last executing test programs:
8.455913095s ago: executing program 0 (id=825):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x6, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0x3, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x80000b, 0xad, 0x2, 0x4, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00860, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7dff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x9, 0x7ffe, 0x28, 0x10, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x8081, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0)
ioctl(r4, 0x935, 0x0)
8.455503465s ago: executing program 0 (id=826):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000440)={[&(0x7f0000000280)='!&--^\x00']})
8.307898882s ago: executing program 0 (id=827):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))
7.92698128s ago: executing program 0 (id=831):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
ioctl$sock_SIOCOUTQNSD(r1, 0x4010618c, &(0x7f0000000000))
7.308750598s ago: executing program 1 (id=833):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x44840)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
6.561972114s ago: executing program 1 (id=836):
close(0x3)
r0 = userfaultfd(0x80801)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1})
syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff)
5.984928091s ago: executing program 4 (id=838):
openat$kvm(0xffffffffffffff9c, 0x0, 0x103080, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x3f2f07de)
ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, 0x0)
syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x20001, 0x104, 0x14}, 0x18)
syz_usb_connect(0x0, 0x2e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x644, 0x8047, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1c, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x100, 0xa}}]}}]}}]}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000dc0)={{0x3, 0x0, 0x9, 0x3, '\x00', 0x2e52}, 0x1, [0x3ff, 0xc4bc, 0x5, 0x7, 0x8000, 0x8, 0x5, 0x2, 0xb5f, 0x1be8, 0x6, 0x1, 0xa5, 0x3, 0x3, 0x9, 0x3ff, 0xa5, 0x4e, 0x3, 0x5e, 0x3, 0x800, 0x5, 0x53, 0x71, 0xda, 0xffff, 0x2, 0x1, 0x2, 0x7f, 0xe944, 0x7, 0x1, 0x2, 0x937, 0x8, 0x8, 0x5, 0x3, 0x1, 0x2, 0x6, 0x7f, 0x7, 0xc9b1, 0x8, 0x3, 0x8001, 0xffffffffffffff01, 0x36c954, 0x1, 0x0, 0x8, 0x8, 0x81, 0x8, 0x6, 0x40, 0xfffffffffffffff6, 0x2, 0x4db1, 0x80000000, 0x6, 0x0, 0x8001, 0x4, 0x4, 0x6, 0x0, 0x1, 0x58920000000000, 0x8, 0xfffffffffffffff7, 0x9, 0x5, 0x5, 0x4, 0x2, 0x8, 0x0, 0x7c8d, 0x2, 0x8, 0xb, 0x6, 0x1, 0x4, 0x6, 0x8001, 0x1, 0x9a0, 0x3, 0x4, 0x50, 0x3, 0x7, 0x7fffffffffffffff, 0x2, 0x6, 0xa803, 0x31, 0x0, 0x6, 0x5, 0x1ff, 0x81, 0x10001, 0xbd, 0x3, 0x7, 0x3, 0x1, 0x3ff, 0x8000000000000001, 0x1, 0xce46, 0x80, 0x1, 0x7ff, 0x66000000000000, 0x4, 0xffffffff, 0x7ff, 0x80c, 0x7, 0x1]})
5.640380936s ago: executing program 1 (id=839):
r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000001300)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050204e5"], 0x0)
setns(0xc9, 0x0)
r1 = socket(0x8, 0x5, 0x7fff)
syz_usb_ep_read(r0, 0x1, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)="900100"/64)
ioctl$sock_SIOCOUTQNSD(r1, 0x40106185, &(0x7f0000000000))
4.684309241s ago: executing program 0 (id=843):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = fcntl$getown(r0, 0x9)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x1a, 0x2, @tid=r1}, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
4.321650018s ago: executing program 0 (id=844):
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x38}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002"], 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_write(r2, 0x83, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
syz_usb_ep_read(r2, 0x4, 0x0, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
3.844419221s ago: executing program 4 (id=845):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r0, &(0x7f0000000280)='0', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff)
r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
3.599656542s ago: executing program 1 (id=846):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0xfffffffc, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xfffffffc, 0x5, 0x3fe, 0x1ff, 0x1, 0x3fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x6, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7fc, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x44840)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
3.42829273s ago: executing program 2 (id=847):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000100)={'b', ' *:* ', 'r\x00'}, 0x8)
3.4281181s ago: executing program 4 (id=848):
socket(0x25, 0x803, 0x0)
socket$kcm(0x23, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
3.358119884s ago: executing program 2 (id=849):
