last executing test programs: 7.70202802s ago: executing program 3 (id=1762): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x1000) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async, rerun: 32) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async, rerun: 32) r0 = socket$inet(0x2, 0x2, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) (async, rerun: 32) read(r0, &(0x7f0000000000)=""/203, 0xcb) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c00509042300010300000009058503"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x5, "8528052226"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.490267934s ago: executing program 3 (id=1767): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000140)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x30, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000009c0)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.331236824s ago: executing program 3 (id=1769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0x104, 0x10, 0x281, 0x0, 0x0, {{@in6=@private2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a0000904000001030101000921000800012201000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000021, 0x0, 0xfffffffffffffffd}]}) r5 = socket(0x10, 0x2, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) r7 = syz_open_dev$evdev(0x0, 0x1, 0x142) ioctl$EVIOCSKEYCODE(r7, 0x40084504, 0x0) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000a50000000060a0b040000000000000000020000002400048020000180080001006f7366001400028005000200fd0000000800014000000014"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$can_raw(r6, &(0x7f00000002c0)={0x1d, r8}, 0x10) sendmsg$nl_route_sched_retired(r5, &(0x7f0000001800)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000a80)=@newtfilter={0xb6c, 0x2c, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff3, 0x4}, {0xc, 0x6}, {0x8, 0x1}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x10, 0xd}}]}}, @f_tcindex={{0xc}, {0xa20, 0x2, [@TCA_TCINDEX_POLICE={0x85c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x72, 0x8, 0x5, 0xfffff001, 0x18, 0x1, 0x1, 0x3, 0x6, 0x0, 0x3, 0x9, 0x4, 0xa70, 0xd, 0x20e, 0x0, 0x2, 0x800, 0x7536, 0x5, 0x4, 0x8, 0xba07, 0x5, 0x3, 0x2, 0xff, 0x1, 0x800, 0xfffffff6, 0xbce, 0x2, 0x80000001, 0x0, 0xf, 0x2, 0x7, 0x4, 0x8, 0x8, 0x3, 0x9, 0xe, 0x0, 0xffffffff, 0x0, 0x3, 0x4, 0x5, 0xfffffff0, 0xfffffffe, 0x9, 0xa1, 0x5, 0x1, 0x3ff, 0x10001, 0xd, 0x7, 0x6, 0x0, 0xfff, 0x100, 0x4, 0x5, 0x2, 0x6, 0xc0, 0xfffffffb, 0x5, 0xd956, 0x0, 0x0, 0x1, 0x2, 0x6, 0x101, 0x6, 0x0, 0x9, 0x10000, 0x4, 0x8ab, 0x3f8d, 0x401, 0x5, 0x0, 0x7, 0x4, 0x4, 0x80, 0x7, 0x9, 0x7f, 0x4, 0x6, 0x10, 0x1, 0x71d1, 0x5, 0x5, 0x5, 0x1, 0x9512, 0x3, 0x10001, 0x10001, 0x2, 0x9, 0x8000000, 0x3, 0x5, 0x8, 0xfffffff5, 0xb46, 0x9, 0x675, 0x7f, 0x4, 0x8, 0x1, 0x4, 0x2, 0x9, 0x7fff, 0x805f, 0x2, 0x0, 0x6, 0x1, 0x80000000, 0x81, 0x2, 0x2, 0x101, 0x63e, 0x90b, 0x9, 0x101, 0x2, 0x8, 0x1000, 0x3, 0x8, 0x3, 0x8, 0x2, 0x9, 0x401, 0x8, 0x90000, 0x7, 0x8, 0x7fff, 0x5, 0x3ed, 0x3, 0x40, 0x2, 0x3, 0x80, 0x7, 0x3, 0x8, 0x7, 0x8, 0xfff, 0x88a, 0x0, 0x40, 0x1, 0x7fffffff, 0x7, 0x1, 0x8, 0x1000, 0x6, 0x5, 0xf3d, 0x400, 0x8, 0x5, 0x9, 0x2, 0x1, 0xfffffffd, 0x3, 0xcad, 0x80, 0x1, 0x8, 0x8, 0x1, 0x6, 0xa, 0xa2a, 0x3, 0x3ff, 0x0, 0x2, 0x9, 0x81, 0x5, 0x2, 0xfffffffd, 0xfffff54f, 0xfad, 0x6, 0x80000001, 0x7fe, 0x2, 0x5, 0x2, 0x3, 0x9, 0x1, 0x8, 0x0, 0x9, 0x9, 0x8, 0x6, 0x7, 0x7fff, 0x1, 0x5, 0x7fff, 0x61, 0x16cbe816, 0xa, 0x8, 0x7, 0x6, 0x5, 0x6, 0x38e7, 0x7, 0x0, 0x9, 0x5, 0x5, 0x9, 0x8, 0x7, 0x7, 0x3, 0x6, 0xee, 0x80000000, 0x0, 0xfffeffff, 0xa6, 0x9, 0x10001, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x74}, @TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x5, 0xffffffff, 0x7, 0x0, 0x80a1, 0x2, 0x1, 0x8, 0x0, 0xff, 0x8, 0x9, 0x5, 0x0, 0xffffffff, 0x4, 0x0, 0xa07, 0xb, 0x0, 0xc, 0x6, 0x7, 0x10, 0x9, 0x0, 0x3, 0x2, 0x6, 0x5, 0x2, 0xf, 0x1000, 0x7fff, 0x3, 0x9, 0x9, 0x1a, 0xa214, 0x10001, 0x8, 0xfebe, 0x31d0, 0xf38, 0xfffffff9, 0x1f21, 0xffffffff, 0x5, 0x5, 0xfffffffa, 0x6, 0x5, 0x0, 0x56, 0x9b, 0x4, 0x60, 0xfffff000, 0x8, 0xc51, 0x5, 0x4, 0x7fff, 0x9, 0x2, 0x81, 0xfffffec6, 0x6, 0x0, 0x1000, 0x7, 0x10001, 0x2, 0x3, 0x0, 0x2, 0x3f9, 0xa, 0x3, 0x6, 0x8a, 0x3, 0x3, 0xa69a, 0x7, 0x80, 0x1, 0x7fff, 0x6a, 0x97aa, 0x2, 0x1, 0x0, 0xfffffffe, 0x80, 0x1, 0x9, 0x4, 0x9, 0xffffffff, 0x6, 0x8, 0x5, 0xffff, 0x9, 0x80000000, 0x9, 0x9, 0x4, 0x40, 0x59, 0x7ff, 0x6, 0x1, 0x6, 0xfff, 0xe, 0x636, 0x9, 0x8, 0x5136, 0x2, 0x3, 0x9, 0xb, 0x40, 0x8, 0x7ff, 0x6, 0x1, 0x8, 0x5, 0x1, 0x2, 0x400, 0xfffffbff, 0xff, 0x9, 0x1, 0xfffffff7, 0x8, 0x6, 0x8, 0x6, 0xea9, 0x97e, 0x8, 0x5, 0x3, 0x43e, 0x4, 0x6, 0x4, 0x8000, 0x4, 0x1, 0x2, 0x8, 0x9, 0x80000000, 0x0, 0x9, 0x1, 0x2, 0x5, 0xf2e, 0x5, 0x9, 0x4, 0x10, 0x9, 0x2, 0x8, 0x8, 0x7c, 0x6, 0x4, 0x2, 0x1, 0x0, 0x8, 0xfffffffd, 0xa, 0x76d2a619, 0x5, 0x0, 0x8, 0x6, 0x2b00, 0x1, 0x9e, 0x8, 0x8, 0xfff, 0x2, 0x4, 0x6e, 0x9, 0x4, 0x401, 0x3, 0x0, 0x2, 0x2, 0x5, 0x6, 0x3, 0x2, 0x7fffffff, 0x7, 0x8, 0x8, 0x9, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7, 0x6, 0x1, 0x5, 0x3, 0x4, 0x0, 0xfffffffd, 0x80000001, 0x0, 0x92, 0x0, 0x560, 0x0, 0x81, 0x6, 0xe4fd, 0x4, 0x164, 0x7, 0x0, 0x1, 0x2, 0xffffff81, 0x6, 0xee, 0x2, 0x1, 0x358, 0x8, 0x6, 0xffff, 0x89, 0x3, 0x1000, 0x9d]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x92, 0x0, 0x3, 0xbc1, 0x7, {0x6, 0x1, 0x7, 0x0, 0x4, 0xed6c}, {0x81, 0x0, 0x1000, 0xd, 0x63, 0x6}, 0x5, 0x1, 0x77}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x27}]}, @TCA_TCINDEX_MASK={0x6, 0x2, 0x34}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_MASK={0x6}, @TCA_TCINDEX_ACT={0x1a8, 0x7, [@m_connmark={0x1a4, 0x1d, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x71, 0x5, 0x1, 0x8c0}, 0xe89}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0xf, 0x7, 0x3, 0x7ff}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x1, 0x8, 0xffffa1c0}, 0xe9b}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf6, 0x3, 0x20000005, 0x4d, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x3, 0x10000000, 0xef1, 0x80000000}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x0, 0x6, 0x101, 0x5}, 0x6}}]}, {0xcb, 0x6, "5c59d37613e09bdda2c8e3760abadf86248629af74b259dac742b894b76aa484b8805cc67e4c1de526cba2de53f3d9131f2963ec65bd54cb7b4f0c614f820c1094a0e806be1324735ee1825c12e15d25cf89fd0143fdf711efd243b2979d3622a8ee25275822cb98a00b124fd7aefeb66b9a750835a4b937ea7425abf0926948197c95db028bc3dff073f6b7e458dea6b30c7b292b1cd3f7fd47304cf5a6a9b542cbcfe65b56ae238b82beedfaadfe8a7d679c4792ea107ec107c309fcce570303936a9c93b7a3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7fff, 0xb4, 0xf6df}, {0x2, 0x6, 0xfffffff7}, 0x6, 0x8, 0x3}}]}}, @f_rsvp={{0x9}, {0x24, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x300000, 0xa610, 0x8}, {0x9, 0x8, 0xdc06}, 0x84, 0x8}}]}}, @f_rsvp6={{0xa}, {0x7c, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}, @TCA_RSVP_POLICE={0xc, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffffe}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff8}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x8, 0x8, 0x7}, {0x2c, 0x3}, 0xc, 0x3, 0x5}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x3, 0x1, 0x3}, {0x1, 0x1, 0x6}, 0x84, 0x4, 0x5}}]}}]}, 0xb6c}}, 0x4008800) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=""/2, &(0x7f0000000080)=0x2) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r10 = socket$kcm(0x10, 0x2, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xfffffffffffffedb, 0x0) sendmsg$inet(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b978", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/181, 0xb5}, {&(0x7f0000001f00)=""/4131, 0x1023}, {&(0x7f0000000980)=""/195, 0xc3}, {&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000700)=""/187, 0xbb}], 0x7}, 0x0) 3.543059786s ago: executing program 2 (id=1794): pipe(&(0x7f0000000040)) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, &(0x7f0000001300)=ANY=[@ANYBLOB="10000000f1000300", @ANYRES8=r0], 0x0) 3.454041287s ago: executing program 2 (id=1795): r0 = socket$phonet(0x23, 0x2, 0x1) munmap$KVM_VCPU(0x0, 0x1000000000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='ipvlan0\x00', 0x10) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a0) sendfile(r1, r1, 0x0, 0x2a8b8467) lseek(r1, 0x0, 0x4) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000200)=0xe) 3.375247469s ago: executing program 1 (id=1797): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) listen(r0, 0x90004) r1 = socket(0x2c, 0x3, 0x1000) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x10, 0x1}, {0x8f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x2}, {0xffff, 0x5, 0x1, 0x47, 0x6, 0xfd}]}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$x25(r1, 0x0, 0x0, 0x240080c0, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) tkill(r3, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0xc, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900", @ANYRES8], 0x16) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 2.881728425s ago: executing program 3 (id=1799): r0 = syz_open_dev$evdev(&(0x7f0000000140), 0x2, 0x300) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201000009240324020600000000000000", @ANYRES8=r0, @ANYBLOB="063bbb"], 0x0) 2.662839153s ago: executing program 0 (id=1801): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0x3, 0x8, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/rcu_stall_count', 0x2240, 0x8e) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010028bd7000010000000f00000008000300", @ANYRES32=r7, @ANYBLOB="0500330009000000080034"], 0x2c}}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r7}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004100) 2.544738799s ago: executing program 0 (id=1802): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r2, 0x80506409, &(0x7f0000000180)={0x1, 0x30000, 0x80, 0xd, 0x10, 0x4, 0x2, 0x2000000, 0x20, 0x20, 0x1, 0xfffffffe, &(0x7f0000000600)=[0x5], 0x1, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000080)={{0x2b, @loopback, 0x4e22, 0x4, 'rr\x00', 0x0, 0x1, 0x44}, {@remote, 0x4e22, 0x2, 0x98, 0xc835, 0x8}}, 0x44) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xb5\x7f\x00', &(0x7f00000011c0)='\a\xf0\xba\v2\x8c^\xa0Y\xf5\x02\xbf\xdd\xb0\xd0\x03\xeac^\xc2>m\x8a0x0) bind$nfc_llcp(r5, &(0x7f0000000240)={0x27, r6, 0x1, 0x7, 0x9, 0xf6, "dca8a6d147fb5e390687f4b48a683feab53387e25ab601fcfb11313e73080a8b50d1497cc885c7a49a1859695b634868863faacd6bf25de14e352267dad97d", 0x26}, 0x60) 2.477051354s ago: executing program 0 (id=1803): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1860, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000300)={0x0, 0x1, 0x80, "0e6a6051035f5a22f39ca600", 0x3231564e}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='devpts\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x0, 0x1) close(r5) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000017c0)={0x34, 0x10, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x4, 0x4f}, @nested={0x4, 0x71}, @nested={0x1c, 0xbc, 0x0, 0x1, [@nested={0x4, 0xc3}, @nested={0x8, 0x13, 0x0, 0x1, [@generic="3a48ad04"]}, @nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r7 = dup3(r2, r0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x9, 0x1, 0x100027}}, &(0x7f0000000200)={0x38, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 2.427872998s ago: executing program 1 (id=1804): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) (async) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$NS_GET_USERNS(r1, 0x8008b705, 0x0) 2.227411098s ago: executing program 1 (id=1805): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100}, @fda={0x66646185, 0x9, 0x1, 0x100027}}, &(0x7f0000000200)={0x38, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (fail_nth: 4) 2.206642481s ago: executing program 0 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) (fail_nth: 5) 1.490376605s ago: executing program 2 (id=1807): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a88000000060a0b040000000000000000020000005c000480580001800a000100696e6e65720000004800028008000240000000ff0800034000000007080004400000000f080001400000000024000580090001006d6574610000000014000280080001400000000d08000240000000190900010073797a30000000000900020073797a32"], 0xb0}}, 0x0) 1.485624745s ago: executing program 0 (id=1815): unshare(0x22020600) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (fail_nth: 5) 1.386040772s ago: executing program 1 (id=1808): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) creat(&(0x7f00000005c0)='./file0\x00', 0x100) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) unshare(0x2c020400) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x267) 1.041944752s ago: executing program 0 (id=1809): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x40000011, 0x0, 0x5a, 0x0, 0x0, 0x0) 943.41377ms ago: executing program 2 (id=1810): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) write$binfmt_script(r2, &(0x7f0000001b00), 0xfffffd9d) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xc, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x0, 0x6, 0x5f, 0x9, 0x6, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0xfa2, 0x3c5b, 0x1, 0x8000824, 0xd, 0x1, 0x82, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x9, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x80000008, 0x1, 0x1, 0x40], [0x1, 0x9, 0x0, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x0, 0x9, 0xfffffffc, 0x3, 0xb, 0x0, 0x5, 0x31, 0xe, 0xad1, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x403, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xa, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x2009, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfff, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x10000, 0x0, 0x4, 0x5, 0xfffffffe, 0x100, 0x1, 0x9, 0x6, 0x7ff7, 0x0, 0x1, 0x0, 0xd, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3040, 0x7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000009, 0x4, 0x6d01, 0x8, 0x38, 0x800003, 0x26a4, 0x80, 0x3, 0x5, 0x87c, 0x1002, 0x8, 0x7, 0x7, 0x5, 0x6, 0x4, 0xbf, 0xfffffffb, 0x3, 0x7ff, 0x856, 0xe, 0xe5d, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x100, 0x800], [0x6, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce8, 0x1ff, 0x2, 0x80, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x39a, 0xffff, 0xa620, 0x6, 0x5, 0x1e, 0xfffffdff, 0x14a, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0xa26, 0x5, 0x5, 0x28, 0x30b1d793, 0xa1f, 0xf43, 0x6, 0x1, 0x10001, 0x0, 0x4, 0x5, 0xb1e, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000440)='omfs\x00', 0x1, 0x0) 706.163498ms ago: executing program 1 (id=1811): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x4e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000906ff000900020073797a31000100070000000c09400000007200"/40], 0x34}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 518.041482ms ago: executing program 2 (id=1812): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r2, 0x3, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48081}, 0x0) (fail_nth: 5) 491.526361ms ago: executing program 3 (id=1813): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800014000000000080002400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a05000000000000000000020000000900010073797a30000000000900020073797a300000000014000000020a0101"], 0x68}}, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x2, 0x4, 0x800000, 0x81, {}, {0x5, 0x8, 0x8, 0x3, 0x29, 0x9}, 0x5, 0x1, {}, 0x2}) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002f00adb425bd700000000000040000000c00feffffff00000000000021233ec785f0d2c72f822dd9350f8310a86f4607178b0c64a7f5f1a3bbc78625533a3a0dcfb598523c44f64fcdfcbb3c356f036abadb121a36985e02cc28711bd5195075ee8283c957baee1af575d76674c17671cb5708915799c662fb81a94f2c1c3686e7b18052d76d714812ede16756b7074561ed30262475ee699d6a2f5b80dff562dbbbda40f9ff613d5787c03eebbb87ccfacbf687b27594364c"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 391.664759ms ago: executing program 2 (id=1814): write$tun(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) r0 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$int_in(r0, 0x73, &(0x7f0000000040)=0x80000001) write$tun(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) ioctl$int_in(r0, 0x73, &(0x7f0000000040)=0x80000001) (async) 241.663727ms ago: executing program 1 (id=1816): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0xfffffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x5}, 0x0, 0x0) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000004c0)=0x2, 0x4) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) munmap(&(0x7f00007d7000/0x4000)=nil, 0x4000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) socket(0x6, 0x0, 0x0) setsockopt$RDS_FREE_MR(r4, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6d}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x6b, 0x8c, 0xe1, 0x40, 0x46d, 0x897, 0x3d33, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x4, 0x40, 0xa, "", [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x6d, 0x1e, 0x87, 0x3}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=1817): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x1, 