00007ff37ccc5fa0 RCX: 00007ff37ca4ce59 [ 142.854285][ T6537] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 142.854298][ T6537] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.854309][ T6537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.854321][ T6537] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 142.854348][ T6537] [ 142.973354][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 142.973539][ T5614] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 143.120939][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 143.173200][ T5614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.173257][ T5614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.173282][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.224653][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 143.224684][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.224705][ T10] usb 4-1: Product: syz [ 143.224720][ T10] usb 4-1: Manufacturer: syz [ 143.224734][ T10] usb 4-1: SerialNumber: syz [ 143.293687][ T5614] usb 3-1: config 0 descriptor?? [ 143.307984][ T6541] capability: warning: `syz.1.254' uses 32-bit capabilities (legacy support in use) [ 143.308271][ T6541] program syz.1.254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.340935][ T5614] pwc: Askey VC010 type 2 USB webcam detected. [ 143.414787][ T6543] Bluetooth: hci0: unsupported parameter 255 [ 143.415610][ T6543] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 143.505105][ T5614] pwc: send_video_command error -71 [ 143.505122][ T5614] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 143.505282][ T5614] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 143.583430][ T5614] usb 3-1: USB disconnect, device number 14 [ 143.880735][ T5708] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 143.931464][ T5614] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 144.075168][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.089326][ T5708] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 144.089361][ T5708] usb 1-1: can't read configurations, error -71 [ 144.109607][ T5614] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.109665][ T5614] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 144.109687][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.156157][ T5614] usb 3-1: config 0 descriptor?? [ 144.173698][ T5614] pwc: Askey VC010 type 2 USB webcam detected. [ 144.361885][ T5614] pwc: recv_control_msg error -32 req 02 val 2b00 [ 144.375921][ T5614] pwc: recv_control_msg error -32 req 02 val 2700 [ 144.386051][ T5614] pwc: recv_control_msg error -71 req 02 val 2c00 [ 144.388051][ T5614] pwc: recv_control_msg error -71 req 04 val 1000 [ 144.388633][ T5614] pwc: recv_control_msg error -71 req 04 val 1300 [ 144.389096][ T5614] pwc: recv_control_msg error -71 req 04 val 1400 [ 144.389521][ T5614] pwc: recv_control_msg error -71 req 02 val 2000 [ 144.389961][ T5614] pwc: recv_control_msg error -71 req 02 val 2100 [ 144.397109][ T5614] pwc: recv_control_msg error -71 req 04 val 1500 [ 144.437323][ T5614] pwc: recv_control_msg error -71 req 02 val 2500 [ 144.440726][ T5614] pwc: recv_control_msg error -71 req 02 val 2400 [ 144.454623][ T5614] pwc: recv_control_msg error -71 req 02 val 2600 [ 144.457216][ T5614] pwc: recv_control_msg error -71 req 02 val 2900 [ 144.458756][ T5614] pwc: recv_control_msg error -71 req 02 val 2800 [ 144.492606][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 144.493417][ T5614] pwc: recv_control_msg error -71 req 04 val 1100 [ 144.495318][ T5614] pwc: recv_control_msg error -71 req 04 val 1200 [ 144.528889][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 144.581952][ T5614] pwc: Registered as video103. [ 144.598860][ T5614] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 144.700366][ T10] usb 2-1: config 127 has an invalid interface number: 179 but max is 0 [ 144.700394][ T10] usb 2-1: config 127 has an invalid descriptor of length 1, skipping remainder of the config [ 144.700413][ T10] usb 2-1: config 127 has no interface number 0 [ 144.725694][ T10] usb 2-1: config 127 interface 179 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.748547][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=cd.a7 [ 144.748577][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.748596][ T10] usb 2-1: Product: syz [ 144.748610][ T10] usb 2-1: Manufacturer: syz [ 144.748625][ T10] usb 2-1: SerialNumber: syz [ 144.854742][ T5614] usb 3-1: USB disconnect, device number 15 [ 144.991612][ T6568] syzkaller1: entered promiscuous mode [ 144.991638][ T6568] syzkaller1: entered allmulticast mode [ 145.146281][ T10] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in cold state, will try to load a firmware [ 145.339672][ T10] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 145.339732][ T10] dib0700: firmware download failed at 7 with -22 [ 145.385121][ T10] usb 2-1: USB disconnect, device number 21 [ 145.701812][ T824] usb 4-1: USB disconnect, device number 11 [ 145.751715][ T5614] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 145.840635][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 145.910876][ T5614] usb 3-1: Using ep0 maxpacket: 16 [ 145.915992][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.916025][ T5614] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.916043][ T5614] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.916067][ T5614] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.916079][ T5614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.920270][ T5614] usb 3-1: config 0 descriptor?? [ 146.000619][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 146.002748][ T10] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 146.002801][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 146.002862][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 146.002876][ T10] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.002888][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.002912][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 146.002923][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.192990][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.193542][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.236319][ T10] usb 1-1: usb_control_msg returned -32 [ 146.236416][ T10] usbtmc 1-1:16.0: can't read capabilities [ 146.503331][ T5614] usbhid 3-1:0.0: can't add hid device: -71 [ 146.503511][ T5614] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 146.521744][ T5708] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 146.536259][ T5614] usb 3-1: USB disconnect, device number 16 [ 146.700875][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 146.704975][ T5708] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 146.705003][ T5708] usb 2-1: config 0 has no interface number 0 [ 146.705049][ T5708] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 146.705072][ T5708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.724293][ T5708] usb 2-1: config 0 descriptor?? [ 146.737695][ T5708] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 146.939117][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.942537][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.978845][ T6600] syzkaller1: entered promiscuous mode [ 146.978863][ T6600] syzkaller1: entered allmulticast mode [ 147.556578][ T6607] netlink: 'syz.3.278': attribute type 11 has an invalid length. [ 147.667718][ T37] audit: type=1326 audit(1781885954.662:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6610 comm="syz.3.279" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f092c00ce59 code=0x0 [ 147.780614][ T5614] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 147.784837][ T5708] gspca_sonixj: reg_w1 err -71 [ 147.800909][ T5708] sonixj 2-1:0.4: probe with driver sonixj failed with error -71 [ 147.812613][ T5708] usb 2-1: USB disconnect, device number 22 [ 147.932269][ T5614] usb 3-1: Using ep0 maxpacket: 8 [ 147.942530][ T5614] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 147.942560][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.942580][ T5614] usb 3-1: Product: syz [ 147.942594][ T5614] usb 3-1: Manufacturer: syz [ 147.942604][ T5614] usb 3-1: SerialNumber: syz [ 148.370984][ T6623] FAULT_INJECTION: forcing a failure. [ 148.370984][ T6623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.371012][ T6623] CPU: 1 UID: 0 PID: 6623 Comm: syz.1.284 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 148.371029][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 148.371038][ T6623] Call Trace: [ 148.371044][ T6623] [ 148.371050][ T6623] dump_stack_lvl+0xe8/0x150 [ 148.371072][ T6623] should_fail_ex+0x46b/0x600 [ 148.371096][ T6623] _copy_from_user+0x2d/0xb0 [ 148.371113][ T6623] ___sys_sendmsg+0x1c6/0x360 [ 148.371130][ T6623] ? __lock_acquire+0x6b5/0x2d10 [ 148.371151][ T6623] ? __pfx____sys_sendmsg+0x10/0x10 [ 148.371191][ T6623] ? __fget_files+0x2a/0x420 [ 148.371205][ T6623] ? __fget_files+0x3a6/0x420 [ 148.371225][ T6623] __x64_sys_sendmsg+0x1b7/0x290 [ 148.371245][ T6623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 148.371275][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.371291][ T6623] do_syscall_64+0x174/0x580 [ 148.371310][ T6623] ? trace_irq_disable+0x3b/0x140 [ 148.371327][ T6623] ? clear_bhb_loop+0x40/0x90 [ 148.371345][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.371360][ T6623] RIP: 0033:0x7ff37ca4ce59 [ 148.371376][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.371390][ T6623] RSP: 002b:00007ff37aca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.371407][ T6623] RAX: ffffffffffffffda RBX: 00007ff37ccc5fa0 RCX: 00007ff37ca4ce59 [ 148.371417][ T6623] RDX: 0000000044000050 RSI: 0000200000000540 RDI: 0000000000000003 [ 148.371426][ T6623] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 148.371435][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.371442][ T6623] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 148.371464][ T6623] [ 148.508830][ T6626] syzkaller1: entered promiscuous mode [ 148.508855][ T6626] syzkaller1: entered allmulticast mode [ 148.647347][ T5599] usb 1-1: USB disconnect, device number 11 [ 149.146921][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.290'. [ 149.146945][ T6638] netlink: 31 bytes leftover after parsing attributes in process `syz.3.290'. [ 149.146958][ T6638] netlink: 'syz.3.290': attribute type 3 has an invalid length. [ 149.146985][ T6638] netlink: 'syz.3.290': attribute type 2 has an invalid length. [ 149.147000][ T6638] netlink: 31 bytes leftover after parsing attributes in process `syz.3.290'. [ 149.244018][ T6644] netlink: 4816 bytes leftover after parsing attributes in process `syz.0.289'. [ 149.247357][ T6639] comedi: valid board names for 8255 driver are: [ 149.247373][ T6639] 8255 [ 149.247380][ T6639] comedi: valid board names for vmk80xx driver are: [ 149.247397][ T6639] vmk80xx [ 149.247404][ T6639] comedi: valid board names for usbduxsigma driver are: [ 149.283204][ T6639] usbduxsigma [ 149.283218][ T6639] comedi: valid board names for usbduxfast driver are: [ 149.283229][ T6639] usbduxfast [ 149.283236][ T6639] comedi: valid board names for usbdux driver are: [ 149.283245][ T6639] usbdux [ 149.283252][ T6639] comedi: valid board names for ni6501 driver are: [ 149.283260][ T6639] ni6501 [ 149.283267][ T6639] comedi: valid board names for dt9812 driver are: [ 149.283276][ T6639] dt9812 [ 149.283282][ T6639] comedi: valid board names for ni_labpc_cs driver are: [ 149.283292][ T6639] ni_labpc_cs [ 149.283298][ T6639] comedi: valid board names for ni_daq_700 driver are: [ 149.283307][ T6639] ni_daq_700 [ 149.283314][ T6639] comedi: valid board names for labpc_pci driver are: [ 149.283323][ T6639] labpc_pci [ 149.283329][ T6639] comedi: valid board names for adl_pci9118 driver are: [ 149.283339][ T6639] pci9118dg [ 149.283345][ T6639] pci9118hg [ 149.283352][ T6639] pci9118hr [ 149.283358][ T6639] comedi: valid board names for 8255_pci driver are: [ 149.283367][ T6639] 8255_pci [ 149.283373][ T6639] comedi: valid board names for s526 driver are: [ 149.283382][ T6639] s526 [ 149.283396][ T6639] comedi: valid board names for multiq3 driver are: [ 149.283404][ T6639] multiq3 [ 149.283410][ T6639] comedi: valid board names for pcmuio driver are: [ 149.283419][ T6639] pcmuio48 [ 149.283425][ T6639] pcmuio96 [ 149.283432][ T6639] comedi: valid board names for pcmmio driver are: [ 149.283440][ T6639] pcmmio [ 149.283447][ T6639] comedi: valid board names for pcmda12 driver are: [ 149.283455][ T6639] pcmda12 [ 149.283462][ T6639] comedi: valid board names for pcmad driver are: [ 149.283470][ T6639] pcmad12 [ 149.283477][ T6639] pcmad16 [ 149.283483][ T6639] comedi: valid board names for ni_labpc driver are: [ 149.283492][ T6639] lab-pc-1200 [ 149.283499][ T6639] lab-pc-1200ai [ 149.283506][ T6639] lab-pc+ [ 149.283512][ T6639] comedi: valid board names for atmio16 driver are: [ 149.283520][ T6639] atmio16 [ 149.283527][ T6639] atmio16d [ 149.283533][ T6639] comedi: valid board names for ni_at_ao driver are: [ 149.283542][ T6639] at-ao-6 [ 149.283549][ T6639] at-ao-10 [ 149.283555][ T6639] comedi: valid board names for ni_at_a2150 driver are: [ 149.283564][ T6639] ni_at_a2150 [ 149.283571][ T6639] comedi: valid board names for adq12b driver are: [ 149.283580][ T6639] adq12b [ 149.283586][ T6639] comedi: valid board names for mpc624 driver are: [ 149.283596][ T6639] mpc624 [ 149.283601][ T6639] comedi: valid board names for c6xdigio driver are: [ 149.283610][ T6639] c6xdigio [ 149.283616][ T6639] comedi: valid board names for aio_iiro_16 driver are: [ 149.283625][ T6639] aio_iiro_16 [ 149.283631][ T6639] comedi: valid board names for aio_aio12_8 driver are: [ 149.283640][ T6639] aio_aio12_8 [ 149.283646][ T6639] aio_ai12_8 [ 149.283652][ T6639] aio_ao12_4 [ 149.283659][ T6639] comedi: valid board names for fl512 driver are: [ 149.283667][ T6639] fl512 [ 149.283673][ T6639] comedi: valid board names for dmm32at driver are: [ 149.283681][ T6639] dmm32at [ 149.283687][ T6639] comedi: valid board names for dt282x driver are: [ 149.283696][ T6639] dt2821 [ 149.283702][ T6639] dt2821-f [ 149.283708][ T6639] dt2821-g [ 149.283714][ T6639] dt2823 [ 149.283720][ T6639] dt2824-pgh [ 149.283726][ T6639] dt2824-pgl [ 149.283732][ T6639] dt2825 [ 149.283738][ T6639] dt2827 [ 149.283744][ T6639] dt2828 [ 149.283750][ T6639] dt2829 [ 149.283756][ T6639] dt21-ez [ 149.283762][ T6639] dt23-ez [ 149.283768][ T6639] dt24-ez [ 149.283773][ T6639] dt24-ez-pgl [ 149.283779][ T6639] comedi: valid board names for dt2817 driver are: [ 149.283788][ T6639] dt2817 [ 149.283794][ T6639] comedi: valid board names for dt2815 driver are: [ 149.283802][ T6639] dt2815 [ 149.283808][ T6639] comedi: valid board names for dt2814 driver are: [ 149.283817][ T6639] dt2814 [ 149.283823][ T6639] comedi: valid board names for dt2811 driver are: [ 149.283831][ T6639] dt2811-pgh [ 149.283838][ T6639] dt2811-pgl [ 149.283844][ T6639] comedi: valid board names for dt2801 driver are: [ 149.283936][ T6639] dt2801 [ 149.283943][ T6639] comedi: valid board names for das6402 driver are: [ 149.283952][ T6639] das6402-12 [ 149.283958][ T6639] das6402-16 [ 149.283965][ T6639] comedi: valid board names for das1800 driver are: [ 149.283973][ T6639] das-1701st [ 149.283980][ T6639] das-1701st-da [ 149.283987][ T6639] das-1702st [ 149.283993][ T6639] das-1702st-da [ 149.284000][ T6639] das-1702hr [ 149.284006][ T6639] das-1702hr-da [ 149.284012][ T6639] das-1701ao [ 149.284019][ T6639] das-1702ao [ 149.284025][ T6639] das-1801st [ 149.284031][ T6639] das-1801st-da [ 149.284037][ T6639] das-1802st [ 149.284043][ T6639] das-1802st-da [ 149.284050][ T6639] das-1802hr [ 149.284057][ T6639] das-1802hr-da [ 149.284063][ T6639] das-1801hc [ 149.284070][ T6639] das-1802hc [ 149.284076][ T6639] das-1801ao [ 149.284083][ T6639] das-1802ao [ 149.284089][ T6639] comedi: valid board names for das800 driver are: [ 149.284099][ T6639] das-800 [ 149.284105][ T6639] cio-das800 [ 149.284111][ T6639] das-801 [ 149.284117][ T6639] cio-das801 [ 149.284124][ T6639] das-802 [ 149.284129][ T6639] cio-das802 [ 149.284136][ T6639] cio-das802/16 [ 149.284142][ T6639] comedi: valid board names for isa-das08 driver are: [ 149.284151][ T6639] isa-das08 [ 149.284157][ T6639] das08-pgm [ 149.284163][ T6639] das08-pgh [ 149.284170][ T6639] das08-pgl [ 149.284176][ T6639] das08-aoh [ 149.284182][ T6639] das08-aol [ 149.284188][ T6639] das08-aom [ 149.284194][ T6639] das08/jr-ao [ 149.284200][ T6639] das08jr-16-ao [ 149.284207][ T6639] pc104-das08 [ 149.284213][ T6639] das08jr/16 [ 149.284220][ T6639] comedi: valid board names for das16m1 driver are: [ 149.284229][ T6639] das16m1 [ 149.284235][ T6639] comedi: valid board names for dac02 driver are: [ 149.284243][ T6639] dac02 [ 149.284250][ T6639] comedi: valid board names for rti802 driver are: [ 149.284258][ T6639] rti802 [ 149.284264][ T6639] comedi: valid board names for rti800 driver are: [ 149.284272][ T6639] rti800 [ 149.284278][ T6639] rti815 [ 149.284284][ T6639] comedi: valid board names for pcm3724 driver are: [ 149.284293][ T6639] pcm3724 [ 149.284299][ T6639] comedi: valid board names for pcl818 driver are: [ 149.284307][ T6639] pcl818l [ 149.284314][ T6639] pcl818h [ 149.284320][ T6639] pcl818hd [ 149.284326][ T6639] pcl818hg [ 149.284332][ T6639] pcl818 [ 149.284339][ T6639] pcl718 [ 149.284345][ T6639] pcm3718 [ 149.284351][ T6639] comedi: valid board names for pcl816 driver are: [ 149.284359][ T6639] pcl816 [ 149.284364][ T6639] pcl814b [ 149.284370][ T6639] comedi: valid board names for pcl812 driver are: [ 149.284379][ T6639] pcl812 [ 149.284392][ T6639] pcl812pg [ 149.284398][ T6639] acl8112pg [ 149.284404][ T6639] acl8112dg [ 149.284410][ T6639] acl8112hg [ 149.284417][ T6639] a821pgl [ 149.284422][ T6639] a821pglnda [ 149.284429][ T6639] a821pgh [ 149.284435][ T6639] a822pgl [ 149.284441][ T6639] a822pgh [ 149.284448][ T6639] a823pgl [ 149.284453][ T6639] a823pgh [ 149.284459][ T6639] pcl813 [ 149.284465][ T6639] pcl813b [ 149.284471][ T6639] acl8113 [ 149.284478][ T6639] iso813 [ 149.284484][ T6639] acl8216 [ 149.284491][ T6639] a826pg [ 149.284497][ T6639] comedi: valid board names for pcl730 driver are: [ 149.284506][ T6639] pcl730 [ 149.284512][ T6639] iso730 [ 149.284518][ T6639] acl7130 [ 149.284525][ T6639] pcm3730 [ 149.284531][ T6639] pcl725 [ 149.284537][ T6639] p8r8dio [ 149.284543][ T6639] acl7225b [ 149.284550][ T6639] p16r16dio [ 149.284556][ T6639] pcl733 [ 149.284562][ T6639] pcl734 [ 149.284568][ T6639] opmm-1616-xt [ 149.284575][ T6639] pearl-mm-p [ 149.284581][ T6639] ir104-pbf [ 149.284588][ T6639] comedi: valid board names for pcl726 driver are: [ 149.284597][ T6639] pcl726 [ 149.284603][ T6639] pcl727 [ 149.284609][ T6639] pcl728 [ 149.284616][ T6639] acl6126 [ 149.284621][ T6639] acl6128 [ 149.284629][ T6639] comedi: valid board names for pcl724 driver are: [ 149.284636][ T6639] pcl724 [ 149.284643][ T6639] pcl722 [ 149.284649][ T6639] pcl731 [ 149.284656][ T6639] acl7122 [ 149.284662][ T6639] acl7124 [ 149.284667][ T6639] pet48dio [ 149.284674][ T6639] pcmio48 [ 149.284692][ T6639] onyx-mm-dio [ 149.284699][ T6639] comedi: valid board names for pcl711 driver are: [ 149.286554][ T6639] pcl711 [ 149.286565][ T6639] pcl711b [ 149.286571][ T6639] acl8112hg [ 149.286578][ T6639] acl8112dg [ 149.286585][ T6639] comedi: valid board names for amplc_pc263 driver are: [ 149.286594][ T6639] pc263 [ 149.286600][ T6639] comedi: valid board names for amplc_pc236 driver are: [ 149.286610][ T6639] pc36at [ 149.286616][ T6639] comedi: valid board names for amplc_dio200 driver are: [ 149.286626][ T6639] pc212e [ 149.286631][ T6639] pc214e [ 149.286637][ T6639] pc215e [ 149.286643][ T6639] pc218e [ 149.286649][ T6639] pc272e [ 149.286655][ T6639] comedi: valid board names for comedi_parport driver are: [ 149.286663][ T6639] comedi_parport [ 149.286670][ T6639] comedi: valid board names for comedi_test driver are: [ 149.286678][ T6639] comedi_test [ 149.286684][ T6639] comedi: valid board names for comedi_bond driver are: [ 149.286693][ T6639] comedi_bond [ 149.633054][ T6645] overlay: ./file1 is not a directory [ 150.132802][ T5708] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 150.303776][ T5708] usb 1-1: Using ep0 maxpacket: 8 [ 150.322871][ T5708] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 150.322902][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.322920][ T5708] usb 1-1: Product: syz [ 150.322934][ T5708] usb 1-1: Manufacturer: syz [ 150.322948][ T5708] usb 1-1: SerialNumber: syz [ 150.337931][ T5708] usb 1-1: config 0 descriptor?? [ 150.372806][ T5708] gspca_main: se401-2.14.0 probing 047d:5003 [ 150.626295][ T5599] usb 3-1: USB disconnect, device number 17 [ 150.873013][ T5708] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 150.873113][ T5708] se401 1-1:0.0: probe with driver se401 failed with error -71 [ 150.904384][ T5708] usb 1-1: USB disconnect, device number 12 [ 150.930952][ T5614] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.971151][ T824] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 151.081100][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 151.083205][ T5614] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 151.083239][ T5614] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.083251][ T5614] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 151.083264][ T5614] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 151.083277][ T5614] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.083301][ T5614] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.083313][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.147797][ T824] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 151.147833][ T824] usb 2-1: config 2 has no interface number 0 [ 151.147875][ T824] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 151.147902][ T824] usb 2-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 151.147928][ T824] usb 2-1: config 2 interface 88 has no altsetting 0 [ 151.211429][ T824] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06 [ 151.211457][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.211475][ T824] usb 2-1: Product: syz [ 151.211488][ T824] usb 2-1: Manufacturer: syz [ 151.211501][ T824] usb 2-1: SerialNumber: syz [ 151.252686][ T6662] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.252869][ T6662] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.308170][ T5614] usb 4-1: usb_control_msg returned -32 [ 151.308217][ T5614] usbtmc 4-1:16.0: can't read capabilities [ 151.600070][ T6678] FAULT_INJECTION: forcing a failure. [ 151.600070][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 151.600100][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.2.299 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.600116][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 151.600126][ T6678] Call Trace: [ 151.600132][ T6678] [ 151.600138][ T6678] dump_stack_lvl+0xe8/0x150 [ 151.600164][ T6678] should_fail_ex+0x46b/0x600 [ 151.600193][ T6678] should_failslab+0xa8/0x100 [ 151.600213][ T6678] __kmalloc_noprof+0xfe/0x7e0 [ 151.600228][ T6678] ? rcu_is_watching+0x15/0xb0 [ 151.600250][ T6678] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.600267][ T6678] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.600289][ T6678] tomoyo_realpath_from_path+0xe3/0x5d0 [ 151.600309][ T6678] ? tomoyo_domain+0xd7/0x130 [ 151.600333][ T6678] ? tomoyo_path_number_perm+0x219/0x630 [ 151.600358][ T6678] tomoyo_path_number_perm+0x246/0x630 [ 151.600383][ T6678] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 151.600407][ T6678] ? __lock_acquire+0x6b5/0x2d10 [ 151.600428][ T6678] ? do_raw_spin_lock+0x12b/0x2f0 [ 151.600469][ T6678] ? __fget_files+0x2a/0x420 [ 151.600490][ T6678] ? __fget_files+0x2a/0x420 [ 151.600506][ T6678] ? __fget_files+0x3a6/0x420 [ 151.600521][ T6678] ? __fget_files+0x2a/0x420 [ 151.600542][ T6678] security_file_ioctl+0xc3/0x2a0 [ 151.600569][ T6678] __se_sys_ioctl+0x47/0x170 [ 151.600590][ T6678] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.600610][ T6678] do_syscall_64+0x174/0x580 [ 151.600631][ T6678] ? trace_irq_disable+0x3b/0x140 [ 151.600654][ T6678] ? clear_bhb_loop+0x40/0x90 [ 151.600675][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.600702][ T6678] RIP: 0033:0x7f459914ce59 [ 151.600719][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.600735][ T6678] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.600755][ T6678] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 151.600770][ T6678] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000003 [ 151.600782][ T6678] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 151.600794][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.600806][ T6678] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 151.600836][ T6678] [ 151.607829][ T6678] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.716917][ T6682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.718286][ T6682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 151.767302][ T6675] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 151.783912][ T6685] program syz.2.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.968897][ T10] usb 4-1: USB disconnect, device number 12 [ 152.048410][ T6687] overlay: ./file1 is not a directory [ 152.602860][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 152.750944][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 152.765178][ T6700] FAULT_INJECTION: forcing a failure. [ 152.765178][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 152.765211][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.2.307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 152.765232][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 152.765243][ T6700] Call Trace: [ 152.765251][ T6700] [ 152.765258][ T6700] dump_stack_lvl+0xe8/0x150 [ 152.765289][ T6700] should_fail_ex+0x46b/0x600 [ 152.765320][ T6700] should_failslab+0xa8/0x100 [ 152.765344][ T6700] __kmalloc_noprof+0xfe/0x7e0 [ 152.765363][ T6700] ? tomoyo_encode+0x28b/0x550 [ 152.765382][ T6700] ? tomoyo_encode+0x28b/0x550 [ 152.765408][ T6700] tomoyo_encode+0x28b/0x550 [ 152.765432][ T6700] tomoyo_realpath_from_path+0x58d/0x5d0 [ 152.765462][ T6700] ? tomoyo_path_number_perm+0x219/0x630 [ 152.765490][ T6700] tomoyo_path_number_perm+0x246/0x630 [ 152.765519][ T6700] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.765544][ T6700] ? __lock_acquire+0x6b5/0x2d10 [ 152.765580][ T6700] ? do_raw_spin_lock+0x12b/0x2f0 [ 152.765629][ T6700] ? __fget_files+0x2a/0x420 [ 152.765651][ T6700] ? __fget_files+0x2a/0x420 [ 152.765667][ T6700] ? __fget_files+0x3a6/0x420 [ 152.765684][ T6700] ? __fget_files+0x2a/0x420 [ 152.765706][ T6700] security_file_ioctl+0xc3/0x2a0 [ 152.765734][ T6700] __se_sys_ioctl+0x47/0x170 [ 152.765757][ T6700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.765777][ T6700] do_syscall_64+0x174/0x580 [ 152.765799][ T6700] ? trace_irq_disable+0x3b/0x140 [ 152.765820][ T6700] ? clear_bhb_loop+0x40/0x90 [ 152.765843][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.765862][ T6700] RIP: 0033:0x7f459914ce59 [ 152.765880][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.765895][ T6700] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.765914][ T6700] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 152.765928][ T6700] RDX: 0000200000000080 RSI: 0000000000005600 RDI: 0000000000000003 [ 152.765940][ T6700] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 152.765951][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.765963][ T6700] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 152.765989][ T6700] [ 152.766060][ T6700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.784017][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 152.784047][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.784077][ T10] usb 1-1: Product: syz [ 152.784091][ T10] usb 1-1: Manufacturer: syz [ 152.784106][ T10] usb 1-1: SerialNumber: syz [ 153.060669][ T5614] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 153.222638][ T5614] usb 4-1: config 3 has an invalid interface number: 104 but max is 0 [ 153.222675][ T5614] usb 4-1: config 3 has no interface number 0 [ 153.222706][ T5614] usb 4-1: config 3 interface 104 has no altsetting 0 [ 153.229503][ T5614] usb 4-1: string descriptor 0 read error: -22 [ 153.229711][ T5614] usb 4-1: New USB device found, idVendor=0c45, idProduct=62bb, bcdDevice=16.9f [ 153.229726][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.344962][ T5614] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62bb [ 153.350634][ T5722] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 153.437605][ T824] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.437636][ T824] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 153.437902][ T824] asix 2-1:2.88: probe with driver asix failed with