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x6, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0x3, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x80000b, 0xad, 0x2, 0x4, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00860, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7dff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x9, 0x7ffe, 0x28, 0x10, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4042, 0x0)
ioctl(r4, 0x935, 0x0)
3.271386797s ago: executing program 1 (id=850):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
3.224412469s ago: executing program 2 (id=851):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x400c0930, 0x0)
3.187216901s ago: executing program 2 (id=852):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
3.023848309s ago: executing program 2 (id=853):
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
1.392587975s ago: executing program 4 (id=855):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0)
write(r0, &(0x7f0000000000)='3', 0x4e)
r1 = fcntl$getown(r0, 0x9)
timer_create(0x4, &(0x7f00000000c0)={0x0, 0x1a, 0x2, @tid=r1}, 0x0)
add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff)
1.391740985s ago: executing program 2 (id=865):
socket$inet(0xa, 0x2, 0xa)
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f00000004c0)={0x0, 0x6, 0x13, "5f4c60e1a209ef3c3c555bbc163e47d3f8eb3d"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x60}, &(0x7f0000000580)={0x20, 0x1, 0x9, "426b3693216b7f9d30"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xd9}})
syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
918.499367ms ago: executing program 4 (id=857):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0)
read(r0, &(0x7f00000091c0)=""/16384, 0x4000)
732.129446ms ago: executing program 3 (id=860):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nullb/nullb1/size\x00', 0x2, 0x0)
write(r0, &(0x7f0000000500)='2', 0x1)
693.989808ms ago: executing program 3 (id=861):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40854}, 0x4844)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0xfffffffc, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xfffffffc, 0x5, 0x3fe, 0x1ff, 0x1, 0x3fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x6, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7fc, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xa8}}, 0x44840)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
490.365397ms ago: executing program 3 (id=862):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000100))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$VT_ACTIVATE(r0, 0x5606, 0x4)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0)
ioctl(r2, 0x400c0930, 0x0)
452.698199ms ago: executing program 3 (id=863):
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x28, 0x801, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))
327.052635ms ago: executing program 3 (id=864):
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000140))
r1 = socket(0x15, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2718, 0x0, &(0x7f00000002c0))
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
248.413218ms ago: executing program 3 (id=866):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10)
r1 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(r1, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff})
tkill(r1, 0x12)
waitid(0x0, 0x0, 0x0, 0x8100000e, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
229.37807ms ago: executing program 1 (id=867):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0xcc, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x25, 0x4, 0x0, 0x2, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0xfffffffe, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000800))
ioctl$UI_DEV_CREATE(r0, 0x5501)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703260000001f03000000000000050014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004)
0s ago: executing program 4 (id=868):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$sock_ifreq(r1, 0x89f0, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
connect$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x7, 0x0, 0x0, @remote}, 0x10)
setns(0xc9, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/llc/core\x00')
read$alg(r2, &(0x7f0000000040)=""/194, 0xc2)
kernel console output (not intermixed with test programs):
sb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 176.350665][ T4239] usb 2-1: device descriptor read/8, error -71
[ 176.380415][ T4229] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 176.470435][ T4239] usb usb2-port1: unable to enumerate USB device
[ 176.480409][ T4229] usb 3-1: device descriptor read/8, error -71
[ 176.600418][ T4229] usb usb3-port1: unable to enumerate USB device
[ 176.707383][ T5596] FAULT_INJECTION: forcing a failure.