0x255}, 0x0, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0211475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) unshare(0x22020600) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) kernel console output (not intermixed with test programs): Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.301159][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.355564][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.355580][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.355605][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.368347][ T5602] usb 2-1: Using ep0 maxpacket: 16 [ 314.370179][ T5602] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 314.370204][ T5602] usb 2-1: config 0 has no interface number 0 [ 314.370245][ T5602] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 314.370269][ T5602] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 314.436327][ T5602] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 314.436355][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.436375][ T5602] usb 2-1: Product: syz [ 314.436388][ T5602] usb 2-1: Manufacturer: syz [ 314.436402][ T5602] usb 2-1: SerialNumber: syz [ 314.534340][ T5602] usb 2-1: config 0 descriptor?? [ 314.541645][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.543685][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.693847][T10199] FAULT_INJECTION: forcing a failure. [ 314.693847][T10199] name failslab, interval 1, probability 0, space 0, times 0 [ 314.693884][T10199] CPU: 1 UID: 0 PID: 10199 Comm: syz.2.1566 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 314.693912][T10199] Tainted: [L]=SOFTLOCKUP [ 314.693919][T10199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.693931][T10199] Call Trace: [ 314.693936][T10199] [ 314.693942][T10199] dump_stack_lvl+0xe8/0x150 [ 314.693959][T10199] should_fail_ex+0x46b/0x600 [ 314.693990][T10199] should_failslab+0xa8/0x100 [ 314.694014][T10199] __kvmalloc_node_noprof+0x181/0x910 [ 314.694047][T10199] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 314.694072][T10199] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 314.694096][T10199] __kvm_mmu_topup_memory_cache+0x463/0x610 [ 314.694112][T10199] ? kvm_msr_allowed+0x9a/0x490 [ 314.694131][T10199] mmu_topup_memory_caches+0x21/0x170 [ 314.694157][T10199] kvm_mmu_load+0x9d/0x2320 [ 314.694182][T10199] ? kvm_msr_allowed+0x9a/0x490 [ 314.694210][T10199] ? kvm_msr_allowed+0x9a/0x490 [ 314.694236][T10199] ? kvm_msr_allowed+0x3f4/0x490 [ 314.694260][T10199] ? kvm_msr_allowed+0x9a/0x490 [ 314.694276][T10199] ? kvm_apic_has_interrupt+0x73c/0x770 [ 314.694293][T10199] ? vmx_recalc_intercepts+0xec4/0x1b10 [ 314.694324][T10199] vcpu_run+0x4d6a/0x76f0 [ 314.694413][T10199] ? __pfx_vcpu_run+0x10/0x10 [ 314.694428][T10199] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 314.694440][T10199] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 314.694457][T10199] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 314.694481][T10199] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 314.694502][T10199] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 314.694526][T10199] ? do_raw_spin_lock+0x12b/0x2f0 [ 314.694560][T10199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.694585][T10199] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.694601][T10199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 314.694614][T10199] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 314.694628][T10199] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 314.694641][T10199] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 314.694664][T10199] ? lockdep_hardirqs_on+0x7a/0x110 [ 314.694687][T10199] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 314.694711][T10199] ? rt_write_unlock+0x190/0x230 [ 314.694734][T10199] kvm_vcpu_ioctl+0xa65/0xfe0 [ 314.694763][T10199] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 314.694788][T10199] ? __fget_files+0x2a/0x420 [ 314.694824][T10199] ? __fget_files+0x2a/0x420 [ 314.694842][T10199] ? __fget_files+0x3a6/0x420 [ 314.694861][T10199] ? __fget_files+0x2a/0x420 [ 314.694884][T10199] ? bpf_lsm_file_ioctl+0x9/0x20 [ 314.694907][T10199] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 314.694932][T10199] __se_sys_ioctl+0xff/0x170 [ 314.694946][T10199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.694957][T10199] do_syscall_64+0x174/0x580 [ 314.694970][T10199] ? trace_irq_disable+0x3b/0x140 [ 314.694992][T10199] ? clear_bhb_loop+0x40/0x90 [ 314.695016][T10199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.695035][T10199] RIP: 0033:0x7f0b6319ce59 [ 314.695062][T10199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.695078][T10199] RSP: 002b:00007f0b613cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 314.695098][T10199] RAX: ffffffffffffffda RBX: 00007f0b63416090 RCX: 00007f0b6319ce59 [ 314.695106][T10199] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 314.695113][T10199] RBP: 00007f0b613cd090 R08: 0000000000000000 R09: 0000000000000000 [ 314.695119][T10199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.695126][T10199] R13: 00007f0b63416128 R14: 00007f0b63416090 R15: 00007ffecefbea88 [ 314.695144][T10199] [ 314.755254][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.755379][T10190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 314.938285][ T5613] Bluetooth: hci4: command tx timeout [ 315.059789][ T5602] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 315.396037][ T5602] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 315.396202][ T5602] asix 2-1:0.34: probe with driver asix failed with error -32 [ 315.471240][T10146] hsr_slave_0: entered promiscuous mode [ 315.472908][T10146] hsr_slave_1: entered promiscuous mode [ 315.475501][T10146] debugfs: 'hsr0' already exists in 'hsr' [ 315.475525][T10146] Cannot create hsr debugfs directory [ 315.700832][ T7824] bridge_slave_1: left allmulticast mode [ 315.701030][ T7824] bridge_slave_1: left promiscuous mode [ 315.739130][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.947360][ T7824] bridge_slave_0: left allmulticast mode [ 315.947394][ T7824] bridge_slave_0: left promiscuous mode [ 315.947652][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.761275][ T5602] usb 2-1: USB disconnect, device number 61 [ 316.918804][ T7824] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.998520][ T7824] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.022048][ T5613] Bluetooth: hci4: command tx timeout [ 317.023094][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.023190][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.035424][ T7824] bond0 (unregistering): Released all slaves [ 317.112423][ T5272] 8021q: adding VLAN 0 to HW filter on device eth1 [ 317.124564][ T5602] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 317.205233][T10231] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1572'. [ 317.324518][ T7824] tipc: Disabling bearer [ 317.325004][ T7824] tipc: Left network mode [ 317.400592][ T5602] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 317.400628][ T5602] usb 2-1: can't read configurations, error -61 [ 317.509602][ T7824] IPVS: stopping backup sync thread 6409 ... [ 317.547971][ T5602] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 317.717286][ T5602] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 317.717325][ T5602] usb 2-1: can't read configurations, error -61 [ 317.721603][ T5602] usb usb2-port1: attempt power cycle [ 317.824595][ T5710] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 317.976123][ T5710] usb 4-1: config 103 has too many interfaces: 89, using maximum allowed: 32 [ 317.976150][ T5710] usb 4-1: config 103 has an invalid descriptor of length 0, skipping remainder of the config [ 317.976181][ T5710] usb 4-1: config 103 has 1 interface, different from the descriptor's value: 89 [ 318.003834][ T5710] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 0.00 [ 318.003864][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 318.003883][ T5710] usb 4-1: SerialNumber: syz [ 318.042462][ T5710] usb 4-1: invalid UAC_HEADER (v1) [ 318.059799][ T5602] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 318.095301][ T5602] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 318.095334][ T5602] usb 2-1: can't read configurations, error -61 [ 318.116708][ T5272] 8021q: adding VLAN 0 to HW filter on device eth2 [ 318.135436][ T5710] snd-usb-audio 4-1:103.0: probe with driver snd-usb-audio failed with error -22 [ 318.230667][ T5602] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 318.232354][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:103.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.267047][ T5602] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 318.267083][ T5602] usb 2-1: can't read configurations, error -61 [ 318.267609][ T5602] usb usb2-port1: unable to enumerate USB device [ 318.273316][ T5343] usb 4-1: USB disconnect, device number 68 [ 318.314941][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.315496][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.098825][ T5613] Bluetooth: hci4: command tx timeout [ 319.133188][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.133714][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.282818][ T5272] 8021q: adding VLAN 0 to HW filter on device eth3 [ 319.528022][ T5602] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 319.701963][ T5602] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.701999][ T5602] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.702036][ T5602] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.702059][ T5602] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.710012][T10277] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.733477][ T5602] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.859272][T10287] FAULT_INJECTION: forcing a failure. [ 319.859272][T10287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.859294][T10287] CPU: 0 UID: 0 PID: 10287 Comm: syz.2.1580 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.859310][T10287] Tainted: [L]=SOFTLOCKUP [ 319.859314][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.859321][T10287] Call Trace: [ 319.859325][T10287] [ 319.859330][T10287] dump_stack_lvl+0xe8/0x150 [ 319.859345][T10287] should_fail_ex+0x46b/0x600 [ 319.859363][T10287] _copy_from_iter+0x1d3/0x1670 [ 319.859385][T10287] ? __pfx__copy_from_iter+0x10/0x10 [ 319.859401][T10287] ? __local_bh_enable+0x1e1/0x2f0 [ 319.859419][T10287] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 319.859435][T10287] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.859447][T10287] ? skb_put+0x11b/0x210 [ 319.859461][T10287] raw_sendmsg+0x43d/0x9c0 [ 319.859479][T10287] ? __pfx_raw_sendmsg+0x10/0x10 [ 319.859496][T10287] ? aa_sock_msg_perm+0x122/0x200 [ 319.859508][T10287] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 319.859524][T10287] sock_sendmsg_nosec+0x13a/0x180 [ 319.859541][T10287] ____sys_sendmsg+0x55c/0x870 [ 319.859557][T10287] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.859574][T10287] ? import_iovec+0x73/0xa0 [ 319.859587][T10287] ___sys_sendmsg+0x2a5/0x360 [ 319.859607][T10287] ? __lock_acquire+0x6b5/0x2d10 [ 319.859623][T10287] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.859638][T10287] ? kstrtouint+0x6e/0xe0 [ 319.859664][T10287] ? __fget_files+0x2a/0x420 [ 319.859675][T10287] ? __fget_files+0x3a6/0x420 [ 319.859690][T10287] __sys_sendmmsg+0x279/0x4d0 [ 319.859705][T10287] ? __pfx___sys_sendmmsg+0x10/0x10 [ 319.859723][T10287] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 319.859743][T10287] ? ksys_write+0x248/0x270 [ 319.859766][T10287] ? __pfx_ksys_write+0x10/0x10 [ 319.859793][T10287] __x64_sys_sendmmsg+0xa0/0xc0 [ 319.859817][T10287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.859837][T10287] do_syscall_64+0x174/0x580 [ 319.859859][T10287] ? trace_irq_disable+0x3b/0x140 [ 319.859875][T10287] ? clear_bhb_loop+0x40/0x90 [ 319.859888][T10287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.859899][T10287] RIP: 0033:0x7f0b6319ce59 [ 319.859910][T10287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.859920][T10287] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 319.859932][T10287] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 319.859940][T10287] RDX: 000000000000fdef RSI: 00002000000020c0 RDI: 0000000000000004 [ 319.859947][T10287] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 319.859954][T10287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.859960][T10287] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 319.859975][T10287] [ 320.870612][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1583'. [ 320.892876][ T5602] usb 4-1: USB disconnect, device number 69 [ 320.955181][T10303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1583'. [ 320.955200][T10303] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1583'. [ 321.678623][ T7824] hsr_slave_0: left promiscuous mode [ 321.718030][ T7824] hsr_slave_1: left promiscuous mode [ 321.723130][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.723217][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.760084][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.760111][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.989831][ T7824] veth1_macvtap: left promiscuous mode [ 321.990028][ T7824] veth0_macvtap: left promiscuous mode [ 321.990219][ T7824] veth1_vlan: left promiscuous mode [ 321.990433][ T7824] veth0_vlan: left promiscuous mode [ 322.017963][ T5602] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 322.169902][ T5602] usb 2-1: Using ep0 maxpacket: 16 [ 322.177761][ T5602] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 322.177788][ T5602] usb 2-1: config 0 has no interface number 0 [ 322.177961][ T5602] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 322.177989][ T5602] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 322.193112][ T5623] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 322.230595][ T5602] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 322.230619][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.230630][ T5602] usb 2-1: Product: syz [ 322.230637][ T5602] usb 2-1: Manufacturer: syz [ 322.230645][ T5602] usb 2-1: SerialNumber: syz [ 322.242130][ T5602] usb 2-1: config 0 descriptor?? [ 322.275693][T10325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 322.275832][T10325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 322.370295][ T5623] usb 4-1: config 0 has no interfaces? [ 322.380458][ T5623] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 322.380487][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.380557][ T5623] usb 4-1: Product: syz [ 322.380573][ T5623] usb 4-1: Manufacturer: syz [ 322.380589][ T5623] usb 4-1: SerialNumber: syz [ 322.397019][ T5623] usb 4-1: config 0 descriptor?? [ 322.481687][T10325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 322.481811][T10325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 322.683214][ T5602] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 322.855443][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.855943][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.885232][ T5602] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 322.885263][ T5602] asix 2-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 322.885521][ T5602] asix 2-1:0.34: probe with driver asix failed with error -61 [ 322.944529][ T5343] usb 4-1: USB disconnect, device number 70 [ 323.068401][ T7824] team0 (unregistering): Port device team_slave_1 removed [ 323.108580][ T7824] team0 (unregistering): Port device team_slave_0 removed [ 323.930351][ T5623] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 324.166044][ T5623] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 324.166076][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.166097][ T5623] usb 4-1: Product: syz [ 324.166110][ T5623] usb 4-1: Manufacturer: syz [ 324.166122][ T5623] usb 4-1: SerialNumber: syz [ 324.269791][T10146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.338750][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.339810][T10146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.540556][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.552175][T10146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.617048][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.651936][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.691796][ T5623] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 324.691860][ T5623] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 324.939828][ T5769] usb 2-1: USB disconnect, device number 66 [ 325.040074][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 325.041890][T10146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 325.246870][T10146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 325.518111][ T5769] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 325.654746][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.670676][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 325.707450][ T5769] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 325.707473][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.707484][ T5769] usb 2-1: Product: syz [ 325.707492][ T5769] usb 2-1: Manufacturer: syz [ 325.707499][ T5769] usb 2-1: SerialNumber: syz [ 325.795513][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.905237][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.905412][ T7667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.939307][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.939549][ T7824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.987005][ T5769] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.987039][ T5769] usb 2-1: MIDIStreaming interface descriptor not found [ 326.062749][T10372] netlink: 'syz.2.1591': attribute type 1 has an invalid length. [ 326.062766][T10372] netlink: 756 bytes leftover after parsing attributes in process `syz.2.1591'. [ 326.128352][ T5623] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 326.128387][ T5623] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 326.201297][ T5623] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 326.261054][ T5623] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 326.345996][ T5623] usb 4-1: USB disconnect, device number 71 [ 326.476872][ T5769] usb 2-1: USB disconnect, device number 67 [ 326.652068][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.048062][ T5769] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 327.056366][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.170793][T10146] veth0_vlan: entered promiscuous mode [ 327.182287][T10146] veth1_vlan: entered promiscuous mode [ 327.199140][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 327.204629][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 327.204671][ T5769] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 327.204695][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.210026][ T5769] usb 2-1: config 0 descriptor?? [ 327.222509][ T5769] hub 2-1:0.0: bad descriptor, ignoring hub [ 327.222543][ T5769] hub 2-1:0.0: probe with driver hub failed with error -5 [ 327.237395][ T5769] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 327.361766][ T5343] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 327.392300][T10146] veth0_macvtap: entered promiscuous mode [ 327.415222][T10146] veth1_macvtap: entered promiscuous mode [ 327.553423][ T5343] usb 4-1: config 0 has no interfaces? [ 327.567142][ T5343] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 327.567172][ T5343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.567193][ T5343] usb 4-1: Product: syz [ 327.567208][ T5343] usb 4-1: Manufacturer: syz [ 327.567222][ T5343] usb 4-1: SerialNumber: syz [ 327.585643][ T5343] usb 4-1: config 0 descriptor?? [ 327.627209][T10399] FAULT_INJECTION: forcing a failure. [ 327.627209][T10399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.627244][T10399] CPU: 0 UID: 0 PID: 10399 Comm: syz.2.1597 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.627271][T10399] Tainted: [L]=SOFTLOCKUP [ 327.627279][T10399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.627291][T10399] Call Trace: [ 327.627298][T10399] [ 327.627307][T10399] dump_stack_lvl+0xe8/0x150 [ 327.627334][T10399] should_fail_ex+0x46b/0x600 [ 327.627367][T10399] _copy_from_iter+0x1d3/0x1670 [ 327.627399][T10399] ? rcu_is_watching+0x15/0xb0 [ 327.627433][T10399] ? __pfx__copy_from_iter+0x10/0x10 [ 327.627461][T10399] ? __alloc_skb+0x27d/0x7d0 [ 327.627481][T10399] ? __alloc_skb+0x27d/0x7d0 [ 327.627507][T10399] ? netlink_sendmsg+0x650/0xb40 [ 327.627530][T10399] ? skb_put+0x11b/0x210 [ 327.627558][T10399] netlink_sendmsg+0x6c0/0xb40 [ 327.627591][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.627618][T10399] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 327.627646][T10399] ? aa_sock_msg_perm+0x122/0x200 [ 327.627667][T10399] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.627691][T10399] sock_sendmsg_nosec+0x13a/0x180 [ 327.627723][T10399] ____sys_sendmsg+0x55c/0x870 [ 327.627752][T10399] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.627791][T10399] ? import_iovec+0x73/0xa0 [ 327.627813][T10399] ___sys_sendmsg+0x2a5/0x360 [ 327.627833][T10399] ? __lock_acquire+0x6b5/0x2d10 [ 327.627859][T10399] ? __pfx____sys_sendmsg+0x10/0x10 [ 327.627906][T10399] ? __fget_files+0x2a/0x420 [ 327.627925][T10399] ? __fget_files+0x3a6/0x420 [ 327.627951][T10399] __x64_sys_sendmsg+0x1b7/0x290 [ 327.627975][T10399] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 327.628012][T10399] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.628032][T10399] do_syscall_64+0x174/0x580 [ 327.628055][T10399] ? trace_irq_disable+0x3b/0x140 [ 327.628078][T10399] ? clear_bhb_loop+0x40/0x90 [ 327.628101][T10399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.628120][T10399] RIP: 0033:0x7f0b6319ce59 [ 327.628136][T10399] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.628153][T10399] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.628174][T10399] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 327.628187][T10399] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 327.628200][T10399] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 327.628212][T10399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.628224][T10399] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 327.628253][T10399] [ 328.024408][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.025041][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.029678][ T5343] usb 4-1: USB disconnect, device number 72 [ 328.076168][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.102479][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.144634][ T157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.147455][ T157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.176682][ T157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.204804][ T157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.009061][ T5950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.009080][ T5950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.294320][ T5950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.294339][ T5950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.475205][ T5769] usb 2-1: reset high-speed USB device number 68 using dummy_hcd [ 330.503855][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.504314][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.519644][ T5769] usb 2-1: device reset changed ep0 maxpacket size! [ 330.629961][ T5769] usb 2-1: USB disconnect, device number 68 [ 330.721466][T10430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.721985][T10430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.938779][ T5769] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 331.088125][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 331.093127][ T5769] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.093152][ T5769] usb 2-1: config 0 has no interfaces? [ 331.093192][ T5769] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 331.093215][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.123988][ T5769] usb 2-1: config 0 descriptor?? [ 331.150657][ T5602] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 331.310353][ T5602] usb 4-1: Using ep0 maxpacket: 16 [ 331.311959][ T5602] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 331.311984][ T5602] usb 4-1: config 0 has no interface number 0 [ 331.312028][ T5602] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 331.312045][ T5602] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 331.314236][ T5602] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 331.314263][ T5602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.314283][ T5602] usb 4-1: Product: syz [ 331.314292][ T5602] usb 4-1: Manufacturer: syz [ 331.314300][ T5602] usb 4-1: SerialNumber: syz [ 331.323996][ T5602] usb 4-1: config 0 descriptor?? [ 331.357497][T10436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.357620][T10436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.368131][ T5769] usb 2-1: USB disconnect, device number 69 [ 331.606036][T10436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.606210][T10436] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 331.809441][ T5602] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 331.809707][ T5602] asix 4-1:0.34: probe with driver asix failed with error -61 [ 331.911178][T10449] netlink: 'syz.2.1613': attribute type 2 has an invalid length. [ 332.568553][ T5724] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 332.730713][ T5724] usb 2-1: config 0 has no interfaces? [ 332.734906][ T5724] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 332.734936][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.734957][ T5724] usb 2-1: Product: syz [ 332.734972][ T5724] usb 2-1: Manufacturer: syz [ 332.734987][ T5724] usb 2-1: SerialNumber: syz [ 332.797724][ T5724] usb 2-1: config 0 descriptor?? [ 333.219903][T10462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.220572][T10462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.228700][ T37] usb 2-1: USB disconnect, device number 70 [ 333.710276][T10475] FAULT_INJECTION: forcing a failure. [ 333.710276][T10475] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.710301][T10475] CPU: 0 UID: 0 PID: 10475 Comm: syz.2.1622 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 333.710316][T10475] Tainted: [L]=SOFTLOCKUP [ 333.710320][T10475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 333.710327][T10475] Call Trace: [ 333.710332][T10475] [ 333.710336][T10475] dump_stack_lvl+0xe8/0x150 [ 333.710354][T10475] should_fail_ex+0x46b/0x600 [ 333.710372][T10475] _copy_to_user+0x31/0xb0 [ 333.710386][T10475] do_sock_getsockopt+0x6ea/0x7e0 [ 333.710402][T10475] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 333.710422][T10475] ? __fget_files+0x3a6/0x420 [ 333.710433][T10475] ? __fget_files+0x2a/0x420 [ 333.710446][T10475] __x64_sys_getsockopt+0x1aa/0x250 [ 333.710462][T10475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.710474][T10475] do_syscall_64+0x174/0x580 [ 333.710487][T10475] ? trace_irq_disable+0x3b/0x140 [ 333.710500][T10475] ? clear_bhb_loop+0x40/0x90 [ 333.710513][T10475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.710524][T10475] RIP: 0033:0x7f0b6319ce59 [ 333.710535][T10475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.710544][T10475] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 333.710556][T10475] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 333.710564][T10475] RDX: 0000000000000007 RSI: 000000000000011b RDI: 0000000000000003 [ 333.710571][T10475] RBP: 00007f0b613ee090 R08: 0000200000000440 R09: 0000000000000000 [ 333.710578][T10475] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 333.710584][T10475] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 333.710599][T10475] [ 333.937259][ T5710] usb 4-1: USB disconnect, device number 73 [ 334.068540][T10480] netlink: 'syz.3.1624': attribute type 16 has an invalid length. [ 334.068560][T10480] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.1624'. [ 335.049592][ T5769] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 335.211576][ T5769] usb 4-1: config 0 has no interfaces? [ 335.213705][ T5769] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 335.213733][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.213753][ T5769] usb 4-1: Product: syz [ 335.213766][ T5769] usb 4-1: Manufacturer: syz [ 335.213774][ T5769] usb 4-1: SerialNumber: syz [ 335.222447][ T5769] usb 4-1: config 0 descriptor?? [ 335.267960][ T5710] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 335.309662][T10510] FAULT_INJECTION: forcing a failure. [ 335.309662][T10510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.309687][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.0.1633 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.309703][T10510] Tainted: [L]=SOFTLOCKUP [ 335.309707][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.309713][T10510] Call Trace: [ 335.309718][T10510] [ 335.309723][T10510] dump_stack_lvl+0xe8/0x150 [ 335.309740][T10510] should_fail_ex+0x46b/0x600 [ 335.309757][T10510] _copy_from_iter+0x1d3/0x1670 [ 335.309774][T10510] ? rcu_is_watching+0x15/0xb0 [ 335.309790][T10510] ? trace_kmalloc+0x2a/0xf0 [ 335.309804][T10510] ? __pfx__copy_from_iter+0x10/0x10 [ 335.309819][T10510] ? netlink_sendmsg+0x5d4/0xb40 [ 335.309832][T10510] ? netlink_sendmsg+0x5d4/0xb40 [ 335.309848][T10510] ? netlink_sendmsg+0x650/0xb40 [ 335.309860][T10510] ? skb_put+0x11b/0x210 [ 335.309874][T10510] netlink_sendmsg+0x6c0/0xb40 [ 335.309891][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.309906][T10510] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.309921][T10510] ? aa_sock_msg_perm+0x122/0x200 [ 335.309933][T10510] ? __pfx_netlink_sendmsg+0x10/0x10 [ 335.309946][T10510] sock_sendmsg_nosec+0x13a/0x180 [ 335.309963][T10510] ____sys_sendmsg+0x55c/0x870 [ 335.309978][T10510] ? __pfx_____sys_sendmsg+0x10/0x10 [ 335.309995][T10510] ? import_iovec+0x73/0xa0 [ 335.310011][T10510] ___sys_sendmsg+0x2a5/0x360 [ 335.310024][T10510] ? __lock_acquire+0x6b5/0x2d10 [ 335.310040][T10510] ? __pfx____sys_sendmsg+0x10/0x10 [ 335.310068][T10510] ? __fget_files+0x2a/0x420 [ 335.310078][T10510] ? __fget_files+0x3a6/0x420 [ 335.310093][T10510] __x64_sys_sendmsg+0x1b7/0x290 [ 335.310108][T10510] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 335.310129][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.310140][T10510] do_syscall_64+0x174/0x580 [ 335.310154][T10510] ? trace_irq_disable+0x3b/0x140 [ 335.310167][T10510] ? clear_bhb_loop+0x40/0x90 [ 335.310180][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.310191][T10510] RIP: 0033:0x7f0893e0ce59 [ 335.310201][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.310210][T10510] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 335.310222][T10510] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 335.310230][T10510] RDX: 0000000000000800 RSI: 00002000000001c0 RDI: 0000000000000004 [ 335.310237][T10510] RBP: 00007f089205e090 R08: 0000000000000000 R09: 0000000000000000 [ 335.310244][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.310251][T10510] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 335.310266][T10510] [ 335.377059][T10512] FAULT_INJECTION: forcing a failure. [ 335.377059][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.377093][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.0.1634 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 335.377120][T10512] Tainted: [L]=SOFTLOCKUP [ 335.377126][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 335.377138][T10512] Call Trace: [ 335.377146][T10512] [ 335.377155][T10512] dump_stack_lvl+0xe8/0x150 [ 335.377182][T10512] should_fail_ex+0x46b/0x600 [ 335.377213][T10512] _copy_from_iter+0x1d3/0x1670 [ 335.377242][T10512] ? trace_kmem_cache_alloc+0x29/0xe0 [ 335.377276][T10512] ? __alloc_skb+0x27d/0x7d0 [ 335.377295][T10512] ? __alloc_skb+0x27d/0x7d0 [ 335.377315][T10512] ? __pfx__copy_from_iter+0x10/0x10 [ 335.377346][T10512] ? skb_set_owner_w+0x26c/0x3e0 [ 335.377371][T10512] ? skb_put+0x11b/0x210 [ 335.377395][T10512] packet_sendmsg_spkt+0x79d/0x11d0 [ 335.377429][T10512] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 335.377450][T10512] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 335.377476][T10512] ? aa_sock_msg_perm+0x122/0x200 [ 335.377507][T10512] ? __pfx_packet_sendmsg_spkt+0x10/0x10 [ 335.377527][T10512] sock_sendmsg_nosec+0x13a/0x180 [ 335.377557][T10512] __sys_sendto+0x41a/0x5a0 [ 335.377580][T10512] ? __pfx___sys_sendto+0x10/0x10 [ 335.377624][T10512] ? __pfx_ksys_write+0x10/0x10 [ 335.377651][T10512] __x64_sys_sendto+0xde/0x100 [ 335.377672][T10512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.377692][T10512] do_syscall_64+0x174/0x580 [ 335.377714][T10512] ? trace_irq_disable+0x3b/0x140 [ 335.377737][T10512] ? clear_bhb_loop+0x40/0x90 [ 335.377760][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.377778][T10512] RIP: 0033:0x7f0893e0ce59 [ 335.377796][T10512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 335.377815][T10512] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 335.377834][T10512] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 335.377848][T10512] RDX: 000000000000000e RSI: 0000200000000000 RDI: 0000000000000003 [ 335.377859][T10512] RBP: 00007f089205e090 R08: 0000200000000040 R09: 0000000000000010 [ 335.377871][T10512] R10: 0000000000040800 R11: 0000000000000246 R12: 0000000000000001 [ 335.377883][T10512] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 335.377912][T10512] [ 335.418893][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 335.421137][ T5710] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 335.421160][ T5710] usb 2-1: config 0 has no interface number 0 [ 335.421218][ T5710] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 335.421243][ T5710] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 335.426677][ T5710] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 335.426704][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.426723][ T5710] usb 2-1: Product: syz [ 335.426738][ T5710] usb 2-1: Manufacturer: syz [ 335.426752][ T5710] usb 2-1: SerialNumber: syz [ 335.459479][ T5710] usb 2-1: config 0 descriptor?? [ 335.460466][T10508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 335.460662][T10508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 335.688952][T10508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 335.691577][T10508] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 335.736921][ T5724] usb 4-1: USB disconnect, device number 74 [ 335.896072][ T5710] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 335.896326][ T5710] asix 2-1:0.34: probe with driver asix failed with error -61 [ 336.423940][T10527] FAULT_INJECTION: forcing a failure. [ 336.423940][T10527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.423979][T10527] CPU: 1 UID: 0 PID: 10527 Comm: syz.3.1639 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 336.424006][T10527] Tainted: [L]=SOFTLOCKUP [ 336.424014][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.424026][T10527] Call Trace: [ 336.424034][T10527] [ 336.424043][T10527] dump_stack_lvl+0xe8/0x150 [ 336.424071][T10527] should_fail_ex+0x46b/0x600 [ 336.424103][T10527] _copy_from_user+0x2d/0xb0 [ 336.424125][T10527] __ia32_sys_rt_sigreturn+0x379/0x8e0 [ 336.424151][T10527] ? __lock_acquire+0x6b5/0x2d10 [ 336.424180][T10527] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 336.424225][T10527] ? __task_pid_nr_ns+0x28/0x470 [ 336.424254][T10527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.424276][T10527] do_syscall_64+0x174/0x580 [ 336.424300][T10527] ? trace_irq_disable+0x3b/0x140 [ 336.424324][T10527] ? clear_bhb_loop+0x40/0x90 [ 336.424347][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.424367][T10527] RIP: 0033:0x7f33a665e1d9 [ 336.424384][T10527] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 336.424409][T10527] RSP: 002b:00007f33a490da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 336.424430][T10527] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a665e1d9 [ 336.424445][T10527] RDX: 00007f33a490da80 RSI: 00007f33a490dbb0 RDI: 0000000000000021 [ 336.424458][T10527] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 336.424471][T10527] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 336.424483][T10527] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 336.424511][T10527] [ 337.178141][ T5602] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 337.225208][T10546] FAULT_INJECTION: forcing a failure. [ 337.225208][T10546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.225243][T10546] CPU: 0 UID: 0 PID: 10546 Comm: syz.3.1644 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 337.225270][T10546] Tainted: [L]=SOFTLOCKUP [ 337.225277][T10546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.225290][T10546] Call Trace: [ 337.225298][T10546] [ 337.225307][T10546] dump_stack_lvl+0xe8/0x150 [ 337.225338][T10546] should_fail_ex+0x46b/0x600 [ 337.225381][T10546] _copy_from_iter+0x1d3/0x1670 [ 337.225416][T10546] ? rcu_is_watching+0x15/0xb0 [ 337.225453][T10546] ? __pfx__copy_from_iter+0x10/0x10 [ 337.225482][T10546] ? __alloc_skb+0x27d/0x7d0 [ 337.225505][T10546] ? __alloc_skb+0x27d/0x7d0 [ 337.225532][T10546] ? __alloc_skb+0x4e5/0x7d0 [ 337.225551][T10546] ? skb_put+0x11b/0x210 [ 337.225578][T10546] pfkey_sendmsg+0x265/0x1120 [ 337.225602][T10546] ? unwind_next_frame+0xa6/0x2550 [ 337.225642][T10546] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.225676][T10546] ? aa_sk_perm+0x703/0x950 [ 337.225714][T10546] ? __pfx_aa_sk_perm+0x10/0x10 [ 337.225744][T10546] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 337.225774][T10546] ? aa_sock_msg_perm+0x122/0x200 [ 337.225796][T10546] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 337.225819][T10546] sock_sendmsg_nosec+0x13a/0x180 [ 337.225852][T10546] ____sys_sendmsg+0x55c/0x870 [ 337.225882][T10546] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.225915][T10546] ? import_iovec+0x73/0xa0 [ 337.225941][T10546] ___sys_sendmsg+0x2a5/0x360 [ 337.225965][T10546] ? __lock_acquire+0x6b5/0x2d10 [ 337.225994][T10546] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.226050][T10546] ? __fget_files+0x2a/0x420 [ 337.226075][T10546] ? __fget_files+0x3a6/0x420 [ 337.226105][T10546] __x64_sys_sendmsg+0x1b7/0x290 [ 337.226134][T10546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.226174][T10546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.226198][T10546] do_syscall_64+0x174/0x580 [ 337.226224][T10546] ? trace_irq_disable+0x3b/0x140 [ 337.226249][T10546] ? clear_bhb_loop+0x40/0x90 [ 337.226274][T10546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.226293][T10546] RIP: 0033:0x7f33a66bce59 [ 337.226311][T10546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.226327][T10546] RSP: 002b:00007f33a490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.226348][T10546] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a66bce59 [ 337.226371][T10546] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 337.226385][T10546] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 337.226398][T10546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.226411][T10546] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 337.226441][T10546] [ 337.330844][ T5602] usb 1-1: device descriptor read/64, error -71 [ 337.608058][ T5602] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 337.750110][ T5602] usb 1-1: device descriptor read/64, error -71 [ 337.870861][ T5602] usb usb1-port1: attempt power cycle [ 338.092319][ T5724] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 338.120340][ T5710] usb 2-1: USB disconnect, device number 71 [ 338.171836][T10561] kAFS: No cell specified [ 338.238103][ T5602] usb 1-1: new low-speed USB device number 52 using dummy_hcd [ 338.257178][T10563] FAULT_INJECTION: forcing a failure. [ 338.257178][T10563] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.257211][T10563] CPU: 1 UID: 0 PID: 10563 Comm: syz.2.1651 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 338.257238][T10563] Tainted: [L]=SOFTLOCKUP [ 338.257253][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 338.257265][T10563] Call Trace: [ 338.257273][T10563] [ 338.257281][T10563] dump_stack_lvl+0xe8/0x150 [ 338.257308][T10563] should_fail_ex+0x46b/0x600 [ 338.257342][T10563] _copy_to_user+0x31/0xb0 [ 338.257367][T10563] simple_read_from_buffer+0xe1/0x170 [ 338.257392][T10563] proc_fail_nth_read+0x1be/0x230 [ 338.257414][T10563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.257437][T10563] ? rw_verify_area+0x2ac/0x4e0 [ 338.257458][T10563] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 338.257480][T10563] vfs_read+0x212/0xa80 [ 338.257511][T10563] ? __pfx_vfs_read+0x10/0x10 [ 338.257537][T10563] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 338.257562][T10563] ? lockdep_hardirqs_on+0x7a/0x110 [ 338.257586][T10563] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 338.257610][T10563] ? mutex_lock_nested+0x152/0x1d0 [ 338.257639][T10563] ? fdget_pos+0x252/0x320 [ 338.257668][T10563] ksys_read+0x156/0x270 [ 338.257694][T10563] ? __pfx_ksys_read+0x10/0x10 [ 338.257716][T10563] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 338.257743][T10563] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.257764][T10563] do_syscall_64+0x174/0x580 [ 338.257787][T10563] ? trace_irq_disable+0x3b/0x140 [ 338.257809][T10563] ? clear_bhb_loop+0x40/0x90 [ 338.257832][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.257851][T10563] RIP: 0033:0x7f0b6315d68e [ 338.257869][T10563] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 338.257885][T10563] RSP: 002b:00007f0b613edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 338.257905][T10563] RAX: ffffffffffffffda RBX: 00007f0b613ee6c0 RCX: 00007f0b6315d68e [ 338.257919][T10563] RDX: 000000000000000f RSI: 00007f0b613ee0a0 RDI: 0000000000000005 [ 338.257932][T10563] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 338.257944][T10563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.257956][T10563] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 338.257987][T10563] [ 338.268653][ T5602] usb 1-1: device descriptor read/8, error -71 [ 338.288482][ T5724] usb 4-1: config 0 has no interfaces? [ 338.290965][ T5724] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 338.290991][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.291011][ T5724] usb 4-1: Product: syz [ 338.291026][ T5724] usb 4-1: Manufacturer: syz [ 338.291040][ T5724] usb 4-1: SerialNumber: syz [ 338.306409][ T5724] usb 4-1: config 0 descriptor?? [ 338.618030][ T5602] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 338.639115][ T5602] usb 1-1: device descriptor read/8, error -71 [ 338.709777][T10568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.710292][T10568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.759297][ T5602] usb usb1-port1: unable to enumerate USB device [ 338.786058][ T5724] usb 4-1: USB disconnect, device number 75 [ 339.876851][T10587] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1660'. [ 339.895818][T10589] FAULT_INJECTION: forcing a failure. [ 339.895818][T10589] name failslab, interval 1, probability 0, space 0, times 0 [ 339.895842][T10589] CPU: 1 UID: 0 PID: 10589 Comm: syz.3.1661 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.895858][T10589] Tainted: [L]=SOFTLOCKUP [ 339.895862][T10589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.895869][T10589] Call Trace: [ 339.895874][T10589] [ 339.895879][T10589] dump_stack_lvl+0xe8/0x150 [ 339.895896][T10589] should_fail_ex+0x46b/0x600 [ 339.895914][T10589] should_failslab+0xa8/0x100 [ 339.895927][T10589] kmem_cache_alloc_node_noprof+0xae/0x710 [ 339.895945][T10589] ? __alloc_skb+0x1d0/0x7d0 [ 339.895956][T10589] ? __alloc_skb+0x1d0/0x7d0 [ 339.895974][T10589] __alloc_skb+0x1d0/0x7d0 [ 339.895997][T10589] netlink_sendmsg+0x5d4/0xb40 [ 339.896028][T10589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.896053][T10589] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 339.896079][T10589] ? aa_sock_msg_perm+0x122/0x200 [ 339.896100][T10589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.896114][T10589] sock_sendmsg_nosec+0x13a/0x180 [ 339.896133][T10589] ____sys_sendmsg+0x55c/0x870 [ 339.896148][T10589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.896165][T10589] ? import_iovec+0x73/0xa0 [ 339.896178][T10589] ___sys_sendmsg+0x2a5/0x360 [ 339.896191][T10589] ? __lock_acquire+0x6b5/0x2d10 [ 339.896206][T10589] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.896234][T10589] ? __fget_files+0x2a/0x420 [ 339.896244][T10589] ? __fget_files+0x3a6/0x420 [ 339.896259][T10589] __x64_sys_sendmsg+0x1b7/0x290 [ 339.896274][T10589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.896294][T10589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.896305][T10589] do_syscall_64+0x174/0x580 [ 339.896319][T10589] ? trace_irq_disable+0x3b/0x140 [ 339.896332][T10589] ? clear_bhb_loop+0x40/0x90 [ 339.896345][T10589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.896355][T10589] RIP: 0033:0x7f33a66bce59 [ 339.896366][T10589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.896376][T10589] RSP: 002b:00007f33a490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.896388][T10589] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a66bce59 [ 339.896396][T10589] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 339.896403][T10589] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.896410][T10589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.896416][T10589] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 339.896431][T10589] [ 340.339089][ T5602] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 340.488237][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 340.522764][ T5602] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 340.522811][ T5602] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 340.545002][ T5602] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 340.545037][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.545057][ T5602] usb 2-1: Product: syz [ 340.545071][ T5602] usb 2-1: Manufacturer: syz [ 340.545085][ T5602] usb 2-1: SerialNumber: syz [ 340.628060][ T5724] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 340.779846][ T5724] usb 4-1: config 0 has no interfaces? [ 340.783212][ T5724] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 340.783241][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.783260][ T5724] usb 4-1: Product: syz [ 340.783276][ T5724] usb 4-1: Manufacturer: syz [ 340.783291][ T5724] usb 4-1: SerialNumber: syz [ 340.837324][ T5724] usb 4-1: config 0 descriptor?? [ 340.863694][ T5602] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 340.957661][ T5602] usb 2-1: disable ehci-hcd to run US-144 [ 340.960763][ T5602] usb 2-1: USB disconnect, device number 72 [ 341.036506][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.292251][ T5602] usb 4-1: USB disconnect, device number 76 [ 341.306055][T10604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 341.310726][T10612] 9p: Bad value for 'rfdno' [ 341.405668][T10604] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 341.405835][T10604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 341.405980][T10604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 341.406045][T10604] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 341.513121][T10604] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 341.685339][T10619] FAULT_INJECTION: forcing a failure. [ 341.685339][T10619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.685375][T10619] CPU: 1 UID: 0 PID: 10619 Comm: syz.1.1672 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.685402][T10619] Tainted: [L]=SOFTLOCKUP [ 341.685410][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.685422][T10619] Call Trace: [ 341.685430][T10619] [ 341.685439][T10619] dump_stack_lvl+0xe8/0x150 [ 341.685466][T10619] should_fail_ex+0x46b/0x600 [ 341.685498][T10619] _copy_from_iter+0x1d3/0x1670 [ 341.685530][T10619] ? rcu_is_watching+0x15/0xb0 [ 341.685563][T10619] ? __pfx__copy_from_iter+0x10/0x10 [ 341.685591][T10619] ? __alloc_skb+0x27d/0x7d0 [ 341.685611][T10619] ? __alloc_skb+0x27d/0x7d0 [ 341.685637][T10619] ? netlink_sendmsg+0x650/0xb40 [ 341.685660][T10619] ? skb_put+0x11b/0x210 [ 341.685685][T10619] netlink_sendmsg+0x6c0/0xb40 [ 341.685718][T10619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.685744][T10619] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 341.685772][T10619] ? aa_sock_msg_perm+0x122/0x200 [ 341.685793][T10619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.685817][T10619] sock_sendmsg_nosec+0x13a/0x180 [ 341.685849][T10619] ____sys_sendmsg+0x55c/0x870 [ 341.685877][T10619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.685909][T10619] ? import_iovec+0x73/0xa0 [ 341.685933][T10619] ___sys_sendmsg+0x2a5/0x360 [ 341.685956][T10619] ? __lock_acquire+0x6b5/0x2d10 [ 341.685985][T10619] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.686040][T10619] ? __fget_files+0x2a/0x420 [ 341.686066][T10619] ? __fget_files+0x3a6/0x420 [ 341.686096][T10619] __x64_sys_sendmsg+0x1b7/0x290 [ 341.686123][T10619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.686163][T10619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.686185][T10619] do_syscall_64+0x174/0x580 [ 341.686211][T10619] ? trace_irq_disable+0x3b/0x140 [ 341.686236][T10619] ? clear_bhb_loop+0x40/0x90 [ 341.686259][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.686279][T10619] RIP: 0033:0x7f61868ece59 [ 341.686297][T10619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.686315][T10619] RSP: 002b:00007f6184b3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.686334][T10619] RAX: ffffffffffffffda RBX: 00007f6186b65fa0 RCX: 00007f61868ece59 [ 341.686349][T10619] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 341.686362][T10619] RBP: 00007f6184b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 341.686374][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.686386][T10619] R13: 00007f6186b66038 R14: 00007f6186b65fa0 R15: 00007ffd2d829f88 [ 341.686416][T10619] [ 341.960593][T10623] FAULT_INJECTION: forcing a failure. [ 341.960593][T10623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 341.960629][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.3.1674 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 341.960655][T10623] Tainted: [L]=SOFTLOCKUP [ 341.960663][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 341.960674][T10623] Call Trace: [ 341.960681][T10623] [ 341.960690][T10623] dump_stack_lvl+0xe8/0x150 [ 341.960717][T10623] should_fail_ex+0x46b/0x600 [ 341.960749][T10623] _copy_from_iter+0x1d3/0x1670 [ 341.960780][T10623] ? rcu_is_watching+0x15/0xb0 [ 341.960814][T10623] ? __pfx__copy_from_iter+0x10/0x10 [ 341.960840][T10623] ? __alloc_skb+0x27d/0x7d0 [ 341.960859][T10623] ? __alloc_skb+0x27d/0x7d0 [ 341.960884][T10623] ? netlink_sendmsg+0x650/0xb40 [ 341.960906][T10623] ? skb_put+0x11b/0x210 [ 341.960930][T10623] netlink_sendmsg+0x6c0/0xb40 [ 