error -71 [ 153.480749][ T824] usb 2-1: USB disconnect, device number 23 [ 153.551621][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 153.553254][ T5614] gspca_sn9c20x: Write register 1000 failed -71 [ 153.553330][ T5614] gspca_sn9c20x: Device initialization failed [ 153.553507][ T5614] gspca_sn9c20x 4-1:3.104: probe with driver gspca_sn9c20x failed with error -71 [ 153.602579][ T5722] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 153.602609][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.602680][ T5722] usb 3-1: Product: syz [ 153.602694][ T5722] usb 3-1: Manufacturer: syz [ 153.602708][ T5722] usb 3-1: SerialNumber: syz [ 153.693985][ T5614] usb 4-1: USB disconnect, device number 13 [ 153.719047][ T5722] usb 3-1: config 0 descriptor?? [ 153.732193][ T5722] gspca_main: se401-2.14.0 probing 047d:5003 [ 154.114321][ T6706] program syz.1.310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.132879][ T5722] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 154.132970][ T5722] se401 3-1:0.0: probe with driver se401 failed with error -71 [ 154.170223][ T5722] usb 3-1: USB disconnect, device number 18 [ 154.183457][ T6708] FAULT_INJECTION: forcing a failure. [ 154.183457][ T6708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.183489][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.1.311 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 154.183510][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.183522][ T6708] Call Trace: [ 154.183530][ T6708] [ 154.183538][ T6708] dump_stack_lvl+0xe8/0x150 [ 154.183565][ T6708] should_fail_ex+0x46b/0x600 [ 154.183594][ T6708] _copy_to_user+0x31/0xb0 [ 154.183617][ T6708] simple_read_from_buffer+0xe1/0x170 [ 154.183641][ T6708] proc_fail_nth_read+0x1be/0x230 [ 154.183665][ T6708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.183688][ T6708] ? rw_verify_area+0x2ac/0x4e0 [ 154.183707][ T6708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 154.183728][ T6708] vfs_read+0x212/0xa80 [ 154.183755][ T6708] ? __pfx_vfs_read+0x10/0x10 [ 154.183779][ T6708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 154.183803][ T6708] ? lockdep_hardirqs_on+0x7a/0x110 [ 154.183826][ T6708] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 154.183849][ T6708] ? mutex_lock_nested+0x152/0x1d0 [ 154.183877][ T6708] ? fdget_pos+0x252/0x320 [ 154.183904][ T6708] ksys_read+0x156/0x270 [ 154.183928][ T6708] ? __pfx_ksys_read+0x10/0x10 [ 154.183958][ T6708] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 154.183987][ T6708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.184007][ T6708] do_syscall_64+0x174/0x580 [ 154.184030][ T6708] ? trace_irq_disable+0x3b/0x140 [ 154.184051][ T6708] ? clear_bhb_loop+0x40/0x90 [ 154.184074][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.184093][ T6708] RIP: 0033:0x7ff37ca0d68e [ 154.184110][ T6708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 154.184126][ T6708] RSP: 002b:00007ff37aca5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 154.184146][ T6708] RAX: ffffffffffffffda RBX: 00007ff37aca66c0 RCX: 00007ff37ca0d68e [ 154.184158][ T6708] RDX: 000000000000000f RSI: 00007ff37aca60a0 RDI: 0000000000000005 [ 154.184169][ T6708] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 154.184180][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.184191][ T6708] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 154.184219][ T6708] [ 154.549083][ T6715] kvm: user requested TSC rate below hardware speed [ 154.701537][ T5599] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 154.850648][ T5599] usb 2-1: Using ep0 maxpacket: 8 [ 154.852768][ T5599] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 154.852823][ T5599] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 154.852845][ T5599] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 154.852868][ T5599] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 154.852888][ T5599] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.852929][ T5599] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 154.852952][ T5599] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.066508][ T5599] usb 2-1: usb_control_msg returned -32 [ 155.066537][ T5599] usbtmc 2-1:16.0: can't read capabilities [ 155.338391][ T10] usb 1-1: USB disconnect, device number 13 [ 155.503840][ T6714] usbtmc 2-1:16.0: INITIATE_CLEAR returned 0 [ 155.504303][ T6721] FAULT_INJECTION: forcing a failure. [ 155.504303][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 155.504334][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.316 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 155.504355][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 155.504366][ T6721] Call Trace: [ 155.504373][ T6721] [ 155.504382][ T6721] dump_stack_lvl+0xe8/0x150 [ 155.504411][ T6721] should_fail_ex+0x46b/0x600 [ 155.504441][ T6721] should_failslab+0xa8/0x100 [ 155.504463][ T6721] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 155.504492][ T6721] ? security_file_alloc+0x34/0x310 [ 155.504519][ T6721] ? security_file_alloc+0x34/0x310 [ 155.504542][ T6721] security_file_alloc+0x34/0x310 [ 155.504559][ T6721] init_file+0x96/0x2d0 [ 155.504571][ T6721] alloc_empty_file+0x74/0x1d0 [ 155.504581][ T6721] path_openat+0x92/0x37e0 [ 155.504595][ T6721] ? __lock_acquire+0x6b5/0x2d10 [ 155.504610][ T6721] ? __kasan_slab_alloc+0x6c/0x80 [ 155.504620][ T6721] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 155.504635][ T6721] ? do_getname+0x2e/0x250 [ 155.504649][ T6721] ? do_sys_openat2+0xcc/0x200 [ 155.504659][ T6721] ? __x64_sys_openat+0x138/0x170 [ 155.504675][ T6721] ? do_raw_spin_lock+0x12b/0x2f0 [ 155.504690][ T6721] do_file_open+0x23e/0x4a0 [ 155.504703][ T6721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 155.504719][ T6721] ? __pfx_do_file_open+0x10/0x10 [ 155.504730][ T6721] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 155.504750][ T6721] ? alloc_fd+0x679/0x6f0 [ 155.504765][ T6721] do_sys_openat2+0x115/0x200 [ 155.504776][ T6721] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.504786][ T6721] ? ksys_write+0x248/0x270 [ 155.504800][ T6721] ? __pfx_ksys_write+0x10/0x10 [ 155.504814][ T6721] __x64_sys_openat+0x138/0x170 [ 155.504826][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.504837][ T6721] do_syscall_64+0x174/0x580 [ 155.504851][ T6721] ? clear_bhb_loop+0x40/0x90 [ 155.504865][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.504875][ T6721] RIP: 0033:0x7f459914ce59 [ 155.504886][ T6721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.504896][ T6721] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.504908][ T6721] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 155.504916][ T6721] RDX: 0000000000000002 RSI: 00002000000015c0 RDI: ffffffffffffff9c [ 155.504923][ T6721] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 155.504929][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.504935][ T6721] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 155.504950][ T6721] [ 155.679771][ T6723] overlay: ./file1 is not a directory [ 155.706004][ T5721] usb 2-1: USB disconnect, device number 24 [ 156.017546][ T6728] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 156.018410][ T5722] IPVS: starting estimator thread 0... [ 156.111461][ T6729] IPVS: using max 9 ests per chain, 21600 per kthread [ 156.212297][ T6734] program syz.3.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.565217][ T6752] netlink: 964 bytes leftover after parsing attributes in process `syz.0.327'. [ 156.663703][ T6755] FAULT_INJECTION: forcing a failure. [ 156.663703][ T6755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.663738][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.0.328 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 156.663760][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 156.663771][ T6755] Call Trace: [ 156.663779][ T6755] [ 156.663786][ T6755] dump_stack_lvl+0xe8/0x150 [ 156.663814][ T6755] should_fail_ex+0x46b/0x600 [ 156.663857][ T6755] _copy_to_user+0x31/0xb0 [ 156.663880][ T6755] simple_read_from_buffer+0xe1/0x170 [ 156.663906][ T6755] proc_fail_nth_read+0x1be/0x230 [ 156.663930][ T6755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.663951][ T6755] ? rw_verify_area+0x2ac/0x4e0 [ 156.663973][ T6755] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 156.663993][ T6755] vfs_read+0x212/0xa80 [ 156.664022][ T6755] ? __pfx_vfs_read+0x10/0x10 [ 156.664046][ T6755] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 156.664070][ T6755] ? lockdep_hardirqs_on+0x7a/0x110 [ 156.664094][ T6755] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 156.664116][ T6755] ? mutex_lock_nested+0x152/0x1d0 [ 156.664144][ T6755] ? fdget_pos+0x252/0x320 [ 156.664169][ T6755] ksys_read+0x156/0x270 [ 156.664194][ T6755] ? __pfx_ksys_read+0x10/0x10 [ 156.664224][ T6755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.664245][ T6755] do_syscall_64+0x174/0x580 [ 156.664268][ T6755] ? trace_irq_disable+0x3b/0x140 [ 156.664292][ T6755] ? clear_bhb_loop+0x40/0x90 [ 156.664316][ T6755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.664337][ T6755] RIP: 0033:0x7fb33791d68e [ 156.664355][ T6755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 156.664370][ T6755] RSP: 002b:00007fb335badfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 156.664391][ T6755] RAX: ffffffffffffffda RBX: 00007fb335bae6c0 RCX: 00007fb33791d68e [ 156.664405][ T6755] RDX: 000000000000000f RSI: 00007fb335bae0a0 RDI: 0000000000000004 [ 156.664418][ T6755] RBP: 00007fb335bae090 R08: 0000000000000000 R09: 0000000000000000 [ 156.664429][ T6755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.664441][ T6755] R13: 00007fb337bd6038 R14: 00007fb337bd5fa0 R15: 00007ffe49d95d88 [ 156.664471][ T6755] [ 156.794023][ T5722] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 156.800593][ T5721] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 156.967422][ T5721] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 156.967451][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.967471][ T5721] usb 4-1: Product: syz [ 156.967486][ T5721] usb 4-1: Manufacturer: 멥쵍ⵝ⩨ஊ縋㎛辏愛㐜뺙譐̍ᦄ襵㞺凾蛙쐢뷹큩⌹荃ፎᆲ싂뗲깈퓲㲕虙鵅쥲巓軗셙搆빩暮︦㙅缛祘䒷湖픶ඒ㠬췡襰澍⍨Ӫт诬ۮ棗☧嫝维⅀∠᜔᳑놗렙ﳦ㣜䟱ǵ䐖䊒뒺ﾵ즥띍큊ಕቋ亘㎷읕Ꞇ㔥Іㅾ萋 [ 156.967517][ T5721] usb 4-1: SerialNumber: syz [ 156.990589][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 157.031240][ T5722] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 157.031268][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.031289][ T5722] usb 3-1: Product: syz [ 157.031303][ T5722] usb 3-1: Manufacturer: syz [ 157.031318][ T5722] usb 3-1: SerialNumber: syz [ 157.327758][ T5721] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 157.327827][ T5721] usb 4-1: MIDIStreaming interface descriptor not found [ 157.616367][ T5721] usb 4-1: USB disconnect, device number 14 [ 157.628652][ T5722] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.628669][ T5722] usb 3-1: clock source 0 is not valid, cannot use [ 157.629112][ T5722] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 157.629435][ T5722] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.630927][ T5722] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.630949][ T5722] usb 3-1: clock source 0 is not valid, cannot use [ 157.632439][ T5722] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 157.632906][ T5722] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.752174][ T5618] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 157.819508][ T5722] usb 3-1: USB disconnect, device number 19 [ 157.920561][ T5618] usb 1-1: Using ep0 maxpacket: 16 [ 157.926397][ T5618] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 157.926424][ T5618] usb 1-1: config 0 has no interface number 0 [ 157.929550][ T5618] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 157.929578][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.929597][ T5618] usb 1-1: Product: syz [ 157.929611][ T5618] usb 1-1: Manufacturer: syz [ 157.929624][ T5618] usb 1-1: SerialNumber: syz [ 158.210975][ T5618] usb 1-1: config 0 descriptor?? [ 158.312014][ T5618] hub 1-1:0.132: bad descriptor, ignoring hub [ 158.312050][ T5618] hub 1-1:0.132: probe with driver hub failed with error -5 [ 158.368930][ T5618] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 158.420023][ T6783] FAULT_INJECTION: forcing a failure. [ 158.420023][ T6783] name failslab, interval 1, probability 0, space 0, times 0 [ 158.420053][ T6783] CPU: 1 UID: 0 PID: 6783 Comm: syz.0.337 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 158.420072][ T6783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 158.420082][ T6783] Call Trace: [ 158.420088][ T6783] [ 158.420094][ T6783] dump_stack_lvl+0xe8/0x150 [ 158.420118][ T6783] should_fail_ex+0x46b/0x600 [ 158.420146][ T6783] should_failslab+0xa8/0x100 [ 158.420167][ T6783] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 158.420195][ T6783] ? security_file_alloc+0x34/0x310 [ 158.420219][ T6783] ? security_file_alloc+0x34/0x310 [ 158.420242][ T6783] security_file_alloc+0x34/0x310 [ 158.420262][ T6783] init_file+0x96/0x2d0 [ 158.420278][ T6783] alloc_empty_file+0x74/0x1d0 [ 158.420292][ T6783] path_openat+0x92/0x37e0 [ 158.420312][ T6783] ? __lock_acquire+0x6b5/0x2d10 [ 158.420334][ T6783] ? __kasan_slab_alloc+0x6c/0x80 [ 158.420349][ T6783] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 158.420370][ T6783] ? do_getname+0x2e/0x250 [ 158.420392][ T6783] ? do_sys_openat2+0xcc/0x200 [ 158.420406][ T6783] ? __x64_sys_openat+0x138/0x170 [ 158.420428][ T6783] ? do_raw_spin_lock+0x12b/0x2f0 [ 158.420460][ T6783] do_file_open+0x23e/0x4a0 [ 158.420478][ T6783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 158.420504][ T6783] ? __pfx_do_file_open+0x10/0x10 [ 158.420523][ T6783] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 158.420556][ T6783] ? alloc_fd+0x679/0x6f0 [ 158.420577][ T6783] do_sys_openat2+0x115/0x200 [ 158.420591][ T6783] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.420605][ T6783] ? ksys_write+0x248/0x270 [ 158.420623][ T6783] ? __pfx_ksys_write+0x10/0x10 [ 158.420641][ T6783] __x64_sys_openat+0x138/0x170 [ 158.420657][ T6783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.420672][ T6783] do_syscall_64+0x174/0x580 [ 158.420689][ T6783] ? trace_irq_disable+0x3b/0x140 [ 158.420716][ T6783] ? clear_bhb_loop+0x40/0x90 [ 158.420734][ T6783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.420749][ T6783] RIP: 0033:0x7fb33795ce59 [ 158.420765][ T6783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.420778][ T6783] RSP: 002b:00007fb335bae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.420814][ T6783] RAX: ffffffffffffffda RBX: 00007fb337bd5fa0 RCX: 00007fb33795ce59 [ 158.420824][ T6783] RDX: 0000000000024440 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 158.420834][ T6783] RBP: 00007fb335bae090 R08: 0000000000000000 R09: 0000000000000000 [ 158.420842][ T6783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.420850][ T6783] R13: 00007fb337bd6038 R14: 00007fb337bd5fa0 R15: 00007ffe49d95d88 [ 158.420872][ T6783] [ 158.794263][ T5618] usb 1-1: USB disconnect, device number 14 [ 158.865522][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 159.240657][ T5721] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 159.339913][ T5877] udevd[5877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 159.403113][ T5721] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 159.403161][ T5721] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 159.403183][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.444618][ T5721] usb 4-1: config 0 descriptor?? [ 159.447013][ T6794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 159.505240][ T6813] netlink: 964 bytes leftover after parsing attributes in process `syz.1.349'. [ 159.870078][ T6827] FAULT_INJECTION: forcing a failure. [ 159.870078][ T6827] name failslab, interval 1, probability 0, space 0, times 0 [ 159.870111][ T6827] CPU: 1 UID: 0 PID: 6827 Comm: syz.1.353 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 159.870132][ T6827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 159.870143][ T6827] Call Trace: [ 159.870149][ T6827] [ 159.870157][ T6827] dump_stack_lvl+0xe8/0x150 [ 159.870188][ T6827] should_fail_ex+0x46b/0x600 [ 159.870217][ T6827] should_failslab+0xa8/0x100 [ 159.870239][ T6827] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 159.870265][ T6827] ? alloc_empty_file+0x5b/0x1d0 [ 159.870281][ T6827] ? alloc_empty_file+0x5b/0x1d0 [ 159.870302][ T6827] alloc_empty_file+0x5b/0x1d0 [ 159.870319][ T6827] path_openat+0x92/0x37e0 [ 159.870344][ T6827] ? __lock_acquire+0x6b5/0x2d10 [ 159.870368][ T6827] ? __kasan_slab_alloc+0x6c/0x80 [ 159.870386][ T6827] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 159.870409][ T6827] ? do_getname+0x2e/0x250 [ 159.870433][ T6827] ? do_sys_openat2+0xcc/0x200 [ 159.870448][ T6827] ? __x64_sys_openat+0x138/0x170 [ 159.870470][ T6827] ? do_raw_spin_lock+0x12b/0x2f0 [ 159.870496][ T6827] do_file_open+0x23e/0x4a0 [ 159.870525][ T6827] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 159.870553][ T6827] ? __pfx_do_file_open+0x10/0x10 [ 159.870573][ T6827] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 159.870609][ T6827] ? alloc_fd+0x679/0x6f0 [ 159.870636][ T6827] do_sys_openat2+0x115/0x200 [ 159.870657][ T6827] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.870676][ T6827] ? ksys_write+0x248/0x270 [ 159.870701][ T6827] ? __pfx_ksys_write+0x10/0x10 [ 159.870726][ T6827] __x64_sys_openat+0x138/0x170 [ 159.870747][ T6827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.870765][ T6827] do_syscall_64+0x174/0x580 [ 159.870787][ T6827] ? trace_irq_disable+0x3b/0x140 [ 159.870809][ T6827] ? clear_bhb_loop+0x40/0x90 [ 159.870830][ T6827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.870849][ T6827] RIP: 0033:0x7ff37ca4ce59 [ 159.870867][ T6827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.870883][ T6827] RSP: 002b:00007ff37aca6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 159.870904][ T6827] RAX: ffffffffffffffda RBX: 00007ff37ccc5fa0 RCX: 00007ff37ca4ce59 [ 159.870917][ T6827] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 159.870929][ T6827] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 159.870940][ T6827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.870951][ T6827] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 159.870979][ T6827] [ 159.920641][ T824] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 159.957852][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 159.967625][ T5722] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 160.007273][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007316][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007343][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007369][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007395][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007421][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007446][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007472][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007498][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.007523][ T5721] logitech-djreceiver 0003:046D:C71F.0001: unknown main item tag 0x0 [ 160.076067][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.077211][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.080621][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 160.089676][ T5721] usb 4-1: USB disconnect, device number 15 [ 160.101029][ T824] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 160.101060][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.101079][ T824] usb 3-1: Product: syz [ 160.101093][ T824] usb 3-1: Manufacturer: syz [ 160.101107][ T824] usb 3-1: SerialNumber: syz [ 160.190592][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 160.329031][ T5722] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 160.329059][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.329078][ T5722] usb 1-1: Product: syz [ 160.329089][ T5722] usb 1-1: Manufacturer: syz [ 160.329102][ T5722] usb 1-1: SerialNumber: syz [ 160.401978][ T5722] usb 1-1: config 0 descriptor?? [ 160.406693][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 160.407002][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 160.454075][ T5722] gspca_main: se401-2.14.0 probing 047d:5003 [ 160.467276][ T824] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 160.467301][ T824] usb 3-1: clock source 0 is not valid, cannot use [ 160.467741][ T824] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 160.468195][ T824] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 160.469761][ T824] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 160.469782][ T824] usb 3-1: clock source 0 is not valid, cannot use [ 160.470226][ T824] usb 3-1: 2:1: cannot get freq (v2/v3): err -71 [ 160.471578][ T824] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 160.596143][ T824] usb 3-1: USB disconnect, device number 20 [ 161.119346][ T6843] FAULT_INJECTION: forcing a failure. [ 161.119346][ T6843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.119379][ T6843] CPU: 0 UID: 0 PID: 6843 Comm: syz.3.358 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.119401][ T6843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.119412][ T6843] Call Trace: [ 161.119419][ T6843] [ 161.119426][ T6843] dump_stack_lvl+0xe8/0x150 [ 161.119455][ T6843] should_fail_ex+0x46b/0x600 [ 161.119486][ T6843] _copy_from_iter+0x1d3/0x1670 [ 161.119519][ T6843] ? rcu_is_watching+0x15/0xb0 [ 161.119553][ T6843] ? __pfx__copy_from_iter+0x10/0x10 [ 161.119583][ T6843] ? __alloc_skb+0x27d/0x7d0 [ 161.119602][ T6843] ? __alloc_skb+0x27d/0x7d0 [ 161.119628][ T6843] ? netlink_sendmsg+0x650/0xb40 [ 161.119649][ T6843] ? skb_put+0x11b/0x210 [ 161.119671][ T6843] netlink_sendmsg+0x6c0/0xb40 [ 161.119700][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.119727][ T6843] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 161.119754][ T6843] ? aa_sock_msg_perm+0x122/0x200 [ 161.119774][ T6843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.119798][ T6843] sock_sendmsg_nosec+0x13a/0x180 [ 161.119828][ T6843] ____sys_sendmsg+0x55c/0x870 [ 161.119857][ T6843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.119888][ T6843] ? import_iovec+0x73/0xa0 [ 161.119920][ T6843] ___sys_sendmsg+0x2a5/0x360 [ 161.119942][ T6843] ? __lock_acquire+0x6b5/0x2d10 [ 161.119970][ T6843] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.120026][ T6843] ? __fget_files+0x2a/0x420 [ 161.120045][ T6843] ? __fget_files+0x3a6/0x420 [ 161.120074][ T6843] __x64_sys_sendmsg+0x1b7/0x290 [ 161.120101][ T6843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.120145][ T6843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.120167][ T6843] do_syscall_64+0x174/0x580 [ 161.120190][ T6843] ? trace_irq_disable+0x3b/0x140 [ 161.120214][ T6843] ? clear_bhb_loop+0x40/0x90 [ 161.120237][ T6843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.120257][ T6843] RIP: 0033:0x7f092c00ce59 [ 161.120274][ T6843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.120295][ T6843] RSP: 002b:00007f092a25e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.120315][ T6843] RAX: ffffffffffffffda RBX: 00007f092c285fa0 RCX: 00007f092c00ce59 [ 161.120331][ T6843] RDX: 0000000024004804 RSI: 0000200000000080 RDI: 0000000000000003 [ 161.120343][ T6843] RBP: 00007f092a25e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.120353][ T6843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.120364][ T6843] R13: 00007f092c286038 R14: 00007f092c285fa0 R15: 00007ffcccbc4f28 [ 161.120389][ T6843] [ 161.394343][ T5907] udevd[5907]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.412355][ T6849] FAULT_INJECTION: forcing a failure. [ 161.412355][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.412388][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 161.412410][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.412422][ T6849] Call Trace: [ 161.412429][ T6849] [ 161.412436][ T6849] dump_stack_lvl+0xe8/0x150 [ 161.412462][ T6849] should_fail_ex+0x46b/0x600 [ 161.412492][ T6849] _copy_from_iter+0x1d3/0x1670 [ 161.412522][ T6849] ? rcu_is_watching+0x15/0xb0 [ 161.412555][ T6849] ? __pfx__copy_from_iter+0x10/0x10 [ 161.412580][ T6849] ? __alloc_skb+0x27d/0x7d0 [ 161.412596][ T6849] ? __alloc_skb+0x27d/0x7d0 [ 161.412616][ T6849] ? netlink_sendmsg+0x650/0xb40 [ 161.412636][ T6849] ? skb_put+0x11b/0x210 [ 161.412659][ T6849] netlink_sendmsg+0x6c0/0xb40 [ 161.412691][ T6849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.412717][ T6849] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 161.412743][ T6849] ? aa_sock_msg_perm+0x122/0x200 [ 161.412763][ T6849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.412785][ T6849] sock_sendmsg_nosec+0x13a/0x180 [ 161.412814][ T6849] ____sys_sendmsg+0x55c/0x870 [ 161.412841][ T6849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.412871][ T6849] ? import_iovec+0x73/0xa0 [ 161.412893][ T6849] ___sys_sendmsg+0x2a5/0x360 [ 161.412922][ T6849] ? __lock_acquire+0x6b5/0x2d10 [ 161.412949][ T6849] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.413001][ T6849] ? __fget_files+0x2a/0x420 [ 161.413019][ T6849] ? __fget_files+0x3a6/0x420 [ 161.413046][ T6849] __x64_sys_sendmsg+0x1b7/0x290 [ 161.413072][ T6849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.413110][ T6849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.413130][ T6849] do_syscall_64+0x174/0x580 [ 161.413152][ T6849] ? trace_irq_disable+0x3b/0x140 [ 161.413174][ T6849] ? clear_bhb_loop+0x40/0x90 [ 161.413197][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.413215][ T6849] RIP: 0033:0x7f459914ce59 [ 161.413235][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.413251][ T6849] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.413271][ T6849] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 161.413284][ T6849] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 161.413296][ T6849] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 161.413308][ T6849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.413318][ T6849] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 161.413347][ T6849] [ 161.488322][ T6851] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 161.488357][ T6851] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 161.664705][ T6855] syzkaller1: entered promiscuous mode [ 161.664730][ T6855] syzkaller1: entered allmulticast mode [ 162.254089][ T5722] usb 1-1: reset high-speed USB device number 15 using dummy_hcd [ 162.320659][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.475277][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 162.491487][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 162.491518][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.491582][ T10] usb 4-1: Product: syz [ 162.491590][ T10] usb 4-1: Manufacturer: syz [ 162.491598][ T10] usb 4-1: SerialNumber: syz [ 162.733568][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 162.756583][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 162.756608][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 162.757016][ T10] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 162.757412][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 162.758610][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 162.758623][ T10] usb 4-1: clock source 0 is not valid, cannot use [ 162.758958][ T10] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 162.759356][ T10] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 162.868563][ T5722] gspca_se401: Bayer format not supported! [ 162.928849][ T10] usb 4-1: USB disconnect, device number 16 [ 162.978538][ T5908] udevd[5908]: setting mode of /dev/mixer3 to 020660 failed: No such file or directory [ 162.978669][ T5908] udevd[5908]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 163.325997][ T6876] program syz.1.