[ 176.707383][ T5596] name failslab, interval 1, probability 0, space 0, times 0
[ 176.727216][ T5596] CPU: 0 PID: 5596 Comm: syz.0.482 Not tainted syzkaller #0
[ 176.734580][ T5596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 176.744677][ T5596] Call Trace:
[ 176.747997][ T5596]
[ 176.750993][ T5596] dump_stack_lvl+0x188/0x250
[ 176.755724][ T5596] ? show_regs_print_info+0x20/0x20
[ 176.760975][ T5596] ? load_image+0x410/0x410
[ 176.765532][ T5596] ? __might_sleep+0xf0/0xf0
[ 176.770165][ T5596] ? __lock_acquire+0x7b50/0x7b50
[ 176.775243][ T5596] should_fail+0x383/0x4b0
[ 176.779817][ T5596] should_failslab+0x5/0x20
[ 176.785063][ T5596] slab_pre_alloc_hook+0x51/0xc0
[ 176.790046][ T5596] ? __kernfs_new_node+0xe3/0x6b0
[ 176.795213][ T5596] kmem_cache_alloc+0x3d/0x280
[ 176.800027][ T5596] __kernfs_new_node+0xe3/0x6b0
[ 176.804923][ T5596] ? widen_string+0x3b/0x320
[ 176.809611][ T5596] ? kernfs_new_node+0x250/0x250
[ 176.814703][ T5596] ? snprintf+0xe5/0x140
[ 176.819016][ T5596] kernfs_new_node+0x148/0x250
[ 176.823828][ T5596] __kernfs_create_file+0x47/0x2e0
[ 176.828983][ T5596] cgroup_addrm_files+0xac3/0x1020
[ 176.834175][ T5596] ? rcu_lock_release+0x20/0x20
[ 176.839110][ T5596] ? vfs_mkdir+0x386/0x570
[ 176.843572][ T5596] ? __x64_sys_mkdirat+0x85/0x90
[ 176.848585][ T5596] ? do_syscall_64+0x4c/0xa0
[ 176.853221][ T5596] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 176.859338][ T5596] ? mark_lock+0x94/0x320
[ 176.863738][ T5596] ? __local_bh_enable_ip+0x136/0x1c0
[ 176.869161][ T5596] ? lockdep_hardirqs_on+0x94/0x140
[ 176.874416][ T5596] css_populate_dir+0x155/0x350
[ 176.879329][ T5596] cgroup_apply_control_enable+0x641/0xb00
[ 176.885241][ T5596] cgroup_mkdir+0xcbd/0xeb0
[ 176.889797][ T5596] ? css_task_iter_end+0x280/0x280
[ 176.894998][ T5596] ? do_raw_spin_unlock+0x11d/0x230
[ 176.900246][ T5596] ? kernfs_iop_permission+0x22d/0x310
[ 176.905780][ T5596] ? css_task_iter_end+0x280/0x280
[ 176.911108][ T5596] kernfs_iop_mkdir+0x23d/0x3d0
[ 176.916015][ T5596] vfs_mkdir+0x386/0x570
[ 176.920314][ T5596] do_mkdirat+0x1dd/0x5c0
[ 176.924688][ T5596] ? vfs_mkdir+0x570/0x570
[ 176.929153][ T5596] __x64_sys_mkdirat+0x85/0x90
[ 176.933955][ T5596] do_syscall_64+0x4c/0xa0
[ 176.938439][ T5596] ? clear_bhb_loop+0x30/0x80
[ 176.943198][ T5596] ? clear_bhb_loop+0x30/0x80
[ 176.947921][ T5596] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 176.953871][ T5596] RIP: 0033:0x7fd34513b159
[ 176.958323][ T5596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 176.978153][ T5596] RSP: 002b:00007fd343393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[ 176.986660][ T5596] RAX: ffffffffffffffda RBX: 00007fd3453c2fa0 RCX: 00007fd34513b159
[ 176.994718][ T5596] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 177.002824][ T5596] RBP: 00007fd3451d203b R08: 0000000000000000 R09: 0000000000000000
[ 177.010841][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 177.018858][ T5596] R13: 00007fd3453c3038 R14: 00007fd3453c2fa0 R15: 00007ffd40584378
[ 177.026919][ T5596]
[ 177.119771][ T5596] cgroup: cgroup_addrm_files: failed to add throttle.write_bps_device, err=-12
[ 177.967549][ T5624] FAULT_INJECTION: forcing a failure.