341.960961][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.960986][T10623] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 341.961013][T10623] ? aa_sock_msg_perm+0x122/0x200 [ 341.961034][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 341.961057][T10623] sock_sendmsg_nosec+0x13a/0x180 [ 341.961095][T10623] ____sys_sendmsg+0x55c/0x870 [ 341.961122][T10623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 341.961153][T10623] ? import_iovec+0x73/0xa0 [ 341.961179][T10623] ___sys_sendmsg+0x2a5/0x360 [ 341.961201][T10623] ? __lock_acquire+0x6b5/0x2d10 [ 341.961228][T10623] ? __pfx____sys_sendmsg+0x10/0x10 [ 341.961280][T10623] ? __fget_files+0x2a/0x420 [ 341.961299][T10623] ? __fget_files+0x3a6/0x420 [ 341.961326][T10623] __x64_sys_sendmsg+0x1b7/0x290 [ 341.961352][T10623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 341.961390][T10623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.961411][T10623] do_syscall_64+0x174/0x580 [ 341.961435][T10623] ? trace_irq_disable+0x3b/0x140 [ 341.961459][T10623] ? clear_bhb_loop+0x40/0x90 [ 341.961481][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.961500][T10623] RIP: 0033:0x7f33a66bce59 [ 341.961517][T10623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.961534][T10623] RSP: 002b:00007f33a490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 341.961554][T10623] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a66bce59 [ 341.961568][T10623] RDX: 0000000000000800 RSI: 0000200000000400 RDI: 0000000000000003 [ 341.961581][T10623] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 341.961593][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 341.961605][T10623] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 341.961633][T10623] [ 342.548641][ T5724] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 342.622438][ T5627] Bluetooth: hci0: command 0x0c1a tx timeout [ 342.681555][T10636] FAULT_INJECTION: forcing a failure. [ 342.681555][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 342.681581][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.3.1678 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.681597][T10636] Tainted: [L]=SOFTLOCKUP [ 342.681601][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.681608][T10636] Call Trace: [ 342.681613][T10636] [ 342.681618][T10636] dump_stack_lvl+0xe8/0x150 [ 342.681637][T10636] should_fail_ex+0x46b/0x600 [ 342.681656][T10636] should_failslab+0xa8/0x100 [ 342.681670][T10636] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 342.681687][T10636] ? ptlock_alloc+0x20/0x70 [ 342.681697][T10636] ? ptlock_alloc+0x20/0x70 [ 342.681710][T10636] ptlock_alloc+0x20/0x70 [ 342.681721][T10636] pte_alloc_one+0x7e/0x380 [ 342.681737][T10636] __do_fault+0xd1/0x2a0 [ 342.681751][T10636] do_pte_missing+0x65b/0x2940 [ 342.681770][T10636] handle_mm_fault+0xdc2/0x14d0 [ 342.681789][T10636] ? handle_mm_fault+0xed/0x14d0 [ 342.681801][T10636] ? __pfx_handle_mm_fault+0x10/0x10 [ 342.681810][T10636] ? mtree_load+0x12a/0x780 [ 342.681837][T10636] __get_user_pages+0x16d4/0x2620 [ 342.681868][T10636] faultin_page_range+0x240/0x8c0 [ 342.681888][T10636] madvise_do_behavior+0x2e5/0x540 [ 342.681916][T10636] ? __pfx_madvise_do_behavior+0x10/0x10 [ 342.681927][T10636] ? down_read+0x156/0x200 [ 342.681950][T10636] do_madvise+0x26f/0x330 [ 342.681966][T10636] ? __pfx_do_madvise+0x10/0x10 [ 342.681984][T10636] ? __pfx_ksys_write+0x10/0x10 [ 342.681999][T10636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.682010][T10636] __x64_sys_madvise+0xa6/0xc0 [ 342.682023][T10636] do_syscall_64+0x174/0x580 [ 342.682037][T10636] ? clear_bhb_loop+0x40/0x90 [ 342.682051][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.682062][T10636] RIP: 0033:0x7f33a66bce59 [ 342.682073][T10636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.682082][T10636] RSP: 002b:00007f33a490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 342.682094][T10636] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a66bce59 [ 342.682105][T10636] RDX: 0000000000000017 RSI: 0000000000800000 RDI: 00002000000ec000 [ 342.682117][T10636] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 342.682129][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.682140][T10636] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 342.682170][T10636] [ 342.945888][ T5724] usb 1-1: Using ep0 maxpacket: 8 [ 343.023854][ T5724] usb 1-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 62, changing to 9 [ 343.023878][ T5724] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 8 [ 343.023891][ T5724] usb 1-1: config 1 interface 0 altsetting 64 bulk endpoint 0x3 has invalid maxpacket 1023 [ 343.023905][ T5724] usb 1-1: config 1 interface 0 has no altsetting 0 [ 343.045196][ T5724] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.045227][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.045247][ T5724] usb 1-1: Product: 쳩翥᪝欑餥⬒태쪲谐盺傻芺륪繷ⅺ搢⟷룾퐓乧昂䤞檲똎尀츽낔斻ㇺ筮쫝菦鐶쫽苓浾禕則噃㷁됥禝촦ꄿ욡㸅ⶁ䚞ꡁᨵ瞉﹄墣ƥ⑨⹭஛ﾅ쐑座ꍨ촳慛 [ 343.045282][ T5724] usb 1-1: Manufacturer: 뉝螿狛ᆂࣴ퇃䠚슒諵㳝鐱儯팘뫕霴엜댺骑鴷㫑ꊥ䳲㎵⹽嬼厊窑㏄忏勽䃚ꢠ烫揾届՜菑鐈簥섏礳쓟쟯磋䇺퀒䖩㨘ꌸꂫ脒ᓀ虄斗謻奙翽⃠괸碫ᐙ銉콥쯢濁嗔텔㌿鮩⼈䜯靤䟫䰃჌䎂逓곢͒檂絭ꣻ㮄挣ڸ [ 343.045315][ T5724] usb 1-1: SerialNumber: syz [ 343.221569][T10627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 343.221896][T10627] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 343.417962][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 343.418329][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 343.418360][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 343.466881][T10627] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.507918][T10644] FAULT_INJECTION: forcing a failure. [ 343.507918][T10644] name failslab, interval 1, probability 0, space 0, times 0 [ 343.507953][T10644] CPU: 0 UID: 0 PID: 10644 Comm: syz.3.1681 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 343.507981][T10644] Tainted: [L]=SOFTLOCKUP [ 343.507989][T10644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 343.508005][T10644] Call Trace: [ 343.508013][T10644] [ 343.508022][T10644] dump_stack_lvl+0xe8/0x150 [ 343.508050][T10644] should_fail_ex+0x46b/0x600 [ 343.508083][T10644] should_failslab+0xa8/0x100 [ 343.508111][T10644] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 343.508142][T10644] ? security_file_alloc+0x34/0x310 [ 343.508167][T10644] ? security_file_alloc+0x34/0x310 [ 343.508199][T10644] security_file_alloc+0x34/0x310 [ 343.508227][T10644] init_file+0x96/0x2d0 [ 343.508251][T10644] alloc_empty_file+0x74/0x1d0 [ 343.508270][T10644] path_openat+0x92/0x37e0 [ 343.508297][T10644] ? __lock_acquire+0x6b5/0x2d10 [ 343.508328][T10644] ? __kasan_slab_alloc+0x6c/0x80 [ 343.508347][T10644] ? kmem_cache_alloc_noprof+0x354/0x6c0 [ 343.508375][T10644] ? do_getname+0x2e/0x250 [ 343.508401][T10644] ? do_sys_openat2+0xcc/0x200 [ 343.508418][T10644] ? __x64_sys_openat+0x138/0x170 [ 343.508444][T10644] ? do_raw_spin_lock+0x12b/0x2f0 [ 343.508474][T10644] do_file_open+0x23e/0x4a0 [ 343.508497][T10644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 343.508526][T10644] ? __pfx_do_file_open+0x10/0x10 [ 343.508547][T10644] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 343.508587][T10644] ? alloc_fd+0x679/0x6f0 [ 343.508616][T10644] do_sys_openat2+0x115/0x200 [ 343.508637][T10644] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.508661][T10644] ? rcu_is_watching+0x15/0xb0 [ 343.508694][T10644] __x64_sys_openat+0x138/0x170 [ 343.508716][T10644] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.508737][T10644] do_syscall_64+0x174/0x580 [ 343.508763][T10644] ? clear_bhb_loop+0x40/0x90 [ 343.508787][T10644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.508806][T10644] RIP: 0033:0x7f33a667d68e [ 343.508825][T10644] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 343.508842][T10644] RSP: 002b:00007f33a490dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 343.508870][T10644] RAX: ffffffffffffffda RBX: 00007f33a490e6c0 RCX: 00007f33a667d68e [ 343.508885][T10644] RDX: 0000000000000002 RSI: 00007f33a490df90 RDI: ffffffffffffff9c [ 343.508899][T10644] RBP: 00007f33a490e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.508912][T10644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.508924][T10644] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 343.508955][T10644] [ 343.563263][ T5724] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 343.816546][ T5724] usb 1-1: USB disconnect, device number 54 [ 344.114850][T10650] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1683'. [ 344.115705][T10650] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1683'. [ 344.387097][T10657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 344.410233][T10655] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1686'. [ 344.421420][T10655] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 344.854666][T10670] FAULT_INJECTION: forcing a failure. [ 344.854666][T10670] name failslab, interval 1, probability 0, space 0, times 0 [ 344.854702][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.2.1690 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 344.854727][T10670] Tainted: [L]=SOFTLOCKUP [ 344.854733][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 344.854744][T10670] Call Trace: [ 344.854751][T10670] [ 344.854758][T10670] dump_stack_lvl+0xe8/0x150 [ 344.854782][T10670] should_fail_ex+0x46b/0x600 [ 344.854810][T10670] should_failslab+0xa8/0x100 [ 344.854831][T10670] __kmalloc_cache_noprof+0xa0/0x6d0 [ 344.854849][T10670] ? vkms_plane_duplicate_state+0x8d/0x110 [ 344.854868][T10670] ? vkms_plane_duplicate_state+0x8d/0x110 [ 344.854892][T10670] vkms_plane_duplicate_state+0x8d/0x110 [ 344.854914][T10670] drm_atomic_get_plane_state+0x27e/0x730 [ 344.854945][T10670] drm_client_modeset_commit_atomic+0x227/0x7e0 [ 344.854977][T10670] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 344.855012][T10670] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 344.855031][T10670] ? lockdep_hardirqs_on+0x7a/0x110 [ 344.855048][T10670] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 344.855065][T10670] ? mutex_lock_nested+0x152/0x1d0 [ 344.855087][T10670] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 344.855114][T10670] drm_client_modeset_commit_locked+0xce/0x4d0 [ 344.855142][T10670] drm_fb_helper_pan_display+0x3ea/0xbe0 [ 344.855173][T10670] fb_pan_display+0x39e/0x680 [ 344.855195][T10670] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 344.855218][T10670] bit_update_start+0x4c/0x1e0 [ 344.855243][T10670] fbcon_modechanged+0xae3/0x1110 [ 344.855275][T10670] fb_set_var_from_user+0x99/0xc0 [ 344.855294][T10670] do_fb_ioctl+0x5d9/0x750 [ 344.855311][T10670] ? __pfx_do_fb_ioctl+0x10/0x10 [ 344.855355][T10670] ? __fget_files+0x2a/0x420 [ 344.855374][T10670] ? __fget_files+0x3a6/0x420 [ 344.855388][T10670] ? __fget_files+0x2a/0x420 [ 344.855406][T10670] ? bpf_lsm_file_ioctl+0x9/0x20 [ 344.855428][T10670] ? __pfx_fb_ioctl+0x10/0x10 [ 344.855444][T10670] __se_sys_ioctl+0xff/0x170 [ 344.855464][T10670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.855482][T10670] do_syscall_64+0x174/0x580 [ 344.855501][T10670] ? trace_irq_disable+0x3b/0x140 [ 344.855521][T10670] ? clear_bhb_loop+0x40/0x90 [ 344.855541][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.855558][T10670] RIP: 0033:0x7f0b6319ce59 [ 344.855574][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.855588][T10670] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.855624][T10670] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 344.855636][T10670] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 344.855647][T10670] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 344.855659][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.855669][T10670] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 344.855697][T10670] [ 345.220924][ T9] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 345.389785][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 345.391696][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.393975][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 345.394003][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.394023][ T9] usb 4-1: Product: syz [ 345.394033][ T9] usb 4-1: Manufacturer: syz [ 345.394041][ T9] usb 4-1: SerialNumber: syz [ 345.397000][ T9] usb 4-1: config 0 descriptor?? [ 345.431616][ T9] mcba_usb 4-1:0.0: Can't find endpoints [ 345.500626][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 345.622658][T10685] FAULT_INJECTION: forcing a failure. [ 345.622658][T10685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.622692][T10685] CPU: 0 UID: 0 PID: 10685 Comm: syz.1.1694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.622718][T10685] Tainted: [L]=SOFTLOCKUP [ 345.622725][T10685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 345.622736][T10685] Call Trace: [ 345.622743][T10685] [ 345.622752][T10685] dump_stack_lvl+0xe8/0x150 [ 345.622779][T10685] should_fail_ex+0x46b/0x600 [ 345.622811][T10685] _copy_to_user+0x31/0xb0 [ 345.622834][T10685] simple_read_from_buffer+0xe1/0x170 [ 345.622860][T10685] proc_fail_nth_read+0x1be/0x230 [ 345.622884][T10685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.622906][T10685] ? rw_verify_area+0x2ac/0x4e0 [ 345.622928][T10685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.622948][T10685] vfs_read+0x212/0xa80 [ 345.622978][T10685] ? __pfx_vfs_read+0x10/0x10 [ 345.623002][T10685] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 345.623026][T10685] ? lockdep_hardirqs_on+0x7a/0x110 [ 345.623051][T10685] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 345.623075][T10685] ? mutex_lock_nested+0x152/0x1d0 [ 345.623103][T10685] ? fdget_pos+0x252/0x320 [ 345.623129][T10685] ksys_read+0x156/0x270 [ 345.623154][T10685] ? __pfx_ksys_read+0x10/0x10 [ 345.623175][T10685] ? __pfx_v4l2_ioctl+0x10/0x10 [ 345.623206][T10685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.623226][T10685] do_syscall_64+0x174/0x580 [ 345.623249][T10685] ? trace_irq_disable+0x3b/0x140 [ 345.623273][T10685] ? clear_bhb_loop+0x40/0x90 [ 345.623297][T10685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.623317][T10685] RIP: 0033:0x7f61868ad68e [ 345.623335][T10685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 345.623352][T10685] RSP: 002b:00007f6184b3dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.623373][T10685] RAX: ffffffffffffffda RBX: 00007f6184b3e6c0 RCX: 00007f61868ad68e [ 345.623388][T10685] RDX: 000000000000000f RSI: 00007f6184b3e0a0 RDI: 0000000000000004 [ 345.623401][T10685] RBP: 00007f6184b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 345.623413][T10685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.623424][T10685] R13: 00007f6186b66038 R14: 00007f6186b65fa0 R15: 00007ffd2d829f88 [ 345.623455][T10685] [ 345.662327][ T5769] usb 4-1: USB disconnect, device number 77 [ 346.128046][ T5724] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 346.277928][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 346.285660][ T5724] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 346.285686][ T5724] usb 1-1: config 0 has no interface number 0 [ 346.285731][ T5724] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 346.285758][ T5724] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 346.329789][ T5724] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 346.329818][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.329837][ T5724] usb 1-1: Product: syz [ 346.329851][ T5724] usb 1-1: Manufacturer: syz [ 346.329865][ T5724] usb 1-1: SerialNumber: syz [ 346.371706][ T5724] usb 1-1: config 0 descriptor?? [ 346.373110][T10691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.373237][T10691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.457386][T10700] misc userio: Begin command sent, but we're already running [ 346.577437][T10691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.577555][T10691] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.779665][ T5724] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 346.779878][ T5724] asix 1-1:0.34: probe with driver asix failed with error -61 [ 347.157376][T10708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.158588][T10708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.568033][ T9] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 347.577985][ T5627] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.731876][ T9] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 347.731917][ T9] usb 4-1: config 0 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 347.731945][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 347.733865][ T9] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 347.733893][ T9] usb 4-1: New USB device strings: Mfr=18, Product=0, SerialNumber=0 [ 347.733915][ T9] usb 4-1: Manufacturer: syz [ 347.772957][ T9] usb 4-1: config 0 descriptor?? [ 347.829311][T10726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.830076][T10726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.390294][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390319][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390336][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390351][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390367][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390382][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x0 [ 348.390417][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x2 [ 348.390435][ T9] elecom 0003:056E:00FF.0011: unknown main item tag 0x1 [ 348.390450][ T9] elecom 0003:056E:00FF.0011: item fetching failed at offset 39/40 [ 348.390870][ T9] elecom 0003:056E:00FF.0011: probe with driver elecom failed with error -22 [ 348.589229][ T37] usb 4-1: USB disconnect, device number 78 [ 348.622661][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 348.803420][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.804456][ T5627] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 348.804804][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.903018][ T9] usb 1-1: USB disconnect, device number 55 [ 349.052896][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.055084][T10753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.425730][T10766] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1722'. [ 349.575021][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.576325][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.591448][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.597562][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.673541][ T5948] Bluetooth: hci1: Frame reassembly failed (-84) [ 349.858054][ T5769] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 350.009556][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 350.011373][ T5769] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 350.011397][ T5769] usb 2-1: config 0 has no interface number 0 [ 350.011442][ T5769] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 350.011464][ T5769] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 350.013847][ T5769] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 350.013874][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.013895][ T5769] usb 2-1: Product: syz [ 350.013909][ T5769] usb 2-1: Manufacturer: syz [ 350.013924][ T5769] usb 2-1: SerialNumber: syz [ 350.017634][ T5769] usb 2-1: config 0 descriptor?? [ 350.030151][T10772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.044063][T10772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.238015][ T37] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 350.249549][T10772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.249739][T10772] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 350.399900][ T37] usb 4-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 350.402232][ T37] usb 4-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 350.402261][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.402281][ T37] usb 4-1: Product: syz [ 350.402463][ T37] usb 4-1: Manufacturer: syz [ 350.402479][ T37] usb 4-1: SerialNumber: syz [ 350.452454][ T37] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 350.452580][ T37] dvb-usb: bulk message failed: -22 (3/0) [ 350.461451][ T5769] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 350.461777][ T5769] asix 2-1:0.34: probe with driver asix failed with error -61 [ 350.495138][ T37] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.496383][ T37] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 350.496490][ T37] usb 4-1: media controller created [ 350.531657][ T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.620832][ T37] DVB: Unable to find symbol mt352_attach() [ 350.620846][ T37] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 350.627079][ T37] dvb-usb: bulk message failed: -22 (3/0) [ 350.638050][ T37] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 350.663465][ T37] usb 4-1: USB disconnect, device number 79 [ 350.725142][T10783] FAULT_INJECTION: forcing a failure. [ 350.725142][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.725179][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.0.1729 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.725206][T10783] Tainted: [L]=SOFTLOCKUP [ 350.725213][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 350.725225][T10783] Call Trace: [ 350.725299][T10783] [ 350.725366][T10783] dump_stack_lvl+0xe8/0x150 [ 350.725448][T10783] should_fail_ex+0x46b/0x600 [ 350.725481][T10783] _copy_from_user+0x2d/0xb0 [ 350.725504][T10783] __se_sys_mount+0x18b/0x420 [ 350.725529][T10783] ? __pfx___se_sys_mount+0x10/0x10 [ 350.725581][T10783] ? __x64_sys_mount+0x20/0xc0 [ 350.725596][T10783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.725617][T10783] do_syscall_64+0x174/0x580 [ 350.725639][T10783] ? trace_irq_disable+0x3b/0x140 [ 350.725662][T10783] ? clear_bhb_loop+0x40/0x90 [ 350.725686][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.725705][T10783] RIP: 0033:0x7f0893e0ce59 [ 350.725749][T10783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.725796][T10783] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.725824][T10783] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 350.725837][T10783] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 350.725850][T10783] RBP: 00007f089205e090 R08: 0000200000000340 R09: 0000000000000000 [ 350.725863][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.725874][T10783] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 350.725904][T10783] [ 350.743352][ T37] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 351.657966][ T61] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.658258][ T5769] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 351.658388][T10771] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 351.738878][ T5627] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 351.815329][ T5769] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 351.815349][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.836734][ T5769] usb 4-1: config 0 descriptor?? [ 351.845812][ T5769] cp210x 4-1:0.0: cp210x converter detected [ 352.246674][ T5769] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 352.247314][ T5769] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 352.247328][ T5769] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 352.274801][ T5769] usb 4-1: cp210x converter now attached to ttyUSB0 [ 352.589790][ T37] usb 2-1: USB disconnect, device number 73 [ 352.707967][ T5710] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 352.788620][ T5724] usb 4-1: USB disconnect, device number 80 [ 352.838768][ T5724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 352.845387][ T5724] cp210x 4-1:0.0: device disconnected [ 352.915761][ T5627] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 352.915946][ T5627] Bluetooth: hci0: Injecting HCI hardware error event [ 352.926188][ T61] Bluetooth: hci0: hardware error 0x00 [ 352.940237][ T5710] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 352.940300][ T5710] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.940340][ T5710] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 352.940374][ T5710] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.975988][ T5710] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 352.976017][ T5710] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.976038][ T5710] usb 1-1: Product: syz [ 352.976052][ T5710] usb 1-1: Manufacturer: syz [ 352.976067][ T5710] usb 1-1: SerialNumber: syz [ 353.159559][T10820] FAULT_INJECTION: forcing a failure. [ 353.159559][T10820] name failslab, interval 1, probability 0, space 0, times 0 [ 353.159594][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.1.1742 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 353.159618][T10820] Tainted: [L]=SOFTLOCKUP [ 353.159625][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 353.159634][T10820] Call Trace: [ 353.159640][T10820] [ 353.159647][T10820] dump_stack_lvl+0xe8/0x150 [ 353.159670][T10820] should_fail_ex+0x46b/0x600 [ 353.159695][T10820] should_failslab+0xa8/0x100 [ 353.159713][T10820] kmem_cache_alloc_node_noprof+0xae/0x710 [ 353.159737][T10820] ? __alloc_skb+0x1d0/0x7d0 [ 353.159753][T10820] ? __alloc_skb+0x1d0/0x7d0 [ 353.159773][T10820] __alloc_skb+0x1d0/0x7d0 [ 353.159792][T10820] __pskb_copy_fclone+0xa9/0x11e0 [ 353.159814][T10820] ? kernel_text_address+0xa5/0xe0 [ 353.159841][T10820] tipc_msg_reassemble+0x10b/0x3b0 [ 353.159866][T10820] tipc_mcast_xmit+0x2b5/0x1a90 [ 353.159901][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.159921][T10820] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 353.159938][T10820] ? kasan_save_track+0x4f/0x80 [ 353.159952][T10820] ? kasan_save_track+0x3e/0x80 [ 353.159965][T10820] ? __kasan_slab_alloc+0x6c/0x80 [ 353.159981][T10820] ? kmem_cache_alloc_node_noprof+0x23c/0x710 [ 353.160006][T10820] ? __alloc_skb+0x27d/0x7d0 [ 353.160023][T10820] ? tipc_msg_build+0x162/0xf00 [ 353.160042][T10820] ? __tipc_sendmsg+0x1ca5/0x2c00 [ 353.160059][T10820] ? __tipc_sendstream+0x104e/0x1280 [ 353.160074][T10820] ? tipc_send_packet+0x7c/0xa0 [ 353.160091][T10820] ? sock_sendmsg_nosec+0x13a/0x180 [ 353.160114][T10820] ? ____sys_sendmsg+0x55c/0x870 [ 353.160132][T10820] ? ___sys_sendmsg+0x2a5/0x360 [ 353.160148][T10820] ? __x64_sys_sendmsg+0x1b7/0x290 [ 353.160164][T10820] ? do_syscall_64+0x174/0x580 [ 353.160182][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.160205][T10820] ? __might_fault+0xaf/0x130 [ 353.160225][T10820] ? __might_fault+0xaf/0x130 [ 353.160252][T10820] ? __might_fault+0xaf/0x130 [ 353.160274][T10820] ? _copy_from_iter+0x2d3/0x1670 [ 353.160300][T10820] ? rcu_is_watching+0x15/0xb0 [ 353.160326][T10820] ? __pfx__copy_from_iter+0x10/0x10 [ 353.160357][T10820] ? tipc_msg_build+0x482/0xf00 [ 353.160387][T10820] ? tipc_sk_filtering+0x13c/0x510 [ 353.160412][T10820] ? trace_tipc_sk_sendmcast+0x93/0x230 [ 353.160431][T10820] __tipc_sendmsg+0x21cc/0x2c00 [ 353.160459][T10820] ? __pfx___tipc_sendmsg+0x10/0x10 [ 353.160488][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.160509][T10820] ? do_raw_spin_lock+0x12b/0x2f0 [ 353.160526][T10820] ? __pfx_woken_wake_function+0x10/0x10 [ 353.160550][T10820] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 353.160569][T10820] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.160589][T10820] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 353.160608][T10820] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 353.160641][T10820] ? try_to_take_rt_mutex+0x840/0xb00 [ 353.160665][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.160688][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.160717][T10820] __tipc_sendstream+0x104e/0x1280 [ 353.160737][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.160770][T10820] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 353.160790][T10820] ? __pfx___tipc_sendstream+0x10/0x10 [ 353.160807][T10820] ? __local_bh_enable+0x1e1/0x2f0 [ 353.160835][T10820] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 353.160857][T10820] ? lockdep_hardirqs_on+0x7a/0x110 [ 353.160892][T10820] tipc_send_packet+0x7c/0xa0 [ 353.160913][T10820] ? __pfx_tipc_send_packet+0x10/0x10 [ 353.160931][T10820] sock_sendmsg_nosec+0x13a/0x180 [ 353.160960][T10820] ____sys_sendmsg+0x55c/0x870 [ 353.160983][T10820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 353.161007][T10820] ? import_iovec+0x73/0xa0 [ 353.161025][T10820] ___sys_sendmsg+0x2a5/0x360 [ 353.161040][T10820] ? __lock_acquire+0x6b5/0x2d10 [ 353.161062][T10820] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.161104][T10820] ? __fget_files+0x2a/0x420 [ 353.161119][T10820] ? __fget_files+0x3a6/0x420 [ 353.161144][T10820] __x64_sys_sendmsg+0x1b7/0x290 [ 353.161166][T10820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.161201][T10820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.161219][T10820] do_syscall_64+0x174/0x580 [ 353.161237][T10820] ? trace_irq_disable+0x3b/0x140 [ 353.161256][T10820] ? clear_bhb_loop+0x40/0x90 [ 353.161274][T10820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.161293][T10820] RIP: 0033:0x7f61868ece59 [ 353.161310][T10820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.161326][T10820] RSP: 002b:00007f6184b1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.161346][T10820] RAX: ffffffffffffffda RBX: 00007f6186b66090 RCX: 00007f61868ece59 [ 353.161360][T10820] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000007 [ 353.161371][T10820] RBP: 00007f6184b1d090 R08: 0000000000000000 R09: 0000000000000000 [ 353.161383][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.161394][T10820] R13: 00007f6186b66128 R14: 00007f6186b66090 R15: 00007ffd2d829f88 [ 353.161421][T10820] [ 353.478018][ T5724] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 353.627992][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 353.631399][ T5724] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.631422][ T5724] usb 4-1: config 0 has no interface number 0 [ 353.637079][ T5724] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 353.637106][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.637125][ T5724] usb 4-1: Product: syz [ 353.637139][ T5724] usb 4-1: Manufacturer: syz [ 353.637154][ T5724] usb 4-1: SerialNumber: syz [ 353.667287][ T5724] usb 4-1: config 0 descriptor?? [ 353.683420][ T5724] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 353.683511][ T5724] usb 4-1: selecting invalid altsetting 1 [ 353.685303][ T5724] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 353.838227][ T5724] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.845533][ T5724] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 353.845645][ T5724] usb 4-1: media controller created [ 353.901018][T10827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.901547][T10827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.027752][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 354.173731][T10830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.174208][T10830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.229314][T10831] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1741'. [ 354.278112][ T5769] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 354.413960][ T5724] usb 4-1: USB disconnect, device number 81 [ 354.432220][ T5769] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.433845][ T5769] usb 2-1: config 32 has an invalid interface number: 188 but max is 0 [ 354.433871][ T5769] usb 2-1: config 32 has no interface number 0 [ 354.433903][ T5769] usb 2-1: config 32 interface 188 has no altsetting 0 [ 354.470639][ T5769] usb 2-1: New USB device found, idVendor=0cf3, idProduct=b002, bcdDevice=8e.eb [ 354.470670][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.470690][ T5769] usb 2-1: Product: syz [ 354.470703][ T5769] usb 2-1: Manufacturer: syz [ 354.470718][ T5769] usb 2-1: SerialNumber: syz [ 354.769240][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.771812][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.853961][T10842] FAULT_INJECTION: forcing a failure. [ 354.853961][T10842] name failslab, interval 1, probability 0, space 0, times 0 [ 354.853991][T10842] CPU: 0 UID: 0 PID: 10842 Comm: syz.2.1752 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.854011][T10842] Tainted: [L]=SOFTLOCKUP [ 354.854016][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 354.854025][T10842] Call Trace: [ 354.854031][T10842] [ 354.854038][T10842] dump_stack_lvl+0xe8/0x150 [ 354.854059][T10842] should_fail_ex+0x46b/0x600 [ 354.854086][T10842] should_failslab+0xa8/0x100 [ 354.854105][T10842] __kmalloc_noprof+0xfe/0x7e0 [ 354.854123][T10842] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 354.854139][T10842] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 354.854160][T10842] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 354.854182][T10842] genl_family_rcv_msg_doit+0xd9/0x330 [ 354.854212][T10842] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 354.854242][T10842] ? apparmor_capable+0x126/0x170 [ 354.854262][T10842] ? bpf_lsm_capable+0x9/0x20 [ 354.854278][T10842] ? security_capable+0x7e/0x2c0 [ 354.854304][T10842] genl_rcv_msg+0x61c/0x7a0 [ 354.854330][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.854350][T10842] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 354.854371][T10842] ? __pfx_nl80211_remain_on_channel+0x10/0x10 [ 354.854388][T10842] ? __pfx_nl80211_post_doit+0x10/0x10 [ 354.854411][T10842] ? irqentry_exit+0x218/0x8c0 [ 354.854429][T10842] ? trace_irq_disable+0x3b/0x140 [ 354.854456][T10842] netlink_rcv_skb+0x232/0x4b0 [ 354.854476][T10842] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.854500][T10842] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.854519][T10842] ? lock_acquire+0x221/0x350 [ 354.854556][T10842] genl_rcv+0x28/0x40 [ 354.854579][T10842] netlink_unicast+0x780/0x920 [ 354.854621][T10842] netlink_sendmsg+0x813/0xb40 [ 354.854649][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.854671][T10842] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 354.854694][T10842] ? aa_sock_msg_perm+0x122/0x200 [ 354.854713][T10842] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.854731][T10842] sock_sendmsg_nosec+0x13a/0x180 [ 354.854756][T10842] ____sys_sendmsg+0x55c/0x870 [ 