last executing test programs: 4.063143438s ago: executing program 3 (id=1823): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) sendmmsg$inet(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="93", 0x1}], 0x1}}], 0x1, 0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 3.614108614s ago: executing program 3 (id=1827): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2, 0x4d2, @remote}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x1, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x4}]}, 0x24}}, 0x0) 3.480545544s ago: executing program 3 (id=1828): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000840), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000880)={&(0x7f0000000080)=[{0xff, 0xf000, 0x0, 0x0}, {0x2e, 0x10, 0x0, 0x0}, {0x800, 0x0, 0x0, 0x0}], 0x3}) 2.477998885s ago: executing program 2 (id=1838): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206050007000000000000000a0000000c00078008001300000000000500010006000000050005000a00000005000400000000000900020073797a320000000011000300686173683a6e65742c6e657400"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newpolicy={0xb8, 0x13, 0x511, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x402, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x9, 0x8}, {0xc, 0x1, 0x0, 0x100}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.182599143s ago: executing program 2 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 2.02095113s ago: executing program 2 (id=1845): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendto$inet(r1, &(0x7f0000000240)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000400)=""/12, 0xc, 0xc9100120, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x12002, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 1.039740346s ago: executing program 2 (id=1861): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x14000, &(0x7f00000002c0)={[{@dyn}]}) 869.415498ms ago: executing program 3 (id=1864): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x20000}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r2, 0x406, r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 867.47348ms ago: executing program 2 (id=1865): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@host, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) 749.422151ms ago: executing program 0 (id=1867): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 689.178825ms ago: executing program 3 (id=1868): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000540)={0x2, 0x4e21, @local}, 0x10) 674.318792ms ago: executing program 2 (id=1869): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$KDSETMODE(0xffffffffffffffff, 0x4b3a, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f0000000200)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) sendto$inet(r1, &(0x7f0000000240)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000400)=""/12, 0xc, 0xc9100120, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x12002, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40040c4}, 0x0) 634.911745ms ago: executing program 1 (id=1870): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) 536.28206ms ago: executing program 0 (id=1871): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x10006, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f0000000240)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x100}}, 0x18) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) 512.467828ms ago: executing program 3 (id=1872): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000540)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000840), 0x78b5, 0x80) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000880)={&(0x7f0000000080)=[{0xff, 0xf000, 0x0, 0x0}, {0x2e, 0x10, 0x0, 0x0}, {0x800, 0x0, 0x0, 0x0}], 0x3}) 484.705643ms ago: executing program 1 (id=1873): mkdirat(0xffffffffffffff9c, &(0x7f0000007600)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000007640)='./config\x00', &(0x7f0000007680)='configfs\x00', 0x0, 0x0) symlinkat(&(0x7f0000007780)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f00000077c0)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000007800)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000007840)='dummy_udc.0', 0xb) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 372.308755ms ago: executing program 0 (id=1874): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000280)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x4481, 0x0, 0x2}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000340)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 342.724859ms ago: executing program 1 (id=1875): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) fsopen(&(0x7f00000000c0)='cramfs\x00', 0x0) mount$afs(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x14000, &(0x7f00000002c0)={[{@dyn}]}) 306.395313ms ago: executing program 0 (id=1876): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x20000}, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./proc\x00', &(0x7f00000005c0)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$dupfd(r2, 0x406, r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 237.338179ms ago: executing program 1 (id=1877): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000200)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000480)={@host, 0x1}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, 0x0) 201.317837ms ago: executing program 0 (id=1878): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x2, 0x4d2, @remote}, 0x10) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x24, 0x1, 0x3, 0x1, 0x0, 0x0, {0x2}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x1, 0x1}}, @NFQA_PAYLOAD={0x4}]}, 0x24}}, 0x0) 122.734078ms ago: executing program 1 (id=1879): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x4c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x4}]}]}, 0x4c}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 94.416741ms ago: executing program 0 (id=1880): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206050007000000000000000a0000000c00078008001300000000000500010006000000050005000a00000005000400000000000900020073797a320000000011000300686173683a6e65742c6e657400"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x34000c24) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$FIONREAD(0xffffffffffffffff, 0x80047456, 0x0) write(r2, &(0x7f0000000140)='27', 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newpolicy={0xb8, 0x13, 0x511, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e20, 0xd, 0x402, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x9, 0x8}, {0xc, 0x1, 0x0, 0x100}, 0x6}}, 0xb8}, 0x1, 0x0, 0x0, 0x20048840}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000008c0)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000940)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 0s ago: executing program 1 (id=1881): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="38010000100033062cbd700000000000fc020000000000000000000000000000ac1e00010000000000000000000000000000000900"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) kernel console output (not intermixed with test programs): b+0xa8/0x100 [ 352.008245][ T9181] __kmalloc_noprof+0xf9/0x710 [ 352.008263][ T9181] ? __lock_acquire+0x747/0x2de0 [ 352.008279][ T9181] ? switchdev_deferred_enqueue+0x2d/0x240 [ 352.008301][ T9181] ? switchdev_deferred_enqueue+0x2d/0x240 [ 352.008328][ T9181] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 352.008350][ T9181] switchdev_deferred_enqueue+0x2d/0x240 [ 352.008376][ T9181] br_set_state+0x391/0x6f0 [ 352.008400][ T9181] ? __pfx_br_set_state+0x10/0x10 [ 352.008422][ T9181] ? do_raw_spin_lock+0x12b/0x2f0 [ 352.008448][ T9181] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 352.008469][ T9181] ? __local_bh_enable_ip+0xd6/0x140 [ 352.008488][ T9181] ? br_become_designated_port+0x20/0x250 [ 352.008511][ T9181] br_stp_disable_port+0x71/0x1c0 [ 352.008536][ T9181] br_stp_disable_bridge+0x81/0x150 [ 352.008560][ T9181] br_dev_stop+0x2d/0x180 [ 352.008580][ T9181] ? __pfx_br_dev_stop+0x10/0x10 [ 352.008601][ T9181] __dev_close_many+0x361/0x6e0 [ 352.008622][ T9181] ? __pfx___dev_close_many+0x10/0x10 [ 352.008635][ T9181] ? __dev_change_flags+0x2e2/0x820 [ 352.008655][ T9181] ? __local_bh_enable_ip+0xd6/0x140 [ 352.008672][ T9181] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 352.008696][ T9181] __dev_change_flags+0x3f5/0x820 [ 352.008719][ T9181] ? __pfx___dev_change_flags+0x10/0x10 [ 352.008740][ T9181] ? __pfx___mutex_lock+0x10/0x10 [ 352.008760][ T9181] ? full_name_hash+0x92/0xe0 [ 352.008781][ T9181] netif_change_flags+0x7c/0x1b0 [ 352.008802][ T9181] dev_change_flags+0x128/0x260 [ 352.008823][ T9181] dev_ioctl+0x7b4/0x1150 [ 352.008843][ T9181] sock_do_ioctl+0x23e/0x320 [ 352.008876][ T9181] ? __pfx_sock_do_ioctl+0x10/0x10 [ 352.008896][ T9181] ? do_futex+0x3e7/0x4e0 [ 352.008931][ T9181] sock_ioctl+0x57a/0x7e0 [ 352.008953][ T9181] ? __fget_files+0x2a/0x420 [ 352.008971][ T9181] ? __pfx_sock_ioctl+0x10/0x10 [ 352.008992][ T9181] ? __fget_files+0x2a/0x420 [ 352.009010][ T9181] ? __fget_files+0x2a/0x420 [ 352.009031][ T9181] ? bpf_lsm_file_ioctl+0x9/0x20 [ 352.009051][ T9181] ? __pfx_sock_ioctl+0x10/0x10 [ 352.009072][ T9181] __se_sys_ioctl+0xfc/0x170 [ 352.009097][ T9181] do_syscall_64+0x166/0x520 [ 352.009118][ T9181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.009133][ T9181] ? clear_bhb_loop+0x70/0xc0 [ 352.009152][ T9181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.009167][ T9181] RIP: 0033:0x7f461f79fb19 [ 352.009181][ T9181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.009194][ T9181] RSP: 002b:00007f46206f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.009210][ T9181] RAX: ffffffffffffffda RBX: 00007f461fa25fa0 RCX: 00007f461f79fb19 [ 352.009221][ T9181] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 352.009231][ T9181] RBP: 00007f461f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 352.009240][ T9181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.009249][ T9181] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 352.009273][ T9181] [ 352.009346][ T9181] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 352.009957][ T9181] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.204131][ T5748] ft260 0003:0403:6030.001B: failed to retrieve system status [ 352.204560][ T5748] ft260 0003:0403:6030.001B: probe with driver ft260 failed with error -32 [ 352.306310][ T9181] bridge0: entered allmulticast mode [ 353.733780][ T200] usb 1-1: USB disconnect, device number 20 [ 354.471745][ T9199] syz0: rxe_newlink: already configured on bond0 [ 354.683684][ T9206] device-mapper: raid: Choosing default region size of 4MiB [ 354.683961][ T9206] device-mapper: raid: Superblocks created for new raid set [ 354.810670][ T9206] mdX: WARNING: ram0 appears to be on the same physical disk as ram0. [ 354.810688][ T9206] True protection against single-disk failure might be compromised. [ 354.853731][ T9206] md/raid10:mdX: not clean -- starting background reconstruction [ 354.853745][ T9206] md/raid10:mdX: active with 2 out of 2 devices [ 355.260259][ T5724] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 355.408278][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 355.409101][ T5724] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 355.410783][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.410806][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.410835][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.415013][ T5724] usb 3-1: config 0 descriptor?? [ 355.552683][ T9233] syz0: rxe_newlink: already configured on bond0 [ 355.667408][ T9236] FAULT_INJECTION: forcing a failure. [ 355.667408][ T9236] name fail_futex, interval 1, probability 0, space 0, times 1 [ 355.667437][ T9236] CPU: 0 UID: 0 PID: 9236 Comm: syz.0.1285 Not tainted syzkaller #0 PREEMPT(full) [ 355.667454][ T9236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 355.667464][ T9236] Call Trace: [ 355.667470][ T9236] [ 355.667477][ T9236] dump_stack_lvl+0xe8/0x150 [ 355.667504][ T9236] should_fail_ex+0x3eb/0x540 [ 355.667526][ T9236] get_futex_key+0x1ab/0x1410 [ 355.667557][ T9236] ? __pfx_get_futex_key+0x10/0x10 [ 355.667585][ T9236] futex_wake+0x119/0x5f0 [ 355.667606][ T9236] ? __pfx_futex_wake+0x10/0x10 [ 355.667629][ T9236] ? mm_exit_exec_release+0x20/0x290 [ 355.667651][ T9236] do_futex+0x458/0x4e0 [ 355.667679][ T9236] ? __pfx_do_futex+0x10/0x10 [ 355.667705][ T9236] ? __might_fault+0xaf/0x130 [ 355.667732][ T9236] mm_exit_exec_release+0x10d/0x290 [ 355.667753][ T9236] exit_mm+0x50/0x240 [ 355.667779][ T9236] do_exit+0x6a8/0x2360 [ 355.667809][ T9236] ? __pfx_do_exit+0x10/0x10 [ 355.667835][ T9236] ? do_raw_spin_lock+0x12b/0x2f0 [ 355.667867][ T9236] do_group_exit+0x22d/0x2f0 [ 355.667880][ T9236] ? _raw_spin_unlock_irq+0x23/0x50 [ 355.667903][ T9236] get_signal+0x136a/0x1430 [ 355.667937][ T9236] arch_do_signal_or_restart+0xbb/0x860 [ 355.667963][ T9236] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 355.668001][ T9236] exit_to_user_mode_loop+0x10e/0x770 [ 355.668019][ T9236] ? rcu_is_watching+0x16/0xb0 [ 355.668044][ T9236] do_syscall_64+0x328/0x520 [ 355.668066][ T9236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.668082][ T9236] ? clear_bhb_loop+0x70/0xc0 [ 355.668101][ T9236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.668116][ T9236] RIP: 0033:0x7fd48cd9fb19 [ 355.668131][ T9236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.668143][ T9236] RSP: 002b:00007fd48dce00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 355.668160][ T9236] RAX: fffffffffffffe00 RBX: 00007fd48d025fa8 RCX: 00007fd48cd9fb19 [ 355.668171][ T9236] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd48d025fa8 [ 355.668181][ T9236] RBP: 00007fd48d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 355.668190][ T9236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.668199][ T9236] R13: 00007fd48d026038 R14: 00007fffa1420660 R15: 00007fffa1420748 [ 355.668223][ T9236] [ 355.963276][ T5724] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 355.963302][ T5724] ft260 0003:0403:6030.001C: unknown main item tag 0x0 [ 357.079402][ T5724] ft260 0003:0403:6030.001C: chip code: 0000 0000 [ 357.392114][ T5724] ft260 0003:0403:6030.001C: failed to retrieve system status [ 357.392379][ T5724] ft260 0003:0403:6030.001C: probe with driver ft260 failed with error -5 [ 359.017920][ T200] usb 3-1: USB disconnect, device number 14 [ 360.036600][ T9278] kvm: pic: non byte write [ 360.299938][ T5748] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 360.448381][ T5748] usb 1-1: Using ep0 maxpacket: 32 [ 360.449782][ T5748] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 360.450666][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.450688][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.450715][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.456114][ T5748] usb 1-1: config 0 descriptor?? [ 360.904320][ T5748] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 360.904348][ T5748] ft260 0003:0403:6030.001D: unknown main item tag 0x0 [ 361.101521][ T5748] ft260 0003:0403:6030.001D: chip code: 0000 0000 [ 361.225127][ T9317] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.302139][ T5748] ft260 0003:0403:6030.001D: failed to retrieve system status [ 361.302407][ T5748] ft260 0003:0403:6030.001D: probe with driver ft260 failed with error -5 [ 361.362981][ T9321] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 361.997693][ T9331] kvm: pic: non byte write [ 362.189716][ T11] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 362.339082][ T11] usb 3-1: New USB device found: idVendor=28de, idProduct=1205, bcdDevice=0.00 [ 362.340241][ T11] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 362.340272][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 362.340291][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 362.340321][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.344364][ T11] usb 3-1: config 0 descriptor?? [ 362.346337][ T9333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 