[ 177.967549][ T5624] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 177.986946][ T5624] CPU: 1 PID: 5624 Comm: syz.2.493 Not tainted syzkaller #0
[ 177.994312][ T5624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 178.004429][ T5624] Call Trace:
[ 178.007752][ T5624]
[ 178.010723][ T5624] dump_stack_lvl+0x188/0x250
[ 178.015458][ T5624] ? show_regs_print_info+0x20/0x20
[ 178.020723][ T5624] ? load_image+0x410/0x410
[ 178.025269][ T5624] ? __lock_acquire+0x7b50/0x7b50
[ 178.030356][ T5624] should_fail+0x383/0x4b0
[ 178.034936][ T5624] _copy_from_user+0x2e/0x170
[ 178.039669][ T5624] xsk_setsockopt+0x37d/0x800
[ 178.044408][ T5624] ? xsk_poll+0x570/0x570
[ 178.048794][ T5624] ? __fget_files+0x402/0x470
[ 178.053529][ T5624] ? aa_sock_opt_perm+0x74/0x100
[ 178.058510][ T5624] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 178.064138][ T5624] ? security_socket_setsockopt+0x7a/0xa0
[ 178.069900][ T5624] ? xsk_poll+0x570/0x570
[ 178.074293][ T5624] __sys_setsockopt+0x2bf/0x3d0
[ 178.079208][ T5624] __x64_sys_setsockopt+0xb1/0xc0
[ 178.084288][ T5624] do_syscall_64+0x4c/0xa0
[ 178.088749][ T5624] ? clear_bhb_loop+0x30/0x80
[ 178.093478][ T5624] ? clear_bhb_loop+0x30/0x80
[ 178.098226][ T5624] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 178.104248][ T5624] RIP: 0033:0x7fe5a0415159
[ 178.108707][ T5624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 178.128465][ T5624] RSP: 002b:00007fe59e66d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 178.136952][ T5624] RAX: ffffffffffffffda RBX: 00007fe5a069cfa0 RCX: 00007fe5a0415159
[ 178.144966][ T5624] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006
[ 178.153315][ T5624] RBP: 00007fe5a04ac03b R08: 0000000000000020 R09: 0000000000000000
[ 178.161344][ T5624] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[ 178.170068][ T5624] R13: 00007fe5a069d038 R14: 00007fe5a069cfa0 R15: 00007ffe7a4a9cc8
[ 178.178101][ T5624]
[ 178.392064][ T5629] FAULT_INJECTION: forcing a failure.
[ 178.392064][ T5629] name failslab, interval 1, probability 0, space 0, times 0
[ 178.450751][ T5629] CPU: 0 PID: 5629 Comm: syz.3.494 Not tainted syzkaller #0
[ 178.458141][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 178.468232][ T5629] Call Trace:
[ 178.471553][ T5629]
[ 178.474523][ T5629] dump_stack_lvl+0x188/0x250
[ 178.479340][ T5629] ? show_regs_print_info+0x20/0x20
[ 178.484588][ T5629] ? load_image+0x410/0x410
[ 178.489144][ T5629] ? __might_sleep+0xf0/0xf0
[ 178.493947][ T5629] ? __lock_acquire+0x7b50/0x7b50
[ 178.499094][ T5629] should_fail+0x383/0x4b0
[ 178.503587][ T5629] should_failslab+0x5/0x20
[ 178.508132][ T5629] slab_pre_alloc_hook+0x51/0xc0
[ 178.513229][ T5629] kmem_cache_alloc_node+0x47/0x2c0
[ 178.518463][ T5629] ? alloc_vmap_area+0x199/0x1b30
[ 178.523503][ T5629] ? do_syscall_64+0x4c/0xa0
[ 178.528140][ T5629] alloc_vmap_area+0x199/0x1b30
[ 178.533060][ T5629] ? vm_map_ram+0xba0/0xba0
[ 178.537617][ T5629] __get_vm_area_node+0x14f/0x2d0
[ 178.542688][ T5629] __vmalloc_node_range+0xef/0x8b0
[ 178.547861][ T5629] ? memslot_rmap_alloc+0x60/0x2b0
