last executing test programs: 2m21.296282965s ago: executing program 2 (id=35): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000019, 0x11, r3, 0x100000000) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c602b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 2m21.063601845s ago: executing program 2 (id=36): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000040)={0x8, 0x9, 0x4, {0x2, @vbi={0x9, 0x1, 0x5, 0x32314d56, [0xf, 0xb22], [0x8, 0x1], 0x1}}, 0x4}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 2m20.738616095s ago: executing program 2 (id=38): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x0, 0x0, "000000001300"}, 0x10}}, 0xd209f6d81482fb97) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newae={0x78, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@local, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @user_kmaddress={0x2c, 0x13, {@in6=@local, @in6=@remote, 0x0, 0x2}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8005}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000940)={'wlan0\x00'}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40c1}, 0x4) 2m20.595938914s ago: executing program 2 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000827bd700b0bdeea6a885bcb00050000000500ee00020000000800ef00090000000500ee0008fcffff0400ee000700000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4845) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x40) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4207, r6) ptrace(0x10, r6) ptrace$peek(0x2, r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000008c0)={'bridge0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000827bd700b0bdeea6a885bcb00050000000500ee00020000000800ef00090000000500ee0008fcffff0400ee000700000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4845) (async) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004841}, 0x40) (async) sendfile(r0, r0, &(0x7f0000000080)=0x2, 0x7f03) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x4207, r6) (async) ptrace(0x10, r6) (async) ptrace$peek(0x2, r6, 0x0) (async) 2m20.376386919s ago: executing program 2 (id=40): fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xc2, 0x73e9}) 2m19.508112889s ago: executing program 2 (id=43): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="46b905183c6518ac3de37a16d1961e3402ccc7f5248f389f7b01932dd808b7d17fbafa2024d7431cbf6081bf29de1f4dfd4dfc5373a25b2781cd791641a7585bd458e8f8dcda755093031d733342538ca43f7f40f3aaa6357e9d66c9ca2a7d821df7bd88", 0x64}, {&(0x7f00000000c0)="16a806fc05f62ca2d95da88cc2ede8cc87c62d203b2349ff5ca764bc9c01a368d80baf8e1da16142363d145647e6d6a29444d7e4814513fd51c682e8ac093f28d2648d60e12d0d53237f5e4fb3cbe4f0292843bb66e924c99cf4bde249782554ede7c757569ab42b22096ae623e881bf54ad977f9f1155b2468c0912d07d2abf3215ba1899874b4ec15631936f800b", 0x8f}, {&(0x7f0000000180)="788cfba4521495eedb2e99bc25b82bff76", 0x11}, {&(0x7f00000001c0)="af0ebd05569a54e65a1dd5", 0xb}, {&(0x7f0000000200)="fecec3cf353e9391c5a961fdbe038cd7cf9001669c3303e14dd207a2e2fa605424d736948b19", 0x26}, {&(0x7f0000000240)="64bfd7d5d24c8061b9938bfa903dbbcfb210a4b009613dbd50c3e1fae7365927cedfa0e7a4b21b37424e815f369874be3970025f16b631fcd399ac8294739046495f276997f2a4d797a65602e6c415ca5f9af5cea89bc0ae3849a0f7542b6f27d61971a0c57fba036aa2794c79528ff1b7afe23c162a59ecf43c84d3d8e57155ef98a054fcb5cf6131deb4da7209157ed4156bb17e856431c29314bb55ef17eb791745734a1bac68c694eb82179fde32", 0xb0}], 0x6, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x8005) syz_ublk_setup_io_uring(0x6997, &(0x7f0000000400)={0x0, 0xc3f6, 0x8000, 0x0, 0x2f}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0xe7c9, 0x40, 0x0, 0x1c8}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda5f, 0x40000, 0x2, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x2, 0x1f8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b, 0x40, 0x3, 0x3c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdcbe, 0x10, 0x0, 0xf8}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001840)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x1, 0x523, 0x0, &(0x7f0000000840)=@buf_max_buf="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"}}, &(0x7f00000018c0)) syz_io_uring_submit(r1, 0x0, r6, &(0x7f0000001900)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001980), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b00)={'syztnl2\x00', &(0x7f0000001a80)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x71, 0x4, 0x4, @mcast2, @mcast2, 0x8087, 0x20, 0x80000000, 0x2}}) sendto$packet(r8, &(0x7f00000019c0)="f8ff608232c2bd181c1833ee23f763101423fbc343c79394848a60e7e8e9448d43c95963a64dcfa6aea8b41cd02c128a49a3f20be04fa748cb82dd462da45fae9c46bdda130a49fb9f2c47f44c121066add9806deedcf36c0da2cdf24e06fda6487bd48c08baf3126f5700489d096fc026115202a23f3bf7923a708b9d4e448c0dcf4ddfcc2bcf6470182ebcaf3124ab86eb7e134f5a4e8feb473fa1e0e5ca7cbcc0c63dfd12ddc93df9f4770e0acf129b", 0xb1, 0x40000c0, &(0x7f0000001b40)={0x11, 0x16, r9, 0x1, 0x61}, 0x14) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x802, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = accept4(r0, &(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001c40)=0x80, 0x100800) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001c80)="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") r14 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r15 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002740)={0x0, &(0x7f00000021c0)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0x9d, 0x2, 0x1b, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @set_irq_handler={0xc8, 0x20, {0x6b, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @out_dx={0x6a, 0x28, {0x4091, 0x2, 0xc}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xffffffffffffff7f, 0x9e, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x3d, 0x2}}, @wrmsr={0x65, 0x20, {0x853, 0x2}}, @nested_load_syzos={0x136, 0xe0, {0x1, 0x3, [@rdmsr={0x66, 0x18, {0x35e}}, @code={0xa, 0x58, {"260f07c4410d7587ca550000660f38de50f5410f01c2c4417d553dd63f6c6fb9800000c00f3235004000000f300f01c443dbe18f6af810ab060000000600000066b8f3000f00d0"}}, @in_dx={0x69, 0x20, {0x363e, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x2, 0x1}}]}}, @set_irq_handler={0xc8, 0x20, {0x88, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6804, 0x9, 0x75, 0x513}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xd9f1, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0xf}}, @in_dx={0x69, 0x20, {0x6c70, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xa6c0}}, @code={0xa, 0x4b, {"f30f00570066baa10066ed65660fc7368f0978c37403eb260f01c82e3e3e0fc7b00000000026450f01d13e26dbe0f3400f019d0e97d67e440f30"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7, 0xcc0}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x1000, 0x6, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xa9, 0x4, 0x0, 0x3}}, @cpuid={0x64, 0x18, {0x0, 0x5}}, @cpuid={0x64, 0x18, {0x0, 0x401}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0xc9ba}}, @nested_load_code={0x12e, 0x68, {0x3, "c481bd6a7d3c0f0d460066ba4200b006ee660f38825cfae4f3360f01bba02d0000b9800000c00f3235002000000f30450f00df0f01fbc7442400e2000000c744240200680000ff1c244600a6e53d0000"}}, @code={0xa, 0x49, {"dad4c4217c50ea460f3236460f08c42151d3ae00000080b9800000c00f3235004000000f300f019beffa0000430fc778410f01f8440f01c8"}}], 0x554}) syz_kvm_setup_cpu$x86(r10, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002800)=[@text32={0x20, &(0x7f0000002780)="a955f00000b91f030000b800000000ba000000000f30362d0000000066baf80cb84ca2fa81ef66bafc0c66b8002066ef66baf80cb8a7f66384ef66bafc0cec0f01c48fc9e899bad6000000b9520b0000b805000000ba000000000f30660f009e00000080b9800000c00f3235008000000f30", 0x72}], 0x1, 0x0, &(0x7f0000002840), 0x0) writev(r12, &(0x7f0000002980)=[{&(0x7f0000002880)="ed5b15e630276d1c2787d5a3d3562ad07e041e4d5036842b02ca5a9436808c0c72b6c132b34596a9b5d5e279a2f1851ffe5384ce2b83e53d5b436fd2fc70c973ab41a9fc748e87590343441b9671e889337e9fabb72ab1f97a99f8f1ef5c4ceb5537d435aac71d31c5ecd3d6176bcc84d1064ead56af87a9a610988f72cafaaae1a9e923384172fb2702ecceb3ff1211fb2db927704b66efecd90f8809fddb37bda004eec0637ae3f619001c910018413206d9a90526eda29d28a73174b4718b24a52c93c06c96f5c777a3b7d2", 0xcd}], 0x1) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000029c0)={0x0, 0x0}, &(0x7f0000002a00)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r10, {r16, r18}}, './file0\x00'}) ioctl$DRM_IOCTL_IRQ_BUSID(r17, 0xc0106403, &(0x7f0000002ac0)={0x0, 0x1, 0x3cd}) ioctl$PPPIOCSCOMPRESS(r14, 0x4010744d) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r17, 0x8982, &(0x7f0000002b00)={0x0, 'veth1_virt_wifi\x00', {}, 0x6}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000002b80)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000002b40)=0xb}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r15) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r8, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xac, 0x22, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa}, [@nested={0x70, 0x14a, 0x0, 0x1, [@generic="36fda4d0b8089b6a5974c14431404e42b5795817c8788e38adc0fab0b19ef32286cffb654a5378f7231fb05ff14a78b0c0a3dccca1f529921eedf9ac0224ded6b94dc63aae3003280905c28cf289267386386ac0", @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xd1, 0x0, 0x0, @fd=r15}, @nested={0x4, 0xf0}]}, @typed={0x27, 0x15d, 0x0, 0x0, @binary="3525ef449a1011041d706256ade127011ef08b2d6f6d01d383277dc6769602193c9f5b"}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_io_uring_submit(r1, r2, r6, &(0x7f0000002e00)=@IORING_OP_SYMLINKAT={0x26, 0x2a, 0x0, r10, &(0x7f0000002d80)='./file1\x00', &(0x7f0000002dc0)='./file1\x00', 0x0, 0x0, 0x1, {0x0, r7}}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000002e80)=0x8) copy_file_range(r3, &(0x7f0000002ec0)=0xffff, r11, &(0x7f0000002f00), 0x8, 0x0) 2m19.166025237s ago: executing program 32 (id=43): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000040)="46b905183c6518ac3de37a16d1961e3402ccc7f5248f389f7b01932dd808b7d17fbafa2024d7431cbf6081bf29de1f4dfd4dfc5373a25b2781cd791641a7585bd458e8f8dcda755093031d733342538ca43f7f40f3aaa6357e9d66c9ca2a7d821df7bd88", 0x64}, {&(0x7f00000000c0)="16a806fc05f62ca2d95da88cc2ede8cc87c62d203b2349ff5ca764bc9c01a368d80baf8e1da16142363d145647e6d6a29444d7e4814513fd51c682e8ac093f28d2648d60e12d0d53237f5e4fb3cbe4f0292843bb66e924c99cf4bde249782554ede7c757569ab42b22096ae623e881bf54ad977f9f1155b2468c0912d07d2abf3215ba1899874b4ec15631936f800b", 0x8f}, {&(0x7f0000000180)="788cfba4521495eedb2e99bc25b82bff76", 0x11}, {&(0x7f00000001c0)="af0ebd05569a54e65a1dd5", 0xb}, {&(0x7f0000000200)="fecec3cf353e9391c5a961fdbe038cd7cf9001669c3303e14dd207a2e2fa605424d736948b19", 0x26}, {&(0x7f0000000240)="64bfd7d5d24c8061b9938bfa903dbbcfb210a4b009613dbd50c3e1fae7365927cedfa0e7a4b21b37424e815f369874be3970025f16b631fcd399ac8294739046495f276997f2a4d797a65602e6c415ca5f9af5cea89bc0ae3849a0f7542b6f27d61971a0c57fba036aa2794c79528ff1b7afe23c162a59ecf43c84d3d8e57155ef98a054fcb5cf6131deb4da7209157ed4156bb17e856431c29314bb55ef17eb791745734a1bac68c694eb82179fde32", 0xb0}], 0x6, &(0x7f0000000380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x8005) syz_ublk_setup_io_uring(0x6997, &(0x7f0000000400)={0x0, 0xc3f6, 0x8000, 0x0, 0x2f}, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0xe7c9, 0x40, 0x0, 0x1c8}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xda5f, 0x40000, 0x2, 0x37e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x2000, 0x2, 0x1f8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b, 0x40, 0x3, 0x3c0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdcbe, 0x10, 0x0, 0xf8}, 0xffffffffffffffff, 0x0, 0x0, 0x0}], 0x4, &(0x7f0000001840)={0x2e, 0xa, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x1, 0x523, 0x0, &(0x7f0000000840)=@buf_max_buf="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"}}, &(0x7f00000018c0)) syz_io_uring_submit(r1, 0x0, r6, &(0x7f0000001900)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001980), 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001b00)={'syztnl2\x00', &(0x7f0000001a80)={'ip6gre0\x00', 0x0, 0x4, 0xff, 0x71, 0x4, 0x4, @mcast2, @mcast2, 0x8087, 0x20, 0x80000000, 0x2}}) sendto$packet(r8, &(0x7f00000019c0)="f8ff608232c2bd181c1833ee23f763101423fbc343c79394848a60e7e8e9448d43c95963a64dcfa6aea8b41cd02c128a49a3f20be04fa748cb82dd462da45fae9c46bdda130a49fb9f2c47f44c121066add9806deedcf36c0da2cdf24e06fda6487bd48c08baf3126f5700489d096fc026115202a23f3bf7923a708b9d4e448c0dcf4ddfcc2bcf6470182ebcaf3124ab86eb7e134f5a4e8feb473fa1e0e5ca7cbcc0c63dfd12ddc93df9f4770e0acf129b", 0xb1, 0x40000c0, &(0x7f0000001b40)={0x11, 0x16, r9, 0x1, 0x61}, 0x14) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000001b80), 0x802, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = accept4(r0, &(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, &(0x7f0000001c40)=0x80, 0x100800) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001c80)="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") r14 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001d80), 0x4000, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r14, 0x84009422, &(0x7f0000001dc0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r15 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002740)={0x0, &(0x7f00000021c0)=[@nested_amd_inject_event={0x180, 0x38, {0x2, 0x9d, 0x2, 0x1b, 0x1}}, @nested_amd_vmload={0x182, 0x18}, @set_irq_handler={0xc8, 0x20, {0x6b, 0x1}}, @nested_vmlaunch={0x12f, 0x18}, @out_dx={0x6a, 0x28, {0x4091, 0x2, 0xc}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xffffffffffffff7f, 0x9e, 0x1}}, @set_irq_handler={0xc8, 0x20, {0x3d, 0x2}}, @wrmsr={0x65, 0x20, {0x853, 0x2}}, @nested_load_syzos={0x136, 0xe0, {0x1, 0x3, [@rdmsr={0x66, 0x18, {0x35e}}, @code={0xa, 0x58, {"260f07c4410d7587ca550000660f38de50f5410f01c2c4417d553dd63f6c6fb9800000c00f3235004000000f300f01c443dbe18f6af810ab060000000600000066b8f3000f00d0"}}, @in_dx={0x69, 0x20, {0x363e, 0x4}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x4, 0x2, 0x1}}]}}, @set_irq_handler={0xc8, 0x20, {0x88, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x7, 0x7}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @guest_nat=0x6804, 0x9, 0x75, 0x513}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @in_dx={0x69, 0x20, {0xd9f1, 0x2}}, @wr_crn={0x67, 0x20, {0x4, 0xf}}, @in_dx={0x69, 0x20, {0x6c70, 0x2}}, @nested_amd_invlpga={0x17d, 0x20, {0x8000000, 0xa6c0}}, @code={0xa, 0x4b, {"f30f00570066baa10066ed65660fc7368f0978c37403eb260f01c82e3e3e0fc7b00000000026450f01d13e26dbe0f3400f019d0e97d67e440f30"}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x7, 0xcc0}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control16, 0x1000, 0x6, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xa9, 0x4, 0x0, 0x3}}, @cpuid={0x64, 0x18, {0x0, 0x5}}, @cpuid={0x64, 0x18, {0x0, 0x401}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x1000, 0xc9ba}}, @nested_load_code={0x12e, 0x68, {0x3, "c481bd6a7d3c0f0d460066ba4200b006ee660f38825cfae4f3360f01bba02d0000b9800000c00f3235002000000f30450f00df0f01fbc7442400e2000000c744240200680000ff1c244600a6e53d0000"}}, @code={0xa, 0x49, {"dad4c4217c50ea460f3236460f08c42151d3ae00000080b9800000c00f3235004000000f300f019beffa0000430fc778410f01f8440f01c8"}}], 0x554}) syz_kvm_setup_cpu$x86(r10, r15, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000002800)=[@text32={0x20, &(0x7f0000002780)="a955f00000b91f030000b800000000ba000000000f30362d0000000066baf80cb84ca2fa81ef66bafc0c66b8002066ef66baf80cb8a7f66384ef66bafc0cec0f01c48fc9e899bad6000000b9520b0000b805000000ba000000000f30660f009e00000080b9800000c00f3235008000000f30", 0x72}], 0x1, 0x0, &(0x7f0000002840), 0x0) writev(r12, &(0x7f0000002980)=[{&(0x7f0000002880)="ed5b15e630276d1c2787d5a3d3562ad07e041e4d5036842b02ca5a9436808c0c72b6c132b34596a9b5d5e279a2f1851ffe5384ce2b83e53d5b436fd2fc70c973ab41a9fc748e87590343441b9671e889337e9fabb72ab1f97a99f8f1ef5c4ceb5537d435aac71d31c5ecd3d6176bcc84d1064ead56af87a9a610988f72cafaaae1a9e923384172fb2702ecceb3ff1211fb2db927704b66efecd90f8809fddb37bda004eec0637ae3f619001c910018413206d9a90526eda29d28a73174b4718b24a52c93c06c96f5c777a3b7d2", 0xcd}], 0x1) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000029c0)={0x0, 0x0}, &(0x7f0000002a00)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000002a40)={{0x1, 0x1, 0x18, r0, {0xee00, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r10, {r16, r18}}, './file0\x00'}) ioctl$DRM_IOCTL_IRQ_BUSID(r17, 0xc0106403, &(0x7f0000002ac0)={0x0, 0x1, 0x3cd}) ioctl$PPPIOCSCOMPRESS(r14, 0x4010744d) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r17, 0x8982, &(0x7f0000002b00)={0x0, 'veth1_virt_wifi\x00', {}, 0x6}) ioctl$KVM_HAS_DEVICE_ATTR_vcpu(r13, 0x4018aee3, &(0x7f0000002b80)=@attr_set_pmu={0x0, 0x1, 0x1, &(0x7f0000002b40)=0xb}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r15) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r8, 0xc018937c, &(0x7f0000002bc0)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) sendmsg$nl_generic(r8, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xac, 0x22, 0x400, 0x70bd2c, 0x25dfdbfd, {0xa}, [@nested={0x70, 0x14a, 0x0, 0x1, [@generic="36fda4d0b8089b6a5974c14431404e42b5795817c8788e38adc0fab0b19ef32286cffb654a5378f7231fb05ff14a78b0c0a3dccca1f529921eedf9ac0224ded6b94dc63aae3003280905c28cf289267386386ac0", @typed={0xc, 0x13a, 0x0, 0x0, @u64=0x8}, @typed={0x8, 0xd1, 0x0, 0x0, @fd=r15}, @nested={0x4, 0xf0}]}, @typed={0x27, 0x15d, 0x0, 