362.774815][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774842][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774869][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774888][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774907][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774926][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774944][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.774962][ T11] hid-steam 0003:28DE:1205.001E: unknown main item tag 0x0 [ 362.810306][ T11] hid-steam 0003:28DE:1205.001E: : USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 362.810375][ T11] hid-steam 0003:28DE:1205.001E: steam_register:steam_get_attributes failed with error -22 [ 362.810391][ T11] hid-steam 0003:28DE:1205.001E: Steam Deck 'XXXXXXXXXX' connected [ 362.900102][ T11] input: Steam Deck as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.001E/input/input9 [ 362.965932][ T11] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28DE:1205.001E/input/input10 [ 363.117133][ T11] hid-steam 0003:28DE:1205.001F: hidraw0: USB HID v0.05 Device [HID 28de:1205] on usb-dummy_hcd.2-1/input0 [ 363.215009][ T11] usb 3-1: USB disconnect, device number 15 [ 363.299709][ T11] hid-steam 0003:28DE:1205.001E: Steam Deck 'XXXXXXXXXX' disconnected [ 363.722956][ T5748] usb 1-1: USB disconnect, device number 21 [ 363.802716][ T9356] fido_id[9356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 364.894917][ T9381] GUP no longer grows the stack in syz.1.1346 (9381): 200000009000-200000018000 (200000006000) [ 364.894947][ T9381] CPU: 0 UID: 0 PID: 9381 Comm: syz.1.1346 Tainted: G L syzkaller #0 PREEMPT(full) [ 364.894970][ T9381] Tainted: [L]=SOFTLOCKUP [ 364.894975][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 364.894986][ T9381] Call Trace: [ 364.894995][ T9381] [ 364.895002][ T9381] dump_stack_lvl+0xe8/0x150 [ 364.895029][ T9381] __get_user_pages+0x1b01/0x1ea0 [ 364.895073][ T9381] get_user_pages_unlocked+0x1ee/0x750 [ 364.895103][ T9381] hva_to_pfn+0x360/0xf10 [ 364.895129][ T9381] ? __pfx_hva_to_pfn+0x10/0x10 [ 364.895152][ T9381] ? lock_acquire+0x115/0x350 [ 364.895170][ T9381] ? get_file_active+0x22/0x220 [ 364.895195][ T9381] ? kvm_follow_pfn+0x21a/0x3c0 [ 364.895214][ T9381] __kvm_faultin_pfn+0xaa/0x100 [ 364.895237][ T9381] kvm_mmu_faultin_pfn+0x72f/0x1600 [ 364.895274][ T9381] ? __pfx_kvm_mmu_faultin_pfn+0x10/0x10 [ 364.895302][ T9381] ? __kvm_memslots+0x127/0x210 [ 364.895325][ T9381] kvm_tdp_page_fault+0x292/0x3a0 [ 364.895351][ T9381] kvm_mmu_do_page_fault+0x31d/0x640 [ 364.895373][ T9381] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 364.895406][ T9381] kvm_mmu_page_fault+0x1f8/0xc00 [ 364.895429][ T9381] vt_handle_exit+0x28/0x160 [ 364.895450][ T9381] vcpu_run+0x4e8a/0x7a90 [ 364.895489][ T9381] ? vcpu_run+0x35f3/0x7a90 [ 364.895533][ T9381] ? __pfx_vcpu_run+0x10/0x10 [ 364.895548][ T9381] ? lock_acquire+0x115/0x350 [ 364.895569][ T9381] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 364.895591][ T9381] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 364.895628][ T9381] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 364.895647][ T9381] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 364.895666][ T9381] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 364.895693][ T9381] kvm_vcpu_ioctl+0xa61/0xfd0 [ 364.895715][ T9381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.895730][ T9381] ? do_futex+0x3e7/0x4e0 [ 364.895769][ T9381] ? __fget_files+0x2a/0x420 [ 364.895790][ T9381] ? __fget_files+0x2a/0x420 [ 364.895809][ T9381] ? __fget_files+0x2a/0x420 [ 364.895831][ T9381] ? bpf_lsm_file_ioctl+0x9/0x20 [ 364.895853][ T9381] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 364.895870][ T9381] __se_sys_ioctl+0xfc/0x170 [ 364.895895][ T9381] do_syscall_64+0x166/0x520 [ 364.895917][ T9381] ? trace_irq_disable+0x3b/0x140 [ 364.895936][ T9381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.895952][ T9381] ? clear_bhb_loop+0x70/0xc0 [ 364.895971][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.895987][ T9381] RIP: 0033:0x7f461f79fb19 [ 364.896002][ T9381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.896016][ T9381] RSP: 002b:00007f46206f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 364.896032][ T9381] RAX: ffffffffffffffda RBX: 00007f461fa25fa0 RCX: 00007f461f79fb19 [ 364.896044][ T9381] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 364.896054][ T9381] RBP: 00007f461f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 364.896063][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.896073][ T9381] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 364.896098][ T9381] [ 365.098399][ T11] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 365.350707][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 365.354119][ T11] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 365.358010][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.358034][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.358062][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.407982][ T11] usb 3-1: config 0 descriptor?? [ 365.697917][ T9397] Config c/1 of g1 needs at least one function. [ 365.698027][ T9397] udc dummy_udc.0: failed to start g1: -22 [ 365.698043][ T9397] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 365.698732][ T9397] UDC core: g1: couldn't find an available UDC or it's busy [ 366.029633][ T11] ft260 0003:0403:6030.0020: chip code: 0000 0000 [ 366.029873][ T9411] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.030070][ T9411] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.030202][ T9411] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 366.030486][ T9411] bridge0: entered allmulticast mode [ 366.205766][ T9415] rnbd_client L127: Can't parse path ip:: -22 [ 366.231753][ T11] ft260 0003:0403:6030.0020: failed to retrieve system status [ 366.232073][ T11] ft260 0003:0403:6030.0020: probe with driver ft260 failed with error -5 [ 368.586472][ T9427] Config c/1 of g1 needs at least one function. [ 368.586562][ T9427] udc dummy_udc.0: failed to start g1: -22 [ 368.586577][ T9427] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 368.621899][ T9427] UDC core: g1: couldn't find an available UDC or it's busy [ 368.665122][ T5724] usb 3-1: USB disconnect, device number 16 [ 371.411346][ T9451] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 371.849165][ T5724] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 372.010426][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 372.010977][ T5724] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 372.011858][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.011879][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.011906][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.031625][ T5724] usb 3-1: config 0 descriptor?? [ 372.496614][ T5724] hid_parser_main: 28 callbacks suppressed [ 372.496634][ T5724] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 372.496655][ T5724] ft260 0003:0403:6030.0021: unknown main item tag 0x0 [ 372.588014][ T9465] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 372.631376][ T9465] md: could not open device unknown-block(1,2). [ 372.693583][ T5724] ft260 0003:0403:6030.0021: chip code: 0000 0000 [ 372.896954][ T5724] ft260 0003:0403:6030.0021: failed to retrieve system status [ 372.897216][ T5724] ft260 0003:0403:6030.0021: probe with driver ft260 failed with error -5 [ 375.663147][ T200] usb 3-1: USB disconnect, device number 17 [ 376.500517][ T9549] netlink: 'syz.2.1411': attribute type 1 has an invalid length. [ 376.500537][ T9549] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1411'. [ 376.648310][ T200] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 376.712152][ T9558] netlink: 'syz.0.1415': attribute type 4 has an invalid length. [ 376.809332][ T200] usb 4-1: Using ep0 maxpacket: 32 [ 376.810348][ T200] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 376.818030][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.818054][ T200] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.818082][ T200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.867435][ T200] usb 4-1: config 0 descriptor?? [ 378.171550][ T200] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 378.171579][ T200] ft260 0003:0403:6030.0022: unknown main item tag 0x0 [ 378.433963][ T200] ft260 0003:0403:6030.0022: chip code: 0000 0000 [ 378.602124][ T33] audit: type=1326 audit(1793758560.536:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.602168][ T33] audit: type=1326 audit(1793758560.536:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.661933][ T33] audit: type=1326 audit(1793758560.596:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5c1a36034e code=0x7ffc0000 [ 378.661973][ T33] audit: type=1326 audit(1793758560.596:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.662004][ T33] audit: type=1326 audit(1793758560.596:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.662822][ T200] ft260 0003:0403:6030.0022: failed to retrieve system status [ 378.663084][ T200] ft260 0003:0403:6030.0022: probe with driver ft260 failed with error -5 [ 378.776098][ T33] audit: type=1326 audit(1793758560.706:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.776138][ T33] audit: type=1326 audit(1793758560.706:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.776169][ T33] audit: type=1326 audit(1793758560.706:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9580 comm="syz.2.1424" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 378.887059][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.887102][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.628679][ T200] usb 4-1: USB disconnect, device number 15 [ 380.763249][ T9646] netlink: 'syz.0.1448': attribute type 1 has an invalid length. [ 380.763269][ T9646] netlink: 'syz.0.1448': attribute type 2 has an invalid length. [ 381.498884][ T200] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 381.650444][ T200] usb 1-1: Using ep0 maxpacket: 32 [ 381.651499][ T200] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 381.652969][ T200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.652992][ T200] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.653019][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.706038][ T200] usb 1-1: config 0 descriptor?? [ 381.766344][ T9682] loop7: detected capacity change from 0 to 2048 [ 382.480628][ T200] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 382.480659][ T200] ft260 0003:0403:6030.0023: unknown main item tag 0x0 [ 382.678044][ T200] ft260 0003:0403:6030.0023: chip code: 0000 0000 [ 383.725716][ T200] ft260 0003:0403:6030.0023: failed to retrieve system status [ 383.725989][ T200] ft260 0003:0403:6030.0023: probe with driver ft260 failed with error -5 [ 384.348776][ T9704] dns_resolver: Unsupported content type (6) [ 386.525028][ T5748] usb 1-1: USB disconnect, device number 22 [ 386.681173][ T9726] FAULT_INJECTION: forcing a failure. [ 386.681173][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 386.681199][ T9726] CPU: 0 UID: 0 PID: 9726 Comm: syz.2.1476 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.681220][ T9726] Tainted: [L]=SOFTLOCKUP [ 386.681226][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 386.681236][ T9726] Call Trace: [ 386.681242][ T9726] [ 386.681249][ T9726] dump_stack_lvl+0xe8/0x150 [ 386.681299][ T9726] should_fail_ex+0x3eb/0x540 [ 386.681323][ T9726] should_failslab+0xa8/0x100 [ 386.681348][ T9726] __kmalloc_noprof+0xf9/0x710 [ 386.681366][ T9726] ? __lock_acquire+0x747/0x2de0 [ 386.681383][ T9726] ? switchdev_deferred_enqueue+0x2d/0x240 [ 386.681406][ T9726] ? switchdev_deferred_enqueue+0x2d/0x240 [ 386.681433][ T9726] ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 [ 386.681456][ T9726] switchdev_deferred_enqueue+0x2d/0x240 [ 386.681482][ T9726] br_set_state+0x391/0x6f0 [ 386.681506][ T9726] ? __pfx_br_set_state+0x10/0x10 [ 386.681528][ T9726] ? do_raw_spin_lock+0x12b/0x2f0 [ 386.681553][ T9726] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 386.681580][ T9726] ? __local_bh_enable_ip+0xd6/0x140 [ 386.681599][ T9726] ? br_become_designated_port+0x20/0x250 [ 386.681622][ T9726] br_stp_disable_port+0x71/0x1c0 [ 386.681646][ T9726] br_stp_disable_bridge+0x81/0x150 [ 386.681671][ T9726] br_dev_stop+0x2d/0x180 [ 386.681691][ T9726] ? __pfx_br_dev_stop+0x10/0x10 [ 386.681732][ T9726] __dev_close_many+0x361/0x6e0 [ 386.681753][ T9726] ? __pfx___dev_close_many+0x10/0x10 [ 386.681767][ T9726] ? __dev_change_flags+0x2e2/0x820 [ 386.681788][ T9726] ? __local_bh_enable_ip+0xd6/0x140 [ 386.681806][ T9726] ? __pfx_br_dev_change_rx_flags+0x10/0x10 [ 386.681831][ T9726] __dev_change_flags+0x3f5/0x820 [ 386.681855][ T9726] ? __pfx___dev_change_flags+0x10/0x10 [ 386.681876][ T9726] ? __pfx___mutex_lock+0x10/0x10 [ 386.681897][ T9726] ? full_name_hash+0x92/0xe0 [ 386.681919][ T9726] netif_change_flags+0x7c/0x1b0 [ 386.681941][ T9726] dev_change_flags+0x128/0x260 [ 386.681962][ T9726] dev_ioctl+0x7b4/0x1150 [ 386.681984][ T9726] sock_do_ioctl+0x23e/0x320 [ 386.682011][ T9726] ? __pfx_sock_do_ioctl+0x10/0x10 [ 386.682032][ T9726] ? do_futex+0x3e7/0x4e0 [ 386.682067][ T9726] sock_ioctl+0x57a/0x7e0 [ 386.682089][ T9726] ? __fget_files+0x2a/0x420 [ 386.682107][ T9726] ? __pfx_sock_ioctl+0x10/0x10 [ 386.682129][ T9726] ? __fget_files+0x2a/0x420 [ 386.682147][ T9726] ? __fget_files+0x2a/0x420 [ 386.682169][ T9726] ? bpf_lsm_file_ioctl+0x9/0x20 [ 386.682190][ T9726] ? __pfx_sock_ioctl+0x10/0x10 [ 386.682211][ T9726] __se_sys_ioctl+0xfc/0x170 [ 386.682236][ T9726] do_syscall_64+0x166/0x520 [ 386.682257][ T9726] ? trace_irq_disable+0x3b/0x140 [ 386.682277][ T9726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.682293][ T9726] ? clear_bhb_loop+0x70/0xc0 [ 386.682312][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.682327][ T9726] RIP: 0033:0x7f5c1a39fb19 [ 386.682341][ T9726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.682354][ T9726] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.682372][ T9726] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 386.682383][ T9726] RDX: 0000200000000900 RSI: 0000000000008914 RDI: 0000000000000004 [ 386.682393][ T9726] RBP: 00007f5c1a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 386.682403][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.682412][ T9726] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 386.682437][ T9726] [ 386.682454][ T9726] bridge0: error setting offload STP state on port 2(bridge_slave_1) [ 386.682692][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.685539][ T9726] bridge0: entered allmulticast mode [ 387.668887][ T5640] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 390.369307][ T9786] jffs2: notice: (9786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 390.934384][ T5640] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 391.978277][ T11] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 392.096605][ T9838] netlink: 'syz.2.1521': attribute type 9 has an invalid length. [ 392.096623][ T9838] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 392.128307][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 392.128800][ T11] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 392.129932][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.129955][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.129981][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.134717][ T11] usb 4-1: config 0 descriptor?? [ 392.751063][ T11] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 392.751099][ T11] ft260 0003:0403:6030.0024: unknown main item tag 0x0 [ 392.940581][ T11] ft260 0003:0403:6030.0024: chip code: 0000 0000 [ 393.141207][ T11] ft260 0003:0403:6030.0024: failed to retrieve system status [ 393.141467][ T11] ft260 0003:0403:6030.0024: probe with driver ft260 failed with error -5 [ 393.219166][ T9861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 393.219211][ T9861] FAULT_INJECTION: forcing a failure. [ 393.219211][ T9861] name failslab, interval 1, probability 0, space 0, times 0 [ 393.219231][ T9861] CPU: 0 UID: 0 PID: 9861 Comm: syz.0.1530 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.219252][ T9861] Tainted: [L]=SOFTLOCKUP [ 393.219258][ T9861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 393.219268][ T9861] Call Trace: [ 393.219274][ T9861] [ 393.219281][ T9861] dump_stack_lvl+0xe8/0x150 [ 393.219310][ T9861] should_fail_ex+0x3eb/0x540 [ 393.219332][ T9861] should_failslab+0xa8/0x100 [ 393.219358][ T9861] __kvmalloc_node_noprof+0x171/0x820 [ 393.219381][ T9861] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 393.219398][ T9861] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 393.219420][ T9861] __rhashtable_init_noprof+0x5fa/0xbd0 [ 393.219442][ T9861] __rhltable_init_noprof+0x26/0x70 [ 393.219460][ T9861] nf_tables_newtable+0x6a7/0x1990 [ 393.219503][ T9861] nfnetlink_rcv+0x1288/0x28c0 [ 393.219553][ T9861] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 393.219610][ T9861] ? skb_clone+0x246/0x3a0 [ 393.219641][ T9861] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.219656][ T9861] ? netlink_deliver_tap+0x2e/0x1b0 [ 393.219676][ T9861] netlink_unicast+0x8ef/0xa80 [ 393.219712][ T9861] netlink_sendmsg+0x7f0/0xb20 [ 393.219732][ T9861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.219751][ T9861] ? aa_sock_msg_perm+0x144/0x210 [ 393.219771][ T9861] ? apparmor_socket_sendmsg+0x98/0x360 [ 393.219797][ T9861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.219812][ T9861] sock_sendmsg_nosec+0x14e/0x190 [ 393.219838][ T9861] ____sys_sendmsg+0x54e/0x850 [ 393.219861][ T9861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.219887][ T9861] ? import_iovec+0x73/0xa0 [ 393.219909][ T9861] ___sys_sendmsg+0x2a6/0x360 [ 393.219927][ T9861] ? __lock_acquire+0x747/0x2de0 [ 393.219949][ T9861] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.219980][ T9861] ? futex_wait+0x2a2/0x390 [ 393.220020][ T9861] ? __fget_files+0x3a2/0x420 [ 393.220038][ T9861] ? __fget_files+0x2a/0x420 [ 393.220066][ T9861] __x64_sys_sendmsg+0x1b1/0x290 [ 393.220087][ T9861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.220123][ T9861] do_syscall_64+0x166/0x520 [ 393.220145][ T9861] ? trace_irq_disable+0x3b/0x140 [ 393.220164][ T9861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.220181][ T9861] ? clear_bhb_loop+0x70/0xc0 [ 393.220200][ T9861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.220215][ T9861] RIP: 0033:0x7fd48cd9fb19 [ 393.220230][ T9861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.220244][ T9861] RSP: 002b:00007fd48dce0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.220260][ T9861] RAX: ffffffffffffffda RBX: 00007fd48d025fa0 RCX: 00007fd48cd9fb19 [ 393.220271][ T9861] RDX: 0000000000000000 RSI: 0000200000000a00 RDI: 0000000000000005 [ 393.220281][ T9861] RBP: 00007fd48ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 393.220290][ T9861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.220299][ T9861] R13: 00007fd48d026038 R14: 00007fd48d025fa0 R15: 00007fffa1420748 [ 393.220325][ T9861] [ 393.658372][ T5640] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 393.971271][ T9876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 394.083103][ T9876] md/raid1:md0: active with 1 out of 2 mirrors [ 394.083783][ T9876] md0: detected capacity change from 0 to 1024 [ 394.127999][ T9879] md0: detected capacity change from 1024 to 0 [ 394.128066][ T9879] md: md0 stopped. [ 394.394850][ T9886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1537'. [ 396.909957][ T5724] usb 4-1: USB disconnect, device number 16 [ 397.738839][ T5724] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 397.889085][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 397.891155][ T5724] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 397.917296][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.917320][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.917347][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.955950][ T5724] usb 1-1: config 0 descriptor?? [ 398.407052][ T5724] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 398.407080][ T5724] ft260 0003:0403:6030.0025: unknown main item tag 0x0 [ 398.630812][ T5724] ft260 0003:0403:6030.0025: chip code: 0000 0000 [ 399.636118][ T5724] ft260 0003:0403:6030.0025: failed to retrieve system status [ 399.636396][ T5724] ft260 0003:0403:6030.0025: probe with driver ft260 failed with error -5 [ 400.899648][ T9995] FAULT_INJECTION: forcing a failure. [ 400.899648][ T9995] name fail_futex, interval 1, probability 0, space 0, times 0 [ 400.899674][ T9995] CPU: 0 UID: 0 PID: 9995 Comm: syz.3.1570 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.899696][ T9995] Tainted: [L]=SOFTLOCKUP [ 400.899701][ T9995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 400.899711][ T9995] Call Trace: [ 400.899717][ T9995] [ 400.899724][ T9995] dump_stack_lvl+0xe8/0x150 [ 400.899751][ T9995] should_fail_ex+0x3eb/0x540 [ 400.899774][ T9995] get_futex_key+0x1ab/0x1410 [ 400.899796][ T9995] ? stack_trace_save+0xa9/0x100 [ 400.899820][ T9995] ? __lock_acquire+0x747/0x2de0 [ 400.899837][ T9995] ? __pfx_get_futex_key+0x10/0x10 [ 400.899860][ T9995] ? kasan_save_track+0x51/0x90 [ 400.899880][ T9995] ? __kasan_slab_free+0x70/0x90 [ 400.899904][ T9995] futex_wait_setup+0x4a/0x590 [ 400.899924][ T9995] ? __futex_wait+0xdb/0x470 [ 400.899945][ T9995] __futex_wait+0x175/0x470 [ 400.899968][ T9995] ? __pfx___futex_wait+0x10/0x10 [ 400.899988][ T9995] ? __pfx_futex_wake_mark+0x10/0x10 [ 400.900009][ T9995] ? futex_hash+0x4e/0x2b0 [ 400.900030][ T9995] ? futex_hash+0x4e/0x2b0 [ 400.900049][ T9995] ? futex_hash+0x275/0x2b0 [ 400.900074][ T9995] futex_wait+0x121/0x390 [ 400.900093][ T9995] ? __pfx_futex_wait+0x10/0x10 [ 400.900120][ T9995] ? sock_do_ioctl+0x291/0x320 [ 400.900145][ T9995] do_futex+0x3e7/0x4e0 [ 400.900172][ T9995] ? __pfx_do_futex+0x10/0x10 [ 400.900202][ T9995] __se_sys_futex+0x3a8/0x450 [ 400.900228][ T9995] ? __fget_files+0x2a/0x420 [ 400.900257][ T9995] ? __pfx___se_sys_futex+0x10/0x10 [ 400.900287][ T9995] ? __x64_sys_futex+0x21/0xf0 [ 400.900312][ T9995] do_syscall_64+0x166/0x520 [ 400.900335][ T9995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.900358][ T9995] ? clear_bhb_loop+0x70/0xc0 [ 400.900380][ T9995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.900396][ T9995] RIP: 0033:0x7f4fda99fb19 [ 400.900410][ T9995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.900424][ T9995] RSP: 002b:00007f4fdb8fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 400.900441][ T9995] RAX: ffffffffffffffda RBX: 00007f4fdac25fa8 RCX: 00007f4fda99fb19 [ 400.900453][ T9995] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4fdac25fa8 [ 400.900462][ T9995] RBP: 00007f4fdac25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 400.900472][ T9995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 400.900482][ T9995] R13: 00007f4fdac26038 R14: 00007ffddba1caf0 R15: 00007ffddba1cbd8 [ 400.900507][ T9995] [ 401.730874][T10012] jffs2: notice: (10012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 401.950926][ T5724] usb 1-1: USB disconnect, device number 23 [ 402.030806][T10023] FAULT_INJECTION: forcing a failure. [ 402.030806][T10023] name fail_futex, interval 1, probability 0, space 0, times 0 [ 402.030832][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.2.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.030855][T10023] Tainted: [L]=SOFTLOCKUP [ 402.030861][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 402.030870][T10023] Call Trace: [ 402.030876][T10023] [ 402.030883][T10023] dump_stack_lvl+0xe8/0x150 [ 402.030910][T10023] should_fail_ex+0x3eb/0x540 [ 402.030934][T10023] get_futex_key+0x1ab/0x1410 [ 402.030965][T10023] ? __pfx_get_futex_key+0x10/0x10 [ 402.030988][T10023] ? update_se+0x90/0x1080 [ 402.031014][T10023] futex_wait_setup+0x4a/0x590 [ 402.031036][T10023] ? __futex_wait+0xdb/0x470 [ 402.031057][T10023] __futex_wait+0x175/0x470 [ 402.031073][T10023] ? update_protect_slice+0x45/0x320 [ 402.031094][T10023] ? __pfx___futex_wait+0x10/0x10 [ 402.031117][T10023] ? __pfx_futex_wake_mark+0x10/0x10 [ 402.031139][T10023] ? try_to_wake_up+0x8ce/0x14e0 [ 402.031168][T10023] futex_wait+0x121/0x390 [ 402.031217][T10023] ? __pfx_futex_wait+0x10/0x10 [ 402.031243][T10023] ? sock_do_ioctl+0x291/0x320 [ 402.031270][T10023] do_futex+0x3e7/0x4e0 [ 402.031297][T10023] ? __pfx_do_futex+0x10/0x10 [ 402.031327][T10023] __se_sys_futex+0x3a8/0x450 [ 402.031353][T10023] ? __fget_files+0x2a/0x420 [ 402.031374][T10023] ? __pfx___se_sys_futex+0x10/0x10 [ 402.031403][T10023] ? __x64_sys_futex+0x21/0xf0 [ 402.031429][T10023] do_syscall_64+0x166/0x520 [ 402.031451][T10023] ? trace_irq_disable+0x3b/0x140 [ 402.031470][T10023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.031486][T10023] ? clear_bhb_loop+0x70/0xc0 [ 402.031505][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.031521][T10023] RIP: 0033:0x7f5c1a39fb19 [ 402.031535][T10023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.031549][T10023] RSP: 002b:00007f5c1b3160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 402.031565][T10023] RAX: ffffffffffffffda RBX: 00007f5c1a625fa8 RCX: 00007f5c1a39fb19 [ 402.031577][T10023] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c1a625fa8 [ 402.031587][T10023] RBP: 00007f5c1a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 402.031596][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 402.031606][T10023] R13: 00007f5c1a626038 R14: 00007ffd10fb88c0 R15: 00007ffd10fb89a8 [ 402.031630][T10023] [ 404.597222][ T5724] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 404.758706][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 404.762913][ T5724] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 404.767512][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.767535][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.767561][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.818457][ T5724] usb 4-1: config 0 descriptor?? [ 405.255208][ T5724] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 405.255248][ T5724] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 405.453048][ T5724] ft260 0003:0403:6030.0026: chip code: 0000 0000 [ 405.654159][ T5724] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 405.854752][ T5724] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 405.856311][ T5724] ft260 0003:0403:6030.0026: failed to retrieve status: -32 [ 405.856711][ T5724] ft260 0003:0403:6030.0026: failed to reset I2C controller: -71 [ 405.921608][ T5724] usb 4-1: USB disconnect, device number 17 [ 406.978690][T10143] tipc: Enabled bearer , priority 10 [ 407.000590][T10144] overlay: filesystem on ./file0 not supported as upperdir [ 407.179822][ T5724] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 407.332851][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 407.336316][ T5724] usb 2-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 407.352942][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.352967][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.352995][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.387848][ T5724] usb 2-1: config 0 descriptor?? [ 407.834667][ T5724] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 407.834694][ T5724] ft260 0003:0403:6030.0027: unknown main item tag 0x0 [ 408.016758][ T5724] ft260 0003:0403:6030.0027: chip code: 0000 0000 [ 408.217714][ T5724] ft260 0003:0403:6030.0027: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 409.263510][ T5724] ft260 0003:0403:6030.0027: failed to retrieve status: -32, no wakeup [ 409.264606][ T5724] ft260 0003:0403:6030.0027: failed to retrieve status: -32 [ 409.302045][ T5724] ft260 0003:0403:6030.0027: failed to reset I2C controller: -71 [ 409.572609][ T5724] usb 2-1: USB disconnect, device number 18 [ 409.699413][T10192] FAULT_INJECTION: forcing a failure. [ 409.699413][T10192] name fail_futex, interval 1, probability 0, space 0, times 0 [ 409.699440][T10192] CPU: 0 UID: 0 PID: 10192 Comm: syz.2.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.699461][T10192] Tainted: [L]=SOFTLOCKUP [ 409.699467][T10192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 409.699477][T10192] Call Trace: [ 409.699483][T10192] [ 409.699490][T10192] dump_stack_lvl+0xe8/0x150 [ 409.699519][T10192] should_fail_ex+0x3eb/0x540 [ 409.699542][T10192] get_futex_key+0x1ab/0x1410 [ 409.699583][T10192] ? __pfx_get_futex_key+0x10/0x10 [ 409.699607][T10192] ? update_se+0x90/0x1080 [ 409.699633][T10192] futex_wait_setup+0x4a/0x590 [ 409.699655][T10192] ? __futex_wait+0xdb/0x470 [ 409.699675][T10192] __futex_wait+0x175/0x470 [ 409.699692][T10192] ? update_protect_slice+0x45/0x320 [ 409.699713][T10192] ? __pfx___futex_wait+0x10/0x10 [ 409.699733][T10192] ? __pfx_futex_wake_mark+0x10/0x10 [ 409.699754][T10192] ? try_to_wake_up+0x8ce/0x14e0 [ 409.699783][T10192] futex_wait+0x121/0x390 [ 409.699802][T10192] ? __pfx_futex_wait+0x10/0x10 [ 409.699829][T10192] ? sock_do_ioctl+0x291/0x320 [ 409.699854][T10192] do_futex+0x3e7/0x4e0 [ 409.699881][T10192] ? __pfx_do_futex+0x10/0x10 [ 409.699910][T10192] __se_sys_futex+0x3a8/0x450 [ 409.699936][T10192] ? __fget_files+0x2a/0x420 [ 409.699956][T10192] ? __pfx___se_sys_futex+0x10/0x10 [ 409.699986][T10192] ? __x64_sys_futex+0x21/0xf0 [ 409.700011][T10192] do_syscall_64+0x166/0x520 [ 409.700033][T10192] ? trace_irq_disable+0x3b/0x140 [ 409.700052][T10192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.700068][T10192] ? clear_bhb_loop+0x70/0xc0 [ 409.700087][T10192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.700102][T10192] RIP: 0033:0x7f5c1a39fb19 [ 409.700116][T10192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.700130][T10192] RSP: 002b:00007f5c1b3160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 409.700146][T10192] RAX: ffffffffffffffda RBX: 00007f5c1a625fa8 RCX: 00007f5c1a39fb19 [ 409.700158][T10192] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5c1a625fa8 [ 409.700167][T10192] RBP: 00007f5c1a625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 409.700177][T10192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.700186][T10192] R13: 00007f5c1a626038 R14: 00007ffd10fb88c0 R15: 00007ffd10fb89a8 [ 409.700210][T10192] [ 409.990352][T10191] FAULT_INJECTION: forcing a failure. [ 409.990352][T10191] name failslab, interval 1, probability 5, space 0, times 10000 [ 409.990380][T10191] CPU: 0 UID: 0 PID: 10191 Comm: syz.0.1643 Tainted: G L syzkaller #0 PREEMPT(full) [ 409.990402][T10191] Tainted: [L]=SOFTLOCKUP [ 409.990408][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 409.990418][T10191] Call Trace: [ 409.990424][T10191] [ 409.990430][T10191] dump_stack_lvl+0xe8/0x150 [ 409.990459][T10191] should_fail_ex+0x3eb/0x540 [ 409.990482][T10191] should_failslab+0xa8/0x100 [ 409.990507][T10191] ? mempool_init_node+0x1f4/0x510 [ 409.990540][T10191] kmem_cache_alloc_noprof+0x9c/0x600 [ 409.990559][T10191] ? mempool_init_noprof+0x3a/0x50 [ 409.990581][T10191] ? mempool_init_node+0x1f4/0x510 [ 409.990604][T10191] ? kasan_save_free_info+0x40/0x50 [ 409.990622][T10191] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 409.990647][T10191] mempool_init_node+0x1f4/0x510 [ 409.990676][T10191] ? __pfx_mempool_free_slab+0x10/0x10 [ 409.990701][T10191] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 409.990725][T10191] mempool_init_noprof+0x3a/0x50 [ 409.990750][T10191] bioset_init+0x2ee/0x7e0 [ 409.990776][T10191] ? __pfx_bioset_init+0x10/0x10 [ 409.990797][T10191] ? __kasan_kmalloc+0x93/0xb0 [ 409.990820][T10191] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 409.990840][T10191] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 409.990858][T10191] ? dm_table_complete+0x19a3/0x22d0 [ 409.990874][T10191] ? dm_table_complete+0x19a3/0x22d0 [ 409.990894][T10191] dm_table_complete+0x1d40/0x22d0 [ 409.990917][T10191] ? kfree+0x1c7/0x650 [ 409.990931][T10191] ? dm_table_add_target+0x598/0xc70 [ 409.990950][T10191] ? dm_table_add_target+0x758/0xc70 [ 409.990966][T10191] ? __pfx_dm_table_complete+0x10/0x10 [ 409.990991][T10191] table_load+0x3b4/0x8a0 [ 409.991021][T10191] ? __pfx_table_load+0x10/0x10 [ 409.991049][T10191] ? __might_fault+0xaf/0x130 [ 409.991079][T10191] dm_ctl_ioctl+0x9ec/0xe10 [ 409.991108][T10191] ? __pfx_table_load+0x10/0x10 [ 409.991132][T10191] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 