[ 178.553025][ T5629] ? memslot_rmap_alloc+0x60/0x2b0
[ 178.558171][ T5629] __vmalloc+0x76/0x80
[ 178.562277][ T5629] ? memslot_rmap_alloc+0x60/0x2b0
[ 178.567418][ T5629] memslot_rmap_alloc+0x60/0x2b0
[ 178.572397][ T5629] kvm_arch_prepare_memory_region+0xaf/0xb70
[ 178.578424][ T5629] ? kvm_set_memslot+0x63e/0x1a00
[ 178.583491][ T5629] kvm_set_memslot+0x65b/0x1a00
[ 178.588530][ T5629] ? arch_stack_walk+0xf2/0x140
[ 178.593551][ T5629] ? __kvm_memslots+0x1a0/0x1a0
[ 178.598955][ T5629] __kvm_set_memory_region+0xb5e/0xd90
[ 178.604482][ T5629] ? __mutex_lock_common+0x435/0x2400
[ 178.610029][ T5629] ? kvm_put_kvm_no_destroy+0x80/0x80
[ 178.615637][ T5629] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0
[ 178.621953][ T5629] ? __might_fault+0xb7/0x110
[ 178.626678][ T5629] ? mutex_lock_io_nested+0x60/0x60
[ 178.632038][ T5629] ? __might_fault+0xb3/0x110
[ 178.636764][ T5629] kvm_vm_ioctl_set_memory_region+0x6f/0xa0
[ 178.642704][ T5629] kvm_vm_ioctl+0x8d7/0xb00
[ 178.647292][ T5629] ? kvm_device_release+0x1e0/0x1e0
[ 178.652622][ T5629] ? kfree+0xef/0x2a0
[ 178.656648][ T5629] ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 178.662378][ T5629] ? bpf_lsm_file_ioctl+0x5/0x10
[ 178.667352][ T5629] ? security_file_ioctl+0x7c/0xa0
[ 178.672507][ T5629] ? kvm_device_release+0x1e0/0x1e0
[ 178.677751][ T5629] __se_sys_ioctl+0xfa/0x170
[ 178.682390][ T5629] do_syscall_64+0x4c/0xa0
[ 178.686848][ T5629] ? clear_bhb_loop+0x30/0x80
[ 178.691565][ T5629] ? clear_bhb_loop+0x30/0x80
[ 178.696291][ T5629] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 178.702224][ T5629] RIP: 0033:0x7fa3946f7159
[ 178.706766][ T5629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 178.726506][ T5629] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 178.734970][ T5629] RAX: ffffffffffffffda RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 178.742978][ T5629] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004
[ 178.750973][ T5629] RBP: 00007fa39478e03b R08: 0000000000000000 R09: 0000000000000000
[ 178.759078][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 178.767501][ T5629] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 178.775550][ T5629]
[ 178.788839][ T5629] syz.3.494: vmalloc error: size 16, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 178.805754][ T5629] CPU: 1 PID: 5629 Comm: syz.3.494 Not tainted syzkaller #0
[ 178.813092][ T5629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 178.823915][ T5629] Call Trace:
[ 178.827234][ T5629]
[ 178.830189][ T5629] dump_stack_lvl+0x188/0x250
[ 178.835443][ T5629] ? rcu_lock_release+0x5/0x20
[ 178.840261][ T5629] ? show_regs_print_info+0x20/0x20
[ 178.845519][ T5629] ? load_image+0x410/0x410
[ 178.850082][ T5629] warn_alloc+0x245/0x320
[ 178.854464][ T5629] ? slab_free_freelist_hook+0xec/0x170
[ 178.860057][ T5629] ? zone_watermark_ok_safe+0x250/0x250
[ 178.865645][ T5629] ? kfree+0xef/0x2a0
[ 178.869671][ T5629] ? __get_vm_area_node+0x164/0x2d0
[ 178.871113][ T2280] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 178.874918][ T5629] __vmalloc_node_range+0x2b1/0x8b0