0x0, @binary="3525ef449a1011041d706256ade127011ef08b2d6f6d01d383277dc6769602193c9f5b"}]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) syz_io_uring_submit(r1, r2, r6, &(0x7f0000002e00)=@IORING_OP_SYMLINKAT={0x26, 0x2a, 0x0, r10, &(0x7f0000002d80)='./file1\x00', &(0x7f0000002dc0)='./file1\x00', 0x0, 0x0, 0x1, {0x0, r7}}) ioctl$TUNSETVNETHDRSZ(r10, 0x400454d8, &(0x7f0000002e80)=0x8) copy_file_range(r3, &(0x7f0000002ec0)=0xffff, r11, &(0x7f0000002f00), 0x8, 0x0) 7.573298223s ago: executing program 0 (id=528): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x1, 0x1, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0xfffffffffffffffe, 0xfffffbff, 0x3}}]}) 6.948234564s ago: executing program 0 (id=535): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x8) 5.65380971s ago: executing program 0 (id=541): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex(&(0x7f0000000240)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) 5.124772658s ago: executing program 4 (id=546): syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = openat$comedi(0xffffff9c, &(0x7f0000000100)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0x294, 0x2, 0x7fffffff, 0x8, 0x2f, 0x2006, 0xf1, 0x8, 0x80ffa, 0x2, 0x0, 0x8500, 0x1003, 0x1000004, 0xf, 0x10000, 0xffffffa8, 0x7ffffffd, 0x1ff, 0x200009ea, 0x20000010, 0x40000, 0x8, 0x4008, 0x746f, 0x8, 0x5, 0x8, 0x7a2e6ff0, 0x4, 0x7ffd]}) 3.97280485s ago: executing program 3 (id=552): r0 = syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.938667738s ago: executing program 0 (id=553): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) open(0x0, 0x4008040, 0x0) pipe2(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) write(0xffffffffffffffff, &(0x7f00000002c0), 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 2.861179482s ago: executing program 1 (id=554): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 2.86062044s ago: executing program 4 (id=555): r0 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) 2.796831197s ago: executing program 0 (id=556): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2) 2.795684429s ago: executing program 3 (id=557): syz_init_net_socket$x25(0x9, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x20004450) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getuid() getresuid(0x0, &(0x7f0000000300), 0x0) getgroups(0x2, &(0x7f0000000380)=[0x0, 0xee00]) 2.464458246s ago: executing program 3 (id=558): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c003300802009000802110000010802110000005050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.308844661s ago: executing program 0 (id=559): unshare(0x68040200) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) 2.028301469s ago: executing program 1 (id=560): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000180)={0x200000, 0x200000, 0x0, 0x0, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f0000000b40)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000180)='auxv\x00') 2.02811821s ago: executing program 3 (id=561): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000100)=0x2000000, 0x4) 1.907631516s ago: executing program 3 (id=562): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$inet6(0x10, 0x3, 0x0) 1.877392632s ago: executing program 4 (id=563): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r1, 0xda90) accept4(r1, 0x0, 0x0, 0x0) landlock_restrict_self(r0, 0x8) 1.672830922s ago: executing program 1 (id=564): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0xfffffffffffffeda, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00004dc000/0x1000)=nil, 0x5, 0x0, 0x0, 0x6, 0x0, 0x2, 0x56, 0x18}) 1.553113673s ago: executing program 1 (id=565): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000001, 0x88a41) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x1, 0x0, 0x1011, 0x7, 0x9, 0x0, 0x0, 0x1993012db91ab52e}}) 1.451851618s ago: executing program 1 (id=566): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x22}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) listen(r1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/69, 0x45}], 0x1}, 0x5}], 0x1, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x5) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x2, 0x0) getdents64(r7, 0x0, 0x22) getdents64(r7, &(0x7f0000000140)=""/204, 0xcc) close_range(r0, 0xffffffffffffffff, 0x0) 934.477053ms ago: executing program 1 (id=567): socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) eventfd(0x8c66) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmmsg(r0, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002180)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5, &(0x7f0000002200)=[{0x84, 0x102, 0x4f3f, "499f3815f8ed9164e9424034ba92f60a2b73563c3de8623e4bf73d51ded6c7908319eaa8202a336644258f644b93501eff1f396b1d66e5a72caf722ae0974a74d8c9b9a00a3f14ffa8400d6ff2bbb919eb40b59a390d70516ea98991a0c6719f88ae418d5ef0684772e88b5e5cfda0ec7c7d89bcc0"}], 0x84}}], 0x3, 0xe2b74c7ee6d6a339) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x45) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup2(r2, r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[], 0x4000) close(r5) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105500, &(0x7f0000000000)=@usbdevfs_connect={0x6a0}) timerfd_create(0x8, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r7, &(0x7f0000000080), 0x9) 861.502249ms ago: executing program 4 (id=568): timer_create(0x7, &(0x7f0000000080)={0x0, 0x11, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x2) 751.297379ms ago: executing program 3 (id=569): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x8016, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x1}}}}, 0xfdef) 268.308122ms ago: executing program 4 (id=570): r0 = socket(0x10, 0x803, 0x0) connect$unix(r0, 0x0, 0x0) 0s ago: executing program 4 (id=571): fsopen(&(0x7f0000000080)='xfs\x00', 0x1) kernel console output (not intermixed with test programs): : 8 [ 184.020214][ T5624] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.020325][ T5624] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 184.020357][ T5624] usb 1-1: config 0 interface 0 has no altsetting 0 [ 184.020478][ T5624] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 184.020503][ T5624] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.035810][ T5624] usb 1-1: config 0 descriptor?? [ 184.552664][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x3 [ 184.552704][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552733][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552760][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552788][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552816][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552844][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.552872][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 184.643177][ T5624] aquacomputer_d5next 0003:0C70:F014.0005: hidraw0: USB HID v0.03 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 184.846083][ T5624] usb 1-1: USB disconnect, device number 40 [ 185.077286][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 185.117130][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.237234][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 185.239671][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 185.239700][ T9] usb 2-1: config 0 has no interface number 0 [ 185.239748][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 185.239775][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 185.291343][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 185.291377][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.291399][ T9] usb 2-1: Product: syz [ 185.291414][ T9] usb 2-1: Manufacturer: syz [ 185.291429][ T9] usb 2-1: SerialNumber: syz [ 185.342951][ T9] usb 2-1: config 0 descriptor?? [ 185.346089][ T7928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.346314][ T7928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.643518][ T7928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.643704][ T7928] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 185.797203][ T5345] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 185.853223][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 185.954911][ T5345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.955944][ T5345] usb 4-1: not running at top speed; connect to a high speed hub [ 185.977318][ T5345] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.977389][ T5345] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 186.032312][ T5345] usb 4-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39 [ 186.032342][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.032361][ T5345] usb 4-1: Product: syz [ 186.032386][ T5345] usb 4-1: Manufacturer: syz [ 186.032401][ T5345] usb 4-1: SerialNumber: syz [ 186.076757][ T5345] usb 4-1: config 0 descriptor?? [ 186.081476][ T7959] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.094422][ T7989] FAULT_INJECTION: forcing a failure. [ 186.094422][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 186.094458][ T7989] CPU: 0 UID: 0 PID: 7989 Comm: syz.4.199 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 186.094484][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 186.094496][ T7989] Call Trace: [ 186.094505][ T7989] [ 186.094518][ T7989] dump_stack_lvl+0xe8/0x150 [ 186.094549][ T7989] should_fail_ex+0x46b/0x600 [ 186.094588][ T7989] should_failslab+0xa8/0x100 [ 186.094616][ T7989] __kmalloc_noprof+0xfe/0x7e0 [ 186.094638][ T7989] ? rcu_is_watching+0x15/0xb0 [ 186.094671][ T7989] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.094696][ T7989] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.094728][ T7989] tomoyo_realpath_from_path+0xe3/0x5d0 [ 186.094756][ T7989] ? tomoyo_domain+0xd7/0x130 [ 186.094788][ T7989] ? tomoyo_path_number_perm+0x219/0x630 [ 186.094824][ T7989] tomoyo_path_number_perm+0x246/0x630 [ 186.094871][ T7989] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 186.094905][ T7989] ? __lock_acquire+0x6b5/0x2d10 [ 186.094940][ T7989] ? preempt_schedule_thunk+0x16/0x40 [ 186.095003][ T7989] ? __fget_files+0x2a/0x420 [ 186.095036][ T7989] ? __fget_files+0x2a/0x420 [ 186.095057][ T7989] ? __fget_files+0x3a6/0x420 [ 186.095078][ T7989] ? __fget_files+0x2a/0x420 [ 186.095105][ T7989] security_file_ioctl+0xc3/0x2a0 [ 186.095144][ T7989] __se_sys_ioctl+0x47/0x170 [ 186.095175][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.095201][ T7989] do_syscall_64+0x174/0x580 [ 186.095230][ T7989] ? trace_irq_disable+0x3b/0x140 [ 186.095258][ T7989] ? clear_bhb_loop+0x40/0x90 [ 186.095287][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.095310][ T7989] RIP: 0033:0x7f1bca1bce59 [ 186.095331][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.095350][ T7989] RSP: 002b:00007f1bc8416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.095373][ T7989] RAX: ffffffffffffffda RBX: 00007f1bca435fa0 RCX: 00007f1bca1bce59 [ 186.095390][ T7989] RDX: 0000200000000280 RSI: 00000000c1105517 RDI: 0000000000000003 [ 186.095405][ T7989] RBP: 00007f1bc8416090 R08: 0000000000000000 R09: 0000000000000000 [ 186.095419][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.095433][ T7989] R13: 00007f1bca436038 R14: 00007f1bca435fa0 R15: 00007fff6f5ba2a8 [ 186.095468][ T7989] [ 186.096880][ T7989] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.237566][ T5624] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 186.376909][ C1] usb 4-1: NFC: Urb failure (status -71) [ 186.384178][ T5345] usb 4-1: NFC: Unable to get FW version [ 186.385052][ T5345] pn533_usb 4-1:0.0: probe with driver pn533_usb failed with error -90 [ 186.458596][ T5345] usb 4-1: USB disconnect, device number 32 [ 186.526610][ T5624] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.526646][ T5624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.526705][ T5624] usb 1-1: Product: syz [ 186.526716][ T5624] usb 1-1: Manufacturer: syz [ 186.526727][ T5624] usb 1-1: SerialNumber: syz [ 186.666645][ T5624] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 187.124899][ T10] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 187.187261][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.377142][ T5345] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 187.551045][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 187.551085][ T5345] usb 5-1: can't read configurations, error -61 [ 187.687126][ T5345] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 187.730723][ T5623] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 187.741000][ T5623] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 187.823520][ T8023] netlink: 52 bytes leftover after parsing attributes in process `syz.3.203'. [ 187.881520][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 187.881561][ T5345] usb 5-1: can't read configurations, error -61 [ 187.882006][ T5345] usb usb5-port1: attempt power cycle [ 188.043599][ T37] usb 1-1: USB disconnect, device number 41 [ 188.267325][ T5345] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 188.319067][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 188.319108][ T5345] usb 5-1: can't read configurations, error -61 [ 188.477375][ T5345] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 188.511045][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 188.511083][ T5345] usb 5-1: can't read configurations, error -61 [ 188.511466][ T5345] usb usb5-port1: unable to enumerate USB device [ 188.549178][ T10] usb 1-1: Service connection timeout for: 257 [ 188.549207][ T10] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 188.685399][ T10] ath9k_htc: Failed to initialize the device [ 188.696194][ T37] usb 1-1: ath9k_htc: USB layer deinitialized [ 188.840260][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 188.840293][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 188.840576][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 188.901185][ T9] usb 2-1: USB disconnect, device number 26 [ 189.295576][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'. [ 189.604618][ T8068] loop9: detected capacity change from 0 to 524287936 [ 189.712015][ T8086] netlink: 44 bytes leftover after parsing attributes in process `syz.1.212'. [ 190.427316][ T5709] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 190.578994][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 190.599842][ T5709] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 190.599875][ T5709] usb 4-1: config 179 has no interface number 0 [ 190.599935][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 190.599968][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 190.599997][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.600025][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 190.600053][ T5709] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 190.600098][ T5709] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 190.600124][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.704568][ T8096] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 191.009052][ T10] usb 4-1: USB disconnect, device number 33 [ 191.010386][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 191.010457][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 191.254859][ T8139] FAULT_INJECTION: forcing a failure. [ 191.254859][ T8139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.254891][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 191.254912][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 191.254924][ T8139] Call Trace: [ 191.254931][ T8139] [ 191.254938][ T8139] dump_stack_lvl+0xe8/0x150 [ 191.254966][ T8139] should_fail_ex+0x46b/0x600 [ 191.254998][ T8139] _copy_from_user+0x2d/0xb0 [ 191.255020][ T8139] drm_mode_atomic_ioctl+0x77f/0xdd0 [ 191.255065][ T8139] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 191.255111][ T8139] ? rt_spin_unlock+0x14f/0x200 [ 191.255134][ T8139] ? rt_spin_unlock+0x160/0x200 [ 191.255157][ T8139] ? drm_is_current_master+0x1a2/0x210 [ 191.255182][ T8139] drm_ioctl_kernel+0x2e2/0x3b0 [ 191.255211][ T8139] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 191.255242][ T8139] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 191.255279][ T8139] drm_ioctl+0x6c0/0xb80 [ 191.255320][ T8139] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 191.255354][ T8139] ? __pfx_drm_ioctl+0x10/0x10 [ 191.255387][ T8139] ? __fget_files+0x2a/0x420 [ 191.255408][ T8139] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.255429][ T8139] ? __pfx_drm_ioctl+0x10/0x10 [ 191.255452][ T8139] __se_sys_ioctl+0xff/0x170 [ 191.255476][ T8139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.255497][ T8139] do_syscall_64+0x174/0x580 [ 191.255520][ T8139] ? trace_irq_disable+0x3b/0x140 [ 191.255544][ T8139] ? clear_bhb_loop+0x40/0x90 [ 191.255567][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.255585][ T8139] RIP: 0033:0x7f5340bace59 [ 191.255602][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.255617][ T8139] RSP: 002b:00007f533ee06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.255635][ T8139] RAX: ffffffffffffffda RBX: 00007f5340e25fa0 RCX: 00007f5340bace59 [ 191.255648][ T8139] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 191.255660][ T8139] RBP: 00007f533ee06090 R08: 0000000000000000 R09: 0000000000000000 [ 191.255671][ T8139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.255682][ T8139] R13: 00007f5340e26038 R14: 00007f5340e25fa0 R15: 00007fff9e69d598 [ 191.255709][ T8139] [ 191.613034][ T5626] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 191.947227][ T5709] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 191.988144][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 192.114877][ T5709] usb 4-1: Using ep0 maxpacket: 8 [ 192.124223][ T5709] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 192.141076][ T5709] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 192.141109][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.141132][ T5709] usb 4-1: Product: syz [ 192.141149][ T5709] usb 4-1: Manufacturer: syz [ 192.141170][ T5709] usb 4-1: SerialNumber: syz [ 192.147234][ T5345] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 192.187445][ T5709] usb 4-1: config 0 descriptor?? [ 192.224795][ T5709] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 192.381509][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 192.381553][ T5345] usb 5-1: can't read configurations, error -61 [ 192.537242][ T5345] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 192.567500][ T8146] FAULT_INJECTION: forcing a failure. [ 192.567500][ T8146] name fail_futex, interval 1, probability 0, space 0, times 1 [ 192.567543][ T8146] CPU: 1 UID: 0 PID: 8146 Comm: syz.1.220 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 192.567570][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 192.567584][ T8146] Call Trace: [ 192.567593][ T8146] [ 192.567602][ T8146] dump_stack_lvl+0xe8/0x150 [ 192.567636][ T8146] should_fail_ex+0x46b/0x600 [ 192.567675][ T8146] get_futex_key+0x1b0/0x1570 [ 192.567727][ T8146] ? __pfx_get_futex_key+0x10/0x10 [ 192.567757][ T8146] ? __lock_acquire+0x6b5/0x2d10 [ 192.567796][ T8146] futex_wake+0x119/0x5e0 [ 192.567827][ T8146] ? __pfx_futex_wake+0x10/0x10 [ 192.567851][ T8146] ? do_raw_spin_lock+0x12b/0x2f0 [ 192.567885][ T8146] do_futex+0x4a9/0x4f0 [ 192.567921][ T8146] ? __pfx_do_futex+0x10/0x10 [ 192.567952][ T8146] ? __might_fault+0xaf/0x130 [ 192.567972][ T8146] mm_release+0x101/0x290 [ 192.568001][ T8146] exit_mm+0x51/0x250 [ 192.568021][ T8146] ? unwind_deferred_task_exit+0x67/0xa0 [ 192.568051][ T8146] do_exit+0x6a2/0x22c0 [ 192.568075][ T8146] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 192.568104][ T8146] ? __pfx_do_exit+0x10/0x10 [ 192.568123][ T8146] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 192.568154][ T8146] ? reacquire_held_locks+0x104/0x190 [ 192.568183][ T8146] ? rt_spin_lock+0x1e0/0x400 [ 192.568214][ T8146] do_group_exit+0x21b/0x2d0 [ 192.568236][ T8146] ? rt_spin_unlock+0x160/0x200 [ 192.568255][ T8146] get_signal+0x1284/0x1330 [ 192.568295][ T8146] arch_do_signal_or_restart+0xbc/0x840 [ 192.568317][ T8146] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.568350][ T8146] exit_to_user_mode_loop+0x104/0x710 [ 192.568372][ T8146] ? rcu_is_watching+0x15/0xb0 [ 192.568398][ T8146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.568418][ T8146] do_syscall_64+0x353/0x580 [ 192.568441][ T8146] ? clear_bhb_loop+0x40/0x90 [ 192.568463][ T8146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.568480][ T8146] RIP: 0033:0x7f252112ce59 [ 192.568498][ T8146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.568514][ T8146] RSP: 002b:00007f251f35d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 192.568534][ T8146] RAX: fffffffffffffffc RBX: 00007f25213a6090 RCX: 00007f252112ce59 [ 192.568547][ T8146] RDX: 000000000000000e RSI: 0000200000000440 RDI: 0000000000000006 [ 192.568558][ T8146] RBP: 00007f251f35d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.568569][ T8146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.568579][ T8146] R13: 00007f25213a6128 R14: 00007f25213a6090 R15: 00007ffc8023e9f8 [ 192.568605][ T8146] [ 192.927275][ T10] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 193.017426][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 193.017473][ T5345] usb 5-1: can't read configurations, error -61 [ 193.150396][ T5345] usb usb5-port1: attempt power cycle [ 193.174198][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.174236][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.174280][ T10] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 193.174306][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.224936][ T10] usb 1-1: config 0 descriptor?? [ 193.444839][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 193.444978][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 193.482864][ T10] usb 1-1: USB disconnect, device number 42 [ 193.538138][ T5345] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 193.590856][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 193.590884][ T5345] usb 5-1: can't read configurations, error -61 [ 193.739219][ T5345] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 193.773967][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 193.774008][ T5345] usb 5-1: can't read configurations, error -61 [ 193.774568][ T5345] usb usb5-port1: unable to enumerate USB device [ 193.937162][ T10] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 194.097165][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 194.100360][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.100394][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.100437][ T10] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 194.100462][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.105785][ T10] usb 1-1: config 0 descriptor?? [ 194.157788][ T5345] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 194.173778][ T10] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 194.187572][ T10] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 194.287295][ T5345] usb 2-1: device descriptor read/64, error -71 [ 194.304055][ T5709] gspca_zc3xx: reg_r err -32 [ 194.325008][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.325124][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.346253][ T8176] ldusb 1-1:0.0: Couldn't submit interrupt_in_urb -90 [ 194.527375][ T5345] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 194.550830][ T5763] usb 1-1: USB disconnect, device number 43 [ 194.569443][ T5763] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 194.657352][ T5345] usb 2-1: device descriptor read/64, error -71 [ 194.786343][ T5345] usb usb2-port1: attempt power cycle [ 194.860603][ T8230] FAULT_INJECTION: forcing a failure. [ 194.860603][ T8230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.860631][ T8230] CPU: 1 UID: 0 PID: 8230 Comm: syz.4.230 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.860649][ T8230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 194.860660][ T8230] Call Trace: [ 194.860666][ T8230] [ 194.860673][ T8230] dump_stack_lvl+0xe8/0x150 [ 194.860696][ T8230] should_fail_ex+0x46b/0x600 [ 194.860722][ T8230] _copy_from_user+0x2d/0xb0 [ 194.860741][ T8230] ___sys_sendmsg+0x1c6/0x360 [ 194.860760][ T8230] ? __lock_acquire+0x6b5/0x2d10 [ 194.860784][ T8230] ? __pfx____sys_sendmsg+0x10/0x10 [ 194.860829][ T8230] ? __fget_files+0x2a/0x420 [ 194.860844][ T8230] ? __fget_files+0x3a6/0x420 [ 194.860867][ T8230] __x64_sys_sendmsg+0x1b7/0x290 [ 194.860889][ T8230] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 194.860925][ T8230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.860942][ T8230] do_syscall_64+0x174/0x580 [ 194.860961][ T8230] ? trace_irq_disable+0x3b/0x140 [ 194.860981][ T8230] ? clear_bhb_loop+0x40/0x90 [ 194.861000][ T8230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.861016][ T8230] RIP: 0033:0x7f1bca1bce59 [ 194.861030][ T8230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.861044][ T8230] RSP: 002b:00007f1bc8416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.861061][ T8230] RAX: ffffffffffffffda RBX: 00007f1bca435fa0 RCX: 00007f1bca1bce59 [ 194.861073][ T8230] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000006 [ 194.861083][ T8230] RBP: 00007f1bc8416090 R08: 0000000000000000 R09: 0000000000000000 [ 194.861093][ T8230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.861103][ T8230] R13: 00007f1bca436038 R14: 00007f1bca435fa0 R15: 00007fff6f5ba2a8 [ 194.861347][ T8230] [ 194.907288][ T5709] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 194.907555][ T5709] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 195.160603][ T5345] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 195.185463][ T5345] usb 2-1: device descriptor read/8, error -71 [ 195.321929][ T8241] IPVS: set_ctl: invalid protocol: 33 172.20.20.24:0 [ 195.417254][ T5345] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 195.457999][ T5345] usb 2-1: device descriptor read/8, error -71 [ 195.613036][ T5345] usb usb2-port1: unable to enumerate USB device [ 196.562179][ T5345] usb 4-1: USB disconnect, device number 34 [ 196.997165][ T9] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 197.159575][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 197.159616][ T9] usb 1-1: can't read configurations, error -61 [ 197.258747][ T5709] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 197.289213][ T9] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 197.332620][ T8305] FAULT_INJECTION: forcing a failure. [ 197.332620][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 197.332656][ T8305] CPU: 1 UID: 0 PID: 8305 Comm: syz.3.245 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.332682][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.332697][ T8305] Call Trace: [ 197.332706][ T8305] [ 197.332715][ T8305] dump_stack_lvl+0xe8/0x150 [ 197.332749][ T8305] should_fail_ex+0x46b/0x600 [ 197.332788][ T8305] should_failslab+0xa8/0x100 [ 197.332816][ T8305] __kmalloc_noprof+0xfe/0x7e0 [ 197.332839][ T8305] ? rcu_is_watching+0x15/0xb0 [ 197.332881][ T8305] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 197.332908][ T8305] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 197.332943][ T8305] tomoyo_realpath_from_path+0xe3/0x5d0 [ 197.332972][ T8305] ? tomoyo_domain+0xd7/0x130 [ 197.333005][ T8305] ? tomoyo_path_number_perm+0x219/0x630 [ 197.333046][ T8305] tomoyo_path_number_perm+0x246/0x630 [ 197.333086][ T8305] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 197.333121][ T8305] ? __lock_acquire+0x6b5/0x2d10 [ 197.333171][ T8305] ? do_raw_spin_lock+0x12b/0x2f0 [ 197.333230][ T8305] ? __fget_files+0x2a/0x420 [ 197.333258][ T8305] ? __fget_files+0x2a/0x420 [ 197.333281][ T8305] ? __fget_files+0x3a6/0x420 [ 197.333303][ T8305] ? __fget_files+0x2a/0x420 [ 197.333332][ T8305] security_file_ioctl+0xc3/0x2a0 [ 197.333368][ T8305] __se_sys_ioctl+0x47/0x170 [ 197.333400][ T8305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.333426][ T8305] do_syscall_64+0x174/0x580 [ 197.333455][ T8305] ? trace_irq_disable+0x3b/0x140 [ 197.333484][ T8305] ? clear_bhb_loop+0x40/0x90 [ 197.333512][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.333536][ T8305] RIP: 0033:0x7f653784ce59 [ 197.333557][ T8305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.333577][ T8305] RSP: 002b:00007f6535a9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.333602][ T8305] RAX: ffffffffffffffda RBX: 00007f6537ac5fa0 RCX: 00007f653784ce59 [ 197.333620][ T8305] RDX: 0000200000000280 RSI: 00000000c1105517 RDI: 0000000000000003 [ 197.333635][ T8305] RBP: 00007f6535a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 197.333657][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.333671][ T8305] R13: 00007f6537ac6038 R14: 00007f6537ac5fa0 R15: 00007fffc9402638 [ 197.333708][ T8305] [ 197.352296][ T8305] ERROR: Out of memory at tomoyo_realpath_from_path. [ 197.414217][ T5709] usb 5-1: Using ep0 maxpacket: 8 [ 197.465701][ T5709] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 197.465785][ T5709] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 197.509419][ T5709] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 197.509500][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.509524][ T5709] usb 5-1: Product: syz [ 197.509541][ T5709] usb 5-1: Manufacturer: syz [ 197.509579][ T5709] usb 5-1: SerialNumber: syz [ 197.579272][ T5709] usb 5-1: config 0 descriptor?? [ 197.648451][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 197.648492][ T9] usb 1-1: can't read configurations, error -61 [ 197.662908][ T9] usb usb1-port1: attempt power cycle [ 197.872879][ T5709] usb 5-1: USB disconnect, device number 28 [ 198.052395][ T9] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 198.074598][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 198.074641][ T9] usb 1-1: can't read configurations, error -61 [ 198.197145][ T9] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 198.221165][ T9] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 198.221208][ T9] usb 1-1: can't read configurations, error -61 [ 198.222355][ T9] usb usb1-port1: unable to enumerate USB device [ 198.732925][ T8352] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 198.739963][ T5709] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 198.890351][ T5709] usb 4-1: Using ep0 maxpacket: 32 [ 198.917840][ T5709] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 198.917871][ T5709] usb 4-1: config 0 has no interface number 0 [ 198.918714][ T5709] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 198.918745][ T5709] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 198.918770][ T5709] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 198.918792][ T5709] usb 4-1: config 0 interface 196 has no altsetting 0 [ 198.929253][ T5709] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 198.929339][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.929398][ T5709] usb 4-1: Product: syz [ 198.929447][ T5709] usb 4-1: Manufacturer: syz [ 198.929490][ T5709] usb 4-1: SerialNumber: syz [ 199.038198][ T5709] usb 4-1: config 0 descriptor?? [ 199.039075][ T8336] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 199.470068][ T8375] FAULT_INJECTION: forcing a failure. [ 199.470068][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 199.470109][ T8375] CPU: 0 UID: 0 PID: 8375 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 199.470135][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 199.470149][ T8375] Call Trace: [ 199.470158][ T8375] [ 199.470168][ T8375] dump_stack_lvl+0xe8/0x150 [ 199.470201][ T8375] should_fail_ex+0x46b/0x600 [ 199.470242][ T8375] should_failslab+0xa8/0x100 [ 199.470271][ T8375] __kmalloc_noprof+0xfe/0x7e0 [ 199.470296][ T8375] ? video_usercopy+0x1b1/0x1450 [ 199.470329][ T8375] ? video_usercopy+0x1b1/0x1450 [ 199.470373][ T8375] video_usercopy+0x1b1/0x1450 [ 199.470418][ T8375] ? __pfx___video_do_ioctl+0x10/0x10 [ 199.470455][ T8375] ? __pfx_video_usercopy+0x10/0x10 [ 199.470500][ T8375] ? __fget_files+0x2a/0x420 [ 199.470526][ T8375] ? __fget_files+0x2a/0x420 [ 199.470549][ T8375] ? __fget_files+0x3a6/0x420 [ 199.470582][ T8375] v4l2_ioctl+0x190/0x1e0 [ 199.470618][ T8375] ? __pfx_v4l2_ioctl+0x10/0x10 [ 199.470650][ T8375] __se_sys_ioctl+0xff/0x170 [ 199.470680][ T8375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.470707][ T8375] do_syscall_64+0x174/0x580 [ 199.470737][ T8375] ? trace_irq_disable+0x3b/0x140 [ 199.470767][ T8375] ? clear_bhb_loop+0x40/0x90 [ 199.470795][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.470818][ T8375] RIP: 0033:0x7f252112ce59 [ 199.470839][ T8375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.470860][ T8375] RSP: 002b:00007f251f37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 199.470884][ T8375] RAX: ffffffffffffffda RBX: 00007f25213a5fa0 RCX: 00007f252112ce59 [ 199.470903][ T8375] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 199.470919][ T8375] RBP: 00007f251f37e090 R08: 0000000000000000 R09: 0000000000000000 [ 199.470934][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.470948][ T8375] R13: 00007f25213a6038 R14: 00007f25213a5fa0 R15: 00007ffc8023e9f8 [ 199.470984][ T8375] [ 199.751406][ T5709] ipheth 4-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 199.891182][ T5709] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 199.925805][ T8389] usb usb9: usbfs: interface 0 claimed by hub while 'syz.4.260' sets config #1 [ 200.018614][ T5709] usb 4-1: USB disconnect, device number 35 [ 200.338547][ T5709] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 200.731375][ T8414] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.731616][ T8414] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.731823][ T8414] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.848197][ T8430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 200.850113][ T8414] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.227126][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 201.397466][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 201.399835][ T9] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 201.399863][ T9] usb 4-1: config 0 has no interface number 0 [ 201.399910][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 201.399946][ T9] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 201.426901][ T9] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 201.426931][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.426951][ T9] usb 4-1: Product: syz [ 201.426963][ T9] usb 4-1: Manufacturer: syz [ 201.427211][ T9] usb 4-1: SerialNumber: syz [ 201.495195][ T9] usb 4-1: config 0 descriptor?? [ 201.526770][ T9] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 201.526810][ T9] em28xx 4-1:0.132: Video interface 132 found: isoc [ 201.629780][ T8458] tmpfs: Unsupported parameter 'huge' [ 201.639179][ T8458] fuse: Unknown parameter 