409.991179][T10191] ? __fget_files+0x2a/0x420 [ 409.991201][T10191] ? bpf_lsm_file_ioctl+0x9/0x20 [ 409.991221][T10191] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 409.991244][T10191] __se_sys_ioctl+0xfc/0x170 [ 409.991269][T10191] do_syscall_64+0x166/0x520 [ 409.991290][T10191] ? trace_irq_disable+0x3b/0x140 [ 409.991310][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.991326][T10191] ? clear_bhb_loop+0x70/0xc0 [ 409.991345][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.991360][T10191] RIP: 0033:0x7fd48cd9fb19 [ 409.991375][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.991389][T10191] RSP: 002b:00007fd48dce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 409.991405][T10191] RAX: ffffffffffffffda RBX: 00007fd48d025fa0 RCX: 00007fd48cd9fb19 [ 409.991416][T10191] RDX: 0000200000002680 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 409.991427][T10191] RBP: 00007fd48ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 409.991436][T10191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.991446][T10191] R13: 00007fd48d026038 R14: 00007fd48d025fa0 R15: 00007fffa1420748 [ 409.991470][T10191] [ 410.038950][T10191] device-mapper: table: unable to allocate mempools [ 411.210795][T10213] siw: device registration error -23 [ 411.407610][T10216] FAULT_INJECTION: forcing a failure. [ 411.407610][T10216] name fail_futex, interval 1, probability 0, space 0, times 0 [ 411.407635][T10216] CPU: 0 UID: 0 PID: 10216 Comm: syz.0.1653 Tainted: G L syzkaller #0 PREEMPT(full) [ 411.407657][T10216] Tainted: [L]=SOFTLOCKUP [ 411.407663][T10216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 411.407672][T10216] Call Trace: [ 411.407679][T10216] [ 411.407685][T10216] dump_stack_lvl+0xe8/0x150 [ 411.407714][T10216] should_fail_ex+0x3eb/0x540 [ 411.407736][T10216] get_futex_key+0x1ab/0x1410 [ 411.407766][T10216] ? __rtnl_unlock+0xc3/0xe0 [ 411.407788][T10216] ? __pfx_get_futex_key+0x10/0x10 [ 411.407807][T10216] ? netdev_run_todo+0x1001/0x1090 [ 411.407837][T10216] futex_wake+0x119/0x5f0 [ 411.407855][T10216] ? netif_rx_mode_sync+0x43/0x50 [ 411.407879][T10216] ? __pfx_futex_wake+0x10/0x10 [ 411.407898][T10216] ? dev_ioctl+0x7cf/0x1150 [ 411.407920][T10216] ? sock_do_ioctl+0x291/0x320 [ 411.407944][T10216] do_futex+0x458/0x4e0 [ 411.407972][T10216] ? __pfx_do_futex+0x10/0x10 [ 411.408001][T10216] __se_sys_futex+0x3a8/0x450 [ 411.408027][T10216] ? __fget_files+0x2a/0x420 [ 411.408047][T10216] ? __pfx___se_sys_futex+0x10/0x10 [ 411.408077][T10216] ? __x64_sys_futex+0x21/0xf0 [ 411.408103][T10216] do_syscall_64+0x166/0x520 [ 411.408128][T10216] ? trace_irq_disable+0x3b/0x140 [ 411.408147][T10216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.408164][T10216] ? clear_bhb_loop+0x70/0xc0 [ 411.408183][T10216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.408198][T10216] RIP: 0033:0x7fd48cd9fb19 [ 411.408213][T10216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.408226][T10216] RSP: 002b:00007fd48dce00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 411.408243][T10216] RAX: ffffffffffffffda RBX: 00007fd48d025fa8 RCX: 00007fd48cd9fb19 [ 411.408254][T10216] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd48d025fac [ 411.408264][T10216] RBP: 00007fd48d025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 411.408275][T10216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.408284][T10216] R13: 00007fd48d026038 R14: 00007fffa1420660 R15: 00007fffa1420748 [ 411.408308][T10216] [ 411.792677][T10222] Config c/1 of g1 needs at least one function. [ 411.792765][T10222] udc dummy_udc.0: failed to start g1: -22 [ 411.792780][T10222] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 411.793297][T10222] UDC core: g1: couldn't find an available UDC or it's busy [ 411.806522][ T5748] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 411.988785][ T5748] usb 3-1: Using ep0 maxpacket: 32 [ 411.989566][ T5748] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 411.991019][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.991041][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.991068][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.996779][ T5748] usb 3-1: config 0 descriptor?? [ 412.148631][T10233] netlink: 'syz.1.1659': attribute type 2 has an invalid length. [ 412.459490][ T5748] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 412.459523][ T5748] ft260 0003:0403:6030.0028: unknown main item tag 0x0 [ 412.555271][T10249] Config c/1 of g1 needs at least one function. [ 412.555378][T10249] udc dummy_udc.0: failed to start g1: -22 [ 412.555395][T10249] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 412.585681][T10249] UDC core: g1: couldn't find an available UDC or it's busy [ 412.654372][ T5748] ft260 0003:0403:6030.0028: chip code: 0000 0000 [ 412.855443][ T5748] ft260 0003:0403:6030.0028: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 413.057295][ T5748] ft260 0003:0403:6030.0028: failed to retrieve status: -32, no wakeup [ 413.067141][ T5748] ft260 0003:0403:6030.0028: failed to retrieve status: -32 [ 413.076320][ T5748] ft260 0003:0403:6030.0028: failed to reset I2C controller: -71 [ 413.105182][ T5748] usb 3-1: USB disconnect, device number 18 [ 413.699603][T10269] UDC core: g1: couldn't find an available UDC or it's busy [ 413.911334][ T5748] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 414.068204][ T5748] usb 1-1: Using ep0 maxpacket: 32 [ 414.070247][ T5748] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 414.073871][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.073894][ T5748] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 414.073922][ T5748] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.106853][ T5748] usb 1-1: config 0 descriptor?? [ 414.566329][ T5748] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 414.566358][ T5748] ft260 0003:0403:6030.0029: unknown main item tag 0x0 [ 414.697324][T10278] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 414.697346][T10278] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 414.750002][T10278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.750375][T10278] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 414.774064][ T5748] ft260 0003:0403:6030.0029: chip code: 0000 0000 [ 414.791075][T10278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 414.791094][T10278] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 414.822680][T10278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 414.822700][T10278] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 414.849519][T10303] FAULT_INJECTION: forcing a failure. [ 414.849519][T10303] name fail_futex, interval 1, probability 0, space 0, times 0 [ 414.849564][T10303] CPU: 0 UID: 0 PID: 10303 Comm: syz.1.1686 Tainted: G L syzkaller #0 PREEMPT(full) [ 414.849604][T10303] Tainted: [L]=SOFTLOCKUP [ 414.849610][T10303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 414.849620][T10303] Call Trace: [ 414.849626][T10303] [ 414.849633][T10303] dump_stack_lvl+0xe8/0x150 [ 414.849662][T10303] should_fail_ex+0x3eb/0x540 [ 414.849685][T10303] get_futex_key+0x1ab/0x1410 [ 414.849719][T10303] ? __pfx_get_futex_key+0x10/0x10 [ 414.849743][T10303] ? update_se+0x90/0x1080 [ 414.849769][T10303] futex_wait_setup+0x4a/0x590 [ 414.849791][T10303] ? __futex_wait+0xdb/0x470 [ 414.849811][T10303] __futex_wait+0x175/0x470 [ 414.849827][T10303] ? update_protect_slice+0x45/0x320 [ 414.849848][T10303] ? __pfx___futex_wait+0x10/0x10 [ 414.849868][T10303] ? __pfx_futex_wake_mark+0x10/0x10 [ 414.849889][T10303] ? try_to_wake_up+0x8ce/0x14e0 [ 414.849918][T10303] futex_wait+0x121/0x390 [ 414.849936][T10303] ? __pfx_futex_wait+0x10/0x10 [ 414.849963][T10303] ? sock_do_ioctl+0x291/0x320 [ 414.850000][T10303] do_futex+0x3e7/0x4e0 [ 414.850043][T10303] ? __pfx_do_futex+0x10/0x10 [ 414.850072][T10303] __se_sys_futex+0x3a8/0x450 [ 414.850097][T10303] ? __fget_files+0x2a/0x420 [ 414.850117][T10303] ? __pfx___se_sys_futex+0x10/0x10 [ 414.850146][T10303] ? __x64_sys_futex+0x21/0xf0 [ 414.850172][T10303] do_syscall_64+0x166/0x520 [ 414.850193][T10303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.850209][T10303] ? clear_bhb_loop+0x70/0xc0 [ 414.850227][T10303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.850242][T10303] RIP: 0033:0x7f461f79fb19 [ 414.850257][T10303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.850270][T10303] RSP: 002b:00007f46206f00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 414.850285][T10303] RAX: ffffffffffffffda RBX: 00007f461fa25fa8 RCX: 00007f461f79fb19 [ 414.850297][T10303] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f461fa25fa8 [ 414.850306][T10303] RBP: 00007f461fa25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 414.850315][T10303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.850324][T10303] R13: 00007f461fa26038 R14: 00007ffd4ce25170 R15: 00007ffd4ce25258 [ 414.850347][T10303] [ 415.136561][ T5748] ft260 0003:0403:6030.0029: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 415.337175][ T5748] ft260 0003:0403:6030.0029: failed to retrieve status: -32, no wakeup [ 415.352352][ T5748] ft260 0003:0403:6030.0029: failed to retrieve status: -32 [ 415.367621][ T5748] ft260 0003:0403:6030.0029: failed to reset I2C controller: -71 [ 415.417352][ T5748] usb 1-1: USB disconnect, device number 24 [ 415.485086][T10309] FAULT_INJECTION: forcing a failure. [ 415.485086][T10309] name failslab, interval 1, probability 5, space 0, times 10000 [ 415.485115][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.485149][T10309] Tainted: [L]=SOFTLOCKUP [ 415.485155][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.485164][T10309] Call Trace: [ 415.485170][T10309] [ 415.485176][T10309] dump_stack_lvl+0xe8/0x150 [ 415.485204][T10309] should_fail_ex+0x3eb/0x540 [ 415.485246][T10309] should_failslab+0xa8/0x100 [ 415.485270][T10309] ? security_file_alloc+0x34/0x310 [ 415.485293][T10309] kmem_cache_alloc_noprof+0x9c/0x600 [ 415.485310][T10309] ? rcu_is_watching+0x16/0xb0 [ 415.485332][T10309] ? security_file_alloc+0x34/0x310 [ 415.485358][T10309] security_file_alloc+0x34/0x310 [ 415.485381][T10309] init_file+0x90/0x2b0 [ 415.485399][T10309] alloc_empty_file+0x74/0x1d0 [ 415.485417][T10309] path_openat+0x96/0x20f0 [ 415.485453][T10309] do_file_open+0x23e/0x4a0 [ 415.485479][T10309] ? __pfx_do_file_open+0x10/0x10 [ 415.485517][T10309] ? _raw_spin_unlock+0x28/0x50 [ 415.485535][T10309] ? alloc_fd+0x6af/0x760 [ 415.485561][T10309] do_sys_openat2+0x115/0x200 [ 415.485580][T10309] ? __pfx_do_sys_openat2+0x10/0x10 [ 415.485601][T10309] ? do_user_addr_fault+0xd3f/0x1480 [ 415.485622][T10309] __x64_sys_openat+0x138/0x170 [ 415.485642][T10309] do_syscall_64+0x166/0x520 [ 415.485664][T10309] ? trace_irq_disable+0x3b/0x140 [ 415.485683][T10309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.485699][T10309] ? clear_bhb_loop+0x70/0xc0 [ 415.485718][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.485733][T10309] RIP: 0033:0x7f461f76034e [ 415.485748][T10309] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 415.485761][T10309] RSP: 002b:00007f46206efb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 415.485778][T10309] RAX: ffffffffffffffda RBX: 00007f46206f06c0 RCX: 00007f461f76034e [ 415.485790][T10309] RDX: 0000000000000002 RSI: 00007f46206efc00 RDI: ffffffffffffff9c [ 415.485800][T10309] RBP: 00007f46206efc00 R08: 0000000000000000 R09: 0000000000000000 [ 415.485810][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 415.485820][T10309] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 415.485844][T10309] [ 415.790825][T10309] FAULT_INJECTION: forcing a failure. [ 415.790825][T10309] name failslab, interval 1, probability 5, space 0, times 9999 [ 415.790854][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 415.790875][T10309] Tainted: [L]=SOFTLOCKUP [ 415.790880][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.790890][T10309] Call Trace: [ 415.790896][T10309] [ 415.790903][T10309] dump_stack_lvl+0xe8/0x150 [ 415.790930][T10309] should_fail_ex+0x3eb/0x540 [ 415.790952][T10309] should_failslab+0xa8/0x100 [ 415.790977][T10309] __kmalloc_cache_node_noprof+0xa5/0x620 [ 415.791004][T10309] ? dm_table_complete+0x19a3/0x22d0 [ 415.791019][T10309] ? dm_table_complete+0x19a3/0x22d0 [ 415.791037][T10309] ? __pfx_linear_iterate_devices+0x10/0x10 [ 415.791059][T10309] dm_table_complete+0x19a3/0x22d0 [ 415.791081][T10309] ? kfree+0x1c7/0x650 [ 415.791094][T10309] ? dm_table_add_target+0x598/0xc70 [ 415.791133][T10309] ? dm_table_add_target+0x758/0xc70 [ 415.791150][T10309] ? __pfx_dm_table_complete+0x10/0x10 [ 415.791189][T10309] table_load+0x3b4/0x8a0 [ 415.791219][T10309] ? __pfx_table_load+0x10/0x10 [ 415.791246][T10309] ? __might_fault+0xaf/0x130 [ 415.791274][T10309] dm_ctl_ioctl+0x9ec/0xe10 [ 415.791303][T10309] ? __pfx_table_load+0x10/0x10 [ 415.791326][T10309] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 415.791371][T10309] ? __fget_files+0x2a/0x420 [ 415.791392][T10309] ? bpf_lsm_file_ioctl+0x9/0x20 [ 415.791412][T10309] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 415.791434][T10309] __se_sys_ioctl+0xfc/0x170 [ 415.791459][T10309] do_syscall_64+0x166/0x520 [ 415.791480][T10309] ? trace_irq_disable+0x3b/0x140 [ 415.791499][T10309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.791515][T10309] ? clear_bhb_loop+0x70/0xc0 [ 415.791533][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.791548][T10309] RIP: 0033:0x7f461f79fb19 [ 415.791562][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.791575][T10309] RSP: 002b:00007f46206f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 415.791592][T10309] RAX: ffffffffffffffda RBX: 00007f461fa25fa0 RCX: 00007f461f79fb19 [ 415.791603][T10309] RDX: 0000200000002680 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 415.791612][T10309] RBP: 00007f461f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 415.791622][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.791630][T10309] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 415.791655][T10309] [ 415.791661][T10309] device-mapper: table: unable to allocate mempools [ 416.109732][T10309] FAULT_INJECTION: forcing a failure. [ 416.109732][T10309] name failslab, interval 1, probability 5, space 0, times 9998 [ 416.109760][T10309] CPU: 0 UID: 0 PID: 10309 Comm: syz.1.1688 Tainted: G L syzkaller #0 PREEMPT(full) [ 416.109781][T10309] Tainted: [L]=SOFTLOCKUP [ 416.109787][T10309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 416.109797][T10309] Call Trace: [ 416.109802][T10309] [ 416.109809][T10309] dump_stack_lvl+0xe8/0x150 [ 416.109839][T10309] should_fail_ex+0x3eb/0x540 [ 416.109862][T10309] should_failslab+0xa8/0x100 [ 416.109886][T10309] ? security_file_alloc+0x34/0x310 [ 416.109909][T10309] kmem_cache_alloc_noprof+0x9c/0x600 [ 416.109926][T10309] ? rcu_is_watching+0x16/0xb0 [ 416.109949][T10309] ? security_file_alloc+0x34/0x310 [ 416.109982][T10309] security_file_alloc+0x34/0x310 [ 416.110006][T10309] init_file+0x90/0x2b0 [ 416.110024][T10309] alloc_empty_file+0x74/0x1d0 [ 416.110042][T10309] path_openat+0x96/0x20f0 [ 416.110078][T10309] do_file_open+0x23e/0x4a0 [ 416.110104][T10309] ? __pfx_do_file_open+0x10/0x10 [ 416.110142][T10309] ? _raw_spin_unlock+0x28/0x50 [ 416.110161][T10309] ? alloc_fd+0x6af/0x760 [ 416.110186][T10309] do_sys_openat2+0x115/0x200 [ 416.110204][T10309] ? __se_sys_futex+0x3a8/0x450 [ 416.110228][T10309] ? __pfx_do_sys_openat2+0x10/0x10 [ 416.110250][T10309] ? rcu_is_watching+0x16/0xb0 [ 416.110274][T10309] __x64_sys_openat+0x138/0x170 [ 416.110295][T10309] do_syscall_64+0x166/0x520 [ 416.110316][T10309] ? trace_irq_disable+0x3b/0x140 [ 416.110335][T10309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.110351][T10309] ? clear_bhb_loop+0x70/0xc0 [ 416.110370][T10309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.110386][T10309] RIP: 0033:0x7f461f79fb19 [ 416.110400][T10309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.110413][T10309] RSP: 002b:00007f46206f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.110430][T10309] RAX: ffffffffffffffda RBX: 00007f461fa25fa0 RCX: 00007f461f79fb19 [ 416.110441][T10309] RDX: 0000000000000002 RSI: 0000200000002b00 