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.496376][ T6884] FAULT_INJECTION: forcing a failure. [ 163.496376][ T6884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.496408][ T6884] CPU: 0 UID: 0 PID: 6884 Comm: syz.1.373 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.496430][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 163.496442][ T6884] Call Trace: [ 163.496449][ T6884] [ 163.496457][ T6884] dump_stack_lvl+0xe8/0x150 [ 163.496483][ T6884] should_fail_ex+0x46b/0x600 [ 163.496517][ T6884] _copy_from_iter+0x1d3/0x1670 [ 163.496550][ T6884] ? rcu_is_watching+0x15/0xb0 [ 163.496586][ T6884] ? __pfx__copy_from_iter+0x10/0x10 [ 163.496614][ T6884] ? __alloc_skb+0x27d/0x7d0 [ 163.496636][ T6884] ? __alloc_skb+0x27d/0x7d0 [ 163.496663][ T6884] ? netlink_sendmsg+0x650/0xb40 [ 163.496687][ T6884] ? skb_put+0x11b/0x210 [ 163.496713][ T6884] netlink_sendmsg+0x6c0/0xb40 [ 163.496747][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.496778][ T6884] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 163.496808][ T6884] ? aa_sock_msg_perm+0x122/0x200 [ 163.496830][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.496854][ T6884] sock_sendmsg_nosec+0x13a/0x180 [ 163.496886][ T6884] ____sys_sendmsg+0x55c/0x870 [ 163.496917][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 163.496950][ T6884] ? import_iovec+0x73/0xa0 [ 163.496975][ T6884] ___sys_sendmsg+0x2a5/0x360 [ 163.496999][ T6884] ? __lock_acquire+0x6b5/0x2d10 [ 163.497029][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 163.497084][ T6884] ? __fget_files+0x2a/0x420 [ 163.497105][ T6884] ? __fget_files+0x3a6/0x420 [ 163.497153][ T6884] __x64_sys_sendmsg+0x1b7/0x290 [ 163.497182][ T6884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 163.497224][ T6884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.497247][ T6884] do_syscall_64+0x174/0x580 [ 163.497273][ T6884] ? trace_irq_disable+0x3b/0x140 [ 163.497306][ T6884] ? clear_bhb_loop+0x40/0x90 [ 163.497339][ T6884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.497360][ T6884] RIP: 0033:0x7ff37ca4ce59 [ 163.497379][ T6884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.497396][ T6884] RSP: 002b:00007ff37aca6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.497419][ T6884] RAX: ffffffffffffffda RBX: 00007ff37ccc5fa0 RCX: 00007ff37ca4ce59 [ 163.497434][ T6884] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004 [ 163.497447][ T6884] RBP: 00007ff37aca6090 R08: 0000000000000000 R09: 0000000000000000 [ 163.497460][ T6884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.497471][ T6884] R13: 00007ff37ccc6038 R14: 00007ff37ccc5fa0 R15: 00007ffeaa4de0c8 [ 163.497498][ T6884] [ 163.506767][ T6885] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 163.506767][ T6885] The task syz.3.371 (6885) triggered the difference, watch for misbehavior. [ 164.028495][ T5722] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 164.200597][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 164.202628][ T5722] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 164.202653][ T5722] usb 2-1: config 0 has no interface number 0 [ 164.205223][ T5722] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 164.205252][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.205273][ T5722] usb 2-1: Product: syz [ 164.205289][ T5722] usb 2-1: Manufacturer: syz [ 164.205304][ T5722] usb 2-1: SerialNumber: syz [ 164.220775][ T5722] usb 2-1: config 0 descriptor?? [ 164.230431][ T5722] hub 2-1:0.132: bad descriptor, ignoring hub [ 164.231133][ T5722] hub 2-1:0.132: probe with driver hub failed with error -5 [ 164.249341][ T5722] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input8 [ 165.503372][ T5721] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 165.655026][ T5721] usb 3-1: config 0 has no interfaces? [ 165.655062][ T5721] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.655087][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.658553][ T5721] usb 3-1: config 0 descriptor?? [ 165.718671][ T5722] usb 1-1: USB disconnect, device number 15 [ 165.765501][ T5787] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 165.869249][ T6896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.869766][ T6896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.892956][ T6896] FAULT_INJECTION: forcing a failure. [ 165.892956][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 165.892978][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.2.377 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 165.892991][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 165.892998][ T6896] Call Trace: [ 165.893002][ T6896] [ 165.893006][ T6896] dump_stack_lvl+0xe8/0x150 [ 165.893024][ T6896] should_fail_ex+0x46b/0x600 [ 165.893049][ T6896] should_failslab+0xa8/0x100 [ 165.893063][ T6896] __kmalloc_cache_noprof+0xa0/0x6d0 [ 165.893075][ T6896] ? drm_atomic_commit_alloc+0xa9/0x100 [ 165.893088][ T6896] ? drm_atomic_commit_alloc+0xa9/0x100 [ 165.893101][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.893115][ T6896] drm_atomic_commit_alloc+0xa9/0x100 [ 165.893128][ T6896] drm_mode_atomic_ioctl+0x4ae/0xdd0 [ 165.893145][ T6896] ? do_raw_spin_lock+0x12b/0x2f0 [ 165.893162][ T6896] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 165.893186][ T6896] ? rt_spin_unlock+0x14f/0x200 [ 165.893198][ T6896] ? rt_spin_unlock+0x160/0x200 [ 165.893208][ T6896] ? drm_is_current_master+0x1a2/0x210 [ 165.893219][ T6896] drm_ioctl_kernel+0x2e2/0x3b0 [ 165.893235][ T6896] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 165.893250][ T6896] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 165.893273][ T6896] drm_ioctl+0x6c0/0xb80 [ 165.893289][ T6896] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 165.893306][ T6896] ? __pfx_drm_ioctl+0x10/0x10 [ 165.893325][ T6896] ? __fget_files+0x2a/0x420 [ 165.893337][ T6896] ? bpf_lsm_file_ioctl+0x9/0x20 [ 165.893350][ T6896] ? __pfx_drm_ioctl+0x10/0x10 [ 165.893363][ T6896] __se_sys_ioctl+0xff/0x170 [ 165.893377][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.893387][ T6896] do_syscall_64+0x174/0x580 [ 165.893400][ T6896] ? trace_irq_disable+0x3b/0x140 [ 165.893413][ T6896] ? clear_bhb_loop+0x40/0x90 [ 165.893426][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.893436][ T6896] RIP: 0033:0x7f459914ce59 [ 165.893447][ T6896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.893456][ T6896] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.893467][ T6896] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 165.893475][ T6896] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000010 [ 165.893482][ T6896] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 165.893488][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.893494][ T6896] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 165.893509][ T6896] [ 165.929234][ T5618] usb 3-1: USB disconnect, device number 21 [ 165.935653][ T5787] usb 4-1: Using ep0 maxpacket: 32 [ 165.955226][ T5787] usb 4-1: config 0 has an invalid interface number: 74 but max is 0 [ 165.955254][ T5787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.955272][ T5787] usb 4-1: config 0 has no interface number 0 [ 165.955395][ T5787] usb 4-1: config 0 interface 74 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 165.955417][ T5787] usb 4-1: config 0 interface 74 has no altsetting 0 [ 165.981451][ T5787] usb 4-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 165.981481][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.981501][ T5787] usb 4-1: Product: syz [ 165.981515][ T5787] usb 4-1: Manufacturer: syz [ 165.981530][ T5787] usb 4-1: SerialNumber: syz [ 166.000336][ T5787] usb 4-1: config 0 descriptor?? [ 166.120620][ T5722] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 166.339321][ T6902] program syz.1.380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.441633][ T5722] usb 1-1: Using ep0 maxpacket: 8 [ 166.447411][ T5722] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 166.447441][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.447460][ T5722] usb 1-1: Product: syz [ 166.447474][ T5722] usb 1-1: Manufacturer: syz [ 166.447488][ T5722] usb 1-1: SerialNumber: syz [ 166.515686][ T5614] usb 2-1: USB disconnect, device number 25 [ 166.697815][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 166.698101][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 166.706078][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 166.706104][ T5722] usb 1-1: clock source 0 is not valid, cannot use [ 166.706533][ T5722] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 166.706975][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 166.708554][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 166.708574][ T5722] usb 1-1: clock source 0 is not valid, cannot use [ 166.709004][ T5722] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 166.709444][ T5722] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 166.833372][ T5722] usb 1-1: USB disconnect, device number 16 [ 167.302579][ T6910] netlink: 'syz.0.383': attribute type 21 has an invalid length. [ 167.302602][ T6910] netlink: 128 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.302706][ T6910] netlink: 3 bytes leftover after parsing attributes in process `syz.0.383'. [ 167.484453][ T6919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.386'. [ 167.738091][ T6929] program syz.1.389 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.791530][ T5722] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 167.920620][ T5722] usb 3-1: device descriptor read/64, error -71 [ 168.182459][ T5722] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 168.220721][ T5614] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 168.310629][ T5722] usb 3-1: device descriptor read/64, error -71 [ 168.380619][ T5614] usb 2-1: Using ep0 maxpacket: 8 [ 168.385524][ T5614] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 168.385554][ T5614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.385574][ T5614] usb 2-1: Product: syz [ 168.385586][ T5614] usb 2-1: Manufacturer: syz [ 168.385594][ T5614] usb 2-1: SerialNumber: syz [ 168.432994][ T5722] usb usb3-port1: attempt power cycle [ 168.555670][ T10] usb 4-1: USB disconnect, device number 17 [ 168.611414][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 168.611781][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 168.658364][ T5614] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 168.658389][ T5614] usb 2-1: clock source 0 is not valid, cannot use [ 168.659585][ T5614] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 168.659938][ T5614] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 168.662118][ T5614] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 168.662140][ T5614] usb 2-1: clock source 0 is not valid, cannot use [ 168.662572][ T5614] usb 2-1: 2:1: cannot get freq (v2/v3): err -71 [ 168.663801][ T5614] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 168.799150][ T5614] usb 2-1: USB disconnect, device number 26 [ 168.813788][ T5722] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 168.831453][ T5722] usb 3-1: device descriptor read/8, error -71 [ 168.873350][ T5789] udevd[5789]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.080596][ T5722] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 169.102595][ T5722] usb 3-1: device descriptor read/8, error -71 [ 169.130665][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 169.186258][ T6952] program syz.1.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.223255][ T5722] usb usb3-port1: unable to enumerate USB device [ 169.244352][ T6954] vivid-000: disconnect [ 169.257645][ T6954] vivid-000: reconnect [ 169.280591][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 169.285188][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 169.285216][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.285236][ T10] usb 4-1: Product: syz [ 169.285250][ T10] usb 4-1: Manufacturer: syz [ 169.285264][ T10] usb 4-1: SerialNumber: syz [ 169.305314][ T10] usb 4-1: config 0 descriptor?? [ 169.609866][ T6945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.610370][ T6945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.686436][ T10] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 169.686548][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 169.717034][ T10] usb 4-1: USB disconnect, device number 18 [ 169.820761][ T5721] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 169.970634][ T5721] usb 2-1: Using ep0 maxpacket: 32 [ 169.972353][ T5721] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 169.972379][ T5721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.972399][ T5721] usb 2-1: config 0 has no interface number 0 [ 169.972430][ T5721] usb 2-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 169.972442][ T5721] usb 2-1: config 0 interface 74 has no altsetting 0 [ 169.975027][ T5721] usb 2-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 169.975054][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.975073][ T5721] usb 2-1: Product: syz [ 169.975085][ T5721] usb 2-1: Manufacturer: syz [ 169.975092][ T5721] usb 2-1: SerialNumber: syz [ 169.978272][ T5721] usb 2-1: config 0 descriptor?? [ 170.074018][ T5721] em28xx 2-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 170.074040][ T5721] em28xx 2-1:0.74: Video interface 74 found: [ 170.190588][ T824] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 170.341307][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 170.349924][ T824] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 170.349943][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.349953][ T824] usb 1-1: Product: syz [ 170.349960][ T824] usb 1-1: Manufacturer: syz [ 170.349968][ T824] usb 1-1: SerialNumber: syz [ 170.361471][ T824] usb 1-1: config 0 descriptor?? [ 170.437216][ T824] gspca_main: se401-2.14.0 probing 047d:5003 [ 170.633288][ T6971] fuse: Bad value for 'user_id' [ 170.633302][ T6971] fuse: Bad value for 'user_id' [ 170.684496][ T5721] em28xx 2-1:0.74: unknown em28xx chip ID (0) [ 170.684846][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 170.685915][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 170.787769][ T5721] em28xx 2-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 170.787791][ T5721] em28xx 2-1:0.74: board has no eeprom [ 170.799534][ T5721] em28xx 2-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 170.799564][ T5721] em28xx 2-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 170.800003][ T5721] em28xx 2-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 170.800024][ T5721] em28xx 2-1:0.74: couldn't read from i2c device 0xba: error -5 [ 170.804285][ T5721] em28xx 2-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 170.804312][ T5721] em28xx 2-1:0.74: couldn't read from i2c device 0x90: error -5 [ 170.804852][ T5721] em28xx 2-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 170.804873][ T5721] em28xx 2-1:0.74: couldn't read from i2c device 0x42: error -5 [ 170.805291][ T5721] em28xx 2-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 170.805312][ T5721] em28xx 2-1:0.74: couldn't read from i2c device 0x60: error -5 [ 170.805330][ T5721] em28xx 2-1:0.74: No sensor detected [ 170.861130][ T5721] em28xx 2-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 170.861173][ T5721] em28xx 2-1:0.74: Currently, V4L2 is not supported on this model [ 170.877743][ T5777] em28xx 2-1:0.74: Registering snapshot button... [ 170.903987][ T5721] usb 2-1: USB disconnect, device number 27 [ 170.932018][ T5599] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 170.934051][ T5721] em28xx 2-1:0.74: Disconnecting em28xx [ 170.949474][ T5777] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.74/input/input9 [ 170.976194][ T5777] em28xx 2-1:0.74: Remote control support is not available for this card. [ 170.976427][ T5721] em28xx 2-1:0.74: Closing input extension [ 170.977167][ T5721] em28xx 2-1:0.74: Deregistering snapshot button [ 171.089067][ T5599] usb 3-1: config 0 has no interfaces? [ 171.089104][ T5599] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 171.089125][ T5599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.105053][ T5599] usb 3-1: config 0 descriptor?? [ 171.276891][ T6974] program syz.3.