'g ' [ 201.797213][ T5709] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 201.963108][ T5709] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 201.963141][ T5709] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.963163][ T5709] usb 2-1: config 0 has no interfaces? [ 201.963203][ T5709] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 201.963228][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.076457][ T5709] usb 2-1: config 0 descriptor?? [ 202.077273][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 202.127974][ T8430] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.168630][ T8430] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.168825][ T8430] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.192111][ T8430] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.231450][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 202.234267][ T10] usb 5-1: config 2 has an invalid interface number: 116 but max is 0 [ 202.234296][ T10] usb 5-1: config 2 has no interface number 0 [ 202.234483][ T10] usb 5-1: config 2 interface 116 has no altsetting 0 [ 202.273572][ T10] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=8b.61 [ 202.273607][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.273694][ T10] usb 5-1: Product: syz [ 202.273711][ T10] usb 5-1: Manufacturer: syz [ 202.273727][ T10] usb 5-1: SerialNumber: syz [ 202.376577][ T9] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 202.821551][ T10] speedtch 5-1:2.116: speedtch_bind: wrong device class 177 [ 202.821585][ T10] speedtch 5-1:2.116: usbatm_usb_probe: bind failed: -19! [ 202.844050][ T10] usb 5-1: USB disconnect, device number 29 [ 202.865688][ T9] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 202.865724][ T9] em28xx 4-1:0.132: board has no eeprom [ 202.917130][ T9] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 202.917177][ T9] em28xx 4-1:0.132: analog set to isoc mode. [ 202.917743][ T5624] em28xx 4-1:0.132: Registering V4L2 extension [ 202.969658][ T9] usb 4-1: USB disconnect, device number 36 [ 202.987920][ T9] em28xx 4-1:0.132: Disconnecting em28xx [ 203.385759][ T5624] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 203.385791][ T5624] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 203.385807][ T5624] em28xx 4-1:0.132: No AC97 audio processor [ 203.463072][ T5624] usb 4-1: Decoder not found [ 203.463094][ T5624] em28xx 4-1:0.132: failed to create media graph [ 203.485249][ T5624] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 203.620732][ T5624] em28xx 4-1:0.132: Remote control support is not available for this card. [ 203.638226][ T9] em28xx 4-1:0.132: Closing input extension [ 203.902123][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 203.923711][ T9] em28xx 4-1:0.132: Freeing device [ 204.147279][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.227203][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.227246][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.227277][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 204.380593][ T8535] syz.4.280 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 205.103289][ T5763] usb 2-1: USB disconnect, device number 31 [ 205.334209][ T38] audit: type=1326 audit(1782044549.774:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.379582][ T38] audit: type=1326 audit(1782044549.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.381082][ T38] audit: type=1326 audit(1782044549.824:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.381140][ T38] audit: type=1326 audit(1782044549.824:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.381417][ T38] audit: type=1326 audit(1782044549.824:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.452688][ T38] audit: type=1326 audit(1782044549.824:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.452862][ T38] audit: type=1326 audit(1782044549.834:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.453005][ T38] audit: type=1326 audit(1782044549.834:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.453139][ T38] audit: type=1326 audit(1782044549.844:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.453265][ T38] audit: type=1326 audit(1782044549.844:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8571 comm="syz.1.287" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f252112ce59 code=0x7ffc0000 [ 205.776311][ T8578] 9p: Bad value for 'cachetag' [ 206.047190][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 206.157338][ T10] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 206.197379][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 206.200410][ T9] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 206.200440][ T9] usb 4-1: config 0 has no interface number 0 [ 206.200488][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 206.200518][ T9] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 206.205339][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 206.205372][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.205394][ T9] usb 4-1: Product: syz [ 206.205410][ T9] usb 4-1: Manufacturer: syz [ 206.205426][ T9] usb 4-1: SerialNumber: syz [ 206.294072][ T9] usb 4-1: config 0 descriptor?? [ 206.306005][ T8580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.306203][ T8580] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.307695][ T5626] Bluetooth: hci1: command 0x0c1a tx timeout [ 206.359462][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.359517][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.359544][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.415444][ T10] usb 2-1: config 0 descriptor?? [ 206.600495][ T8614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.601845][ T8614] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.631004][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 206.631135][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 206.681568][ T10] usb 2-1: USB disconnect, device number 32 [ 206.806509][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 207.008238][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 207.008272][ T9] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 207.008899][ T9] asix 4-1:0.34: probe with driver asix failed with error -61 [ 207.057211][ T5784] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 207.190817][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 207.214476][ T5784] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 207.214507][ T5784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.214527][ T5784] usb 5-1: config 0 has no interfaces? [ 207.214555][ T5784] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 207.214580][ T5784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.222671][ T8580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.275088][ T8580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.288551][ T5784] usb 5-1: config 0 descriptor?? [ 207.356041][ T5763] usb 4-1: USB disconnect, device number 37 [ 207.369039][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.369096][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 207.369121][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.425192][ T10] usb 2-1: config 0 descriptor?? [ 207.702538][ T5784] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 207.867141][ T5784] usb 1-1: Using ep0 maxpacket: 16 [ 207.870819][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 207.889853][ T5784] usb 1-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 207.889888][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.889912][ T5784] usb 1-1: Product: syz [ 207.889929][ T5784] usb 1-1: Manufacturer: syz [ 207.889945][ T5784] usb 1-1: SerialNumber: syz [ 207.987321][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 208.048285][ T8586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.085067][ T8586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.127237][ T9] usb 4-1: device descriptor read/64, error -71 [ 208.261144][ T10] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 208.278144][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 208.369772][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 208.499933][ T9] usb 4-1: device descriptor read/64, error -71 [ 208.607909][ T9] usb usb4-port1: attempt power cycle [ 208.961859][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 208.981958][ T10] usb 2-1: USB disconnect, device number 33 [ 208.982050][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 209.121804][ T9] usb 4-1: device descriptor read/8, error -71 [ 209.215005][ T5784] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 209.243544][ T5784] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 209.368232][ T9] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 209.387863][ T9] usb 4-1: device descriptor read/8, error -71 [ 209.499115][ T9] usb usb4-port1: unable to enumerate USB device [ 209.516598][ T5784] usb 1-1: USB disconnect, device number 48 [ 209.705512][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.902579][ T8720] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5619] was attempted by ""[8720] [ 209.936354][ T37] usb 5-1: USB disconnect, device number 30 [ 210.190232][ T5626] Bluetooth: hci1: Unable to find connection with handle 0x73c8 [ 211.149763][ T5784] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 211.277285][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 211.299625][ T5784] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 211.299658][ T5784] usb 1-1: config 0 has no interface number 0 [ 211.299707][ T5784] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 211.299740][ T5784] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid maxpacket 212, setting to 64 [ 211.299778][ T5784] usb 1-1: config 0 interface 11 has no altsetting 0 [ 211.299816][ T5784] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 211.299842][ T5784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.373694][ T5784] usb 1-1: config 0 descriptor?? [ 211.374865][ T8768] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.375223][ T8768] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 211.399592][ T5784] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 211.422084][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 211.422181][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 211.422274][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 211.422369][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 211.422463][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 211.422565][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 211.492396][ T9] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 211.492430][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.492450][ T9] usb 4-1: config 0 has no interfaces? [ 211.492483][ T9] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 211.492509][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.542813][ T5784] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 211.570836][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 211.570929][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 211.571013][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 211.571102][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 211.571214][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 211.573402][ T5784] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 211.625672][ T5784] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 211.655336][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.656002][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.674021][ T9] usb 4-1: config 0 descriptor?? [ 211.695641][ T8768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.705600][ T8768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.738345][ T5763] usb 1-1: USB disconnect, device number 49 [ 211.991994][ T5763] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 212.141791][ T5763] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 212.159507][ T5763] keyspan 1-1:0.11: device disconnected [ 212.197315][ T37] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 212.347163][ T37] usb 5-1: device descriptor read/64, error -71 [ 212.587129][ T37] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 212.718383][ T37] usb 5-1: device descriptor read/64, error -71 [ 212.827557][ T37] usb usb5-port1: attempt power cycle [ 213.177182][ T37] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 213.212377][ T37] usb 5-1: device descriptor read/8, error -71 [ 213.248324][ T8834] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 213.391557][ T8856] process 'syz.0.320' launched '/dev/fd/4' with NULL argv: empty string added [ 213.448699][ T37] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 213.473552][ T37] usb 5-1: device descriptor read/8, error -71 [ 213.478649][ T10] kernel read not supported for file /video9 (pid: 10 comm: kworker/0:1) [ 213.493833][ T5763] kernel read not supported for file /video9 (pid: 5763 comm: kworker/1:6) [ 213.583363][ T37] usb usb5-port1: unable to enumerate USB device [ 213.922220][ T5763] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 214.047126][ T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 214.077383][ T37] usb 4-1: USB disconnect, device number 42 [ 214.201046][ T5763] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.207521][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 214.235019][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 214.236764][ T10] usb 2-1: config 64 has an invalid interface number: 220 but max is 0 [ 214.236793][ T10] usb 2-1: config 64 has no interface number 0 [ 214.236829][ T10] usb 2-1: config 64 interface 220 has no altsetting 0 [ 214.273237][ T10] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=34.43 [ 214.273273][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.273311][ T10] usb 2-1: Product: syz [ 214.273327][ T10] usb 2-1: Manufacturer: syz [ 214.273342][ T10] usb 2-1: SerialNumber: syz [ 214.309236][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 214.309672][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 214.310338][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 214.310792][ T9] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 214.310811][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 214.591953][ T10] mxuport 2-1:64.220: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 214.593212][ T10] mxuport 2-1:64.220: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 214.593293][ T10] mxuport 2-1:64.220: probe with driver mxuport failed with error -71 [ 214.629724][ T10] usb 2-1: USB disconnect, device number 34 [ 214.935632][ T8910] tipc: Started in network mode [ 214.935669][ T8910] tipc: Node identity ac14140f, cluster identity 4711 [ 215.033206][ T8910] tipc: New replicast peer: 255.255.255.255 [ 215.146062][ T8910] tipc: Enabled bearer , priority 10 [ 215.146225][ T8912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.328'. [ 215.146247][ T8912] tipc: Disabling bearer [ 215.381241][ T8922] PKCS7: Unknown OID: [4] 2.19.13055.1334505.0.0.0.0 [ 215.381265][ T8922] PKCS7: Only support pkcs7_signedData type [ 215.581837][ T8930] fuse: Unknown parameter '' [ 215.765929][ T8937] FAULT_INJECTION: forcing a failure. [ 215.765929][ T8937] name failslab, interval 1, probability 0, space 0, times 0 [ 215.765966][ T8937] CPU: 0 UID: 0 PID: 8937 Comm: syz.0.335 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 215.765989][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 215.766001][ T8937] Call Trace: [ 215.766008][ T8937] [ 215.766016][ T8937] dump_stack_lvl+0xe8/0x150 [ 215.766046][ T8937] should_fail_ex+0x46b/0x600 [ 215.766076][ T8937] should_failslab+0xa8/0x100 [ 215.766098][ T8937] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 215.766130][ T8937] ? _sctp_make_chunk+0x59/0x290 [ 215.766150][ T8937] ? sctp_chunkify+0x5a/0x260 [ 215.766167][ T8937] ? sctp_chunkify+0x5a/0x260 [ 215.766191][ T8937] sctp_chunkify+0x5a/0x260 [ 215.766212][ T8937] _sctp_make_chunk+0x122/0x290 [ 215.766234][ T8937] sctp_make_datafrag_empty+0x12a/0x240 [ 215.766266][ T8937] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 215.766288][ T8937] ? sctp_user_addto_chunk+0xa8/0x240 [ 215.766312][ T8937] sctp_datamsg_from_user+0x729/0xef0 [ 215.766346][ T8937] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 215.766378][ T8937] ? lockdep_hardirqs_on+0x7a/0x110 [ 215.766407][ T8937] ? sctp_transport_put+0xd2/0x150 [ 215.766435][ T8937] ? sctp_epaddr_lookup_transport+0x925/0x9d0 [ 215.766464][ T8937] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 215.766492][ T8937] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 215.766518][ T8937] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 215.766542][ T8937] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 215.766568][ T8937] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 215.766596][ T8937] sctp_sendmsg+0x173c/0x29b0 [ 215.766634][ T8937] ? __pfx_sctp_sendmsg+0x10/0x10 [ 215.766667][ T8937] ? aa_sk_perm+0x703/0x950 [ 215.766706][ T8937] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.766737][ T8937] ? sock_rps_record_flow+0x19/0x350 [ 215.766757][ T8937] ? inet_sendmsg+0x2f4/0x370 [ 215.766776][ T8937] ? aa_sock_msg_perm+0x122/0x200 [ 215.766794][ T8937] ? __pfx_inet_sendmsg+0x10/0x10 [ 215.766809][ T8937] sock_sendmsg_nosec+0x10e/0x180 [ 215.766840][ T8937] __sys_sendto+0x41a/0x5a0 [ 215.766862][ T8937] ? __pfx___sys_sendto+0x10/0x10 [ 215.766906][ T8937] ? __pfx_ksys_write+0x10/0x10 [ 215.766936][ T8937] __x64_sys_sendto+0xde/0x100 [ 215.766958][ T8937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.766980][ T8937] do_syscall_64+0x174/0x580 [ 215.767005][ T8937] ? trace_irq_disable+0x3b/0x140 [ 215.767030][ T8937] ? clear_bhb_loop+0x40/0x90 [ 215.767054][ T8937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.767072][ T8937] RIP: 0033:0x7f5340bace59 [ 215.767090][ T8937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.767105][ T8937] RSP: 002b:00007f533ee06028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 215.767123][ T8937] RAX: ffffffffffffffda RBX: 00007f5340e25fa0 RCX: 00007f5340bace59 [ 215.767136][ T8937] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 215.767148][ T8937] RBP: 00007f533ee06090 R08: 0000200000000380 R09: 0000000000000010 [ 215.767159][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.767170][ T8937] R13: 00007f5340e26038 R14: 00007f5340e25fa0 R15: 00007fff9e69d598 [ 215.767197][ T8937] [ 216.127164][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.280137][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.280193][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 216.280220][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.320029][ T9] usb 2-1: config 0 descriptor?? [ 216.490060][ T5709] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 216.538523][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 216.538654][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 216.565334][ T9] usb 2-1: USB disconnect, device number 35 [ 216.672732][ T5709] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 216.672767][ T5709] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 216.673927][ T5709] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 216.673959][ T5709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 216.673975][ T5709] usb 1-1: SerialNumber: syz [ 216.736219][ T8971] misc userio: Begin command sent, but we're already running [ 216.949426][ T5709] usb 1-1: 0:2 : does not exist [ 217.107446][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 217.294960][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.295016][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 217.295044][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.406374][ T9] usb 2-1: config 0 descriptor?? [ 217.513429][ T8982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.546807][ T8982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.951898][ T5709] usb 1-1: USB disconnect, device number 50 [ 218.173976][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.230781][ T9] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 218.248606][ T8938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.255696][ T8938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.256922][ T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 218.651042][ T9038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.663395][ T9038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.689680][ T37] usb 2-1: USB disconnect, device number 36 [ 218.689724][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 218.899155][ T5345] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 219.053667][ T5345] usb 4-1: Using ep0 maxpacket: 16 [ 219.575626][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.576729][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.780866][ T9] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 220.115015][ T5345] usb 4-1: device descriptor read/all, error -71 [ 220.116718][ T9038] syz.3.347 (9038) used greatest stack depth: 16904 bytes left [ 220.409190][ T9114] netlink: 762 bytes leftover after parsing attributes in process `syz.0.357'. [ 221.129239][ T9135] binder: BINDER_SET_CONTEXT_MGR already set [ 221.129273][ T9135] binder: 9134:9135 ioctl 4018620d 200000004a80 returned -16 [ 221.132289][ T9135] binder: 9134:9135 ioctl 40086e8b 200000000180 returned -22 [ 221.495815][ T9150] overlayfs: workdir and upperdir must be separate subtrees [ 221.700749][ T9159] ======================================================= [ 221.700749][ T9159] WARNING: The mand mount option has been deprecated and [ 221.700749][ T9159] and is ignored by this kernel. Remove the mand [ 221.700749][ T9159] option from the mount to silence this warning. [ 221.700749][ T9159] ======================================================= [ 221.818298][ T9] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 221.876235][ T9167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.899727][ T9167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.977179][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 221.997181][ T5787] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 221.998511][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 221.998542][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.998565][ T9] usb 1-1: Product: syz [ 221.998581][ T9] usb 1-1: Manufacturer: syz [ 221.998597][ T9] usb 1-1: SerialNumber: syz [ 222.046728][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 222.046801][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 222.117175][ T37] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 222.187212][ T5787] usb 4-1: Using ep0 maxpacket: 16 [ 222.189931][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 222.189969][ T5787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 222.189999][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.190024][ T5787] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.207200][ T5787] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 222.207235][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.207257][ T5787] usb 4-1: Product: syz [ 222.207273][ T5787] usb 4-1: Manufacturer: syz [ 222.207290][ T5787] usb 4-1: SerialNumber: syz [ 222.338770][ T5787] usb 4-1: config 0 descriptor?? [ 222.351697][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 222.359144][ T9] r8152-cfgselector 1-1: No union descriptors [ 222.365420][ T9160] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.447987][ T9] r8152-cfgselector 1-1: USB disconnect, device number 52 [ 222.451858][ C1] port100 4-1:0.0: NFC: Urb failure (status -71) [ 222.468519][ T5787] port100 4-1:0.0: NFC: Could not get supported command types [ 222.676112][ T5784] usb 4-1: USB disconnect, device number 45 [ 223.297297][ T37] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 223.448802][ T37] usb 5-1: Using ep0 maxpacket: 16 [ 223.451914][ T37] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 223.451943][ T37] usb 5-1: config 0 has no interface number 0 [ 223.451996][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 223.452131][ T37] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 223.456020][ T37] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 223.456051][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.456074][ T37] usb 5-1: Product: syz [ 223.456090][ T37] usb 5-1: Manufacturer: syz [ 223.456105][ T37] usb 5-1: SerialNumber: syz [ 223.532781][ T37] usb 5-1: config 0 descriptor?? [ 223.534045][ T9218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.534321][ T9218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.618028][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 223.742737][ T9218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.742869][ T9218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 223.779252][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 223.782494][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 223.782522][ T9] usb 4-1: config 0 has no interface number 0 [ 223.783461][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 223.783495][ T9] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 223.818597][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 223.818639][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.818703][ T9] usb 4-1: Product: syz [ 223.818739][ T9] usb 4-1: Manufacturer: syz [ 223.818757][ T9] usb 4-1: SerialNumber: syz [ 223.846109][ T9] usb 4-1: config 0 descriptor?? [ 223.944550][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 224.067230][ T9] radio-si470x 4-1:0.35: this is not a si470x device. [ 224.207071][ T5784] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 224.275997][ T9] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 224.328674][ T9] usb 4-1: USB disconnect, device number 46 [ 224.396566][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 224.396592][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.396644][ T5784] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 224.396671][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.424031][ T5784] usb 2-1: config 0 descriptor?? [ 224.878727][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.922263][ T5784] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 225.330651][ T10] usb 2-1: USB disconnect, device number 37 [ 225.529541][ T9295] FAULT_INJECTION: forcing a failure. [ 225.529541][ T9295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.529582][ T9295] CPU: 0 UID: 0 PID: 9295 Comm: syz.3.386 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 225.529614][ T9295] Tainted: [L]=SOFTLOCKUP [ 225.529623][ T9295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 225.529637][ T9295] Call Trace: [ 225.529647][ T9295] [ 225.529656][ T9295] dump_stack_lvl+0xe8/0x150 [ 225.529689][ T9295] should_fail_ex+0x46b/0x600 [ 225.529727][ T9295] _copy_to_user+0x31/0xb0 [ 225.529765][ T9295] simple_read_from_buffer+0xe1/0x170 [ 225.529795][ T9295] proc_fail_nth_read+0x1be/0x230 [ 225.529827][ T9295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.529854][ T9295] ? rw_verify_area+0x2ac/0x4e0 [ 225.529880][ T9295] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.529905][ T9295] vfs_read+0x212/0xa80 [ 225.529943][ T9295] ? __pfx_vfs_read+0x10/0x10 [ 225.529974][ T9295] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 225.530003][ T9295] ? lockdep_hardirqs_on+0x7a/0x110 [ 225.530031][ T9295] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 225.530060][ T9295] ? mutex_lock_nested+0x152/0x1d0 [ 225.530095][ T9295] ? fdget_pos+0x252/0x320 [ 225.530128][ T9295] ksys_read+0x156/0x270 [ 225.530174][ T9295] ? __pfx_ksys_read+0x10/0x10 [ 225.530202][ T9295] ? __pfx_v4l2_ioctl+0x10/0x10 [ 225.530242][ T9295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.530270][ T9295] do_syscall_64+0x174/0x580 [ 225.530300][ T9295] ? trace_irq_disable+0x3b/0x140 [ 225.530329][ T9295] ? clear_bhb_loop+0x40/0x90 [ 225.530358][ T9295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.530382][ T9295] RIP: 0033:0x7f653780d68e [ 225.530403][ T9295] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 225.530423][ T9295] RSP: 002b:00007f6535a9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.530448][ T9295] RAX: ffffffffffffffda RBX: 00007f6535a9e6c0 RCX: 00007f653780d68e [ 225.530466][ T9295] RDX: 000000000000000f RSI: 00007f6535a9e0a0 RDI: 0000000000000004 [ 225.530480][ T9295] RBP: 00007f6535a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 225.530495][ T9295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.530509][ T9295] R13: 00007f6537ac6038 R14: 00007f6537ac5fa0 R15: 00007fffc9402638 [ 225.530545][ T9295] [ 226.081782][ T9315] netlink: 32 bytes leftover after parsing attributes in process `syz.1.389'. [ 226.207374][ T5787] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 226.337194][ T5787] usb 4-1: device descriptor read/64, error -71 [ 226.517235][ T9] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 226.587235][ T5787] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 226.690110][ T9] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 226.690142][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 226.690194][ T9] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 226.690225][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 226.690271][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 226.690297][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.719208][ T9321] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 226.737634][ T5787] usb 4-1: device descriptor read/64, error -71 [ 226.788828][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 226.788870][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 [ 226.797277][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 226.797297][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 226.797309][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 226.797403][ T9] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 226.869443][ T5787] usb usb4-port1: attempt power cycle [ 226.917438][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 226.917472][ T37] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 226.917746][ T37] asix 5-1:0.34: probe with driver asix failed with error -71 [ 227.049231][ T37] usb 5-1: USB disconnect, device number 36 [ 227.052080][ T9] usb 2-1: USB disconnect, device number 38 [ 227.219442][ T5787] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 227.240180][ T5787] usb 4-1: device descriptor read/8, error -71 [ 227.345775][ T9355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 227.466243][ T9365] 8021q: VLANs not supported on ip6_vti0 [ 227.473569][ T9365] netlink: 'syz.4.394': attribute type 10 has an invalid length. [ 227.485385][ T5787] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 227.498010][ T5787] usb 4-1: device descriptor read/8, error -71 [ 227.537222][ T5709] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 227.609809][ T5787] usb usb4-port1: unable to enumerate USB device [ 227.651254][ T9375] FAULT_INJECTION: forcing a failure. [ 227.651254][ T9375] name failslab, interval 1, probability 0, space 0, times 0 [ 227.651284][ T9375] CPU: 0 UID: 0 PID: 9375 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 227.651307][ T9375] Tainted: [L]=SOFTLOCKUP [ 227.651313][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.651323][ T9375] Call Trace: [ 227.651329][ T9375] [ 227.651336][ T9375] dump_stack_lvl+0xe8/0x150 [ 227.651358][ T9375] should_fail_ex+0x46b/0x600 [ 227.651385][ T9375] should_failslab+0xa8/0x100 [ 227.651405][ T9375] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 227.651431][ T9375] ? skb_clone+0x212/0x3a0 [ 227.651451][ T9375] ? skb_clone+0x212/0x3a0 [ 227.651483][ T9375] skb_clone+0x212/0x3a0 [ 227.651506][ T9375] __netlink_deliver_tap+0x424/0x8b0 [ 227.651536][ T9375] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.651558][ T9375] netlink_deliver_tap+0x19c/0x1b0 [ 227.651580][ T9375] netlink_sendskb+0x68/0x140 [ 227.651599][ T9375] netlink_rcv_skb+0x2b6/0x4b0 [ 227.651625][ T9375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 227.651656][ T9375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.651686][ T9375] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.651706][ T9375] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.651730][ T9375] genl_rcv+0x28/0x40 [ 227.651753][ T9375] netlink_unicast+0x780/0x920 [ 227.651779][ T9375] netlink_sendmsg+0x813/0xb40 [ 227.651807][ T9375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.651830][ T9375] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 227.651854][ T9375] ? aa_sock_msg_perm+0x122/0x200 [ 227.651871][ T9375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.651892][ T9375] sock_sendmsg_nosec+0x13a/0x180 [ 227.651919][ T9375] ____sys_sendmsg+0x55c/0x870 [ 227.651944][ T9375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.651973][ T9375] ? import_iovec+0x73/0xa0 [ 227.651993][ T9375] ___sys_sendmsg+0x2a5/0x360 [ 227.652012][ T9375] ? __lock_acquire+0x6b5/0x2d10 [ 227.652037][ T9375] ? __pfx____sys_sendmsg+0x10/0x10 [ 227.652083][ T9375] ? __fget_files+0x2a/0x420 [ 227.652099][ T9375] ? __fget_files+0x3a6/0x420 [ 227.652122][ T9375] __x64_sys_sendmsg+0x1b7/0x290 [ 227.652145][ T9375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 227.652179][ T9375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.652221][ T9375] do_syscall_64+0x174/0x580 [ 227.652253][ T9375] ? clear_bhb_loop+0x40/0x90 [ 227.652283][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.652306][ T9375] RIP: 0033:0x7f252112ce59 [ 227.652329][ T9375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.652343][ T9375] RSP: 002b:00007f251f37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 227.652360][ T9375] RAX: ffffffffffffffda RBX: 00007f25213a5fa0 RCX: 00007f252112ce59 [ 227.652372][ T9375] RDX: 00000000000008c0 RSI: 0000200000000680 RDI: 0000000000000003 [ 227.652382][ T9375] RBP: 00007f251f37e090 R08: 0000000000000000 R09: 0000000000000000 [ 227.652393][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.652402][ T9375] R13: 00007f25213a6038 R14: 00007f25213a5fa0 R15: 00007ffc8023e9f8 [ 227.652427][ T9375] [ 227.820357][ T5709] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 227.820386][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.820404][ T5709] usb 1-1: Product: syz [ 227.820417][ T5709] usb 1-1: Manufacturer: syz [ 227.820430][ T5709] usb 1-1: SerialNumber: syz [ 228.033407][ T5709] usb 1-1: config 0 descriptor?? [ 228.043381][ T5709] hub 1-1:0.0: bad descriptor, ignoring hub [ 228.043422][ T5709] hub 1-1:0.0: probe with driver hub failed with error -5 [ 228.242634][ T5709] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 228.275276][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 