RDI: ffffffffffffff9c [ 416.110452][T10309] RBP: 00007f461f837b70 R08: 0000000000000000 R09: 0000000000000000 [ 416.110461][T10309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.110470][T10309] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 416.110494][T10309] [ 416.703163][T10325] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1691'. [ 417.004923][T10338] FAULT_INJECTION: forcing a failure. [ 417.004923][T10338] name fail_futex, interval 1, probability 0, space 0, times 0 [ 417.004950][T10338] CPU: 0 UID: 0 PID: 10338 Comm: syz.0.1696 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.004972][T10338] Tainted: [L]=SOFTLOCKUP [ 417.004978][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 417.004987][T10338] Call Trace: [ 417.004993][T10338] [ 417.005000][T10338] dump_stack_lvl+0xe8/0x150 [ 417.005031][T10338] should_fail_ex+0x3eb/0x540 [ 417.005053][T10338] get_futex_key+0x1ab/0x1410 [ 417.005085][T10338] ? __pfx_get_futex_key+0x10/0x10 [ 417.005108][T10338] ? update_se+0x90/0x1080 [ 417.005134][T10338] futex_wait_setup+0x4a/0x590 [ 417.005156][T10338] ? __futex_wait+0xdb/0x470 [ 417.005176][T10338] __futex_wait+0x175/0x470 [ 417.005192][T10338] ? update_protect_slice+0x45/0x320 [ 417.005213][T10338] ? __pfx___futex_wait+0x10/0x10 [ 417.005233][T10338] ? __pfx_futex_wake_mark+0x10/0x10 [ 417.005254][T10338] ? try_to_wake_up+0x8ce/0x14e0 [ 417.005283][T10338] futex_wait+0x121/0x390 [ 417.005302][T10338] ? __pfx_futex_wait+0x10/0x10 [ 417.005329][T10338] ? sock_do_ioctl+0x291/0x320 [ 417.005354][T10338] do_futex+0x3e7/0x4e0 [ 417.005381][T10338] ? __pfx_do_futex+0x10/0x10 [ 417.005411][T10338] __se_sys_futex+0x3a8/0x450 [ 417.005437][T10338] ? __fget_files+0x2a/0x420 [ 417.005457][T10338] ? __pfx___se_sys_futex+0x10/0x10 [ 417.005487][T10338] ? __x64_sys_futex+0x21/0xf0 [ 417.005512][T10338] do_syscall_64+0x166/0x520 [ 417.005533][T10338] ? trace_irq_disable+0x3b/0x140 [ 417.005553][T10338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.005568][T10338] ? clear_bhb_loop+0x70/0xc0 [ 417.005588][T10338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.005603][T10338] RIP: 0033:0x7fd48cd9fb19 [ 417.005617][T10338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.005630][T10338] RSP: 002b:00007fd48dce00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 417.005647][T10338] RAX: ffffffffffffffda RBX: 00007fd48d025fa8 RCX: 00007fd48cd9fb19 [ 417.005658][T10338] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd48d025fa8 [ 417.005668][T10338] RBP: 00007fd48d025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 417.005678][T10338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.005687][T10338] R13: 00007fd48d026038 R14: 00007fffa1420660 R15: 00007fffa1420748 [ 417.005712][T10338] [ 418.527750][T10346] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 418.527769][T10346] block device autoloading is deprecated and will be removed. [ 418.559787][T10346] md: invalid raid superblock magic on ram6 [ 418.559802][T10346] md: ram6 does not have a valid v0.0 superblock, not importing! [ 418.559915][T10346] md: md_import_device returned -22 [ 418.609096][ T5724] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 418.798438][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 418.800424][ T5724] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 418.811409][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.811434][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.811462][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.857924][ T5724] usb 1-1: config 0 descriptor?? [ 418.882291][T10353] FAULT_INJECTION: forcing a failure. [ 418.882291][T10353] name failslab, interval 1, probability 5, space 0, times 10000 [ 418.882321][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.2.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 418.882342][T10353] Tainted: [L]=SOFTLOCKUP [ 418.882348][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 418.882374][T10353] Call Trace: [ 418.882380][T10353] [ 418.882387][T10353] dump_stack_lvl+0xe8/0x150 [ 418.882416][T10353] should_fail_ex+0x3eb/0x540 [ 418.882439][T10353] should_failslab+0xa8/0x100 [ 418.882463][T10353] ? __kernfs_new_node+0xe6/0x980 [ 418.882479][T10353] kmem_cache_alloc_noprof+0x9c/0x600 [ 418.882499][T10353] ? __kernfs_new_node+0xe6/0x980 [ 418.882516][T10353] ? kernfs_add_one+0xfc/0x510 [ 418.882534][T10353] __kernfs_new_node+0xe6/0x980 [ 418.882549][T10353] ? up_write+0x19d/0x4a0 [ 418.882578][T10353] ? kernfs_activate_one+0x22d/0x340 [ 418.882608][T10353] ? __pfx___kernfs_new_node+0x10/0x10 [ 418.882625][T10353] ? kernfs_root+0x1c/0x230 [ 418.882645][T10353] ? kernfs_root+0x1c/0x230 [ 418.882659][T10353] ? kernfs_root+0x1c/0x230 [ 418.882672][T10353] ? kernfs_root+0x1c/0x230 [ 418.882691][T10353] kernfs_new_node+0xea/0x140 [ 418.882711][T10353] __kernfs_create_file+0x4b/0x2e0 [ 418.882734][T10353] sysfs_add_file_mode_ns+0x237/0x300 [ 418.882763][T10353] sysfs_create_file_ns+0x12b/0x1b0 [ 418.882787][T10353] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 418.882811][T10353] ? __dev_fwnode+0x50/0x80 [ 418.882831][T10353] ? device_create_file+0xf4/0x1b0 [ 418.882851][T10353] device_add+0x432/0xb80 [ 418.882872][T10353] __add_disk+0x517/0xdb0 [ 418.882899][T10353] add_disk_fwnode+0x143/0x3a0 [ 418.882924][T10353] dm_setup_md_queue+0x23d/0x4f0 [ 418.882947][T10353] ? dm_table_complete+0x1d84/0x22d0 [ 418.882963][T10353] ? __pfx_dm_setup_md_queue+0x10/0x10 [ 418.882997][T10353] ? __pfx_dm_table_complete+0x10/0x10 [ 418.883022][T10353] table_load+0x4fd/0x8a0 [ 418.883056][T10353] ? __pfx_table_load+0x10/0x10 [ 418.883084][T10353] ? __might_fault+0xaf/0x130 [ 418.883113][T10353] dm_ctl_ioctl+0x9ec/0xe10 [ 418.883143][T10353] ? __pfx_table_load+0x10/0x10 [ 418.883167][T10353] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 418.883214][T10353] ? __fget_files+0x2a/0x420 [ 418.883236][T10353] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.883257][T10353] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 418.883281][T10353] __se_sys_ioctl+0xfc/0x170 [ 418.883306][T10353] do_syscall_64+0x166/0x520 [ 418.883328][T10353] ? trace_irq_disable+0x3b/0x140 [ 418.883347][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.883363][T10353] ? clear_bhb_loop+0x70/0xc0 [ 418.883383][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.883398][T10353] RIP: 0033:0x7f5c1a39fb19 [ 418.883414][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.883428][T10353] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.883445][T10353] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 418.883456][T10353] RDX: 0000200000002680 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 418.883466][T10353] RBP: 00007f5c1a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 418.883476][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.883485][T10353] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 418.883510][T10353] [ 418.997378][T10353] device-mapper: ioctl: unable to set up device queue for new table. [ 419.308479][T10353] FAULT_INJECTION: forcing a failure. [ 419.308479][T10353] name failslab, interval 1, probability 5, space 0, times 9995 [ 419.308508][T10353] CPU: 0 UID: 0 PID: 10353 Comm: syz.2.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.308529][T10353] Tainted: [L]=SOFTLOCKUP [ 419.308535][T10353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 419.308545][T10353] Call Trace: [ 419.308551][T10353] [ 419.308567][T10353] dump_stack_lvl+0xe8/0x150 [ 419.308598][T10353] should_fail_ex+0x3eb/0x540 [ 419.308621][T10353] should_failslab+0xa8/0x100 [ 419.308647][T10353] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 419.308666][T10353] ? __kasan_kmalloc+0x93/0xb0 [ 419.308688][T10353] ? __request_module+0x2ec/0x630 [ 419.308710][T10353] ? __request_module+0x2ec/0x630 [ 419.308732][T10353] ? __kmalloc_cache_noprof+0x148/0x600 [ 419.308753][T10353] kstrdup+0x42/0x100 [ 419.308770][T10353] __request_module+0x2ec/0x630 [ 419.308792][T10353] ? blk_request_module+0x125/0x2a0 [ 419.308816][T10353] ? __pfx___request_module+0x10/0x10 [ 419.308836][T10353] ? __mutex_unlock_slowpath+0x731/0x900 [ 419.308862][T10353] ? find_inode_fast+0xd2/0x740 [ 419.308886][T10353] ? find_inode_fast+0x5dc/0x740 [ 419.308913][T10353] blk_request_module+0x142/0x2a0 [ 419.308936][T10353] blkdev_get_no_open+0x3f/0xe0 [ 419.308953][T10353] blkdev_open+0x1d7/0x600 [ 419.308972][T10353] ? __pfx_blkdev_open+0x10/0x10 [ 419.308989][T10353] do_dentry_open+0x80e/0x1360 [ 419.309013][T10353] vfs_open_consume+0x4a/0x350 [ 419.309027][T10353] ? path_openat+0x16e1/0x20f0 [ 419.309051][T10353] path_openat+0x16fc/0x20f0 [ 419.309087][T10353] do_file_open+0x23e/0x4a0 [ 419.309113][T10353] ? __pfx_do_file_open+0x10/0x10 [ 419.309150][T10353] ? _raw_spin_unlock+0x28/0x50 [ 419.309168][T10353] ? alloc_fd+0x6af/0x760 [ 419.309194][T10353] do_sys_openat2+0x115/0x200 [ 419.309210][T10353] ? __se_sys_futex+0x3a8/0x450 [ 419.309234][T10353] ? __pfx_do_sys_openat2+0x10/0x10 [ 419.309255][T10353] ? rcu_is_watching+0x16/0xb0 [ 419.309280][T10353] __x64_sys_openat+0x138/0x170 [ 419.309301][T10353] do_syscall_64+0x166/0x520 [ 419.309321][T10353] ? trace_irq_disable+0x3b/0x140 [ 419.309341][T10353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.309357][T10353] ? clear_bhb_loop+0x70/0xc0 [ 419.309376][T10353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.309391][T10353] RIP: 0033:0x7f5c1a39fb19 [ 419.309405][T10353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.309418][T10353] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 419.309435][T10353] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 419.309446][T10353] RDX: 0000000000000002 RSI: 0000200000002b00 RDI: ffffffffffffff9c [ 419.309457][T10353] RBP: 00007f5c1a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 419.309467][T10353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.309476][T10353] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 419.309501][T10353] [ 419.671350][T10359] loop0: detected capacity change from 0 to 3904 [ 419.695080][ T5724] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 419.695117][ T5724] ft260 0003:0403:6030.002A: unknown main item tag 0x0 [ 419.775416][T10359] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 419.775441][T10359] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 419.775469][T10359] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 419.775617][T10359] loop0: [ 419.878737][ T5724] ft260 0003:0403:6030.002A: chip code: 0000 0000 [ 420.077248][ T5724] ft260 0003:0403:6030.002A: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 420.286136][ T5724] ft260 0003:0403:6030.002A: failed to retrieve status: -32, no wakeup [ 420.301659][ T5724] ft260 0003:0403:6030.002A: failed to retrieve status: -32 [ 420.326256][ T5724] ft260 0003:0403:6030.002A: failed to reset I2C controller: -71 [ 420.369542][ T5724] usb 1-1: USB disconnect, device number 25 [ 421.043320][ T33] audit: type=1326 audit(1793758602.976:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.043360][ T33] audit: type=1326 audit(1793758602.976:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.110275][ T33] audit: type=1326 audit(1793758603.046:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.110316][ T33] audit: type=1326 audit(1793758603.046:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.168492][ T33] audit: type=1326 audit(1793758603.096:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.168552][ T33] audit: type=1326 audit(1793758603.096:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.168585][ T33] audit: type=1326 audit(1793758603.106:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.256328][ T33] audit: type=1326 audit(1793758603.186:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 421.256368][ T33] audit: type=1326 audit(1793758603.186:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10386 comm="syz.2.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f5c1a39fb19 code=0x7ffc0000 [ 422.706731][T10397] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1713'. [ 423.613250][T10399] overlayfs: missing 'lowerdir' [ 424.544861][T10396] sd 0:0:1:0: PR command failed: 1026 [ 424.544955][T10396] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 424.545032][T10396] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 424.944455][T10412] FAULT_INJECTION: forcing a failure. [ 424.944455][T10412] name failslab, interval 1, probability 5, space 0, times 9994 [ 424.944484][T10412] CPU: 0 UID: 0 PID: 10412 Comm: syz.2.1717 Tainted: G L syzkaller #0 PREEMPT(full) [ 424.944505][T10412] Tainted: [L]=SOFTLOCKUP [ 424.944511][T10412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 424.944521][T10412] Call Trace: [ 424.944527][T10412] [ 424.944534][T10412] dump_stack_lvl+0xe8/0x150 [ 424.944562][T10412] should_fail_ex+0x3eb/0x540 [ 424.944585][T10412] should_failslab+0xa8/0x100 [ 424.944610][T10412] __kmalloc_cache_noprof+0x9e/0x600 [ 424.944631][T10412] ? sget_fc+0x795/0x1ce0 [ 424.944648][T10412] ? sget_fc+0x795/0x1ce0 [ 424.944671][T10412] sget_fc+0x795/0x1ce0 [ 424.944692][T10412] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 424.944716][T10412] ? __pfx_afs_set_super+0x10/0x10 [ 424.944733][T10412] ? __pfx_sget_fc+0x10/0x10 [ 424.944752][T10412] ? __kasan_kmalloc+0x93/0xb0 [ 424.944774][T10412] ? __kmalloc_cache_noprof+0x31c/0x600 [ 424.944792][T10412] ? __kmalloc_cache_noprof+0x148/0x600 [ 424.944810][T10412] ? afs_get_tree+0x3b9/0x12c0 [ 424.944830][T10412] afs_get_tree+0x725/0x12c0 [ 424.944845][T10412] ? apparmor_capable+0x126/0x170 [ 424.944871][T10412] vfs_get_tree+0x92/0x2a0 [ 424.944895][T10412] do_new_mount+0x325/0xb00 [ 424.944918][T10412] ? __pfx_do_new_mount+0x10/0x10 [ 424.944938][T10412] ? ns_capable+0x84/0xe0 [ 424.944959][T10412] ? path_mount+0x647/0x1050 [ 424.944979][T10412] ? user_path_at+0xd4/0x160 [ 424.945001][T10412] __se_sys_mount+0x31d/0x420 [ 424.945024][T10412] ? __pfx___se_sys_mount+0x10/0x10 [ 424.945047][T10412] ? __x64_sys_mount+0x20/0xc0 [ 424.945075][T10412] do_syscall_64+0x166/0x520 [ 424.945098][T10412] ? trace_irq_disable+0x3b/0x140 [ 424.945117][T10412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945134][T10412] ? clear_bhb_loop+0x70/0xc0 [ 424.945153][T10412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.945168][T10412] RIP: 0033:0x7f5c1a39fb19 [ 424.945184][T10412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 424.945197][T10412] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 424.945214][T10412] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 424.945226][T10412] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 424.945236][T10412] RBP: 00007f5c1a437b70 R08: 00002000000002c0 R09: 0000000000000000 [ 424.945246][T10412] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 424.945256][T10412] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 424.945280][T10412] [ 426.079197][ T200] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 426.232245][ T200] usb 2-1: not running at top speed; connect to a high speed hub [ 426.232272][ T200] usb 2-1: New USB device found: idVendor=0960, idProduct=0066, bcdDevice=a6.c5 [ 426.233183][ T200] usb 2-1: config 12 has an invalid interface number: 151 but max is 0 [ 426.233210][ T200] usb 2-1: config 12 has no interface number 0 [ 426.233238][ T200] usb 2-1: config 12 interface 151 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 426.233258][ T200] usb 2-1: config 12 interface 151 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 426.233277][ T200] usb 2-1: config 12 interface 151 altsetting 5 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 426.233296][ T200] usb 2-1: config 12 interface 151 altsetting 5 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 426.233316][ T200] usb 2-1: config 12 interface 151 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 426.233333][ T200] usb 2-1: config 12 interface 151 has no altsetting 0 [ 426.237312][ T200] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.237330][ T200] usb 2-1: Product: 躂ᔫꟕ￾Ⅻ⒊ [ 426.237341][ T200] usb 2-1: Manufacturer: 㰊 [ 426.237352][ T200] usb 2-1: SerialNumber: 倊 [ 