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.335581][ T6977] FAULT_INJECTION: forcing a failure. [ 171.335581][ T6977] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.335612][ T6977] CPU: 0 UID: 0 PID: 6977 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.335634][ T6977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.335645][ T6977] Call Trace: [ 171.335653][ T6977] [ 171.335661][ T6977] dump_stack_lvl+0xe8/0x150 [ 171.335688][ T6977] should_fail_ex+0x46b/0x600 [ 171.335721][ T6977] _copy_to_user+0x31/0xb0 [ 171.335744][ T6977] simple_read_from_buffer+0xe1/0x170 [ 171.335770][ T6977] proc_fail_nth_read+0x1be/0x230 [ 171.335793][ T6977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.335816][ T6977] ? rw_verify_area+0x2ac/0x4e0 [ 171.335837][ T6977] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.335858][ T6977] vfs_read+0x212/0xa80 [ 171.335888][ T6977] ? __pfx_vfs_read+0x10/0x10 [ 171.335913][ T6977] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.335938][ T6977] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.335969][ T6977] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.335992][ T6977] ? mutex_lock_nested+0x152/0x1d0 [ 171.336020][ T6977] ? fdget_pos+0x252/0x320 [ 171.336048][ T6977] ksys_read+0x156/0x270 [ 171.336073][ T6977] ? __pfx_ksys_read+0x10/0x10 [ 171.336103][ T6977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.336126][ T6977] do_syscall_64+0x174/0x580 [ 171.336149][ T6977] ? trace_irq_disable+0x3b/0x140 [ 171.336172][ T6977] ? clear_bhb_loop+0x40/0x90 [ 171.336194][ T6977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.336213][ T6977] RIP: 0033:0x7f092bfcd68e [ 171.336230][ T6977] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.336247][ T6977] RSP: 002b:00007f092a25dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.336267][ T6977] RAX: ffffffffffffffda RBX: 00007f092a25e6c0 RCX: 00007f092bfcd68e [ 171.336280][ T6977] RDX: 000000000000000f RSI: 00007f092a25e0a0 RDI: 0000000000000003 [ 171.336293][ T6977] RBP: 00007f092a25e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.336305][ T6977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.336317][ T6977] R13: 00007f092c286038 R14: 00007f092c285fa0 R15: 00007ffcccbc4f28 [ 171.336348][ T6977] [ 171.413517][ T6979] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 171.585865][ T6981] FAULT_INJECTION: forcing a failure. [ 171.585865][ T6981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.585892][ T6981] CPU: 0 UID: 0 PID: 6981 Comm: syz.3.411 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 171.585908][ T6981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.585917][ T6981] Call Trace: [ 171.585923][ T6981] [ 171.585929][ T6981] dump_stack_lvl+0xe8/0x150 [ 171.585950][ T6981] should_fail_ex+0x46b/0x600 [ 171.585974][ T6981] _copy_to_user+0x31/0xb0 [ 171.585993][ T6981] simple_read_from_buffer+0xe1/0x170 [ 171.586022][ T6981] proc_fail_nth_read+0x1be/0x230 [ 171.586040][ T6981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.586057][ T6981] ? rw_verify_area+0x2ac/0x4e0 [ 171.586072][ T6981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.586087][ T6981] vfs_read+0x212/0xa80 [ 171.586110][ T6981] ? __pfx_vfs_read+0x10/0x10 [ 171.586128][ T6981] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.586145][ T6981] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.586162][ T6981] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.586178][ T6981] ? mutex_lock_nested+0x152/0x1d0 [ 171.586198][ T6981] ? fdget_pos+0x252/0x320 [ 171.586218][ T6981] ksys_read+0x156/0x270 [ 171.586236][ T6981] ? __pfx_ksys_read+0x10/0x10 [ 171.586258][ T6981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.586273][ T6981] do_syscall_64+0x174/0x580 [ 171.586290][ T6981] ? trace_irq_disable+0x3b/0x140 [ 171.586308][ T6981] ? clear_bhb_loop+0x40/0x90 [ 171.586325][ T6981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.586339][ T6981] RIP: 0033:0x7f092bfcd68e [ 171.586353][ T6981] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.586365][ T6981] RSP: 002b:00007f092a25dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.586382][ T6981] RAX: ffffffffffffffda RBX: 00007f092a25e6c0 RCX: 00007f092bfcd68e [ 171.586392][ T6981] RDX: 000000000000000f RSI: 00007f092a25e0a0 RDI: 0000000000000003 [ 171.586400][ T6981] RBP: 00007f092a25e090 R08: 0000000000000000 R09: 0000000000000000 [ 171.586409][ T6981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.586417][ T6981] R13: 00007f092c286038 R14: 00007f092c285fa0 R15: 00007ffcccbc4f28 [ 171.586439][ T6981] [ 171.724595][ T824] usb 1-1: reset high-speed USB device number 17 using dummy_hcd [ 171.902511][ T824] usb 1-1: device firmware changed [ 171.927804][ T5721] em28xx 2-1:0.74: Freeing device [ 172.000906][ T824] gspca_se401: read req failed req 0x06 error -19 [ 172.035727][ T824] usb 1-1: USB disconnect, device number 17 [ 172.220622][ T824] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 172.370604][ T824] usb 1-1: Using ep0 maxpacket: 8 [ 172.374663][ T824] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 172.374692][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.374712][ T824] usb 1-1: Product: syz [ 172.374724][ T824] usb 1-1: Manufacturer: syz [ 172.374738][ T824] usb 1-1: SerialNumber: syz [ 172.470647][ T5721] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 172.594902][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 172.604529][ T824] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 172.604556][ T824] usb 1-1: clock source 0 is not valid, cannot use [ 172.605114][ T824] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 172.605665][ T824] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 172.609008][ T824] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 172.609021][ T824] usb 1-1: clock source 0 is not valid, cannot use [ 172.609429][ T824] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 172.609737][ T824] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 172.630998][ T5721] usb 2-1: Using ep0 maxpacket: 8 [ 172.664724][ T5721] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 172.664754][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.664773][ T5721] usb 2-1: Product: syz [ 172.664786][ T5721] usb 2-1: Manufacturer: syz [ 172.664799][ T5721] usb 2-1: SerialNumber: syz [ 172.675590][ T5721] usb 2-1: config 0 descriptor?? [ 172.693719][ T5721] gspca_main: se401-2.14.0 probing 047d:5003 [ 172.763356][ T824] usb 1-1: USB disconnect, device number 18 [ 172.894512][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 173.550615][ T5614] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 173.640755][ T824] usb 3-1: USB disconnect, device number 26 [ 173.704120][ T7003] program syz.2.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.721881][ T5614] usb 1-1: Using ep0 maxpacket: 32 [ 173.724930][ T5614] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 173.724955][ T5614] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.724974][ T5614] usb 1-1: config 0 has no interface number 0 [ 173.725018][ T5614] usb 1-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.725041][ T5614] usb 1-1: config 0 interface 74 has no altsetting 0 [ 173.771218][ T5614] usb 1-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 173.771253][ T5614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.771272][ T5614] usb 1-1: Product: syz [ 173.771286][ T5614] usb 1-1: Manufacturer: syz [ 173.771300][ T5614] usb 1-1: SerialNumber: syz [ 173.820719][ T5614] usb 1-1: config 0 descriptor?? [ 173.836506][ T5614] em28xx 1-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 173.836541][ T5614] em28xx 1-1:0.74: Video interface 74 found: [ 173.935593][ T5721] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 174.060861][ T5721] usb 2-1: device descriptor read/64, error -32 [ 174.160705][ T824] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 174.315431][ T824] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 174.315461][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.315481][ T824] usb 3-1: Product: syz [ 174.315496][ T824] usb 3-1: Manufacturer: syz [ 174.315510][ T824] usb 3-1: SerialNumber: syz [ 174.320698][ T5721] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 174.431287][ T5614] em28xx 1-1:0.74: unknown em28xx chip ID (0) [ 174.431616][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 174.450797][ T5721] usb 2-1: device descriptor read/64, error -32 [ 174.514261][ T5614] em28xx 1-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 174.514288][ T5614] em28xx 1-1:0.74: board has no eeprom [ 174.519596][ T5614] em28xx 1-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 174.519625][ T5614] em28xx 1-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 174.520002][ T5614] em28xx 1-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 174.520023][ T5614] em28xx 1-1:0.74: couldn't read from i2c device 0xba: error -5 [ 174.520401][ T5614] em28xx 1-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 174.520422][ T5614] em28xx 1-1:0.74: couldn't read from i2c device 0x90: error -5 [ 174.582685][ T5614] em28xx 1-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 174.582715][ T5614] em28xx 1-1:0.74: couldn't read from i2c device 0x42: error -5 [ 174.608809][ T5614] em28xx 1-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 174.608838][ T5614] em28xx 1-1:0.74: couldn't read from i2c device 0x60: error -5 [ 174.608856][ T5614] em28xx 1-1:0.74: No sensor detected [ 174.608994][ T7005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.619231][ T7005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.672351][ T5614] em28xx 1-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 174.672382][ T5614] em28xx 1-1:0.74: Currently, V4L2 is not supported on this model [ 174.675549][ T10] em28xx 1-1:0.74: Registering snapshot button... [ 174.742789][ T5614] usb 1-1: USB disconnect, device number 19 [ 174.756628][ T5614] em28xx 1-1:0.74: Disconnecting em28xx [ 174.761987][ T5721] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 174.780283][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.74/input/input10 [ 174.791904][ T5721] usb 2-1: device descriptor read/8, error -32 [ 174.807008][ T10] em28xx 1-1:0.74: Remote control support is not available for this card. [ 174.807069][ T5614] em28xx 1-1:0.74: Closing input extension [ 174.807090][ T5614] em28xx 1-1:0.74: Deregistering snapshot button [ 174.842994][ T824] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 174.843054][ T824] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 175.031839][ T5614] em28xx 1-1:0.74: Freeing device [ 175.082707][ T5721] usb 2-1: reset high-speed USB device number 28 using dummy_hcd [ 175.114869][ T5721] usb 2-1: device descriptor read/8, error -32 [ 175.249812][ T5721] raw-gadget.2 gadget.1: failed to queue suspend event [ 175.267109][ T7005] netlink: 'syz.2.420': attribute type 5 has an invalid length. [ 175.276239][ T6997] raw-gadget.2 gadget.1: failed to queue disconnect event [ 175.287894][ T5721] gspca_se401: read req failed req 0x06 error -19 [ 175.349076][ T5721] usb 2-1: USB disconnect, device number 28 [ 175.487369][ T824] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 175.487440][ T824] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 175.565280][ T824] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 175.613742][ T824] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 175.754444][ T824] usb 3-1: USB disconnect, device number 27 [ 175.836056][ T7028] program syz.0.428 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.940662][ T5614] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 175.960705][ T5721] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 176.102159][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 176.109717][ T5614] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 176.109746][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.109765][ T5614] usb 4-1: Product: syz [ 176.109776][ T5614] usb 4-1: Manufacturer: syz [ 176.109784][ T5614] usb 4-1: SerialNumber: syz [ 176.148112][ T5721] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 176.148138][ T5721] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 176.174567][ T5721] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 176.174597][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.174622][ T5721] usb 2-1: Product: syz [ 176.174637][ T5721] usb 2-1: Manufacturer: syz [ 176.174651][ T5721] usb 2-1: SerialNumber: syz [ 176.342325][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 176.391488][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 176.391856][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 176.419285][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.419310][ T5614] usb 4-1: clock source 0 is not valid, cannot use [ 176.419694][ T5614] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 176.420100][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.457348][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.457373][ T5614] usb 4-1: clock source 0 is not valid, cannot use [ 176.460123][ T5614] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 176.484965][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 176.567361][ T5614] usb 4-1: USB disconnect, device number 19 [ 176.580618][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 176.582890][ T10] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 176.582914][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.582934][ T10] usb 3-1: config 0 has no interface number 0 [ 176.582977][ T10] usb 3-1: config 0 interface 74 