228.276103][ T5709] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 228.276163][ T5709] usb 1-1: media controller created [ 228.319150][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.481514][ T5709] DVB: Unable to find symbol dib7000p_attach() [ 228.481528][ T5709] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 228.609385][ T5709] rc_core: IR keymap rc-dib0700-rc5 not found [ 228.609405][ T5709] Registered IR keymap rc-empty [ 228.610201][ T5709] dvb-usb: could not initialize remote control. [ 228.610213][ T5709] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 228.696768][ T9398] Bluetooth: MGMT ver 1.23 [ 228.931858][ T824] usb 1-1: USB disconnect, device number 53 [ 229.088588][ T824] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 229.126681][ T9427] FAULT_INJECTION: forcing a failure. [ 229.126681][ T9427] name failslab, interval 1, probability 0, space 0, times 0 [ 229.126720][ T9427] CPU: 1 UID: 0 PID: 9427 Comm: syz.3.405 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 229.126751][ T9427] Tainted: [L]=SOFTLOCKUP [ 229.126759][ T9427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.126773][ T9427] Call Trace: [ 229.126782][ T9427] [ 229.126791][ T9427] dump_stack_lvl+0xe8/0x150 [ 229.126832][ T9427] should_fail_ex+0x46b/0x600 [ 229.126870][ T9427] should_failslab+0xa8/0x100 [ 229.126899][ T9427] __kmalloc_noprof+0xfe/0x7e0 [ 229.126922][ T9427] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 229.126951][ T9427] ? ieee80211_key_alloc+0x52/0x2490 [ 229.126987][ T9427] ? ieee80211_key_alloc+0x52/0x2490 [ 229.127026][ T9427] ieee80211_key_alloc+0x52/0x2490 [ 229.127067][ T9427] ieee80211_add_key+0x344/0xc30 [ 229.127108][ T9427] rdev_add_key+0x134/0x300 [ 229.127138][ T9427] nl80211_new_key+0x71c/0x860 [ 229.127168][ T9427] ? __pfx_nl80211_new_key+0x10/0x10 [ 229.127202][ T9427] ? nl80211_pre_doit+0x57c/0x8d0 [ 229.127243][ T9427] genl_family_rcv_msg_doit+0x22a/0x330 [ 229.127295][ T9427] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 229.127342][ T9427] ? bpf_lsm_capable+0x9/0x20 [ 229.127369][ T9427] ? security_capable+0x7e/0x2c0 [ 229.127414][ T9427] genl_rcv_msg+0x61c/0x7a0 [ 229.127456][ T9427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.127490][ T9427] ? ref_tracker_free+0x673/0x820 [ 229.127523][ T9427] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 229.127555][ T9427] ? __pfx_nl80211_new_key+0x10/0x10 [ 229.127576][ T9427] ? __pfx_nl80211_post_doit+0x10/0x10 [ 229.127610][ T9427] ? ____sys_sendmsg+0x55c/0x870 [ 229.127637][ T9427] ? ___sys_sendmsg+0x2a5/0x360 [ 229.127676][ T9427] netlink_rcv_skb+0x232/0x4b0 [ 229.127705][ T9427] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.127742][ T9427] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.127796][ T9427] genl_rcv+0x28/0x40 [ 229.127837][ T9427] netlink_unicast+0x780/0x920 [ 229.127874][ T9427] netlink_sendmsg+0x813/0xb40 [ 229.127915][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.127948][ T9427] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 229.127982][ T9427] ? aa_sock_msg_perm+0x122/0x200 [ 229.128007][ T9427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.128036][ T9427] sock_sendmsg_nosec+0x13a/0x180 [ 229.128074][ T9427] ____sys_sendmsg+0x55c/0x870 [ 229.128110][ T9427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.128150][ T9427] ? import_iovec+0x73/0xa0 [ 229.128178][ T9427] ___sys_sendmsg+0x2a5/0x360 [ 229.128206][ T9427] ? __lock_acquire+0x6b5/0x2d10 [ 229.128242][ T9427] ? __pfx____sys_sendmsg+0x10/0x10 [ 229.128311][ T9427] ? __fget_files+0x2a/0x420 [ 229.128335][ T9427] ? __fget_files+0x3a6/0x420 [ 229.128368][ T9427] __x64_sys_sendmsg+0x1b7/0x290 [ 229.128400][ T9427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 229.128449][ T9427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.128475][ T9427] do_syscall_64+0x174/0x580 [ 229.128504][ T9427] ? trace_irq_disable+0x3b/0x140 [ 229.128531][ T9427] ? clear_bhb_loop+0x40/0x90 [ 229.128560][ T9427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.128584][ T9427] RIP: 0033:0x7f653784ce59 [ 229.128605][ T9427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.128625][ T9427] RSP: 002b:00007f6535a9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.128650][ T9427] RAX: ffffffffffffffda RBX: 00007f6537ac5fa0 RCX: 00007f653784ce59 [ 229.128667][ T9427] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 229.128680][ T9427] RBP: 00007f6535a9e090 R08: 0000000000000000 R09: 0000000000000000 [ 229.128695][ T9427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.128708][ T9427] R13: 00007f6537ac6038 R14: 00007f6537ac5fa0 R15: 00007fffc9402638 [ 229.128744][ T9427] [ 229.897982][ T9] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 230.057133][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 230.063119][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.063155][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.063181][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 230.063226][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 230.063252][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.129467][ T9] usb 4-1: config 0 descriptor?? [ 230.167118][ T824] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 230.297190][ T5709] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 230.333423][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.345801][ T824] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 230.345843][ T824] usb 1-1: can't read configurations, error -61 [ 230.450172][ T5709] usb 2-1: unable to get BOS descriptor or descriptor too short [ 230.451832][ T5709] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 140, changing to 7 [ 230.455221][ T5709] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 230.455264][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.455287][ T5709] usb 2-1: Product: syz [ 230.455304][ T5709] usb 2-1: Manufacturer: syz [ 230.455320][ T5709] usb 2-1: SerialNumber: syz [ 230.507154][ T824] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 230.541286][ T9436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.572771][ T9436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.687891][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 230.718264][ T824] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 230.718368][ T824] usb 1-1: can't read configurations, error -61 [ 230.718852][ T824] usb usb1-port1: attempt power cycle [ 230.831980][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.846598][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.904868][ T9] microsoft 0003:045E:07DA.0008: report is too long [ 230.904904][ T9] microsoft 0003:045E:07DA.0008: item 0 4 0 8 parsing failed [ 230.905715][ T9] microsoft 0003:045E:07DA.0008: parse failed [ 230.905823][ T9] microsoft 0003:045E:07DA.0008: probe with driver microsoft failed with error -22 [ 230.986820][ T5709] usb 2-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 230.986848][ T5709] usb 2-1: 1:1 : invalid channels 0 [ 231.039176][ T5709] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 231.099027][ T824] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 231.102443][ T9] usb 4-1: USB disconnect, device number 51 [ 231.137516][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 231.142310][ T824] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 231.142350][ T824] usb 1-1: can't read configurations, error -61 [ 231.267300][ T824] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 231.305972][ T824] usb 1-1: unable to get BOS descriptor or descriptor too short [ 231.322221][ T824] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 231.322261][ T824] usb 1-1: can't read configurations, error -61 [ 231.322657][ T824] usb usb1-port1: unable to enumerate USB device [ 231.373181][ T5709] usb 2-1: USB disconnect, device number 39 [ 231.745860][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 231.910991][ T5623] Bluetooth: hci1: unexpected event for opcode 0x200c [ 232.226451][ T9545] netlink: 52 bytes leftover after parsing attributes in process `syz.1.420'. [ 232.323375][ T9551] ipvlan1: mtu greater than device maximum [ 232.377247][ T5709] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 232.437175][ T9] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 232.537186][ T5709] usb 5-1: Using ep0 maxpacket: 32 [ 232.545019][ T5709] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 232.545051][ T5709] usb 5-1: config 0 has no interface number 0 [ 232.545099][ T5709] usb 5-1: config 0 interface 12 has no altsetting 0 [ 232.578949][ T5709] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 232.578982][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.579005][ T5709] usb 5-1: Product: syz [ 232.579021][ T5709] usb 5-1: Manufacturer: syz [ 232.579037][ T5709] usb 5-1: SerialNumber: syz [ 232.597927][ T5709] usb 5-1: config 0 descriptor?? [ 232.629843][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 232.643441][ T9] usb 4-1: config 5 has an invalid interface number: 190 but max is 0 [ 232.643471][ T9] usb 4-1: config 5 has no interface number 0 [ 232.643507][ T9] usb 4-1: config 5 interface 190 has no altsetting 0 [ 232.680105][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=a3.61 [ 232.680141][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.680164][ T9] usb 4-1: Product: syz [ 232.680181][ T9] usb 4-1: Manufacturer: syz [ 232.680197][ T9] usb 4-1: SerialNumber: syz [ 233.336225][ T9574] mmap: syz.0.424 (9574): VmData 37588992 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 233.403874][ T9] usb 4-1: selecting invalid altsetting 1 [ 233.403906][ T9] comedi comedi5: could not switch to alternate setting 1 [ 233.403925][ T9] usbduxfast 4-1:5.190: driver 'usbduxfast' failed to auto-configure device. [ 233.405317][ T5709] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 233.405384][ T5709] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 233.405404][ T5709] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 233.405500][ T5709] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 233.509574][ T9] usb 4-1: USB disconnect, device number 52 [ 233.604506][ T5709] usb 5-1: USB disconnect, device number 37 [ 233.713956][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 235.317099][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 235.479027][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 235.483686][ T10] usb 2-1: config 0 has no interfaces? [ 235.486034][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 235.486066][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.486088][ T10] usb 2-1: Product: syz [ 235.486106][ T10] usb 2-1: Manufacturer: syz [ 235.486122][ T10] usb 2-1: SerialNumber: syz [ 235.542805][ T10] usb 2-1: config 0 descriptor?? [ 236.096590][ T9663] netlink: 'syz.1.432': attribute type 2 has an invalid length. [ 236.096614][ T9663] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.432'. [ 236.801809][ T9671] netlink: 'syz.3.440': attribute type 19 has an invalid length. [ 237.126023][ T824] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 237.320262][ T824] usb 5-1: Using ep0 maxpacket: 16 [ 237.367741][ T824] usb 5-1: config 0 interface 0 has no altsetting 0 [ 237.367787][ T824] usb 5-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 237.367814][ T824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.514779][ T824] usb 5-1: config 0 descriptor?? [ 238.078649][ T10] usb 2-1: USB disconnect, device number 40 [ 238.084689][ T824] sony 0003:054C:0374.0009: ignoring exceeding usage max [ 238.126620][ T824] sony 0003:054C:0374.0009: unknown main item tag 0x6 [ 238.126665][ T824] sony 0003:054C:0374.0009: ignoring exceeding usage max [ 238.186044][ T824] sony 0003:054C:0374.0009: ignoring exceeding usage max [ 238.219566][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.220358][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.265041][ T824] sony 0003:054C:0374.0009: hiddev0,hidraw0: USB HID v0.81 Device [HID 054c:0374] on usb-dummy_hcd.4-1/input0 [ 238.265078][ T824] sony 0003:054C:0374.0009: failed to claim input [ 238.609666][ T10] usb 5-1: USB disconnect, device number 38 [ 238.633540][ T9725] fido_id[9725]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 238.913792][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 238.913936][ T9750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 239.067138][ T5787] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 239.149559][ T9765] overlayfs: overlapping lowerdir path [ 239.206167][ T9765] __vm_enough_memory: pid: 9765, comm: syz.1.453, bytes: 21200155430912 not enough memory for the allocation [ 239.223832][ T5787] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.223898][ T5787] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.252942][ T5787] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.252975][ T5787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 239.252998][ T5787] usb 1-1: SerialNumber: syz [ 239.324418][ T5787] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 239.337417][ T10] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 239.487177][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 239.489777][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 239.489807][ T10] usb 4-1: config 0 has no interface number 0 [ 239.489858][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 239.530711][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 239.530744][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.530766][ T10] usb 4-1: Product: syz [ 239.530782][ T10] usb 4-1: Manufacturer: syz [ 239.530797][ T10] usb 4-1: SerialNumber: syz [ 239.538930][ T9741] 9pnet_fd: Insufficient options for proto=fd [ 239.585968][ T5709] usb 1-1: USB disconnect, device number 58 [ 239.597400][ T10] usb 4-1: config 0 descriptor?? [ 239.711871][ T9792] FAULT_INJECTION: forcing a failure. [ 239.711871][ T9792] name failslab, interval 1, probability 0, space 0, times 0 [ 239.711912][ T9792] CPU: 1 UID: 0 PID: 9792 Comm: syz.1.458 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.711942][ T9792] Tainted: [L]=SOFTLOCKUP [ 239.711950][ T9792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.711979][ T9792] Call Trace: [ 239.711988][ T9792] [ 239.711998][ T9792] dump_stack_lvl+0xe8/0x150 [ 239.712030][ T9792] should_fail_ex+0x46b/0x600 [ 239.712088][ T9792] should_failslab+0xa8/0x100 [ 239.712117][ T9792] __kmalloc_noprof+0xfe/0x7e0 [ 239.712140][ T9792] ? rcu_is_watching+0x15/0xb0 [ 239.712174][ T9792] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.712199][ T9792] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.712238][ T9792] tomoyo_realpath_from_path+0xe3/0x5d0 [ 239.712268][ T9792] ? tomoyo_domain+0xd7/0x130 [ 239.712308][ T9792] ? tomoyo_path_number_perm+0x219/0x630 [ 239.712347][ T9792] tomoyo_path_number_perm+0x246/0x630 [ 239.712387][ T9792] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 239.712422][ T9792] ? __lock_acquire+0x6b5/0x2d10 [ 239.712457][ T9792] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.712516][ T9792] ? __fget_files+0x2a/0x420 [ 239.712554][ T9792] ? __fget_files+0x2a/0x420 [ 239.712577][ T9792] ? __fget_files+0x3a6/0x420 [ 239.712599][ T9792] ? __fget_files+0x2a/0x420 [ 239.712626][ T9792] security_file_ioctl+0xc3/0x2a0 [ 239.712660][ T9792] __se_sys_ioctl+0x47/0x170 [ 239.712691][ T9792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.712716][ T9792] do_syscall_64+0x174/0x580 [ 239.712745][ T9792] ? trace_irq_disable+0x3b/0x140 [ 239.712773][ T9792] ? clear_bhb_loop+0x40/0x90 [ 239.712820][ T9792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.712843][ T9792] RIP: 0033:0x7f252112ce59 [ 239.712863][ T9792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.712884][ T9792] RSP: 002b:00007f251f37e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.712909][ T9792] RAX: ffffffffffffffda RBX: 00007f25213a5fa0 RCX: 00007f252112ce59 [ 239.712926][ T9792] RDX: 0000200000000000 RSI: 00000000c0205647 RDI: 0000000000000003 [ 239.712941][ T9792] RBP: 00007f251f37e090 R08: 0000000000000000 R09: 0000000000000000 [ 239.712957][ T9792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.712971][ T9792] R13: 00007f25213a6038 R14: 00007f25213a5fa0 R15: 00007ffc8023e9f8 [ 239.713007][ T9792] [ 239.714678][ T9792] ERROR: Out of memory at tomoyo_realpath_from_path. [ 240.072603][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.459'. [ 240.280038][ T9759] binder: 9757:9759 ioctl c0306201 2000000003c0 returned -22 [ 240.747451][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 240.747508][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 240.747528][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 240.747626][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 240.803518][ T10] usb 4-1: USB disconnect, device number 53 [ 241.109701][ T9838] binder_alloc: 9836: binder_alloc_buf, no vma [ 241.477839][ T9863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.469'. [ 241.587552][ T5784] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 241.737171][ T5784] usb 5-1: Using ep0 maxpacket: 32 [ 241.747624][ T5784] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.751819][ T5784] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.756933][ T5784] usb 5-1: string descriptor 0 read error: -22 [ 241.782342][ T5784] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 