426.368750][T10431] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 426.654353][ T200] usb 2-1: USB disconnect, device number 19 [ 426.980131][T10468] FAULT_INJECTION: forcing a failure. [ 426.980131][T10468] name failslab, interval 1, probability 5, space 0, times 9993 [ 426.980162][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.0.1731 Tainted: G L syzkaller #0 PREEMPT(full) [ 426.980184][T10468] Tainted: [L]=SOFTLOCKUP [ 426.980190][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 426.980200][T10468] Call Trace: [ 426.980207][T10468] [ 426.980214][T10468] dump_stack_lvl+0xe8/0x150 [ 426.980243][T10468] should_fail_ex+0x3eb/0x540 [ 426.980266][T10468] should_failslab+0xa8/0x100 [ 426.980293][T10468] __kmalloc_noprof+0xf9/0x710 [ 426.980312][T10468] ? down_write_nested+0x16d/0x200 [ 426.980335][T10468] ? security_sb_alloc+0x48/0x310 [ 426.980350][T10468] ? security_sb_alloc+0x48/0x310 [ 426.980371][T10468] security_sb_alloc+0x48/0x310 [ 426.980388][T10468] sget_fc+0x9dd/0x1ce0 [ 426.980407][T10468] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 426.980431][T10468] ? __pfx_afs_set_super+0x10/0x10 [ 426.980448][T10468] ? __pfx_sget_fc+0x10/0x10 [ 426.980467][T10468] ? __kasan_kmalloc+0x93/0xb0 [ 426.980490][T10468] ? __kmalloc_cache_noprof+0x31c/0x600 [ 426.980508][T10468] ? __kmalloc_cache_noprof+0x148/0x600 [ 426.980526][T10468] ? afs_get_tree+0x3b9/0x12c0 [ 426.980550][T10468] afs_get_tree+0x725/0x12c0 [ 426.980566][T10468] ? apparmor_capable+0x126/0x170 [ 426.980592][T10468] vfs_get_tree+0x92/0x2a0 [ 426.980616][T10468] do_new_mount+0x325/0xb00 [ 426.980639][T10468] ? __pfx_do_new_mount+0x10/0x10 [ 426.980659][T10468] ? ns_capable+0x84/0xe0 [ 426.980681][T10468] ? path_mount+0x647/0x1050 [ 426.980701][T10468] ? user_path_at+0xd4/0x160 [ 426.980723][T10468] __se_sys_mount+0x31d/0x420 [ 426.980747][T10468] ? __pfx___se_sys_mount+0x10/0x10 [ 426.980770][T10468] ? __x64_sys_mount+0x20/0xc0 [ 426.980791][T10468] do_syscall_64+0x166/0x520 [ 426.980813][T10468] ? trace_irq_disable+0x3b/0x140 [ 426.980832][T10468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.980848][T10468] ? clear_bhb_loop+0x70/0xc0 [ 426.980868][T10468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.980884][T10468] RIP: 0033:0x7fd48cd9fb19 [ 426.980899][T10468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.980912][T10468] RSP: 002b:00007fd48dce0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 426.980934][T10468] RAX: ffffffffffffffda RBX: 00007fd48d025fa0 RCX: 00007fd48cd9fb19 [ 426.980946][T10468] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 426.980958][T10468] RBP: 00007fd48ce37b70 R08: 00002000000002c0 R09: 0000000000000000 [ 426.980968][T10468] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 426.980978][T10468] R13: 00007fd48d026038 R14: 00007fd48d025fa0 R15: 00007fffa1420748 [ 426.981003][T10468] [ 427.535926][T10473] netlink: 'syz.2.1733': attribute type 2 has an invalid length. [ 427.763809][T10483] FAULT_INJECTION: forcing a failure. [ 427.763809][T10483] name failslab, interval 1, probability 5, space 0, times 9992 [ 427.763835][T10483] CPU: 0 UID: 0 PID: 10483 Comm: syz.0.1737 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.763866][T10483] Tainted: [L]=SOFTLOCKUP [ 427.763872][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 427.763882][T10483] Call Trace: [ 427.763887][T10483] [ 427.763894][T10483] dump_stack_lvl+0xe8/0x150 [ 427.763922][T10483] should_fail_ex+0x3eb/0x540 [ 427.763944][T10483] should_failslab+0xa8/0x100 [ 427.763969][T10483] __kmalloc_cache_noprof+0x9e/0x600 [ 427.763988][T10483] ? netdev_alloc_config+0x4f/0xc0 [ 427.764011][T10483] ? netdev_alloc_config+0x4f/0xc0 [ 427.764034][T10483] ? alloc_netdev_mqs+0xc4a/0x1240 [ 427.764059][T10483] netdev_alloc_config+0x4f/0xc0 [ 427.764083][T10483] alloc_netdev_mqs+0xc84/0x1240 [ 427.764110][T10483] tun_set_iff+0x522/0xf30 [ 427.764133][T10483] __tun_chr_ioctl+0x7e5/0x1e70 [ 427.764157][T10483] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 427.764172][T10483] ? __fget_files+0x2a/0x420 [ 427.764196][T10483] ? __fget_files+0x2a/0x420 [ 427.764217][T10483] ? bpf_lsm_file_ioctl+0x9/0x20 [ 427.764237][T10483] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 427.764253][T10483] __se_sys_ioctl+0xfc/0x170 [ 427.764277][T10483] do_syscall_64+0x166/0x520 [ 427.764298][T10483] ? trace_irq_disable+0x3b/0x140 [ 427.764316][T10483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.764332][T10483] ? clear_bhb_loop+0x70/0xc0 [ 427.764352][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.764367][T10483] RIP: 0033:0x7fd48cd9fb19 [ 427.764381][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.764393][T10483] RSP: 002b:00007fd48dce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.764410][T10483] RAX: ffffffffffffffda RBX: 00007fd48d025fa0 RCX: 00007fd48cd9fb19 [ 427.764420][T10483] RDX: 0000200000000580 RSI: 00000000400454ca RDI: 0000000000000006 [ 427.764430][T10483] RBP: 00007fd48ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 427.764439][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.764448][T10483] R13: 00007fd48d026038 R14: 00007fd48d025fa0 R15: 00007fffa1420748 [ 427.764472][T10483] [ 428.397161][T10502] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1743'. [ 428.609640][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 428.768820][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 428.768849][ T10] usb 3-1: New USB device found: idVendor=0960, idProduct=0066, bcdDevice=a6.c5 [ 428.782016][ T10] usb 3-1: config 12 has an invalid interface number: 151 but max is 0 [ 428.782037][ T10] usb 3-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 428.782051][ T10] usb 3-1: config 12 has no interface number 0 [ 428.782080][ T10] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 428.782100][ T10] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 428.782120][ T10] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 428.782139][ T10] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 428.782159][ T10] usb 3-1: config 12 interface 151 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 428.782176][ T10] usb 3-1: config 12 interface 151 has no altsetting 0 [ 428.819810][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.819833][ T10] usb 3-1: Product: 躂ᔫꟕ￾Ⅻ⒊ [ 428.819843][ T10] usb 3-1: Manufacturer: 㰊 [ 428.819855][ T10] usb 3-1: SerialNumber: 倊 [ 428.922260][T10501] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 429.184642][ T10] usb 3-1: USB disconnect, device number 19 [ 429.379301][T10527] FAULT_INJECTION: forcing a failure. [ 429.379301][T10527] name failslab, interval 1, probability 5, space 0, times 9991 [ 429.379330][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.3.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 429.379359][T10527] Tainted: [L]=SOFTLOCKUP [ 429.379367][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 429.379380][T10527] Call Trace: [ 429.379388][T10527] [ 429.379395][T10527] dump_stack_lvl+0xe8/0x150 [ 429.379422][T10527] should_fail_ex+0x3eb/0x540 [ 429.379444][T10527] ? xfrm_policy_inexact_alloc_bin+0x144/0x1b50 [ 429.379472][T10527] should_failslab+0xa8/0x100 [ 429.379497][T10527] __kmalloc_cache_noprof+0x9e/0x600 [ 429.379517][T10527] ? xfrm_policy_inexact_alloc_bin+0x98a/0x1b50 [ 429.379540][T10527] ? xfrm_policy_inexact_alloc_bin+0x98a/0x1b50 [ 429.379568][T10527] ? xfrm_policy_inexact_alloc_bin+0x144/0x1b50 [ 429.379592][T10527] xfrm_policy_inexact_alloc_bin+0x98a/0x1b50 [ 429.379618][T10527] ? xfrm_policy_inexact_alloc_bin+0x144/0x1b50 [ 429.379666][T10527] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.379693][T10527] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 429.379718][T10527] ? policy_hash_bysel+0x133/0x920 [ 429.379740][T10527] xfrm_policy_inexact_insert+0x1e/0x180 [ 429.379768][T10527] xfrm_policy_insert+0xd2/0x890 [ 429.379795][T10527] xfrm_add_policy+0x375/0x760 [ 429.379821][T10527] ? __pfx_xfrm_add_policy+0x10/0x10 [ 429.379841][T10527] ? apparmor_capable+0x126/0x170 [ 429.379866][T10527] ? __nla_parse+0x40/0x60 [ 429.379893][T10527] xfrm_user_rcv_msg+0x7a8/0xf30 [ 429.379920][T10527] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 429.379966][T10527] ? __mutex_trylock_common+0x15f/0x270 [ 429.379990][T10527] ? __pfx___mutex_trylock_common+0x10/0x10 [ 429.380014][T10527] ? rcu_is_watching+0x16/0xb0 [ 429.380036][T10527] ? trace_contention_end+0x3d/0x140 [ 429.380064][T10527] netlink_rcv_skb+0x226/0x4a0 [ 429.380080][T10527] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 429.380103][T10527] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.380140][T10527] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.380155][T10527] ? netlink_deliver_tap+0x2e/0x1b0 [ 429.380172][T10527] xfrm_netlink_rcv+0x79/0x90 [ 429.380193][T10527] netlink_unicast+0x8ef/0xa80 [ 429.380230][T10527] netlink_sendmsg+0x7f0/0xb20 [ 429.380250][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.380269][T10527] ? aa_sock_msg_perm+0x144/0x210 [ 429.380289][T10527] ? apparmor_socket_sendmsg+0x98/0x360 [ 429.380315][T10527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.380329][T10527] sock_sendmsg_nosec+0x14e/0x190 [ 429.380355][T10527] ____sys_sendmsg+0x54e/0x850 [ 429.380378][T10527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.380405][T10527] ? import_iovec+0x73/0xa0 [ 429.380426][T10527] ___sys_sendmsg+0x2a6/0x360 [ 429.380444][T10527] ? __lock_acquire+0x747/0x2de0 [ 429.380465][T10527] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.380487][T10527] ? futex_wait+0x2a2/0x390 [ 429.380528][T10527] ? __fget_files+0x3a2/0x420 [ 429.380546][T10527] ? __fget_files+0x2a/0x420 [ 429.380572][T10527] __x64_sys_sendmsg+0x1b1/0x290 [ 429.380593][T10527] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.380629][T10527] do_syscall_64+0x166/0x520 [ 429.380650][T10527] ? trace_irq_disable+0x3b/0x140 [ 429.380669][T10527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.380685][T10527] ? clear_bhb_loop+0x70/0xc0 [ 429.380705][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.380720][T10527] RIP: 0033:0x7f4fda99fb19 [ 429.380735][T10527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.380748][T10527] RSP: 002b:00007f4fdb8fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.380770][T10527] RAX: ffffffffffffffda RBX: 00007f4fdac25fa0 RCX: 00007f4fda99fb19 [ 429.380782][T10527] RDX: 000000000004c050 RSI: 00002000000005c0 RDI: 0000000000000007 [ 429.380792][T10527] RBP: 00007f4fdaa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 429.380801][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 429.380811][T10527] R13: 00007f4fdac26038 R14: 00007f4fdac25fa0 R15: 00007ffddba1cbd8 [ 429.380836][T10527] [ 429.880722][T10530] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1752'. [ 430.643152][T10559] netlink: 'syz.3.1762': attribute type 2 has an invalid length. [ 430.799534][ T5748] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 430.916781][T10570] FAULT_INJECTION: forcing a failure. [ 430.916781][T10570] name failslab, interval 1, probability 5, space 0, times 9990 [ 430.916810][T10570] CPU: 0 UID: 0 PID: 10570 Comm: syz.3.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.916832][T10570] Tainted: [L]=SOFTLOCKUP [ 430.916838][T10570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 430.916848][T10570] Call Trace: [ 430.916854][T10570] [ 430.916860][T10570] dump_stack_lvl+0xe8/0x150 [ 430.916888][T10570] should_fail_ex+0x3eb/0x540 [ 430.916911][T10570] should_failslab+0xa8/0x100 [ 430.916937][T10570] __kmalloc_cache_noprof+0x9e/0x600 [ 430.916957][T10570] ? xfrm_policy_alloc+0x78/0x2b0 [ 430.916975][T10570] ? xfrm_policy_alloc+0x78/0x2b0 [ 430.916998][T10570] xfrm_policy_alloc+0x78/0x2b0 [ 430.917018][T10570] xfrm_policy_construct+0x39/0x6b0 [ 430.917050][T10570] xfrm_add_policy+0x303/0x760 [ 430.917076][T10570] ? __pfx_xfrm_add_policy+0x10/0x10 [ 430.917099][T10570] ? apparmor_capable+0x126/0x170 [ 430.917124][T10570] ? __nla_parse+0x40/0x60 [ 430.917149][T10570] xfrm_user_rcv_msg+0x7a8/0xf30 [ 430.917175][T10570] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 430.917221][T10570] ? __mutex_trylock_common+0x15f/0x270 [ 430.917245][T10570] ? __pfx___mutex_trylock_common+0x10/0x10 [ 430.917269][T10570] ? rcu_is_watching+0x16/0xb0 [ 430.917291][T10570] ? trace_contention_end+0x3d/0x140 [ 430.917319][T10570] netlink_rcv_skb+0x226/0x4a0 [ 430.917336][T10570] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 430.917359][T10570] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 430.917396][T10570] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.917411][T10570] ? netlink_deliver_tap+0x2e/0x1b0 [ 430.917428][T10570] xfrm_netlink_rcv+0x79/0x90 [ 430.917449][T10570] netlink_unicast+0x8ef/0xa80 [ 430.917485][T10570] netlink_sendmsg+0x7f0/0xb20 [ 430.917505][T10570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.917524][T10570] ? aa_sock_msg_perm+0x144/0x210 [ 430.917544][T10570] ? apparmor_socket_sendmsg+0x98/0x360 [ 430.917570][T10570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.917592][T10570] sock_sendmsg_nosec+0x14e/0x190 [ 430.917619][T10570] ____sys_sendmsg+0x54e/0x850 [ 430.917643][T10570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.917669][T10570] ? import_iovec+0x73/0xa0 [ 430.917690][T10570] ___sys_sendmsg+0x2a6/0x360 [ 430.917707][T10570] ? __lock_acquire+0x747/0x2de0 [ 430.917728][T10570] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.917750][T10570] ? futex_wait+0x2a2/0x390 [ 430.917790][T10570] ? __fget_files+0x3a2/0x420 [ 430.917808][T10570] ? __fget_files+0x2a/0x420 [ 430.917834][T10570] __x64_sys_sendmsg+0x1b1/0x290 [ 430.917856][T10570] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 430.917891][T10570] do_syscall_64+0x166/0x520 [ 430.917912][T10570] ? trace_irq_disable+0x3b/0x140 [ 430.917935][T10570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.917951][T10570] ? clear_bhb_loop+0x70/0xc0 [ 430.917970][T10570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.917985][T10570] RIP: 0033:0x7f4fda99fb19 [ 430.918000][T10570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.918013][T10570] RSP: 002b:00007f4fdb8fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.918030][T10570] RAX: ffffffffffffffda RBX: 00007f4fdac25fa0 RCX: 00007f4fda99fb19 [ 430.918041][T10570] RDX: 000000000004c050 RSI: 00002000000005c0 RDI: 0000000000000007 [ 430.918051][T10570] RBP: 00007f4fdaa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 430.918061][T10570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 430.918071][T10570] R13: 00007f4fdac26038 R14: 00007f4fdac25fa0 R15: 00007ffddba1cbd8 [ 430.918098][T10570] [ 431.091830][ T5748] usb 3-1: not running at top speed; connect to a high speed hub [ 431.091855][ T5748] usb 3-1: New USB device found: idVendor=0960, idProduct=0066, bcdDevice=a6.c5 [ 431.147792][ T5748] usb 3-1: config 12 has an invalid interface number: 151 but max is 0 [ 431.147813][ T5748] usb 3-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 431.147827][ T5748] usb 3-1: config 12 has no interface number 0 [ 431.147858][ T5748] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 431.147878][ T5748] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 431.147897][ T5748] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 431.147916][ T5748] usb 3-1: config 12 interface 151 altsetting 5 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 431.147936][ T5748] usb 3-1: config 12 interface 151 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 431.147953][ T5748] usb 3-1: config 12 interface 151 has no altsetting 0 [ 431.363906][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.363928][ T5748] usb 3-1: Product: 躂ᔫꟕ￾Ⅻ⒊ [ 431.363939][ T5748] usb 3-1: Manufacturer: 㰊 [ 431.363950][ T5748] usb 3-1: SerialNumber: 倊 [ 431.469758][T10557] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.757365][ T5748] usb 3-1: USB disconnect, device number 20 [ 432.040801][T10588] UDC core: g1: couldn't find an available UDC or it's busy [ 432.300973][T10598] FAULT_INJECTION: forcing a failure. [ 432.300973][T10598] name failslab, interval 1, probability 5, space 0, times 9989 [ 432.300999][T10598] CPU: 