354.854778][T10842] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.854808][T10842] ? import_iovec+0x73/0xa0 [ 354.854826][T10842] ___sys_sendmsg+0x2a5/0x360 [ 354.854842][T10842] ? __lock_acquire+0x6b5/0x2d10 [ 354.854862][T10842] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.854904][T10842] ? __fget_files+0x2a/0x420 [ 354.854918][T10842] ? __fget_files+0x3a6/0x420 [ 354.854939][T10842] __x64_sys_sendmsg+0x1b7/0x290 [ 354.854959][T10842] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.854990][T10842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.855007][T10842] do_syscall_64+0x174/0x580 [ 354.855025][T10842] ? trace_irq_disable+0x3b/0x140 [ 354.855044][T10842] ? clear_bhb_loop+0x40/0x90 [ 354.855064][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.855080][T10842] RIP: 0033:0x7f0b6319ce59 [ 354.855097][T10842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 354.855112][T10842] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.855130][T10842] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 354.855140][T10842] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 354.855149][T10842] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 354.855158][T10842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.855166][T10842] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 354.855189][T10842] [ 355.098010][ T61] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 355.148323][T10843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 355.148695][T10843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.160485][T10843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.373364][T10845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1753'. [ 355.497463][ T5710] cdc_ncm 1-1:1.0: bind() failure [ 355.520179][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.520725][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.522781][T10829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.523412][T10829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.529374][ T5710] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 355.538589][ T5710] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 355.546920][ T5710] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 355.583801][ T5710] usb 1-1: USB disconnect, device number 56 [ 355.666448][ T5769] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 355.692416][ T5769] usb 2-1: USB disconnect, device number 74 [ 356.775441][T10866] FAULT_INJECTION: forcing a failure. [ 356.775441][T10866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 356.775476][T10866] CPU: 1 UID: 0 PID: 10866 Comm: syz.3.1760 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 356.775509][T10866] Tainted: [L]=SOFTLOCKUP [ 356.775515][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 356.775526][T10866] Call Trace: [ 356.775534][T10866] [ 356.775542][T10866] dump_stack_lvl+0xe8/0x150 [ 356.775568][T10866] should_fail_ex+0x46b/0x600 [ 356.775600][T10866] _copy_from_iter+0x1d3/0x1670 [ 356.775631][T10866] ? sock_alloc_send_pskb+0x8a2/0x9a0 [ 356.775660][T10866] ? __pfx__copy_from_iter+0x10/0x10 [ 356.775694][T10866] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 356.775721][T10866] skb_copy_datagram_from_iter+0xf5/0x710 [ 356.775749][T10866] ? dev_get_by_index+0x22/0x2f0 [ 356.775773][T10866] ? skb_put+0x11b/0x210 [ 356.775795][T10866] packet_sendmsg+0x35be/0x4fd0 [ 356.775836][T10866] ? _parse_integer_limit+0x192/0x1e0 [ 356.775866][T10866] ? __lock_acquire+0x6b5/0x2d10 [ 356.775901][T10866] ? __pfx_packet_sendmsg+0x10/0x10 [ 356.775939][T10866] ? aa_sk_perm+0x703/0x950 [ 356.775973][T10866] ? __pfx_aa_sk_perm+0x10/0x10 [ 356.775999][T10866] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 356.776027][T10866] ? aa_sock_msg_perm+0x122/0x200 [ 356.776048][T10866] ? __pfx_packet_sendmsg+0x10/0x10 [ 356.776074][T10866] sock_sendmsg_nosec+0x13a/0x180 [ 356.776107][T10866] __sys_sendto+0x41a/0x5a0 [ 356.776130][T10866] ? __pfx___sys_sendto+0x10/0x10 [ 356.776178][T10866] ? __pfx_ksys_write+0x10/0x10 [ 356.776207][T10866] __x64_sys_sendto+0xde/0x100 [ 356.776230][T10866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.776252][T10866] do_syscall_64+0x174/0x580 [ 356.776276][T10866] ? trace_irq_disable+0x3b/0x140 [ 356.776301][T10866] ? clear_bhb_loop+0x40/0x90 [ 356.776325][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.776344][T10866] RIP: 0033:0x7f33a66bce59 [ 356.776363][T10866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.776380][T10866] RSP: 002b:00007f33a490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 356.776401][T10866] RAX: ffffffffffffffda RBX: 00007f33a6935fa0 RCX: 00007f33a66bce59 [ 356.776416][T10866] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000004 [ 356.776428][T10866] RBP: 00007f33a490e090 R08: 0000200000000080 R09: 0000000000000014 [ 356.776442][T10866] R10: 0000000004042810 R11: 0000000000000246 R12: 0000000000000001 [ 356.776455][T10866] R13: 00007f33a6936038 R14: 00007f33a6935fa0 R15: 00007ffeefc0a8d8 [ 356.776486][T10866] [ 357.178175][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 357.178210][ T5627] Bluetooth: hci3: command 0x0c1a tx timeout [ 357.178229][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 357.218611][ T37] usb 1-1: new full-speed USB device number 57 using dummy_hcd [ 357.370339][ T37] usb 1-1: unable to get BOS descriptor or descriptor too short [ 357.370911][ T37] usb 1-1: not running at top speed; connect to a high speed hub [ 357.373283][ T37] usb 1-1: config 24 has an invalid interface number: 122 but max is 0 [ 357.373309][ T37] usb 1-1: config 24 has no interface number 0 [ 357.373350][ T37] usb 1-1: config 24 interface 122 has no altsetting 0 [ 357.375904][ T37] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=e9.a6 [ 357.375932][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.375953][ T37] usb 1-1: Product: syz [ 357.375968][ T37] usb 1-1: Manufacturer: syz [ 357.375983][ T37] usb 1-1: SerialNumber: syz [ 357.552890][T10877] FAULT_INJECTION: forcing a failure. [ 357.552890][T10877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.552914][T10877] CPU: 1 UID: 0 PID: 10877 Comm: syz.1.1764 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 357.552930][T10877] Tainted: [L]=SOFTLOCKUP [ 357.552934][T10877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 357.552941][T10877] Call Trace: [ 357.552945][T10877] [ 357.552950][T10877] dump_stack_lvl+0xe8/0x150 [ 357.552968][T10877] should_fail_ex+0x46b/0x600 [ 357.552985][T10877] _copy_from_iter+0x1d3/0x1670 [ 357.553006][T10877] ? rcu_is_watching+0x15/0xb0 [ 357.553026][T10877] ? __pfx__copy_from_iter+0x10/0x10 [ 357.553041][T10877] ? __alloc_skb+0x27d/0x7d0 [ 357.553052][T10877] ? __alloc_skb+0x27d/0x7d0 [ 357.553066][T10877] ? netlink_sendmsg+0x650/0xb40 [ 357.553079][T10877] ? skb_put+0x11b/0x210 [ 357.553092][T10877] netlink_sendmsg+0x6c0/0xb40 [ 357.553109][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.553124][T10877] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 357.553138][T10877] ? aa_sock_msg_perm+0x122/0x200 [ 357.553150][T10877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.553163][T10877] sock_sendmsg_nosec+0x13a/0x180 [ 357.553180][T10877] ____sys_sendmsg+0x55c/0x870 [ 357.553196][T10877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.553213][T10877] ? import_iovec+0x73/0xa0 [ 357.553225][T10877] ___sys_sendmsg+0x2a5/0x360 [ 357.553238][T10877] ? __lock_acquire+0x6b5/0x2d10 [ 357.553253][T10877] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.553282][T10877] ? __fget_files+0x2a/0x420 [ 357.553292][T10877] ? __fget_files+0x3a6/0x420 [ 357.553315][T10877] __x64_sys_sendmsg+0x1b7/0x290 [ 357.553329][T10877] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.553350][T10877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.553362][T10877] do_syscall_64+0x174/0x580 [ 357.553376][T10877] ? clear_bhb_loop+0x40/0x90 [ 357.553390][T10877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.553400][T10877] RIP: 0033:0x7f61868ece59 [ 357.553411][T10877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.553421][T10877] RSP: 002b:00007f6184b1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.553433][T10877] RAX: ffffffffffffffda RBX: 00007f6186b66090 RCX: 00007f61868ece59 [ 357.553442][T10877] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000007 [ 357.553449][T10877] RBP: 00007f6184b1d090 R08: 0000000000000000 R09: 0000000000000000 [ 357.553455][T10877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.553461][T10877] R13: 00007f6186b66128 R14: 00007f6186b66090 R15: 00007ffd2d829f88 [ 357.553476][T10877] [ 357.752656][ T37] usb_ehset_test 1-1:24.122: probe with driver usb_ehset_test failed with error -32 [ 357.767123][ T37] usb 1-1: USB disconnect, device number 57 [ 358.537956][ T5724] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 358.687963][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 358.691019][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 358.691037][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 358.691052][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 358.691073][ T5724] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 358.691085][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.698083][ T5724] usb 4-1: config 0 descriptor?? [ 358.719791][T10897] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 358.721086][T10897] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 358.721725][T10897] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 358.750780][ T5724] hub 4-1:0.0: USB hub found [ 358.939939][ T5724] hub 4-1:0.0: 1 port detected [ 359.188811][T10917] FAULT_INJECTION: forcing a failure. [ 359.188811][T10917] name failslab, interval 1, probability 0, space 0, times 0 [ 359.188848][T10917] CPU: 1 UID: 0 PID: 10917 Comm: syz.2.1776 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.188876][T10917] Tainted: [L]=SOFTLOCKUP [ 359.188883][T10917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.188894][T10917] Call Trace: [ 359.188902][T10917] [ 359.188911][T10917] dump_stack_lvl+0xe8/0x150 [ 359.188938][T10917] should_fail_ex+0x46b/0x600 [ 359.188969][T10917] should_failslab+0xa8/0x100 [ 359.188993][T10917] __kmalloc_cache_noprof+0xa0/0x6d0 [ 359.189014][T10917] ? sctp_add_bind_addr+0x8c/0x370 [ 359.189032][T10917] ? sctp_add_bind_addr+0x8c/0x370 [ 359.189057][T10917] sctp_add_bind_addr+0x8c/0x370 [ 359.189082][T10917] sctp_bind_addr_copy+0xb3/0x3c0 [ 359.189102][T10917] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 359.189135][T10917] sctp_connect_new_asoc+0x2ff/0x6b0 [ 359.189162][T10917] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 359.189186][T10917] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 359.189209][T10917] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 359.189231][T10917] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 359.189254][T10917] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 359.189273][T10917] ? security_sctp_bind_connect+0x7e/0x2c0 [ 359.189312][T10917] sctp_sendmsg+0x14f2/0x29b0 [ 359.189350][T10917] ? __pfx_sctp_sendmsg+0x10/0x10 [ 359.189381][T10917] ? aa_sk_perm+0x703/0x950 [ 359.189414][T10917] ? __pfx_aa_sk_perm+0x10/0x10 [ 359.189440][T10917] ? sock_rps_record_flow+0x19/0x350 [ 359.189461][T10917] ? inet_sendmsg+0x2f4/0x370 [ 359.189478][T10917] ? aa_sock_msg_perm+0x122/0x200 [ 359.189498][T10917] ? __pfx_inet_sendmsg+0x10/0x10 [ 359.189515][T10917] sock_sendmsg_nosec+0x10e/0x180 [ 359.189546][T10917] __sys_sendto+0x41a/0x5a0 [ 359.189568][T10917] ? __pfx___sys_sendto+0x10/0x10 [ 359.189612][T10917] ? __pfx_ksys_write+0x10/0x10 [ 359.189642][T10917] __x64_sys_sendto+0xde/0x100 [ 359.189664][T10917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.189685][T10917] do_syscall_64+0x174/0x580 [ 359.189709][T10917] ? trace_irq_disable+0x3b/0x140 [ 359.189732][T10917] ? clear_bhb_loop+0x40/0x90 [ 359.189756][T10917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.189773][T10917] RIP: 0033:0x7f0b6319ce59 [ 359.189789][T10917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.189806][T10917] RSP: 002b:00007f0b613ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 359.189826][T10917] RAX: ffffffffffffffda RBX: 00007f0b63415fa0 RCX: 00007f0b6319ce59 [ 359.189840][T10917] RDX: 0000000000034000 RSI: 0000200000000180 RDI: 0000000000000003 [ 359.189854][T10917] RBP: 00007f0b613ee090 R08: 0000200000000480 R09: 000000000000001c [ 359.189866][T10917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.189877][T10917] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 359.189907][T10917] [ 359.714047][T10928] syz_tun: entered allmulticast mode [ 359.732552][T10928] FAULT_INJECTION: forcing a failure. [ 359.732552][T10928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.732587][T10928] CPU: 0 UID: 0 PID: 10928 Comm: syz.2.1781 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 359.732614][T10928] Tainted: [L]=SOFTLOCKUP [ 359.732621][T10928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 359.732633][T10928] Call Trace: [ 359.732641][T10928] [ 359.732659][T10928] dump_stack_lvl+0xe8/0x150 [ 359.732688][T10928] should_fail_ex+0x46b/0x600 [ 359.732720][T10928] _copy_to_user+0x31/0xb0 [ 359.732745][T10928] simple_read_from_buffer+0xe1/0x170 [ 359.732769][T10928] proc_fail_nth_read+0x1be/0x230 [ 359.732792][T10928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.732812][T10928] ? rw_verify_area+0x2ac/0x4e0 [ 359.732830][T10928] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.732847][T10928] vfs_read+0x212/0xa80 [ 359.732874][T10928] ? __pfx_vfs_read+0x10/0x10 [ 359.732894][T10928] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 359.732914][T10928] ? lockdep_hardirqs_on+0x7a/0x110 [ 359.732933][T10928] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 359.732952][T10928] ? mutex_lock_nested+0x152/0x1d0 [ 359.732974][T10928] ? fdget_pos+0x252/0x320 [ 359.732996][T10928] ksys_read+0x156/0x270 [ 359.733015][T10928] ? __pfx_ksys_read+0x10/0x10 [ 359.733033][T10928] ? __pfx_sock_ioctl+0x10/0x10 [ 359.733059][T10928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.733076][T10928] do_syscall_64+0x174/0x580 [ 359.733095][T10928] ? trace_irq_disable+0x3b/0x140 [ 359.733114][T10928] ? clear_bhb_loop+0x40/0x90 [ 359.733133][T10928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.733149][T10928] RIP: 0033:0x7f0b6315d68e [ 359.733165][T10928] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 359.733178][T10928] RSP: 002b:00007f0b613edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.733195][T10928] RAX: ffffffffffffffda RBX: 00007f0b613ee6c0 RCX: 00007f0b6315d68e [ 359.733207][T10928] RDX: 000000000000000f RSI: 00007f0b613ee0a0 RDI: 0000000000000004 [ 359.733217][T10928] RBP: 00007f0b613ee090 R08: 0000000000000000 R09: 0000000000000000 [ 359.733227][T10928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.733236][T10928] R13: 00007f0b63416038 R14: 00007f0b63415fa0 R15: 00007ffecefbea88 [ 359.733263][T10928] [ 360.247762][T10941] No source specified [ 360.251815][T10941] binder: 10940:10941 ioctl c018620b 0 returned -14 [ 360.252997][ T5724] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 360.253071][ T5724] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 360.263529][ T5724] usbhid 4-1:0.0: can't add hid device: -32 [ 360.263641][ T5724] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 360.442785][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.443398][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.681225][T10952] FAULT_INJECTION: forcing a failure. [ 360.681225][T10952] name failslab, interval 1, probability 0, space 0, times 0 [ 360.681257][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.0.1791 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.681273][T10952] Tainted: [L]=SOFTLOCKUP [ 360.681277][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 360.681289][T10952] Call Trace: [ 360.681297][T10952] [ 360.681302][T10952] dump_stack_lvl+0xe8/0x150 [ 360.681320][T10952] should_fail_ex+0x46b/0x600 [ 360.681338][T10952] should_failslab+0xa8/0x100 [ 360.681352][T10952] __kmalloc_noprof+0xfe/0x7e0 [ 360.681363][T10952] ? copy_splice_read+0x16f/0xab0 [ 360.681374][T10952] ? copy_splice_read+0x16f/0xab0 [ 360.681388][T10952] copy_splice_read+0x16f/0xab0 [ 360.681403][T10952] ? rcu_is_watching+0x15/0xb0 [ 360.681419][T10952] ? __pfx_copy_splice_read+0x10/0x10 [ 360.681429][T10952] ? trace_kmalloc+0x2a/0xf0 [ 360.681440][T10952] ? look_up_lock_class+0x57/0x110 [ 360.681454][T10952] ? register_lock_class+0x31/0x2e0 [ 360.681468][T10952] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 360.681484][T10952] ? alloc_pipe_info+0x373/0x4d0 [ 360.681498][T10952] ? __pfx_copy_splice_read+0x10/0x10 [ 360.681509][T10952] splice_direct_to_actor+0x483/0xc80 [ 360.681526][T10952] ? __pfx_direct_splice_actor+0x10/0x10 [ 360.681541][T10952] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 360.681560][T10952] do_splice_direct+0x19b/0x2a0 [ 360.681574][T10952] ? __pfx_do_splice_direct+0x10/0x10 [ 360.681586][T10952] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 360.681602][T10952] ? rw_verify_area+0x25b/0x4e0 [ 360.681616][T10952] do_sendfile+0x547/0x7e0 [ 360.681636][T10952] ? __pfx_do_sendfile+0x10/0x10 [ 360.681657][T10952] __se_sys_sendfile64+0xdf/0x1a0 [ 360.681673][T10952] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 360.681691][T10952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.681703][T10952] do_syscall_64+0x174/0x580 [ 360.681716][T10952] ? trace_irq_disable+0x3b/0x140 [ 360.681729][T10952] ? clear_bhb_loop+0x40/0x90 [ 360.681742][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.681752][T10952] RIP: 0033:0x7f0893e0ce59 [ 360.681763][T10952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.681772][T10952] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 360.681784][T10952] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 360.681792][T10952] RDX: 0000200000000040 RSI: 0000000000000004 RDI: 0000000000000006 [ 360.681799][T10952] RBP: 00007f089205e090 R08: 0000000000000000 R09: 0000000000000000 [ 360.681806][T10952] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 360.681812][T10952] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 360.681827][T10952] [ 360.777981][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout [ 360.778019][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout [ 360.778084][ T61] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.933246][T10974] binder: 10973:10974 unknown command 8192 [ 361.933267][T10974] binder: 10973:10974 ioctl c0306201 2000000001c0 returned -22 [ 361.995848][T10976] syz_tun: entered allmulticast mode [ 362.051648][ T5769] usb 4-1: reset high-speed USB device number 82 using dummy_hcd [ 362.068105][ T5769] usb 4-1: device reset changed ep0 maxpacket size! [ 362.083809][T10978] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20002 [ 362.095191][ T5769] usb 4-1: USB disconnect, device number 82 [ 362.293147][T10980] netlink: 'syz.0.1803': attribute type 46 has an invalid length. [ 362.364380][T10984] FAULT_INJECTION: forcing a failure. [ 362.364380][T10984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.364415][T10984] CPU: 0 UID: 0 PID: 10984 Comm: syz.1.1805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.364444][T10984] Tainted: [L]=SOFTLOCKUP [ 362.364451][T10984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.364463][T10984] Call Trace: [ 362.364470][T10984] [ 362.364479][T10984] dump_stack_lvl+0xe8/0x150 [ 362.364508][T10984] should_fail_ex+0x46b/0x600 [ 362.364537][T10984] _copy_from_user+0x2d/0xb0 [ 362.364559][T10984] binder_ioctl_write_read+0xae3/0xa470 [ 362.364584][T10984] ? is_bpf_text_address+0x26/0x2b0 [ 362.364644][T10984] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 362.364669][T10984] ? stack_depot_save_flags+0x33/0x810 [ 362.364705][T10984] ? do_raw_spin_lock+0x12b/0x2f0 [ 362.364743][T10984] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 362.364764][T10984] ? reacquire_held_locks+0x104/0x190 [ 362.364791][T10984] ? rt_spin_lock+0x1e0/0x400 [ 362.364811][T10984] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 362.364833][T10984] ? rt_spin_unlock+0x14f/0x200 [ 362.364860][T10984] ? binder_get_thread+0x177/0x6d0 [ 362.364891][T10984] binder_ioctl+0x426/0x1b10 [ 362.364911][T10984] ? tomoyo_path_number_perm+0x219/0x630 [ 362.364941][T10984] ? tomoyo_path_number_perm+0x219/0x630 [ 362.364973][T10984] ? do_vfs_ioctl+0x117b/0x1540 [ 362.364999][T10984] ? __pfx_binder_ioctl+0x10/0x10 [ 362.365017][T10984] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 362.365070][T10984] ? __fget_files+0x2a/0x420 [ 362.365093][T10984] ? __fget_files+0x2a/0x420 [ 362.365111][T10984] ? __fget_files+0x3a6/0x420 [ 362.365130][T10984] ? __fget_files+0x2a/0x420 [ 362.365151][T10984] ? bpf_lsm_file_ioctl+0x9/0x20 [ 362.365177][T10984] ? __pfx_binder_ioctl+0x10/0x10 [ 362.365198][T10984] __se_sys_ioctl+0xff/0x170 [ 362.365222][T10984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.365244][T10984] do_syscall_64+0x174/0x580 [ 362.365268][T10984] ? trace_irq_disable+0x3b/0x140 [ 362.365292][T10984] ? clear_bhb_loop+0x40/0x90 [ 362.365316][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.365336][T10984] RIP: 0033:0x7f61868ece59 [ 362.365354][T10984] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.365370][T10984] RSP: 002b:00007f6184b3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.365390][T10984] RAX: ffffffffffffffda RBX: 00007f6186b65fa0 RCX: 00007f61868ece59 [ 362.365404][T10984] RDX: 00002000000001c0 RSI: 00000000c0306201 RDI: 0000000000000003 [ 362.365417][T10984] RBP: 00007f6184b3e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.365430][T10984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.365442][T10984] R13: 00007f6186b66038 R14: 00007f6186b65fa0 R15: 00007ffd2d829f88 [ 362.365472][T10984] [ 362.365549][T10984] binder: 10983:10984 ioctl c0306201 2000000001c0 returned -14 [ 362.435819][ T5769] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 362.504451][T10986] FAULT_INJECTION: forcing a failure. [ 362.504451][T10986] name failslab, interval 1, probability 0, space 0, times 0 [ 362.504607][T10986] CPU: 1 UID: 0 PID: 10986 Comm: syz.0.1806 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 362.504634][T10986] Tainted: [L]=SOFTLOCKUP [ 362.504641][T10986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 362.504652][T10986] Call Trace: [ 362.504661][T10986] [ 362.504669][T10986] dump_stack_lvl+0xe8/0x150 [ 362.504697][T10986] should_fail_ex+0x46b/0x600 [ 362.504729][T10986] should_failslab+0xa8/0x100 [ 362.504751][T10986] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 362.504781][T10986] ? skb_clone+0x212/0x3a0 [ 362.504803][T10986] ? skb_clone+0x212/0x3a0 [ 362.504832][T10986] skb_clone+0x212/0x3a0 [ 362.504858][T10986] __netlink_deliver_tap+0x424/0x8b0 [ 362.504893][T10986] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.504918][T10986] netlink_deliver_tap+0x19c/0x1b0 [ 362.504943][T10986] netlink_unicast+0x754/0x920 [ 362.504972][T10986] netlink_sendmsg+0x813/0xb40 [ 362.505005][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.505030][T10986] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 362.505057][T10986] ? aa_sock_msg_perm+0x122/0x200 [ 362.505077][T10986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.505100][T10986] sock_sendmsg_nosec+0x13a/0x180 [ 362.505131][T10986] ____sys_sendmsg+0x55c/0x870 [ 362.505158][T10986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.505190][T10986] ? import_iovec+0x73/0xa0 [ 362.505214][T10986] ___sys_sendmsg+0x2a5/0x360 [ 362.505236][T10986] ? __lock_acquire+0x6b5/0x2d10 [ 362.505263][T10986] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.505317][T10986] ? __fget_files+0x2a/0x420 [ 362.505335][T10986] ? __fget_files+0x3a6/0x420 [ 362.505370][T10986] __x64_sys_sendmsg+0x1b7/0x290 [ 362.505395][T10986] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.505435][T10986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.505456][T10986] do_syscall_64+0x174/0x580 [ 362.505479][T10986] ? trace_irq_disable+0x3b/0x140 [ 362.505504][T10986] ? clear_bhb_loop+0x40/0x90 [ 362.505528][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.505547][T10986] RIP: 0033:0x7f0893e0ce59 [ 362.505565][T10986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.505581][T10986] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.505601][T10986] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 362.505616][T10986] RDX: 0000000000080000 RSI: 0000200000000400 RDI: 0000000000000003 [ 362.505628][T10986] RBP: 00007f089205e090 R08: 0000000000000000 R09: 0000000000000000 [ 362.505641][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.505653][T10986] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 362.505682][T10986] [ 362.507955][T10986] netlink: 'syz.0.1806': attribute type 12 has an invalid length. [ 362.625918][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 362.656998][ T5769] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.657015][ T5769] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.858043][ T5769] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 362.858075][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.858096][ T5769] usb 4-1: Product: syz [ 362.858111][ T5769] usb 4-1: Manufacturer: syz [ 362.858126][ T5769] usb 4-1: SerialNumber: syz [ 363.165159][ T5769] usb 4-1: 0:2 : does not exist [ 363.165248][ T5769] usb 4-1: unit 0 not found! [ 363.230574][T10990] FAULT_INJECTION: forcing a failure. [ 363.230574][T10990] name failslab, interval 1, probability 0, space 0, times 0 [ 363.230606][T10990] CPU: 1 UID: 0 PID: 10990 Comm: syz.0.1815 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 363.230632][T10990] Tainted: [L]=SOFTLOCKUP [ 363.230639][T10990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 363.230650][T10990] Call Trace: [ 363.230658][T10990] [ 363.230666][T10990] dump_stack_lvl+0xe8/0x150 [ 363.230690][T10990] should_fail_ex+0x46b/0x600 [ 363.230718][T10990] should_failslab+0xa8/0x100 [ 363.230741][T10990] kmem_cache_alloc_noprof+0xa4/0x6c0 [ 363.230778][T10990] ? skb_clone+0x212/0x3a0 [ 363.230800][T10990] ? skb_clone+0x212/0x3a0 [ 363.230826][T10990] skb_clone+0x212/0x3a0 [ 363.230851][T10990] __netlink_deliver_tap+0x424/0x8b0 [ 363.230886][T10990] ? netlink_deliver_tap+0x2e/0x1b0 [ 363.230911][T10990] netlink_deliver_tap+0x19c/0x1b0 [ 363.230936][T10990] netlink_unicast+0x754/0x920 [ 363.230964][T10990] netlink_sendmsg+0x813/0xb40 [ 363.230994][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.231017][T10990] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 363.231043][T10990] ? aa_sock_msg_perm+0x122/0x200 [ 363.231063][T10990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.231088][T10990] sock_sendmsg_nosec+0x13a/0x180 [ 363.231117][T10990] ____sys_sendmsg+0x55c/0x870 [ 363.231145][T10990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.231178][T10990] ? import_iovec+0x73/0xa0 [ 363.231201][T10990] ___sys_sendmsg+0x2a5/0x360 [ 363.231229][T10990] ? __pfx____sys_sendmsg+0x10/0x10 [ 363.231282][T10990] ? vfs_write+0x9ce/0xba0 [ 363.231323][T10990] ? do_sys_openat2+0x14e/0x200 [ 363.231346][T10990] __x64_sys_sendmsg+0x1b7/0x290 [ 363.231370][T10990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 363.231409][T10990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.231431][T10990] do_syscall_64+0x174/0x580 [ 363.231453][T10990] ? trace_irq_disable+0x3b/0x140 [ 363.231474][T10990] ? clear_bhb_loop+0x40/0x90 [ 363.231497][T10990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.231515][T10990] RIP: 0033:0x7f0893e0ce59 [ 363.231534][T10990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.231550][T10990] RSP: 002b:00007f089205e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.231568][T10990] RAX: ffffffffffffffda RBX: 00007f0894085fa0 RCX: 00007f0893e0ce59 [ 363.231581][T10990] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 363.231593][T10990] RBP: 00007f089205e090 R08: 0000000000000000 R09: 0000000000000000 [ 363.231606][T10990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.231616][T10990] R13: 00007f0894086038 R14: 00007f0894085fa0 R15: 00007fffa9c98eb8 [ 363.231644][T10990] [ 363.234833][T10990] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1815'. [ 363.463929][ T5724] usb 4-1: USB disconnect, device number 83 [ 363.846327][ T6506] udevd[6506]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.186139][T11000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1811'. [ 364.262901][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.299181][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.307622][T11007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.370115][T11007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.675630][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1817'. [ 364.800074][ T16] ------------[ cut here ]------------ [ 364.800087][ T16] task_rq(p) != rq [ 364.800096][ T16] WARNING: kernel/sched/fair.c:7656 at hrtick_start_fair+0x196/0x1f0, CPU#0: ktimers/0/16 [ 364.800133][ T16] Modules linked in: [ 364.800149][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.800176][ T16] Tainted: [L]=SOFTLOCKUP [ 364.800182][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.800191][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 364.800212][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 364.800225][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 364.800238][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 364.800249][ T16] RDX: 0000000000000000 RSI: ffff88803fa29f00 RDI: ffff8880b863ba40 [ 364.800260][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 364.800271][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 364.800282][ T16] R13: 1ffff110170c78d6 R14: ffff88803fa29f00 R15: ffffffff8dc257d8 [ 364.800293][ T16] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 364.800305][ T16] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 364.800315][ T16] CR2: 000000110c397d9f CR3: 00000000582a2000 CR4: 00000000003526f0 [ 364.800328][ T16] Call Trace: [ 364.800335][ T16] [ 364.800344][ T16] set_next_task_fair+0xa68/0xce0 [ 364.800367][ T16] __schedule+0x3e03/0x5550 [ 364.800402][ T16] ? __pfx___schedule+0x10/0x10 [ 364.800417][ T16] ? schedule+0x90/0x360 [ 364.800439][ T16] ? schedule+0x90/0x360 [ 364.800457][ T16] schedule+0x164/0x360 [ 364.800474][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 364.800488][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 364.800504][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 364.800524][ T16] kthread+0x388/0x470 [ 364.800541][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 364.800554][ T16] ? __pfx_kthread+0x10/0x10 [ 364.800571][ T16] ret_from_fork+0x514/0xb70 [ 364.800591][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 364.800608][ T16] ? __switch_to+0xc79/0x1410 [ 364.800625][ T16] ? __pfx_kthread+0x10/0x10 [ 364.800642][ T16] ret_from_fork_asm+0x1a/0x30 [ 364.800673][ T16] [ 364.800685][ T16] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 364.800698][ T16] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.800718][ T16] Tainted: [L]=SOFTLOCKUP [ 364.800723][ T16] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 364.800732][ T16] Call Trace: [ 364.800738][ T16] [ 364.800743][ T16] vpanic+0x56c/0xa60 [ 364.800766][ T16] ? __pfx__printk+0x10/0x10 [ 364.800785][ T16] ? __pfx_vpanic+0x10/0x10 [ 364.800799][ T16] ? is_bpf_text_address+0x292/0x2b0 [ 364.800814][ T16] ? is_bpf_text_address+0x26/0x2b0 [ 364.800833][ T16] panic+0xc5/0xd0 [ 364.800847][ T16] ? __pfx_panic+0x10/0x10 [ 364.800866][ T16] ? ret_from_fork_asm+0x1a/0x30 [ 364.800882][ T16] __warn+0x315/0x4c0 [ 364.800896][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 364.800910][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 364.800924][ T16] __report_bug+0x339/0x540 [ 364.800941][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 364.800955][ T16] ? __pfx___report_bug+0x10/0x10 [ 364.800968][ T16] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 364.800987][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 364.801000][ T16] report_bug+0x16a/0x220 [ 364.801013][ T16] ? hrtick_start_fair+0x196/0x1f0 [ 364.801026][ T16] ? hrtick_start_fair+0x198/0x1f0 [ 364.801039][ T16] handle_bug+0x9c/0x200 [ 364.801055][ T16] exc_invalid_op+0x1a/0x50 [ 364.801070][ T16] asm_exc_invalid_op+0x1a/0x20 [ 364.801080][ T16] RIP: 0010:hrtick_start_fair+0x196/0x1f0 [ 364.801094][ T16] Code: 42 80 3c 20 00 74 08 4c 89 ff e8 85 f5 97 00 4d 39 37 0f 85 0c ff ff ff 48 89 df 5b 41 5c 41 5d 41 5e 41 5f e9 7b 64 fa ff 90 <0f> 0b 90 e9 d1 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 82 [ 364.801103][ T16] RSP: 0018:ffffc90000157aa0 EFLAGS: 00010087 [ 364.801112][ T16] RAX: ffff8880b873ba40 RBX: ffff8880b863ba40 RCX: ffffffff8197d8ae [ 364.801120][ T16] RDX: 0000000000000000 RSI: ffff88803fa29f00 RDI: ffff8880b863ba40 [ 364.801128][ T16] RBP: dffffc0000000000 R08: ffffffff8fcf390f R09: 1ffffffff1f9e721 [ 364.801135][ T16] R10: dffffc0000000000 R11: fffffbfff1f9e722 R12: dffffc0000000000 [ 364.801143][ T16] R13: 1ffff110170c78d6 R14: ffff88803fa29f00 R15: ffffffff8dc257d8 [ 364.801160][ T16] ? set_next_task_fair+0xa4e/0xce0 [ 364.801176][ T16] set_next_task_fair+0xa68/0xce0 [ 364.801191][ T16] __schedule+0x3e03/0x5550 [ 364.801214][ T16] ? __pfx___schedule+0x10/0x10 [ 364.801225][ T16] ? schedule+0x90/0x360 [ 364.801240][ T16] ? schedule+0x90/0x360 [ 364.801253][ T16] schedule+0x164/0x360 [ 364.801265][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 364.801275][ T16] smpboot_thread_fn+0x5bc/0xa50 [ 364.801286][ T16] ? smpboot_thread_fn+0x4d/0xa50 [ 364.801301][ T16] kthread+0x388/0x470 [ 364.801313][ T16] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 364.801322][ T16] ? __pfx_kthread+0x10/0x10 [ 364.801335][ T16] ret_from_fork+0x514/0xb70 [ 364.801349][ T16] ? __pfx_ret_from_fork+0x10/0x10 [ 364.801361][ T16] ? __switch_to+0xc79/0x1410 [ 364.801373][ T16] ? __pfx_kthread+0x10/0x10 [ 364.801386][ T16] ret_from_fork_asm+0x1a/0x30 [ 364.801406][ T16] [ 365.872679][ T16] Shutting down cpus with NMI [ 365.873062][ T16] Kernel Offset: disabled