241.782374][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.976428][ T9882] binder_alloc: 9881: binder_alloc_buf, no vma [ 242.059292][ T9886] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 4294967294 out of range (51000000..2150000000) [ 242.256447][ T5784] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 242.479858][ T9856] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 242.629654][ T5784] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 242.739269][ T5784] usb 5-1: USB disconnect, device number 39 [ 242.768137][ T5763] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 242.892047][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.943976][ T5763] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 242.944052][ T5763] usb 4-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 242.944083][ T5763] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.944118][ T5763] usb 4-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.00 [ 242.944144][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.027652][ T5763] usb 4-1: config 0 descriptor?? [ 243.069512][ T5787] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 243.101445][ T9928] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 243.217146][ T5787] usb 1-1: Using ep0 maxpacket: 32 [ 243.224131][ T5787] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.259830][ T5787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 243.259924][ T5787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.259949][ T5787] usb 1-1: Product: syz [ 243.259966][ T5787] usb 1-1: Manufacturer: syz [ 243.259982][ T5787] usb 1-1: SerialNumber: syz [ 243.570079][ T9916] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 243.570185][ T9916] overlayfs: failed to set xattr on upper [ 243.570195][ T9916] overlayfs: ...falling back to redirect_dir=nofollow. [ 243.570205][ T9916] overlayfs: ...falling back to index=off. [ 243.570214][ T9916] overlayfs: ...falling back to uuid=null. [ 243.570413][ T9916] overlayfs: failed to clone lowerpath [ 243.916662][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 244.414986][ T9973] binder_alloc: 9972: binder_alloc_buf, no vma [ 244.469011][ T5784] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 244.658158][ T5784] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 244.658195][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.658218][ T5784] usb 5-1: Product: syz [ 244.658235][ T5784] usb 5-1: Manufacturer: syz [ 244.658251][ T5784] usb 5-1: SerialNumber: syz [ 244.700900][ T5784] usb 5-1: config 0 descriptor?? [ 244.826098][ T5787] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 244.968645][ T5709] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 245.201857][ T5709] usb 2-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 245.201937][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.266898][ T5709] usb 2-1: config 0 descriptor?? [ 245.304921][ T5763] usb 4-1: string descriptor 0 read error: -71 [ 245.340287][ T5709] pwc: Creative Labs Webcam 5 detected. [ 245.384055][ T5763] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 245.481136][ T5709] pwc: Failed to set LED on/off time (-71) [ 245.488207][ T5709] pwc: send_video_command error -71 [ 245.488226][ T5709] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 245.488339][ T5709] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 245.551730][ T5709] usb 2-1: USB disconnect, device number 41 [ 245.567703][ T5763] usb 4-1: USB disconnect, device number 54 [ 245.798416][ T5787] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.828006][ T5787] usb 1-1: USB disconnect, device number 59 [ 245.913644][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.011848][ T9965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.012526][ T9965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.072000][ T5784] usb 5-1: USB disconnect, device number 40 [ 246.132471][T10035] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 246.132492][T10035] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.186734][T10035] vhci_hcd vhci_hcd.0: Device attached [ 246.316789][ T5623] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 246.359499][ T5624] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 246.417139][ T5624] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 246.453788][T10045] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.488'. [ 246.603065][T10050] fuse: Bad value for 'fd' [ 246.681933][T10052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 246.681965][T10052] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 246.716533][T10052] vhci_hcd vhci_hcd.0: Device attached [ 246.770767][T10057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.489'. [ 246.820623][T10055] cgroup: subsys name conflicts with all [ 246.939647][ T5763] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 246.944891][T10036] vhci_hcd: connection reset by peer [ 246.982518][ T179] vhci_hcd vhci_hcd.3: stop threads [ 246.984531][ T179] vhci_hcd vhci_hcd.3: release socket [ 247.013064][T10061] fuse: Bad value for 'fd' [ 247.025016][ T179] vhci_hcd vhci_hcd.3: disconnect device [ 247.446167][T10038] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 247.446514][T10038] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 247.446785][T10038] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 247.456005][T10038] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 247.747250][ T824] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 247.837144][ T5787] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 247.887173][ T824] usb 5-1: device descriptor read/64, error -71 [ 247.987570][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 247.989589][ T5787] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 247.989623][ T5787] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 247.989642][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 247.989662][ T5787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 247.989679][ T5787] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.992635][ T5787] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 247.992671][ T5787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.992686][ T5787] usb 4-1: Product: syz [ 247.992697][ T5787] usb 4-1: Manufacturer: syz [ 247.992707][ T5787] usb 4-1: SerialNumber: syz [ 248.000975][ T5787] usb 4-1: config 0 descriptor?? [ 248.177232][ T824] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 248.307206][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 248.307462][ T824] usb 5-1: device descriptor read/64, error -71 [ 248.428374][ T824] usb usb5-port1: attempt power cycle [ 248.777135][ T824] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 248.797950][ T824] usb 5-1: device descriptor read/8, error -71 [ 249.037090][ T824] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 249.058625][ T824] usb 5-1: device descriptor read/8, error -71 [ 249.167517][ T824] usb usb5-port1: unable to enumerate USB device [ 249.183158][ T5787] iowarrior 4-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 249.202381][ T5787] usb 4-1: USB disconnect, device number 55 [ 249.507795][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 249.507807][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 249.507858][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 249.692627][T10053] vhci_hcd: connection reset by peer [ 249.728123][ T1490] vhci_hcd vhci_hcd.4: stop threads [ 249.728152][ T1490] vhci_hcd vhci_hcd.4: release socket [ 249.728223][ T1490] vhci_hcd vhci_hcd.4: disconnect device [ 249.783495][T10099] FAULT_INJECTION: forcing a failure. [ 249.783495][T10099] name failslab, interval 1, probability 0, space 0, times 0 [ 249.783537][T10099] CPU: 1 UID: 0 PID: 10099 Comm: syz.1.497 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 249.783570][T10099] Tainted: [L]=SOFTLOCKUP [ 249.783579][T10099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 249.783597][T10099] Call Trace: [ 249.783606][T10099] [ 249.783616][T10099] dump_stack_lvl+0xe8/0x150 [ 249.783646][T10099] should_fail_ex+0x46b/0x600 [ 249.783684][T10099] should_failslab+0xa8/0x100 [ 249.783712][T10099] kmem_cache_alloc_node_noprof+0xae/0x710 [ 249.783751][T10099] ? __alloc_skb+0x1d0/0x7d0 [ 249.783774][T10099] ? __alloc_skb+0x1d0/0x7d0 [ 249.783805][T10099] __alloc_skb+0x1d0/0x7d0 [ 249.783829][T10099] ? netlink_ack_tlv_len+0x6c/0x210 [ 249.783860][T10099] netlink_ack+0x146/0xa50 [ 249.783885][T10099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.783918][T10099] ? ref_tracker_free+0x673/0x820 [ 249.783949][T10099] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 249.783980][T10099] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 249.784011][T10099] ? ____sys_sendmsg+0x55c/0x870 [ 249.784037][T10099] ? ___sys_sendmsg+0x2a5/0x360 [ 249.784062][T10099] ? __x64_sys_sendmsg+0x1b7/0x290 [ 249.784088][T10099] ? do_syscall_64+0x174/0x580 [ 249.784124][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.784159][T10099] netlink_rcv_skb+0x2b6/0x4b0 [ 249.784188][T10099] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.784225][T10099] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.784266][T10099] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.784295][T10099] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.784328][T10099] genl_rcv+0x28/0x40 [ 249.784360][T10099] netlink_unicast+0x780/0x920 [ 249.784397][T10099] netlink_sendmsg+0x813/0xb40 [ 249.784437][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.784469][T10099] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 249.784501][T10099] ? aa_sock_msg_perm+0x122/0x200 [ 249.784526][T10099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.784553][T10099] sock_sendmsg_nosec+0x13a/0x180 [ 249.784591][T10099] ____sys_sendmsg+0x55c/0x870 [ 249.784627][T10099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.784665][T10099] ? import_iovec+0x73/0xa0 [ 249.784693][T10099] ___sys_sendmsg+0x2a5/0x360 [ 249.784721][T10099] ? __lock_acquire+0x6b5/0x2d10 [ 249.784756][T10099] ? __pfx____sys_sendmsg+0x10/0x10 [ 249.784822][T10099] ? __fget_files+0x2a/0x420 [ 249.784844][T10099] ? __fget_files+0x3a6/0x420 [ 249.784879][T10099] __x64_sys_sendmsg+0x1b7/0x290 [ 249.784911][T10099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 249.784959][T10099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.784984][T10099] do_syscall_64+0x174/0x580 [ 249.785011][T10099] ? trace_irq_disable+0x3b/0x140 [ 249.785041][T10099] ? clear_bhb_loop+0x40/0x90 [ 249.785068][T10099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.785098][T10099] RIP: 0033:0x7f252112ce59 [ 249.785120][T10099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.785140][T10099] RSP: 002b:00007f251f37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.785166][T10099] RAX: ffffffffffffffda RBX: 00007f25213a5fa0 RCX: 00007f252112ce59 [ 249.785183][T10099] RDX: 0000000000000400 RSI: 0000200000000f00 RDI: 0000000000000003 [ 249.785198][T10099] RBP: 00007f251f37e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.785213][T10099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.785226][T10099] R13: 00007f25213a6038 R14: 00007f25213a5fa0 R15: 00007ffc8023e9f8 [ 249.785263][T10099] [ 250.183604][T10104] FAULT_INJECTION: forcing a failure. [ 250.183604][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.183635][T10104] CPU: 0 UID: 0 PID: 10104 Comm: syz.0.503 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 250.183658][T10104] Tainted: [L]=SOFTLOCKUP [ 250.183664][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.183674][T10104] Call Trace: [ 250.183680][T10104] [ 250.183687][T10104] dump_stack_lvl+0xe8/0x150 [ 250.183711][T10104] should_fail_ex+0x46b/0x600 [ 250.183739][T10104] _copy_from_user+0x2d/0xb0 [ 250.183758][T10104] drm_mode_atomic_ioctl+0x77f/0xdd0 [ 250.183799][T10104] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 250.183837][T10104] ? rt_spin_unlock+0x14f/0x200 [ 250.183857][T10104] ? rt_spin_unlock+0x160/0x200 [ 250.183874][T10104] ? drm_is_current_master+0x1a2/0x210 [ 250.183892][T10104] drm_ioctl_kernel+0x2e2/0x3b0 [ 250.183916][T10104] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 250.183942][T10104] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 250.183970][T10104] drm_ioctl+0x6c0/0xb80 [ 250.183995][T10104] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 250.184029][T10104] ? __pfx_drm_ioctl+0x10/0x10 [ 250.184062][T10104] ? __fget_files+0x2a/0x420 [ 250.184081][T10104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 250.184100][T10104] ? __pfx_drm_ioctl+0x10/0x10 [ 250.184121][T10104] __se_sys_ioctl+0xff/0x170 [ 250.184142][T10104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.184160][T10104] do_syscall_64+0x174/0x580 [ 250.184180][T10104] ? trace_irq_disable+0x3b/0x140 [ 250.184201][T10104] ? clear_bhb_loop+0x40/0x90 [ 250.184221][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.184237][T10104] RIP: 0033:0x7f5340bace59 [ 250.184251][T10104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.184265][T10104] RSP: 002b:00007f533ee06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.184288][T10104] RAX: ffffffffffffffda RBX: 00007f5340e25fa0 RCX: 00007f5340bace59 [ 250.184301][T10104] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 0000000000000003 [ 250.184312][T10104] RBP: 00007f533ee06090 R08: 0000000000000000 R09: 0000000000000000 [ 250.184322][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.184331][T10104] R13: 00007f5340e26038 R14: 00007f5340e25fa0 R15: 00007fff9e69d598 [ 250.184356][T10104] [ 250.511105][T10106] binder_alloc: 10103: binder_alloc_buf, no vma [ 250.781805][T10114] NILFS (loop0): device size too small [ 251.117277][ T5625] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 251.144405][T10139] tmpfs: Unsupported parameter 'huge' [ 251.288319][ T5625] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 251.288353][ T5625] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.288368][ T5625] usb 2-1: Product: syz [ 251.288379][ T5625] usb 2-1: Manufacturer: syz [ 251.288389][ T5625] usb 2-1: SerialNumber: syz [ 251.302576][ T5625] usb 2-1: config 0 descriptor?? [ 251.562752][T10151] binder: 10150:10151 unknown command 0 [ 251.562775][T10151] binder: 10150:10151 ioctl c0306201 2000000001c0 returned -22 [ 251.590746][ T5624] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 251.870696][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.875772][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.951167][ T5625] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 252.009154][T10163] binder: 10161:10163 ioctl ae01 403 returned -22 [ 252.035520][T10163] binder: 10161:10163 ioctl c0306201 200000000440 returned -14 [ 252.058288][ T5763] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 252.100906][ T5625] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.103158][ T5625] usb 5-1: config 7 has an invalid interface number: 13 but max is 0 [ 252.103186][ T5625] usb 5-1: config 7 has no interface number 0 [ 252.103235][ T5625] usb 5-1: config 7 interface 13 altsetting 85 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 252.103268][ T5625] usb 5-1: config 7 interface 13 altsetting 85 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 252.103298][ T5625] usb 5-1: config 7 interface 13 altsetting 85 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 252.103327][ T5625] usb 5-1: config 7 interface 13 has no altsetting 0 [ 252.107178][ T5625] usb 5-1: New USB device found, idVendor=1199, idProduct=0224, bcdDevice=35.08 [ 252.107209][ T5625] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.107290][ T5625] usb 5-1: Product: syz [ 252.107365][ T5625] usb 5-1: Manufacturer: syz [ 252.107422][ T5625] usb 5-1: SerialNumber: syz [ 252.376434][T10171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.511'. [ 252.534497][T10177] FAULT_INJECTION: forcing a failure. [ 252.534497][T10177] name failslab, interval 1, probability 0, space 0, times 0 [ 252.534620][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.0.512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.534649][T10177] Tainted: [L]=SOFTLOCKUP [ 252.534659][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.534669][T10177] Call Trace: [ 252.534675][T10177] [ 252.534681][T10177] dump_stack_lvl+0xe8/0x150 [ 252.534706][T10177] should_fail_ex+0x46b/0x600 [ 252.534733][T10177] should_failslab+0xa8/0x100 [ 252.534753][T10177] __kmalloc_node_noprof+0x106/0x820 [ 252.534770][T10177] ? __get_vm_area_node+0x1f8/0x300 [ 252.534795][T10177] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 252.534824][T10177] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 252.534855][T10177] __vmalloc_node_range_noprof+0x5ef/0x1750 [ 252.534880][T10177] ? stack_depot_save_flags+0x33/0x810 [ 252.534904][T10177] ? kstrtoull+0x12f/0x1d0 [ 252.534928][T10177] ? __kasan_kmalloc+0x93/0xb0 [ 252.534958][T10177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.534999][T10177] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.535021][T10177] __vmalloc_noprof+0xd2/0x120 [ 252.535036][T10177] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.535059][T10177] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.535084][T10177] bpf_prog_alloc+0x3c/0x1a0 [ 252.535107][T10177] bpf_prog_create_from_user+0xa7/0x440 [ 252.535133][T10177] ? __pfx_seccomp_check_filter+0x10/0x10 [ 252.535160][T10177] do_seccomp+0x776/0xd30 [ 252.535186][T10177] ? __pfx_do_seccomp+0x10/0x10 [ 252.535209][T10177] ? ksys_write+0x248/0x270 [ 252.535231][T10177] ? __pfx_ksys_write+0x10/0x10 [ 252.535256][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.535273][T10177] do_syscall_64+0x174/0x580 [ 252.535293][T10177] ? trace_irq_disable+0x3b/0x140 [ 252.535319][T10177] ? clear_bhb_loop+0x40/0x90 [ 252.535338][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.535355][T10177] RIP: 0033:0x7f5340bace59 [ 252.535369][T10177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.535384][T10177] RSP: 002b:00007f533ee06028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 252.535400][T10177] RAX: ffffffffffffffda RBX: 00007f5340e25fa0 RCX: 00007f5340bace59 [ 252.535412][T10177] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 252.535423][T10177] RBP: 00007f533ee06090 R08: 0000000000000000 R09: 0000000000000000 [ 252.535432][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.535442][T10177] R13: 00007f5340e26038 R14: 00007f5340e25fa0 R15: 00007fff9e69d598 [ 252.535466][T10177] [ 252.535711][T10177] syz.0.512: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 252.536063][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.0.512 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 252.536086][T10177] Tainted: [L]=SOFTLOCKUP [ 252.536091][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 252.536101][T10177] Call Trace: [ 252.536106][T10177] [ 252.536113][T10177] dump_stack_lvl+0xe8/0x150 [ 252.536134][T10177] warn_alloc+0x24c/0x270 [ 252.536155][T10177] ? __pfx_warn_alloc+0x10/0x10 [ 252.536176][T10177] ? __kmalloc_node_noprof+0x3ca/0x820 [ 252.536192][T10177] ? __get_vm_area_node+0x1f8/0x300 [ 252.536216][T10177] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 252.536241][T10177] ? __vmalloc_node_range_noprof+0x5ef/0x1750 [ 252.536272][T10177] __vmalloc_node_range_noprof+0xa06/0x1750 [ 252.536298][T10177] ? stack_depot_save_flags+0x33/0x810 [ 252.536473][T10177] ? __kasan_kmalloc+0x93/0xb0 [ 252.536530][T10177] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.536698][T10177] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.536723][T10177] __vmalloc_noprof+0xd2/0x120 [ 252.536739][T10177] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.536763][T10177] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 252.536788][T10177] bpf_prog_alloc+0x3c/0x1a0 [ 252.536814][T10177] bpf_prog_create_from_user+0xa7/0x440 [ 252.536841][T10177] ? __pfx_seccomp_check_filter+0x10/0x10 [ 252.536869][T10177] do_seccomp+0x776/0xd30 [ 252.536896][T10177] ? __pfx_do_seccomp+0x10/0x10 [ 252.536919][T10177] ? ksys_write+0x248/0x270 [ 252.536942][T10177] ? __pfx_ksys_write+0x10/0x10 [ 252.536970][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.536989][T10177] do_syscall_64+0x174/0x580 [ 252.537009][T10177] ? trace_irq_disable+0x3b/0x140 [ 252.537030][T10177] ? clear_bhb_loop+0x40/0x90 [ 252.537049][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.537066][T10177] RIP: 0033:0x7f5340bace59 [ 252.537081][T10177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.537096][T10177] RSP: 002b:00007f533ee06028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 252.537113][T10177] RAX: ffffffffffffffda RBX: 00007f5340e25fa0 RCX: 00007f5340bace59 [ 252.537125][T10177] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 252.537135][T10177] RBP: 00007f533ee06090 R08: 0000000000000000 R09: 0000000000000000 [ 252.537146][T10177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.537156][T10177] R13: 00007f5340e26038 R14: 00007f5340e25fa0 R15: 00007fff9e69d598 [ 252.537181][T10177] [ 252.566041][T10177] Mem-Info: [ 252.566062][T10177] active_anon:6293 inactive_anon:0 isolated_anon:0 [ 252.566062][T10177] active_file:0 inactive_file:55107 isolated_file:0 [ 252.566062][T10177] unevictable:768 dirty:74 writeback:0 [ 252.566062][T10177] slab_reclaimable:11486 slab_unreclaimable:97261 [ 252.566062][T10177] mapped:25118 shmem:1294 pagetables:1368 [ 252.566062][T10177] sec_pagetables:0 bounce:0 [ 252.566062][T10177] kernel_misc_reclaimable:0 [ 252.566062][T10177] free:1331130 free_pcp:2808 free_cma:0 [ 252.566123][T10177] Node 0 active_anon:25172kB inactive_anon:0kB active_file:0kB inactive_file:220236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100472kB dirty:292kB writeback:0kB shmem:3640kB kernel_stack:13184kB pagetables:5348kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 252.566182][T10177] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 252.566234][T10177] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.566307][T10177] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 252.566349][T10177] Node 0 DMA32 free:1368916kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25172kB inactive_anon:0kB active_file:0kB inactive_file:220236kB unevictable:1536kB writepending:292kB zspages:0kB present:3129332kB managed:2551612kB mlocked:0kB bounce:0kB free_pcp:11232kB local_pcp:9544kB free_cma:0kB [ 252.566418][T10177] lowmem_reserve[]: 0 0 0 0 0 [ 252.566456][T10177] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:596kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.566520][T10177] lowmem_reserve[]: 0 0 0 0 0 [ 252.566565][T10177] Node 1 Normal free:3940244kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.566638][T10177] lowmem_reserve[]: 0 0 0 0 0 [ 252.566683][T10177] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.566815][T10177] Node 0 DMA32: 1397*4kB (UM) 1251*8kB (UME) 650*16kB (UME) 353*32kB (UME) 224*64kB (UME) 67*128kB (UM) 40*256kB (ME) 10*512kB (UME) 5*1024kB (UME) 3*2048kB (UM) 313*4096kB (UM) = 1368876kB [ 252.634293][T10177] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.635671][T10177] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 5*16kB (UM) 7*32kB (UM) 7*64kB (UM) 5*128kB (UM) 2*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 961*4096kB (UM) = 3940244kB [ 252.656718][T10177] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.656773][T10177] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.657170][T10177] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.657225][T10177] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.657687][T10177] 56397 total pagecache pages [ 252.660498][T10177] 0 pages in swap cache [ 252.660540][T10177] Free swap = 119660kB [ 252.672023][T10177] Total swap = 124996kB [ 252.672074][T10177] 2097051 pages RAM [ 252.672433][T10177] 0 pages HighMem/MovableOnly [ 252.672465][T10177] 427385 pages reserved [ 252.672486][T10177] 0 pages cma reserved [ 252.806992][ T5624] usb 2-1: USB disconnect, device number 42 [ 253.565512][T10154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.566156][T10154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.590233][ T5625] sierra 5-1:7.13: Sierra USB modem converter detected [ 253.631892][ T5625] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 253.683130][ T5625] usb 5-1: USB disconnect, device number 45 [ 253.790032][ T5625] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 253.810258][ T5625] sierra 5-1:7.13: device disconnected [ 253.814094][T10205] support for cryptoloop has been removed. Use dm-crypt instead. [ 253.967186][ T5763] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 254.030112][T10220] binder: 10219:10220 unknown command 0 [ 254.030130][T10220] binder: 10219:10220 ioctl c0306201 2000000001c0 returned -22 [ 254.150194][ T5763] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 254.150221][ T5763] usb 4-1: config 0 has no interface number 0 [ 254.150260][ T5763] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 254.150288][ T5763] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 254.150334][ T5763] usb 4-1: config 0 interface 41 has no altsetting 0 [ 254.198693][ T5763] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 254.198728][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.198751][ T5763] usb 4-1: Product: syz [ 254.198767][ T5763] usb 4-1: Manufacturer: syz [ 254.198784][ T5763] usb 4-1: SerialNumber: syz [ 254.246236][ T5763] usb 4-1: config 0 descriptor?? [ 254.265982][ T5763] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22 [ 254.364172][T10232] Bluetooth: MGMT ver 1.23 [ 254.449619][ T9] usb 4-1: USB disconnect, device number 56 [ 254.547236][ T5625] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 254.707365][ T5625] usb 2-1: Using ep0 maxpacket: 32 [ 254.709568][ T5625] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.709594][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 254.709615][ T5625] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 254.709648][ T5625] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.709668][ T5625] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.714912][ T5625] usb 2-1: config 0 descriptor?? [ 254.716809][T10227] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 254.733758][ T5625] hub 2-1:0.0: USB hub found [ 254.933996][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 255.021034][ T5625] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 255.044569][ T5625] usbhid 2-1:0.0: can't add hid device: -71 [ 255.044685][ T5625] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 255.178787][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 255.199319][ T5625] usb 2-1: USB disconnect, device number 43 [ 255.226890][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 255.226919][ T9] usb 5-1: config 0 has no interface number 0 [ 255.230367][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 255.231742][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 255.231885][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 255.268842][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 255.268928][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 255.268952][ T9] usb 5-1: Product: syz [ 255.268967][ T9] usb 5-1: SerialNumber: syz [ 255.323768][ T9] usb 5-1: config 0 descriptor?? [ 255.385989][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 255.404054][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input16 [ 255.620397][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.622956][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.623219][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.623464][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.623729][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.624010][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.624271][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.624497][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.624727][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.624956][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 255.754226][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.754352][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806478][ T9] usb 5-1: USB disconnect, device number 46 [ 255.806584][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 255.976579][ T9] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 256.178919][T10315] program syz.1.530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.782681][T10347] netlink: 72 bytes leftover after parsing attributes in process `syz.1.539'. [ 258.252248][T10360] program syz.4.544 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.387051][T10367] comedi comedi0: reset error (fatal) [ 260.835847][T10402] syzkaller1: entered promiscuous mode [ 260.835877][T10402] syzkaller1: entered allmulticast mode [ 261.314928][T10415] Unknown status report in ack skb [ 263.270510][T10491] syzkaller1: entered promiscuous mode [ 263.270538][T10491] syzkaller1: entered allmulticast mode [ 263.518992][T10476] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 263.519013][T10476] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 263.519031][T10476] CPU: 0 UID: 0 PID: 10476 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.519053][T10476] Tainted: [L]=SOFTLOCKUP [ 263.519059][T10476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 263.519070][T10476] RIP: 0010:__schedule+0x4030/0x5550 [ 263.519091][T10476] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 263.519106][T10476] RSP: 0018:ffffc900066d70e0 EFLAGS: 00010003 [ 263.519121][T10476] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 263.519131][T10476] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 263.519141][T10476] RBP: ffffc900066d72c8 R08: 0000000000000003 R09: 0000000000000004 [ 263.519152][T10476] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 263.519164][T10476] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 263.519178][T10476] FS: 000055557440f500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 263.519192][T10476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.519203][T10476] CR2: 00007f1bca435f88 CR3: 000000002aae0000 CR4: 00000000003526f0 [ 263.519217][T10476] Call Trace: [ 263.519223][T10476] [ 263.519240][T10476] ? __pfx___schedule+0x10/0x10 [ 263.519263][T10476] preempt_schedule_irq+0x4d/0xa0 [ 263.519281][T10476] irqentry_exit+0x14f/0x8c0 [ 263.519301][T10476] ? trace_irq_disable+0x3b/0x140 [ 263.519323][T10476] asm_sysvec_call_function_single+0x1a/0x20 [ 263.519340][T10476] RIP: 0010:__sanitizer_cov_trace_pc+0x6b/0x80 [ 263.519359][T10476] Code: e0 16 00 00 83 fa 02 75 21 48 8b 91 e8 16 00 00 48 8b 32 48 8d 7e 01 8b 89 e4 16 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 50 f1 7b 09 cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 [ 263.519372][T10476] RSP: 0018:ffffc900066d73f8 EFLAGS: 00000293 [ 263.519384][T10476] RAX: ffffffff8217b3d4 RBX: 0000000000000001 RCX: ffff8880254bdd00 [ 263.519395][T10476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.519405][T10476] RBP: ffffea00014ee600 R08: 0000000000000000 R09: 0000000000000000 [ 263.519415][T10476] R10: dffffc0000000000 R11: fffffbfff1f9e71f R12: ffff88805af8aa00 [ 263.519427][T10476] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.519445][T10476] ? mm_trace_rss_stat+0x84/0x200 [ 263.519467][T10476] mm_trace_rss_stat+0x84/0x200 [ 263.519487][T10476] insert_page_into_pte_locked+0x67f/0x820 [ 263.519510][T10476] insert_page+0x24e/0x3b0 [ 263.519531][T10476] ? __pfx_insert_page+0x10/0x10 [ 263.519552][T10476] ? vmalloc_to_page+0x688/0x6b0 [ 263.519575][T10476] ? vmalloc_to_page+0x41c/0x6b0 [ 263.519598][T10476] kcov_mmap+0xcb/0x140 [ 263.519616][T10476] mmap_region+0x199c/0x2220 [ 263.519644][T10476] ? __pfx_mmap_region+0x10/0x10 [ 263.519666][T10476] ? __pfx_mmap_region+0x10/0x10 [ 263.519692][T10476] ? irqentry_exit+0x218/0x8c0 [ 263.519748][T10476] ? cap_mmap_addr+0xaf/0x100 [ 263.519771][T10476] ? bpf_lsm_mmap_addr+0x9/0x50 [ 263.519788][T10476] ? security_mmap_addr+0x71/0x240 [ 263.519811][T10476] ? shmem_mapping+0xd/0x50 [ 263.519832][T10476] ? memfd_check_seals_mmap+0xcb/0x210 [ 263.519849][T10476] do_mmap+0xc2f/0x10c0 [ 263.519873][T10476] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.519892][T10476] ? __pfx_do_mmap+0x10/0x10 [ 263.519914][T10476] ? rwbase_write_lock+0x568/0x730 [ 263.519940][T10476] vm_mmap_pgoff+0x2cc/0x4f0 [ 263.519964][T10476] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 263.519988][T10476] ? __fget_files+0x2a/0x420 [ 263.520003][T10476] ? __fget_files+0x3a6/0x420 [ 263.520017][T10476] ? __fget_files+0x2a/0x420 [ 263.520033][T10476] ksys_mmap_pgoff+0x4e8/0x720 [ 263.520058][T10476] ? __x64_sys_mmap+0x7f/0x140 [ 263.520077][T10476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.520094][T10476] do_syscall_64+0x174/0x580 [ 263.520114][T10476] ? clear_bhb_loop+0x40/0x90 [ 263.520132][T10476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.520147][T10476] RIP: 0033:0x7f252112cbc2 [ 263.520160][T10476] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 263.520175][T10476] RSP: 002b:00007ffc8023eaa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 263.520191][T10476] RAX: ffffffffffffffda RBX: 00007f251eaf8000 RCX: 00007f252112cbc2 [ 263.520203][T10476] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f251eaf8000 [ 263.520213][T10476] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 263.520222][T10476] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 263.520232][T10476] R13: 0000000000000004 R14: 0000000000000000 R15: 00007f25213a5fa0 [ 263.520248][T10476] [ 263.520254][T10476] Modules linked in: [ 263.520270][T10476] ---[ end trace 0000000000000000 ]--- [ 263.520283][T10476] RIP: 0010:__schedule+0x4030/0x5550 [ 263.520301][T10476] Code: 24 80 00 00 00 e8 80 97 f2 f6 48 8b 84 24 80 00 00 00 48 8b 18 4c 8d 7b 14 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 87 04 00 00 45 8b 3f 49 83 ff 08 0f 83 98 [ 263.520314][T10476] RSP: 0018:ffffc900066d70e0 EFLAGS: 00010003 [ 263.520327][T10476] RAX: 0000000000000002 RBX: 0000000000000000 RCX: dffffc0000000000 [ 263.520337][T10476] RDX: 0000000000000003 RSI: 0000000000000000 RDI: ffff8880b8620c60 [ 263.520347][T10476] RBP: ffffc900066d72c8 R08: 0000000000000003 R09: 0000000000000004 [ 263.520357][T10476] R10: dffffc0000000000 R11: ffffffff8199feb0 R12: ffff8880b863c658 [ 263.520369][T10476] R13: ffff888125a6b000 R14: 1ffff110170c7922 R15: 0000000000000014 [ 263.520380][T10476] FS: 000055557440f500(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 263.520394][T10476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.520405][T10476] CR2: 00007f1bca435f88 CR3: 000000002aae0000 CR4: 00000000003526f0 [ 263.520420][T10476] Kernel panic - not syncing: Fatal exception [ 263.521042][T10476] Kernel Offset: disabled