0 UID: 0 PID: 10598 Comm: syz.1.1776 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.301021][T10598] Tainted: [L]=SOFTLOCKUP [ 432.301027][T10598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 432.301037][T10598] Call Trace: [ 432.301042][T10598] [ 432.301050][T10598] dump_stack_lvl+0xe8/0x150 [ 432.301077][T10598] should_fail_ex+0x3eb/0x540 [ 432.301100][T10598] should_failslab+0xa8/0x100 [ 432.301125][T10598] __kmalloc_cache_node_noprof+0xa5/0x620 [ 432.301146][T10598] ? bdi_alloc+0x51/0x110 [ 432.301161][T10598] ? bdi_alloc+0x51/0x110 [ 432.301181][T10598] bdi_alloc+0x51/0x110 [ 432.301197][T10598] super_setup_bdi_name+0xa8/0x210 [ 432.301220][T10598] ? __pfx_afs_set_super+0x10/0x10 [ 432.301240][T10598] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 432.301262][T10598] ? __kasan_kmalloc+0x93/0xb0 [ 432.301285][T10598] ? __kmalloc_cache_noprof+0x31c/0x600 [ 432.301304][T10598] ? __kmalloc_cache_noprof+0x148/0x600 [ 432.301322][T10598] ? afs_get_tree+0x3b9/0x12c0 [ 432.301342][T10598] afs_get_tree+0xa49/0x12c0 [ 432.301358][T10598] ? apparmor_capable+0x126/0x170 [ 432.301383][T10598] vfs_get_tree+0x92/0x2a0 [ 432.301408][T10598] do_new_mount+0x325/0xb00 [ 432.301439][T10598] ? __pfx_do_new_mount+0x10/0x10 [ 432.301459][T10598] ? ns_capable+0x84/0xe0 [ 432.301480][T10598] ? path_mount+0x647/0x1050 [ 432.301501][T10598] ? user_path_at+0xd4/0x160 [ 432.301523][T10598] __se_sys_mount+0x31d/0x420 [ 432.301546][T10598] ? __pfx___se_sys_mount+0x10/0x10 [ 432.301570][T10598] ? __x64_sys_mount+0x20/0xc0 [ 432.301591][T10598] do_syscall_64+0x166/0x520 [ 432.301613][T10598] ? trace_irq_disable+0x3b/0x140 [ 432.301635][T10598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.301651][T10598] ? clear_bhb_loop+0x70/0xc0 [ 432.301670][T10598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.301685][T10598] RIP: 0033:0x7f461f79fb19 [ 432.301700][T10598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.301713][T10598] RSP: 002b:00007f46206f0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 432.301730][T10598] RAX: ffffffffffffffda RBX: 00007f461fa25fa0 RCX: 00007f461f79fb19 [ 432.301741][T10598] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 432.301751][T10598] RBP: 00007f461f837b70 R08: 00002000000002c0 R09: 0000000000000000 [ 432.301762][T10598] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 432.301771][T10598] R13: 00007f461fa26038 R14: 00007f461fa25fa0 R15: 00007ffd4ce25258 [ 432.301796][T10598] [ 432.681041][T10602] FAULT_INJECTION: forcing a failure. [ 432.681041][T10602] name failslab, interval 1, probability 5, space 0, times 9988 [ 432.681071][T10602] CPU: 0 UID: 0 PID: 10602 Comm: syz.3.1778 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.681093][T10602] Tainted: [L]=SOFTLOCKUP [ 432.681099][T10602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 432.681108][T10602] Call Trace: [ 432.681114][T10602] [ 432.681121][T10602] dump_stack_lvl+0xe8/0x150 [ 432.681149][T10602] should_fail_ex+0x3eb/0x540 [ 432.681171][T10602] ? __alloc_skb+0x1db/0x7a0 [ 432.681188][T10602] should_failslab+0xa8/0x100 [ 432.681213][T10602] ? __alloc_skb+0x1db/0x7a0 [ 432.681227][T10602] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 432.681246][T10602] ? __alloc_skb+0x18d/0x7a0 [ 432.681262][T10602] ? __alloc_skb+0x1db/0x7a0 [ 432.681284][T10602] __alloc_skb+0x1db/0x7a0 [ 432.681303][T10602] xfrm_send_policy_notify+0x2a0/0x1c00 [ 432.681332][T10602] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 432.681352][T10602] ? lock_acquire+0x115/0x350 [ 432.681375][T10602] ? lockdep_hardirqs_on+0x7b/0x110 [ 432.681397][T10602] ? __local_bh_enable_ip+0xd6/0x140 [ 432.681416][T10602] ? km_policy_notify+0x28/0x200 [ 432.681437][T10602] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 432.681458][T10602] km_policy_notify+0x121/0x200 [ 432.681477][T10602] ? km_policy_notify+0x28/0x200 [ 432.681507][T10602] xfrm_add_policy+0x573/0x760 [ 432.681533][T10602] ? __pfx_xfrm_add_policy+0x10/0x10 [ 432.681553][T10602] ? apparmor_capable+0x126/0x170 [ 432.681578][T10602] ? __nla_parse+0x40/0x60 [ 432.681604][T10602] xfrm_user_rcv_msg+0x7a8/0xf30 [ 432.681630][T10602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 432.681677][T10602] ? __mutex_trylock_common+0x15f/0x270 [ 432.681703][T10602] ? __pfx___mutex_trylock_common+0x10/0x10 [ 432.681727][T10602] ? rcu_is_watching+0x16/0xb0 [ 432.681749][T10602] ? trace_contention_end+0x3d/0x140 [ 432.681777][T10602] netlink_rcv_skb+0x226/0x4a0 [ 432.681793][T10602] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 432.681815][T10602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 432.681852][T10602] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.681867][T10602] ? netlink_deliver_tap+0x2e/0x1b0 [ 432.681884][T10602] xfrm_netlink_rcv+0x79/0x90 [ 432.681905][T10602] netlink_unicast+0x8ef/0xa80 [ 432.681941][T10602] netlink_sendmsg+0x7f0/0xb20 [ 432.681962][T10602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.681981][T10602] ? aa_sock_msg_perm+0x144/0x210 [ 432.682001][T10602] ? apparmor_socket_sendmsg+0x98/0x360 [ 432.682026][T10602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 432.682041][T10602] sock_sendmsg_nosec+0x14e/0x190 [ 432.682066][T10602] ____sys_sendmsg+0x54e/0x850 [ 432.682089][T10602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 432.682116][T10602] ? import_iovec+0x73/0xa0 [ 432.682137][T10602] ___sys_sendmsg+0x2a6/0x360 [ 432.682154][T10602] ? __lock_acquire+0x747/0x2de0 [ 432.682176][T10602] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.682197][T10602] ? futex_wait+0x2a2/0x390 [ 432.682237][T10602] ? __fget_files+0x3a2/0x420 [ 432.682256][T10602] ? __fget_files+0x2a/0x420 [ 432.682282][T10602] __x64_sys_sendmsg+0x1b1/0x290 [ 432.682303][T10602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.682341][T10602] do_syscall_64+0x166/0x520 [ 432.682362][T10602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.682378][T10602] ? clear_bhb_loop+0x70/0xc0 [ 432.682397][T10602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.682413][T10602] RIP: 0033:0x7f4fda99fb19 [ 432.682428][T10602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.682440][T10602] RSP: 002b:00007f4fdb8fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.682457][T10602] RAX: ffffffffffffffda RBX: 00007f4fdac25fa0 RCX: 00007f4fda99fb19 [ 432.682469][T10602] RDX: 000000000004c050 RSI: 00002000000005c0 RDI: 0000000000000007 [ 432.682478][T10602] RBP: 00007f4fdaa37b70 R08: 0000000000000000 R09: 0000000000000000 [ 432.682488][T10602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.682503][T10602] R13: 00007f4fdac26038 R14: 00007f4fdac25fa0 R15: 00007ffddba1cbd8 [ 432.682528][T10602] [ 433.350053][T10610] UDC core: g1: couldn't find an available UDC or it's busy [ 433.371111][T10612] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1783'. [ 433.607126][T10622] FAULT_INJECTION: forcing a failure. [ 433.607126][T10622] name failslab, interval 1, probability 5, space 0, times 9987 [ 433.607154][T10622] CPU: 0 UID: 0 PID: 10622 Comm: syz.2.1788 Tainted: G L syzkaller #0 PREEMPT(full) [ 433.607175][T10622] Tainted: [L]=SOFTLOCKUP [ 433.607180][T10622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 433.607190][T10622] Call Trace: [ 433.607195][T10622] [ 433.607202][T10622] dump_stack_lvl+0xe8/0x150 [ 433.607230][T10622] should_fail_ex+0x3eb/0x540 [ 433.607253][T10622] should_failslab+0xa8/0x100 [ 433.607278][T10622] __kmalloc_noprof+0xf9/0x710 [ 433.607308][T10622] ? __list_lru_init+0x114/0x680 [ 433.607324][T10622] ? __list_lru_init+0x114/0x680 [ 433.607345][T10622] __list_lru_init+0x114/0x680 [ 433.607367][T10622] sget_fc+0xf92/0x1ce0 [ 433.607387][T10622] ? __pfx_afs_dynroot_test_super+0x10/0x10 [ 433.607410][T10622] ? __pfx_afs_set_super+0x10/0x10 [ 433.607428][T10622] ? __pfx_sget_fc+0x10/0x10 [ 433.607448][T10622] ? __kasan_kmalloc+0x93/0xb0 [ 433.607470][T10622] ? __kmalloc_cache_noprof+0x31c/0x600 [ 433.607489][T10622] ? __kmalloc_cache_noprof+0x148/0x600 [ 433.607507][T10622] ? afs_get_tree+0x3b9/0x12c0 [ 433.607527][T10622] afs_get_tree+0x725/0x12c0 [ 433.607542][T10622] ? apparmor_capable+0x126/0x170 [ 433.607568][T10622] vfs_get_tree+0x92/0x2a0 [ 433.607592][T10622] do_new_mount+0x325/0xb00 [ 433.607615][T10622] ? __pfx_do_new_mount+0x10/0x10 [ 433.607638][T10622] ? ns_capable+0x84/0xe0 [ 433.607659][T10622] ? path_mount+0x647/0x1050 [ 433.607680][T10622] ? user_path_at+0xd4/0x160 [ 433.607701][T10622] __se_sys_mount+0x31d/0x420 [ 433.607725][T10622] ? __pfx___se_sys_mount+0x10/0x10 [ 433.607748][T10622] ? __x64_sys_mount+0x20/0xc0 [ 433.607769][T10622] do_syscall_64+0x166/0x520 [ 433.607790][T10622] ? trace_irq_disable+0x3b/0x140 [ 433.607810][T10622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.607826][T10622] ? clear_bhb_loop+0x70/0xc0 [ 433.607845][T10622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.607861][T10622] RIP: 0033:0x7f5c1a39fb19 [ 433.607875][T10622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.607888][T10622] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 433.607905][T10622] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 433.607916][T10622] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 433.607927][T10622] RBP: 00007f5c1a437b70 R08: 00002000000002c0 R09: 0000000000000000 [ 433.607937][T10622] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 433.607946][T10622] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 433.607971][T10622] [ 433.705776][ T5748] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 433.923129][ T5748] usb 4-1: not running at top speed; connect to a high speed hub [ 433.923155][ T5748] usb 4-1: New USB device found: idVendor=0960, idProduct=0066, bcdDevice=a6.c5 [ 433.937748][ T5748] usb 4-1: config 12 has an invalid interface number: 151 but max is 0 [ 433.937769][ T5748] usb 4-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 433.937783][ T5748] usb 4-1: config 12 has no interface number 0 [ 433.937812][ T5748] usb 4-1: config 12 interface 151 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 433.937832][ T5748] usb 4-1: config 12 interface 151 altsetting 5 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 433.937851][ T5748] usb 4-1: config 12 interface 151 altsetting 5 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 433.937871][ T5748] usb 4-1: config 12 interface 151 altsetting 5 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 433.937891][ T5748] usb 4-1: config 12 interface 151 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 433.937908][ T5748] usb 4-1: config 12 interface 151 has no altsetting 0 [ 434.041975][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.041995][ T5748] usb 4-1: Product: 躂ᔫꟕ￾Ⅻ⒊ [ 434.042006][ T5748] usb 4-1: Manufacturer: 㰊 [ 434.042017][ T5748] usb 4-1: SerialNumber: 倊 [ 434.056608][T10616] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 434.378536][ T5748] usb 4-1: USB disconnect, device number 18 [ 434.423179][T10635] UDC core: g1: couldn't find an available UDC or it's busy [ 434.447171][T10638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1796'. [ 434.464226][T10637] FAULT_INJECTION: forcing a failure. [ 434.464226][T10637] name failslab, interval 1, probability 5, space 0, times 9986 [ 434.464254][T10637] CPU: 0 UID: 0 PID: 10637 Comm: syz.0.1795 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.464283][T10637] Tainted: [L]=SOFTLOCKUP [ 434.464289][T10637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.464299][T10637] Call Trace: [ 434.464305][T10637] [ 434.464312][T10637] dump_stack_lvl+0xe8/0x150 [ 434.464339][T10637] should_fail_ex+0x3eb/0x540 [ 434.464363][T10637] should_failslab+0xa8/0x100 [ 434.464386][T10637] ? alloc_empty_file+0x5b/0x1d0 [ 434.464403][T10637] kmem_cache_alloc_noprof+0x9c/0x600 [ 434.464420][T10637] ? stack_depot_save_flags+0x33/0x810 [ 434.464440][T10637] ? alloc_empty_file+0x5b/0x1d0 [ 434.464461][T10637] alloc_empty_file+0x5b/0x1d0 [ 434.464479][T10637] path_openat+0x96/0x20f0 [ 434.464516][T10637] do_file_open+0x23e/0x4a0 [ 434.464542][T10637] ? __pfx_do_file_open+0x10/0x10 [ 434.464579][T10637] ? _raw_spin_unlock+0x28/0x50 [ 434.464598][T10637] ? alloc_fd+0x6af/0x760 [ 434.464625][T10637] do_sys_openat2+0x115/0x200 [ 434.464642][T10637] ? __se_sys_futex+0x3a8/0x450 [ 434.464666][T10637] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.464688][T10637] ? rcu_is_watching+0x16/0xb0 [ 434.464713][T10637] __x64_sys_openat+0x138/0x170 [ 434.464734][T10637] do_syscall_64+0x166/0x520 [ 434.464755][T10637] ? trace_irq_disable+0x3b/0x140 [ 434.464775][T10637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.464791][T10637] ? clear_bhb_loop+0x70/0xc0 [ 434.464810][T10637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.464825][T10637] RIP: 0033:0x7fd48cd9fb19 [ 434.464839][T10637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.464852][T10637] RSP: 002b:00007fd48dce0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.464869][T10637] RAX: ffffffffffffffda RBX: 00007fd48d025fa0 RCX: 00007fd48cd9fb19 [ 434.464881][T10637] RDX: 0000000000040241 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 434.464891][T10637] RBP: 00007fd48ce37b70 R08: 0000000000000000 R09: 0000000000000000 [ 434.464901][T10637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.464910][T10637] R13: 00007fd48d026038 R14: 00007fd48d025fa0 R15: 00007fffa1420748 [ 434.464934][T10637] [ 435.004576][T10648] FAULT_INJECTION: forcing a failure. [ 435.004576][T10648] name failslab, interval 1, probability 5, space 0, times 9985 [ 435.004605][T10648] CPU: 0 UID: 0 PID: 10648 Comm: syz.2.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.004626][T10648] Tainted: [L]=SOFTLOCKUP [ 435.004632][T10648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.004641][T10648] Call Trace: [ 435.004648][T10648] [ 435.004654][T10648] dump_stack_lvl+0xe8/0x150 [ 435.004682][T10648] should_fail_ex+0x3eb/0x540 [ 435.004706][T10648] should_failslab+0xa8/0x100 [ 435.004732][T10648] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 435.004752][T10648] ? __lock_acquire+0x747/0x2de0 [ 435.004770][T10648] ? __kernfs_new_node+0xa9/0x980 [ 435.004785][T10648] ? __kernfs_new_node+0xa9/0x980 [ 435.004806][T10648] kstrdup+0x42/0x100 [ 435.004823][T10648] __kernfs_new_node+0xa9/0x980 [ 435.004846][T10648] ? __pfx___kernfs_new_node+0x10/0x10 [ 435.004862][T10648] ? kernfs_root+0x1c/0x230 [ 435.004882][T10648] ? kernfs_root+0x1c/0x230 [ 435.004895][T10648] ? kernfs_root+0x1c/0x230 [ 435.004908][T10648] ? kernfs_root+0x1c/0x230 [ 435.004926][T10648] kernfs_new_node+0xea/0x140 [ 435.004946][T10648] kernfs_create_link+0xe3/0x240 [ 435.004969][T10648] sysfs_do_create_link_sd+0x83/0x110 [ 435.004995][T10648] device_add_class_symlinks+0x1cf/0x240 [ 435.005018][T10648] device_add+0x467/0xb80 [ 435.005038][T10648] device_create+0x269/0x300 [ 435.005065][T10648] ? __pfx_device_create+0x10/0x10 [ 435.005095][T10648] bdi_register_va+0x9c/0x740 [ 435.005117][T10648] super_setup_bdi_name+0xf8/0x210 [ 435.005138][T10648] ? __pfx_afs_set_super+0x10/0x10 [ 435.005168][T10648] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 435.005190][T10648] ? __kasan_kmalloc+0x93/0xb0 [ 435.005213][T10648] ? __kmalloc_cache_noprof+0x31c/0x600 [ 435.005231][T10648] ? __kmalloc_cache_noprof+0x148/0x600 [ 435.005249][T10648] ? afs_get_tree+0x3b9/0x12c0 [ 435.005269][T10648] afs_get_tree+0xa49/0x12c0 [ 435.005285][T10648] ? apparmor_capable+0x126/0x170 [ 435.005312][T10648] vfs_get_tree+0x92/0x2a0 [ 435.005335][T10648] do_new_mount+0x325/0xb00 [ 435.005359][T10648] ? __pfx_do_new_mount+0x10/0x10 [ 435.005379][T10648] ? ns_capable+0x84/0xe0 [ 435.005402][T10648] ? path_mount+0x647/0x1050 [ 435.005424][T10648] ? user_path_at+0xd4/0x160 [ 435.005446][T10648] __se_sys_mount+0x31d/0x420 [ 435.005469][T10648] ? __pfx___se_sys_mount+0x10/0x10 [ 435.005493][T10648] ? __x64_sys_mount+0x20/0xc0 [ 435.005513][T10648] do_syscall_64+0x166/0x520 [ 435.005534][T10648] ? trace_irq_disable+0x3b/0x140 [ 435.005554][T10648] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.005570][T10648] ? clear_bhb_loop+0x70/0xc0 [ 435.005589][T10648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.005605][T10648] RIP: 0033:0x7f5c1a39fb19 [ 435.005619][T10648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.005633][T10648] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 435.005649][T10648] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 435.005661][T10648] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000000000000000 [ 435.005672][T10648] RBP: 00007f5c1a437b70 R08: 00002000000002c0 R09: 0000000000000000 [ 435.005682][T10648] R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000 [ 435.005691][T10648] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 435.005716][T10648] [ 435.665901][T10659] UDC core: g1: couldn't find an available UDC or it's busy [ 435.797474][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'. [ 435.893230][T10670] FAULT_INJECTION: forcing a failure. [ 435.893230][T10670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.893260][T10670] CPU: 0 UID: 0 PID: 10670 Comm: syz.2.