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.583000][ T10] usb 3-1: config 0 interface 74 has no altsetting 0 [ 176.587061][ T10] usb 3-1: New USB device found, idVendor=1ae7, idProduct=9003, bcdDevice=44.08 [ 176.587088][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.587107][ T10] usb 3-1: Product: syz [ 176.587120][ T10] usb 3-1: Manufacturer: syz [ 176.587134][ T10] usb 3-1: SerialNumber: syz [ 176.687681][ T10] usb 3-1: config 0 descriptor?? [ 176.707221][ T5721] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 176.707247][ T5721] usb 2-1: 1:1 : sample bitwidth 5 in over sample bytes 0 [ 176.707267][ T5721] usb 2-1: 1:1 : unsupported sample bitwidth 5 in 0 bytes [ 176.707736][ T5721] usb 2-1: 0:2 : does not exist [ 176.708747][ T5721] usb 2-1: unit 5: unexpected type 0x03 [ 176.734603][ T10] em28xx 3-1:0.74: New device syz syz @ 480 Mbps (1ae7:9003, interface 74, class 74) [ 176.734636][ T10] em28xx 3-1:0.74: Video interface 74 found: [ 176.784092][ T6861] udevd[6861]: setting owner of /dev/bus/usb/004/019 to uid=0, gid=0 failed: No such file or directory [ 176.810134][ T5721] usb 2-1: USB disconnect, device number 29 [ 176.855837][ T5908] udevd[5908]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.961914][ T5694] udevd[5694]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.290650][ T5614] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 177.300273][ T10] em28xx 3-1:0.74: unknown em28xx chip ID (0) [ 177.432311][ T10] em28xx 3-1:0.74: reading from i2c device at 0xa0 failed (error=-5) [ 177.432331][ T10] em28xx 3-1:0.74: board has no eeprom [ 177.454292][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 177.457201][ T10] em28xx 3-1:0.74: writing to i2c device at 0xb8 failed (error=-5) [ 177.457228][ T10] em28xx 3-1:0.74: couldn't read from i2c device 0xb8: error -5 [ 177.458042][ T10] em28xx 3-1:0.74: writing to i2c device at 0xba failed (error=-5) [ 177.458065][ T10] em28xx 3-1:0.74: couldn't read from i2c device 0xba: error -5 [ 177.458588][ T10] em28xx 3-1:0.74: writing to i2c device at 0x90 failed (error=-5) [ 177.458608][ T10] em28xx 3-1:0.74: couldn't read from i2c device 0x90: error -5 [ 177.459083][ T10] em28xx 3-1:0.74: writing to i2c device at 0x42 failed (error=-5) [ 177.459115][ T10] em28xx 3-1:0.74: couldn't read from i2c device 0x42: error -5 [ 177.459589][ T10] em28xx 3-1:0.74: writing to i2c device at 0x60 failed (error=-5) [ 177.459610][ T10] em28xx 3-1:0.74: couldn't read from i2c device 0x60: error -5 [ 177.459627][ T10] em28xx 3-1:0.74: No sensor detected [ 177.503562][ T5614] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 177.503591][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.503610][ T5614] usb 4-1: Product: syz [ 177.503623][ T5614] usb 4-1: Manufacturer: syz [ 177.503718][ T5614] usb 4-1: SerialNumber: syz [ 177.511935][ T5614] usb 4-1: config 0 descriptor?? [ 177.523069][ T5614] gspca_main: se401-2.14.0 probing 047d:5003 [ 177.531668][ T10] em28xx 3-1:0.74: Identified as SpeedLink Vicious And Devine Laplace webcam (card=91) [ 177.531694][ T10] em28xx 3-1:0.74: Currently, V4L2 is not supported on this model [ 177.532612][ T5618] em28xx 3-1:0.74: Registering snapshot button... [ 177.638902][ T5618] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.74/input/input11 [ 177.667322][ T10] usb 3-1: USB disconnect, device number 28 [ 177.703252][ T10] em28xx 3-1:0.74: Disconnecting em28xx [ 177.764322][ T5618] em28xx 3-1:0.74: Remote control support is not available for this card. [ 177.764436][ T10] em28xx 3-1:0.74: Closing input extension [ 177.764457][ T10] em28xx 3-1:0.74: Deregistering snapshot button [ 177.985063][ T10] em28xx 3-1:0.74: Freeing device [ 178.721273][ T5614] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 178.803063][ T7052] program syz.1.437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.914458][ T5614] usb 4-1: device descriptor read/64, error -32 [ 179.165516][ T5614] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 179.200711][ T5721] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 179.201348][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 179.292335][ T5614] usb 4-1: device descriptor read/64, error -32 [ 179.350593][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 179.350593][ T5721] usb 3-1: Using ep0 maxpacket: 16 [ 179.356332][ T5721] usb 3-1: unable to get BOS descriptor or descriptor too short [ 179.359076][ T10] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 179.359103][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.359123][ T10] usb 2-1: Product: syz [ 179.359136][ T10] usb 2-1: Manufacturer: syz [ 179.359150][ T10] usb 2-1: SerialNumber: syz [ 179.368207][ T10] usb 2-1: config 0 descriptor?? [ 179.385039][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 179.426008][ T5721] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 179.426039][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.426059][ T5721] usb 3-1: Product: syz [ 179.426072][ T5721] usb 3-1: Manufacturer: syz [ 179.426087][ T5721] usb 3-1: SerialNumber: syz [ 179.560771][ T5614] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 179.591162][ T5614] usb 4-1: device descriptor read/8, error -32 [ 179.679002][ T5721] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 179.679456][ T5721] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 179.756547][ T5721] usb 3-1: USB disconnect, device number 29 [ 179.815384][ T5923] udevd[5923]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.836507][ T5614] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 179.836812][ T10] gspca_se401: Bayer format not supported! [ 179.864617][ T5614] usb 4-1: device descriptor read/8, error -32 [ 179.970735][ T5614] raw-gadget.0 gadget.3: failed to queue suspend event [ 179.971415][ T5614] gspca_se401: read req failed req 0x06 error -19 [ 179.977480][ T5614] usb 4-1: USB disconnect, device number 20 [ 180.006022][ T5614] raw-gadget.0 gadget.3: failed to queue reset event [ 180.037894][ T7035] raw-gadget.0 gadget.3: failed to queue disconnect event [ 180.238088][ T7068] FAULT_INJECTION: forcing a failure. [ 180.238088][ T7068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.238120][ T7068] CPU: 1 UID: 0 PID: 7068 Comm: syz.2.441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 180.238142][ T7068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 180.238152][ T7068] Call Trace: [ 180.238160][ T7068] [ 180.238168][ T7068] dump_stack_lvl+0xe8/0x150 [ 180.238197][ T7068] should_fail_ex+0x46b/0x600 [ 180.238233][ T7068] _copy_from_iter+0x1d3/0x1670 [ 180.238265][ T7068] ? rcu_is_watching+0x15/0xb0 [ 180.238300][ T7068] ? __pfx__copy_from_iter+0x10/0x10 [ 180.238328][ T7068] ? __alloc_skb+0x27d/0x7d0 [ 180.238347][ T7068] ? __alloc_skb+0x27d/0x7d0 [ 180.238373][ T7068] ? netlink_sendmsg+0x650/0xb40 [ 180.238396][ T7068] ? skb_put+0x11b/0x210 [ 180.238420][ T7068] netlink_sendmsg+0x6c0/0xb40 [ 180.238452][ T7068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.238478][ T7068] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 180.238506][ T7068] ? aa_sock_msg_perm+0x122/0x200 [ 180.238525][ T7068] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.238548][ T7068] sock_sendmsg_nosec+0x13a/0x180 [ 180.238578][ T7068] ____sys_sendmsg+0x55c/0x870 [ 180.238606][ T7068] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.238638][ T7068] ? import_iovec+0x73/0xa0 [ 180.238661][ T7068] ___sys_sendmsg+0x2a5/0x360 [ 180.238683][ T7068] ? __lock_acquire+0x6b5/0x2d10 [ 180.238711][ T7068] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.238772][ T7068] ? __fget_files+0x2a/0x420 [ 180.238790][ T7068] ? __fget_files+0x3a6/0x420 [ 180.238815][ T7068] __x64_sys_sendmsg+0x1b7/0x290 [ 180.238837][ T7068] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.238890][ T7068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.238911][ T7068] do_syscall_64+0x174/0x580 [ 180.238934][ T7068] ? trace_irq_disable+0x3b/0x140 [ 180.238954][ T7068] ? clear_bhb_loop+0x40/0x90 [ 180.238974][ T7068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.238992][ T7068] RIP: 0033:0x7f459914ce59 [ 180.239009][ T7068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 180.239035][ T7068] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.239054][ T7068] RAX: ffffffffffffffda RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 180.239067][ T7068] RDX: 0000000000000000 RSI: 0000200000000940 RDI: 0000000000000003 [ 180.239077][ T7068] RBP: 00007f459739e090 R08: 0000000000000000 R09: 0000000000000000 [ 180.239090][ T7068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.239100][ T7068] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 180.239129][ T7068] [ 180.420683][ T5614] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 180.592865][ T5614] usb 4-1: config 114 has an invalid interface number: 28 but max is 0 [ 180.592892][ T5614] usb 4-1: config 114 has no interface number 0 [ 180.592928][ T5614] usb 4-1: config 114 interface 28 altsetting 232 bulk endpoint 0x4 has invalid maxpacket 1023 [ 180.592951][ T5614] usb 4-1: config 114 interface 28 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 180.592972][ T5614] usb 4-1: config 114 interface 28 has no altsetting 0 [ 180.602643][ T5614] usb 4-1: string descriptor 0 read error: -22 [ 180.602755][ T5614] usb 4-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=82.73 [ 180.602779][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.617789][ T7063] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.914820][ T7063] input: syz1 as /devices/virtual/input/input12 [ 182.258926][ T7081] binder: 7080:7081 ioctl c0306201 200000000880 returned -14 [ 182.684974][ T7089] program syz.0.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.930718][ T5721] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 183.085165][ T5721] usb 3-1: Using ep0 maxpacket: 8 [ 183.112539][ T5721] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 183.112571][ T5721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.112591][ T5721] usb 3-1: Product: syz [ 183.112606][ T5721] usb 3-1: Manufacturer: syz [ 183.112620][ T5721] usb 3-1: SerialNumber: syz [ 183.160342][ T5721] usb 3-1: config 0 descriptor?? [ 183.176213][ T5721] gspca_main: se401-2.14.0 probing 047d:5003 [ 183.262450][ T10] usb 4-1: USB disconnect, device number 21 [ 183.606461][ T10] usb 2-1: USB disconnect, device number 30 [ 183.677665][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.130941][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 184.301740][ T10] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 184.301769][ T10] usb 2-1: config 1 has no interface number 0 [ 184.301810][ T10] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 184.301837][ T10] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 184.301863][ T10] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.304031][ T10] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 184.304060][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.304079][ T10] usb 2-1: Product: syz [ 184.304093][ T10] usb 2-1: Manufacturer: syz [ 184.304107][ T10] usb 2-1: SerialNumber: syz [ 184.390034][ T7108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.410693][ T5721] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 184.540691][ T5721] usb 3-1: device descriptor read/64, error -32 [ 184.602298][ T7108] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 184.676349][ T7122] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 184.676370][ T7122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.463'. [ 184.783143][ T5721] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 184.800707][ T5618] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 184.819642][ T10] usb 2-1: Incompatible driver and firmware versions [ 184.837237][ T10] usb 2-1: USB disconnect, device number 31 [ 184.921673][ T5721] usb 3-1: device descriptor read/64, error -32 [ 184.963141][ T5618] usb 1-1: config 114 has an invalid interface number: 28 but max is 0 [ 184.963168][ T5618] usb 1-1: config 114 has no interface number 0 [ 184.963264][ T5618] usb 1-1: config 114 interface 28 altsetting 232 bulk endpoint 0x4 has invalid maxpacket 1023 [ 184.963281][ T5618] usb 1-1: config 114 interface 28 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 184.963295][ T5618] usb 1-1: config 114 interface 28 has no altsetting 0 [ 184.966353][ T5618] usb 1-1: string descriptor 0 read error: -22 [ 184.966467][ T5618] usb 1-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=82.73 [ 184.966480][ T5618] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.040631][ T5777] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 185.043085][ T7120] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 185.160656][ T5721] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 185.190029][ T5721] usb 3-1: device descriptor read/8, error -32 [ 185.191077][ T5777] usb 4-1: Using ep0 maxpacket: 32 [ 185.203567][ T5777] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 185.203600][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 185.203620][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 185.203632][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 185.203646][ T5777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 185.205844][ T5777] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 185.205871][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.205883][ T5777] usb 4-1: Product: syz [ 185.205891][ T5777] usb 4-1: Manufacturer: syz [ 185.205898][ T5777] usb 4-1: SerialNumber: syz [ 185.209412][ T5777] usb 4-1: config 0 descriptor?? [ 185.313249][ T7120] input: syz1 as /devices/virtual/input/input14 [ 185.460678][ T5721] usb 3-1: reset high-speed USB device number 30 using dummy_hcd [ 185.511400][ T5721] usb 3-1: device descriptor read/8, error -32 [ 185.624007][ T5721] raw-gadget.1 gadget.2: failed to queue suspend event [ 185.624597][ T5721] gspca_se401: read req failed req 0x06 error -19 [ 185.640259][ T5721] usb 3-1: USB disconnect, device number 30 [ 185.674260][ T5721] raw-gadget.1 gadget.2: failed to queue reset event [ 185.698030][ T7090] raw-gadget.1 gadget.2: failed to queue disconnect event [ 185.750641][ T5599] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 185.911420][ T5599] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 185.912512][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.912562][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.912577][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.916358][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.916399][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.916425][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.917962][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.917993][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.918007][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.919308][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.919357][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.919377][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.927349][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.927403][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.927791][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.973176][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.973234][ T5777] input input13: Device does not respond to id packet P [ 185.974145][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.974186][ T5777] input input13: Device does not respond to id packet B [ 185.975560][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.975602][ T5777] input input13: Device does not respond to id packet N [ 185.976603][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.977113][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.985227][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 185.986450][ T5777] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 186.021612][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.021668][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.021693][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.028868][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.028922][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.028948][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.033568][ T5599] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 186.033620][ T5599] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 186.033646][ T5599] usb 2-1: config 0 interface 0 has no altsetting 0 [ 186.049063][ T5599] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 186.049092][ T5599] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 186.049112][ T5599] usb 2-1: Product: syz [ 186.049126][ T5599] usb 2-1: Manufacturer: syz [ 186.049139][ T5599] usb 2-1: SerialNumber: syz [ 186.083393][ T5599] usb 2-1: config 0 descriptor?? [ 186.351250][ T5777] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 186.375062][ T5599] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 186.405401][ T5777] usb 4-1: USB disconnect, device number 22 [ 186.447970][ T5599] usb 2-1: USB disconnect, device number 32 [ 186.486777][ T5599] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 186.720619][ T5721] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 186.873970][ T5721] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 186.874000][ T5721] usb 3-1: config 4 has no interface number 0 [ 186.874044][ T5721] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 186.874072][ T5721] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.874109][ T5721] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 186.874132][ T5721] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.890686][ T5777] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 186.907868][ T5721] hub 3-1:4.128: USB hub found [ 187.109312][ T5777] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.109342][ T5777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.109414][ T5777] usb 4-1: Product: syz [ 187.109429][ T5777] usb 4-1: Manufacturer: syz [ 187.109442][ T5777] usb 4-1: SerialNumber: syz [ 187.131642][ T5721] hub 3-1:4.128: config failed, can't read hub descriptor (err -90) [ 187.310751][ T5618] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 187.335714][ T7143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.336399][ T7143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.340428][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.349198][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.387186][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.392335][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.464783][ T5618] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 187.464815][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.464835][ T5618] usb 2-1: Product: syz [ 187.464847][ T5618] usb 2-1: Manufacturer: syz [ 187.464862][ T5618] usb 2-1: SerialNumber: syz [ 187.491312][ T5599] usb 3-1: USB disconnect, device number 31 [ 187.514245][ T5618] usb 2-1: config 0 descriptor?? [ 187.527561][ T5618] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 187.620880][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 187.620938][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 187.717566][ T5599] usb 1-1: USB disconnect, device number 20 [ 187.863469][ T5618] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 187.863490][ T5618] sq905c 2-1:0.0: Reading version command failed [ 187.863567][ T5618] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 187.907522][ T5618] usb 2-1: USB disconnect, device number 33 [ 188.029863][ T7141] netlink: 'syz.3.470': attribute type 5 has an invalid length. [ 188.171931][ T5599] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 188.262147][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 188.262181][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 188.262754][ T5777] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 188.288741][ T5777] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 188.341380][ T5599] usb 1-1: Using ep0 maxpacket: 8 [ 188.389747][ T5777] usb 4-1: USB disconnect, device number 23 [ 188.416042][ T5599] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 188.416080][ T5599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.416091][ T5599] usb 1-1: Product: syz [ 188.416098][ T5599] usb 1-1: Manufacturer: syz [ 188.416106][ T5599] usb 1-1: SerialNumber: syz [ 188.423572][ T5599] usb 1-1: config 0 descriptor?? [ 188.447278][ T5599] gspca_main: se401-2.14.0 probing 047d:5003 [ 188.530726][ T5618] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 188.698546][ T5618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.698577][ T5618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.698600][ T5618] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.736333][ T5618] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 188.736373][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 188.736391][ T5618] usb 2-1: Product: syz [ 188.736405][ T5618] usb 2-1: Manufacturer: syz [ 188.736419][ T5618] usb 2-1: SerialNumber: syz [ 188.993621][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.994273][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.003610][ T5618] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 189.160640][ T824] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 189.208317][ T5618] usb 2-1: USB disconnect, device number 34 [ 189.223789][ T5618] usblp0: removed [ 189.275879][ T7159] ------------[ cut here ]------------ [ 189.275893][ T7159] kcov->t != t [ 189.275904][ T7159] WARNING: kernel/kcov.c:475 at kcov_task_exit+0x181/0x240, CPU#0: syz.2.477/7159 [ 189.275939][ T7159] Modules linked in: [ 189.275956][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.2.477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.275976][ T7159] Tainted: [L]=SOFTLOCKUP [ 189.275982][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.275991][ T7159] RIP: 0010:kcov_task_exit+0x181/0x240 [ 189.276009][ T7159] Code: 90 00 00 00 e8 70 3d 5a 00 4c 89 f7 5b 41 5e 41 5f e9 23 fc 5f 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 189.276022][ T7159] RSP: 0018:ffffc900050efae0 EFLAGS: 00010287 [ 189.276035][ T7159] RAX: 899661db0d685400 RBX: ffff888041ae0000 RCX: 0000000000000000 [ 189.276046][ T7159] RDX: 00000000e8f3d702 RSI: ffffffff8bcc4d60 RDI: 00000000ffffffff [ 189.276057][ T7159] RBP: ffffc900050efc30 R08: ffffffff8b404b20 R09: ffffffff8e3cb2a0 [ 189.276068][ T7159] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: dffffc0000000000 [ 189.276080][ T7159] R13: 0000000000000000 R14: ffff888035d13d00 R15: ffff888035d13d08 [ 189.276092][ T7159] FS: 00007f459739e6c0(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 189.276106][ T7159] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.276117][ T7159] CR2: 0000200000010038 CR3: 000000005a3bc000 CR4: 00000000003526f0 [ 189.276133][ T7159] Call Trace: [ 189.276139][ T7159] [ 189.276148][ T7159] do_exit+0x150/0x22c0 [ 189.276172][ T7159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 189.276193][ T7159] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.276213][ T7159] ? __pfx_do_exit+0x10/0x10 [ 189.276228][ T7159] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 189.276243][ T7159] ? reacquire_held_locks+0x104/0x190 [ 189.276265][ T7159] ? rt_spin_lock+0x1e0/0x400 [ 189.276282][ T7159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 189.276303][ T7159] do_group_exit+0x21b/0x2d0 [ 189.276323][ T7159] ? rt_spin_unlock+0x160/0x200 [ 189.276341][ T7159] get_signal+0x1284/0x1330 [ 189.276380][ T7159] arch_do_signal_or_restart+0xbc/0x840 [ 189.276401][ T7159] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.276443][ T7159] exit_to_user_mode_loop+0x104/0x710 [ 189.276466][ T7159] ? rcu_is_watching+0x15/0xb0 [ 189.276493][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.276513][ T7159] do_syscall_64+0x353/0x580 [ 189.276540][ T7159] ? trace_irq_disable+0x3b/0x140 [ 189.276563][ T7159] ? clear_bhb_loop+0x40/0x90 [ 189.276585][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.276602][ T7159] RIP: 0033:0x7f459914ce59 [ 189.276617][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.276631][ T7159] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.276650][ T7159] RAX: 0000000000000400 RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 189.276663][ T7159] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 189.276673][ T7159] RBP: 00007f45991e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 189.276682][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.276691][ T7159] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 189.276714][ T7159] [ 189.276723][ T7159] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.276737][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.2.477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 189.276758][ T7159] Tainted: [L]=SOFTLOCKUP [ 189.276763][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 189.276771][ T7159] Call Trace: [ 189.276778][ T7159] [ 189.276783][ T7159] vpanic+0x56c/0xa60 [ 189.276807][ T7159] ? __pfx__printk+0x10/0x10 [ 189.276825][ T7159] ? __pfx_vpanic+0x10/0x10 [ 189.276845][ T7159] ? is_bpf_text_address+0x292/0x2b0 [ 189.276869][ T7159] ? is_bpf_text_address+0x26/0x2b0 [ 189.276899][ T7159] panic+0xc5/0xd0 [ 189.276921][ T7159] ? __pfx_panic+0x10/0x10 [ 189.276954][ T7159] __warn+0x315/0x4c0 [ 189.276974][ T7159] ? kcov_task_exit+0x181/0x240 [ 189.276993][ T7159] ? kcov_task_exit+0x181/0x240 [ 189.277011][ T7159] __report_bug+0x339/0x540 [ 189.277036][ T7159] ? kcov_task_exit+0x181/0x240 [ 189.277055][ T7159] ? __pfx___report_bug+0x10/0x10 [ 189.277074][ T7159] ? try_to_take_rt_mutex+0x840/0xb00 [ 189.277096][ T7159] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 189.277114][ T7159] ? rt_spin_lock+0x1e0/0x400 [ 189.277131][ T7159] ? rt_spin_lock+0x1e0/0x400 [ 189.277149][ T7159] ? kcov_task_exit+0x181/0x240 [ 189.277167][ T7159] report_bug+0x16a/0x220 [ 189.277189][ T7159] ? kcov_task_exit+0x181/0x240 [ 189.277206][ T7159] ? kcov_task_exit+0x183/0x240 [ 189.277225][ T7159] handle_bug+0x9c/0x200 [ 189.277251][ T7159] exc_invalid_op+0x1a/0x50 [ 189.277275][ T7159] asm_exc_invalid_op+0x1a/0x20 [ 189.277291][ T7159] RIP: 0010:kcov_task_exit+0x181/0x240 [ 189.277312][ T7159] Code: 90 00 00 00 e8 70 3d 5a 00 4c 89 f7 5b 41 5e 41 5f e9 23 fc 5f 00 7c 40 5b 41 5e 41 5f c3 cc cc cc cc cc 90 0f 0b 90 eb 10 90 <0f> 0b 90 eb 0a 90 0f 0b 90 eb 04 90 0f 0b 90 4c 89 ff 5b 41 5e 41 [ 189.277326][ T7159] RSP: 0018:ffffc900050efae0 EFLAGS: 00010287 [ 189.277340][ T7159] RAX: 899661db0d685400 RBX: ffff888041ae0000 RCX: 0000000000000000 [ 189.277352][ T7159] RDX: 00000000e8f3d702 RSI: ffffffff8bcc4d60 RDI: 00000000ffffffff [ 189.277364][ T7159] RBP: ffffc900050efc30 R08: ffffffff8b404b20 R09: ffffffff8e3cb2a0 [ 189.277379][ T7159] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: dffffc0000000000 [ 189.277392][ T7159] R13: 0000000000000000 R14: ffff888035d13d00 R15: ffff888035d13d08 [ 189.277408][ T7159] ? rt_spin_lock+0x1e0/0x400 [ 189.277438][ T7159] do_exit+0x150/0x22c0 [ 189.277458][ T7159] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 189.277477][ T7159] ? lockdep_hardirqs_on+0x7a/0x110 [ 189.277497][ T7159] ? __pfx_do_exit+0x10/0x10 [ 189.277512][ T7159] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 189.277527][ T7159] ? reacquire_held_locks+0x104/0x190 [ 189.277549][ T7159] ? rt_spin_lock+0x1e0/0x400 [ 189.277566][ T7159] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 189.277586][ T7159] do_group_exit+0x21b/0x2d0 [ 189.277606][ T7159] ? rt_spin_unlock+0x160/0x200 [ 189.277625][ T7159] get_signal+0x1284/0x1330 [ 189.277663][ T7159] arch_do_signal_or_restart+0xbc/0x840 [ 189.277684][ T7159] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 189.277717][ T7159] exit_to_user_mode_loop+0x104/0x710 [ 189.277737][ T7159] ? rcu_is_watching+0x15/0xb0 [ 189.277763][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.277780][ T7159] do_syscall_64+0x353/0x580 [ 189.277802][ T7159] ? trace_irq_disable+0x3b/0x140 [ 189.277822][ T7159] ? clear_bhb_loop+0x40/0x90 [ 189.277843][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.277860][ T7159] RIP: 0033:0x7f459914ce59 [ 189.277877][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.277893][ T7159] RSP: 002b:00007f459739e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 189.277909][ T7159] RAX: 0000000000000400 RBX: 00007f45993c5fa0 RCX: 00007f459914ce59 [ 189.277920][ T7159] RDX: 00000000040000cf RSI: 0000200000000900 RDI: 0000000000000003 [ 189.277931][ T7159] RBP: 00007f45991e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 189.277940][ T7159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.277949][ T7159] R13: 00007f45993c6038 R14: 00007f45993c5fa0 R15: 00007ffdffff3bd8 [ 189.277972][ T7159] [ 189.279193][ T7159] Kernel Offset: disabled