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.893282][T10670] Tainted: [L]=SOFTLOCKUP [ 435.893287][T10670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.893297][T10670] Call Trace: [ 435.893303][T10670] [ 435.893309][T10670] dump_stack_lvl+0xe8/0x150 [ 435.893337][T10670] should_fail_ex+0x3eb/0x540 [ 435.893360][T10670] strncpy_from_user+0x36/0x2c0 [ 435.893381][T10670] do_getname+0x77/0x250 [ 435.893412][T10670] do_sys_openat2+0xce/0x200 [ 435.893429][T10670] ? __se_sys_futex+0x3a8/0x450 [ 435.893453][T10670] ? __pfx_do_sys_openat2+0x10/0x10 [ 435.893491][T10670] ? rcu_is_watching+0x16/0xb0 [ 435.893517][T10670] __x64_sys_openat+0x138/0x170 [ 435.893538][T10670] do_syscall_64+0x166/0x520 [ 435.893559][T10670] ? trace_irq_disable+0x3b/0x140 [ 435.893579][T10670] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.893597][T10670] ? clear_bhb_loop+0x70/0xc0 [ 435.893616][T10670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.893632][T10670] RIP: 0033:0x7f5c1a39fb19 [ 435.893646][T10670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.893659][T10670] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 435.893675][T10670] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 435.893687][T10670] RDX: 0000000000040241 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 435.893697][T10670] RBP: 00007f5c1a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 435.893707][T10670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.893716][T10670] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 435.893740][T10670] [ 436.464546][T10686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1814'. [ 436.684428][T10692] UDC core: g1: couldn't find an available UDC or it's busy [ 436.809155][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 436.999145][T10702] FAULT_INJECTION: forcing a failure. [ 436.999145][T10702] name failslab, interval 1, probability 5, space 0, times 9984 [ 436.999173][T10702] CPU: 0 UID: 0 PID: 10702 Comm: syz.2.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.999194][T10702] Tainted: [L]=SOFTLOCKUP [ 436.999200][T10702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 436.999209][T10702] Call Trace: [ 436.999215][T10702] [ 436.999222][T10702] dump_stack_lvl+0xe8/0x150 [ 436.999250][T10702] should_fail_ex+0x3eb/0x540 [ 436.999273][T10702] should_failslab+0xa8/0x100 [ 436.999297][T10702] ? alloc_empty_file+0x5b/0x1d0 [ 436.999314][T10702] kmem_cache_alloc_noprof+0x9c/0x600 [ 436.999331][T10702] ? stack_depot_save_flags+0x33/0x810 [ 436.999352][T10702] ? alloc_empty_file+0x5b/0x1d0 [ 436.999373][T10702] alloc_empty_file+0x5b/0x1d0 [ 436.999391][T10702] path_openat+0x96/0x20f0 [ 436.999427][T10702] do_file_open+0x23e/0x4a0 [ 436.999453][T10702] ? __pfx_do_file_open+0x10/0x10 [ 436.999491][T10702] ? _raw_spin_unlock+0x28/0x50 [ 436.999509][T10702] ? alloc_fd+0x6af/0x760 [ 436.999535][T10702] do_sys_openat2+0x115/0x200 [ 436.999552][T10702] ? __se_sys_futex+0x3a8/0x450 [ 436.999576][T10702] ? __pfx_do_sys_openat2+0x10/0x10 [ 436.999598][T10702] ? rcu_is_watching+0x16/0xb0 [ 436.999623][T10702] __x64_sys_openat+0x138/0x170 [ 436.999644][T10702] do_syscall_64+0x166/0x520 [ 436.999665][T10702] ? trace_irq_disable+0x3b/0x140 [ 436.999684][T10702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.999700][T10702] ? clear_bhb_loop+0x70/0xc0 [ 436.999719][T10702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.999734][T10702] RIP: 0033:0x7f5c1a39fb19 [ 436.999748][T10702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.999762][T10702] RSP: 002b:00007f5c1b316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.999778][T10702] RAX: ffffffffffffffda RBX: 00007f5c1a625fa0 RCX: 00007f5c1a39fb19 [ 436.999789][T10702] RDX: 0000000000040241 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 436.999801][T10702] RBP: 00007f5c1a437b70 R08: 0000000000000000 R09: 0000000000000000 [ 436.999810][T10702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.999820][T10702] R13: 00007f5c1a626038 R14: 00007f5c1a625fa0 R15: 00007ffd10fb89a8 [ 436.999844][T10702] [ 437.184353][T10707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 437.585883][T10719] UDC core: g1: couldn't find an available UDC or it's busy [ 437.634189][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1830'. [ 437.808321][ T5748] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 438.218539][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 438.219253][ T5748] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 438.220214][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.220235][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.220261][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.226628][ T5748] usb 4-1: config 0 descriptor?? [ 438.437727][T10740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1837'. [ 438.577011][T10744] UDC core: g1: couldn't find an available UDC or it's busy [ 438.686023][ T5748] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 438.686052][ T5748] ft260 0003:0403:6030.002B: unknown main item tag 0x0 [ 438.771036][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 438.865232][ T5748] ft260 0003:0403:6030.002B: chip code: 0000 0000 [ 439.067286][ T5748] ft260 0003:0403:6030.002B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 439.205339][T10766] UDC core: g1: couldn't find an available UDC or it's busy [ 439.274877][ T5748] ft260 0003:0403:6030.002B: failed to retrieve status: -32, no wakeup [ 439.275460][ T5748] ft260 0003:0403:6030.002B: failed to retrieve status: -5 [ 439.337584][T10772] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1851'. [ 439.481934][ T5748] ft260 0003:0403:6030.002B: failed to reset I2C controller: -71 [ 439.524598][ T5748] usb 4-1: USB disconnect, device number 19 [ 439.950431][T10791] UDC core: g1: couldn't find an available UDC or it's busy [ 440.321465][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.321510][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.760686][ T5748] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 440.788262][ T200] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 440.911308][ T5748] usb 4-1: Using ep0 maxpacket: 32 [ 440.912082][ T5748] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 440.913045][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.913067][ T5748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.913093][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.925450][ T5748] usb 4-1: config 0 descriptor?? [ 440.949215][ T200] usb 1-1: New USB device found: idVendor=0000, idProduct=0000, bcdDevice=7.04 [ 440.950669][ T200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.950689][ T200] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 440.950733][ T200] usb 1-1: Dual-Role OTG device on HNP port [ 440.950971][ T200] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.025889][ C0] ------------[ cut here ]------------ [ 441.025902][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 441.025918][ C0] WARNING: drivers/usb/gadget/udc/core.c:125 at usb_ep_enable+0x148/0x480, CPU#0: pr/ttyS0/35 [ 441.048236][ C0] Modules linked in: [ 441.052133][ C0] CPU: 0 UID: 0 PID: 35 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.062647][ C0] Tainted: [L]=SOFTLOCKUP [ 441.066969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 441.077036][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 441.082438][ C0] Code: 3a 1e 5a fa 49 83 3f 00 48 c7 c0 20 5a 16 8d 49 c7 c0 40 5a 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 c3 08 c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 e0 7d e2 f9 65 8b [ 441.102049][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010086 [ 441.108124][ C0] RAX: ffffffff8d165a20 RBX: ffff8880298c80e0 RCX: ffffffff8d167900 [ 441.116099][ C0] RDX: 0000000000000081 RSI: ffffffff8ec908c3 RDI: ffffffff91ef0fa0 [ 441.124073][ C0] RBP: dffffc0000000000 R08: ffffffff8d165a40 R09: 0000000000000002 [ 441.132050][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8d167900 [ 441.140025][ C0] R13: 0000000000000081 R14: ffffffff91ef0fa0 R15: ffff8880298c80f8 [ 441.148011][ C0] FS: 0000000000000000(0000) GS:ffff888123166000(0000) knlGS:0000000000000000 [ 441.156946][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 441.163541][ C0] CR2: 00007f4fda9ed200 CR3: 0000000074f66000 CR4: 00000000003526f0 [ 441.171517][ C0] Call Trace: [ 441.174802][ C0] [ 441.177662][ C0] hidg_set_alt+0x12a/0xa60 [ 441.182181][ C0] ? usb_gadget_set_state+0x12c/0x2d0 [ 441.187563][ C0] set_config+0x749/0x1160 [ 441.192002][ C0] composite_setup+0x1de7/0x3480 [ 441.197076][ C0] configfs_composite_setup+0xc7/0x100 [ 441.202559][ C0] dummy_timer+0x2f30/0x4ce0 [ 441.207177][ C0] ? __lock_acquire+0x747/0x2de0 [ 441.212146][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.217546][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 441.222492][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 441.228325][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 441.233276][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 441.238490][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 441.243607][ C0] handle_softirqs+0x265/0x8d0 [ 441.248389][ C0] __irq_exit_rcu+0xc6/0x220 [ 441.252987][ C0] irq_exit_rcu+0x9/0x30 [ 441.257234][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.262887][ C0] [ 441.265836][ C0] [ 441.268785][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.274776][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 441.281210][ C0] Code: f7 e8 0d a6 85 f5 f7 c3 00 02 00 00 74 05 e8 60 4b b2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 44 9a 76 f5 65 48 8b 05 ac 51 ec 08 48 85 c0 74 18 5b 41 5e c3 [ 441.300830][ C0] RSP: 0018:ffffc90000ab7ca8 EFLAGS: 00000206 [ 441.306916][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 441.314936][ C0] RDX: 0000000000000000 RSI: ffffffff8e9efe87 RDI: 0000000000000001 [ 441.322917][ C0] RBP: ffffc90000ab7e18 R08: ffffffff91e0fcbf R09: 1ffffffff23c1f97 [ 441.330892][ C0] R10: dffffc0000000000 R11: fffffbfff23c1f98 R12: 0000000000000002 [ 441.338865][ C0] R13: ffff888020ab0000 R14: ffffffff9c4a9120 R15: dffffc0000000000 [ 441.346872][ C0] nbcon_kthread_func+0x724/0x8d0 [ 441.351913][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 441.357116][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 441.362782][ C0] ? __kthread_parkme+0x71/0x1f0 [ 441.367878][ C0] ? __kthread_parkme+0x199/0x1f0 [ 441.372921][ C0] kthread+0x38b/0x480 [ 441.376995][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 441.382545][ C0] ? __pfx_kthread+0x10/0x10 [ 441.387137][ C0] ret_from_fork+0x514/0xb70 [ 441.391730][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 441.396856][ C0] ? __switch_to+0xc78/0x1410 [ 441.401547][ C0] ? __pfx_kthread+0x10/0x10 [ 441.406142][ C0] ret_from_fork_asm+0x1a/0x30 [ 441.410931][ C0] [ 441.413963][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 441.421243][ C0] CPU: 0 UID: 0 PID: 35 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.431758][ C0] Tainted: [L]=SOFTLOCKUP [ 441.436088][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 441.446265][ C0] Call Trace: [ 441.449558][ C0] [ 441.452406][ C0] vpanic+0x26f/0x710 [ 441.456399][ C0] panic+0xc5/0xd0 [ 441.460136][ C0] ? __pfx_panic+0x10/0x10 [ 441.464572][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 441.469531][ C0] __warn+0x315/0x4c0 [ 441.473527][ C0] ? usb_ep_enable+0x148/0x480 [ 441.478315][ C0] ? usb_ep_enable+0x148/0x480 [ 441.483088][ C0] __report_bug+0x276/0x570 [ 441.487604][ C0] ? usb_ep_enable+0x148/0x480 [ 441.492396][ C0] ? __pfx___report_bug+0x10/0x10 [ 441.497444][ C0] report_bug_entry+0x19b/0x290 [ 441.502304][ C0] ? usb_ep_enable+0x1bc/0x480 [ 441.507077][ C0] ? usb_ep_enable+0x1c1/0x480 [ 441.511851][ C0] handle_bug+0xce/0x200 [ 441.516127][ C0] exc_invalid_op+0x1a/0x50 [ 441.520715][ C0] asm_exc_invalid_op+0x1a/0x20 [ 441.525566][ C0] RIP: 0010:usb_ep_enable+0x1bc/0x480 [ 441.530968][ C0] Code: 3a 1e 5a fa 49 83 3f 00 48 c7 c0 20 5a 16 8d 49 c7 c0 40 5a 16 8d 4c 0f 44 c0 4c 89 f7 48 c7 c6 c3 08 c9 8e 44 89 ea 4c 89 e1 <67> 48 0f b9 3a bd ea ff ff ff 0f 1f 44 00 00 e8 e0 7d e2 f9 65 8b [ 441.550574][ C0] RSP: 0018:ffffc90000007910 EFLAGS: 00010086 [ 441.556646][ C0] RAX: ffffffff8d165a20 RBX: ffff8880298c80e0 RCX: ffffffff8d167900 [ 441.564636][ C0] RDX: 0000000000000081 RSI: ffffffff8ec908c3 RDI: ffffffff91ef0fa0 [ 441.572625][ C0] RBP: dffffc0000000000 R08: ffffffff8d165a40 R09: 0000000000000002 [ 441.580616][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: ffffffff8d167900 [ 441.588590][ C0] R13: 0000000000000081 R14: ffffffff91ef0fa0 R15: ffff8880298c80f8 [ 441.596612][ C0] hidg_set_alt+0x12a/0xa60 [ 441.601161][ C0] ? usb_gadget_set_state+0x12c/0x2d0 [ 441.606539][ C0] set_config+0x749/0x1160 [ 441.610979][ C0] composite_setup+0x1de7/0x3480 [ 441.615934][ C0] configfs_composite_setup+0xc7/0x100 [ 441.621408][ C0] dummy_timer+0x2f30/0x4ce0 [ 441.626015][ C0] ? __lock_acquire+0x747/0x2de0 [ 441.630981][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.636369][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 441.641311][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 441.647135][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 441.652074][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 441.657292][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 441.662412][ C0] handle_softirqs+0x265/0x8d0 [ 441.667195][ C0] __irq_exit_rcu+0xc6/0x220 [ 441.671793][ C0] irq_exit_rcu+0x9/0x30 [ 441.676042][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 441.681685][ C0] [ 441.684624][ C0] [ 441.687558][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 441.693557][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 441.699987][ C0] Code: f7 e8 0d a6 85 f5 f7 c3 00 02 00 00 74 05 e8 60 4b b2 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 44 9a 76 f5 65 48 8b 05 ac 51 ec 08 48 85 c0 74 18 5b 41 5e c3 [ 441.719598][ C0] RSP: 0018:ffffc90000ab7ca8 EFLAGS: 00000206 [ 441.725679][ C0] RAX: 0000000000000002 RBX: 0000000000000206 RCX: 8000000000000001 [ 441.733656][ C0] RDX: 0000000000000000 RSI: ffffffff8e9efe87 RDI: 0000000000000001 [ 441.741627][ C0] RBP: ffffc90000ab7e18 R08: ffffffff91e0fcbf R09: 1ffffffff23c1f97 [ 441.749600][ C0] R10: dffffc0000000000 R11: fffffbfff23c1f98 R12: 0000000000000002 [ 441.757570][ C0] R13: ffff888020ab0000 R14: ffffffff9c4a9120 R15: dffffc0000000000 [ 441.765564][ C0] nbcon_kthread_func+0x724/0x8d0 [ 441.770617][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 441.775816][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 441.781384][ C0] ? __kthread_parkme+0x71/0x1f0 [ 441.786335][ C0] ? __kthread_parkme+0x199/0x1f0 [ 441.791382][ C0] kthread+0x38b/0x480 [ 441.795452][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 441.801000][ C0] ? __pfx_kthread+0x10/0x10 [ 441.805616][ C0] ret_from_fork+0x514/0xb70 [ 441.810215][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 441.815327][ C0] ? __switch_to+0xc78/0x1410 [ 441.820027][ C0] ? __pfx_kthread+0x10/0x10 [ 441.824620][ C0] ret_from_fork_asm+0x1a/0x30 [ 441.829413][ C0] [ 441.832508][ C0] Kernel Offset: disabled [ 441.836844][ C0] Rebooting in 86400 seconds..