[ 178.887716][ T5629] ? memslot_rmap_alloc+0x60/0x2b0
[ 178.892875][ T5629] __vmalloc+0x76/0x80
[ 178.896977][ T5629] ? memslot_rmap_alloc+0x60/0x2b0
[ 178.902121][ T5629] memslot_rmap_alloc+0x60/0x2b0
[ 178.907091][ T5629] kvm_arch_prepare_memory_region+0xaf/0xb70
[ 178.913095][ T5629] ? kvm_set_memslot+0x63e/0x1a00
[ 178.918149][ T5629] kvm_set_memslot+0x65b/0x1a00
[ 178.923022][ T5629] ? arch_stack_walk+0xf2/0x140
[ 178.927915][ T5629] ? __kvm_memslots+0x1a0/0x1a0
[ 178.932811][ T5629] __kvm_set_memory_region+0xb5e/0xd90
[ 178.938296][ T5629] ? __mutex_lock_common+0x435/0x2400
[ 178.943719][ T5629] ? kvm_put_kvm_no_destroy+0x80/0x80
[ 178.949201][ T5629] ? kvm_vm_ioctl_set_memory_region+0x64/0xa0
[ 178.955292][ T5629] ? __might_fault+0xb7/0x110
[ 178.959992][ T5629] ? mutex_lock_io_nested+0x60/0x60
[ 178.965228][ T5629] ? __might_fault+0xb3/0x110
[ 178.969922][ T5629] kvm_vm_ioctl_set_memory_region+0x6f/0xa0
[ 178.975840][ T5629] kvm_vm_ioctl+0x8d7/0xb00
[ 178.980370][ T5629] ? kvm_device_release+0x1e0/0x1e0
[ 178.985593][ T5629] ? kfree+0xef/0x2a0
[ 178.989598][ T5629] ? tomoyo_path_number_perm+0x5f7/0x6b0
[ 178.995302][ T5629] ? bpf_lsm_file_ioctl+0x5/0x10
[ 179.000285][ T5629] ? security_file_ioctl+0x7c/0xa0
[ 179.005513][ T5629] ? kvm_device_release+0x1e0/0x1e0
[ 179.010731][ T5629] __se_sys_ioctl+0xfa/0x170
[ 179.015341][ T5629] do_syscall_64+0x4c/0xa0
[ 179.019776][ T5629] ? clear_bhb_loop+0x30/0x80
[ 179.024469][ T5629] ? clear_bhb_loop+0x30/0x80
[ 179.029261][ T5629] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 179.035436][ T5629] RIP: 0033:0x7fa3946f7159
[ 179.039876][ T5629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 179.059589][ T5629] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 179.068032][ T5629] RAX: ffffffffffffffda RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 179.076057][ T5629] RDX: 0000200000000400 RSI: 000000004020ae46 RDI: 0000000000000004
[ 179.084058][ T5629] RBP: 00007fa39478e03b R08: 0000000000000000 R09: 0000000000000000
[ 179.092058][ T5629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 179.100048][ T5629] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 179.108235][ T5629]
[ 179.126998][ T5629] Mem-Info:
[ 179.130709][ T5629] active_anon:268 inactive_anon:15352 isolated_anon:0
[ 179.130709][ T5629] active_file:4819 inactive_file:45613 isolated_file:0
[ 179.130709][ T5629] unevictable:768 dirty:139 writeback:0
[ 179.130709][ T5629] slab_reclaimable:20332 slab_unreclaimable:96062
[ 179.130709][ T5629] mapped:39181 shmem:11235 pagetables:737 bounce:0
[ 179.130709][ T5629] kernel_misc_reclaimable:0
[ 179.130709][ T5629] free:1356333 free_pcp:7185 free_cma:0
[ 179.181132][ T5629] Node 0 active_anon:1040kB inactive_anon:60796kB active_file:19072kB inactive_file:182452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:156724kB dirty:552kB writeback:0kB shmem:42860kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10608kB pagetables:2848kB all_unreclaimable? no
[ 179.220657][ T5629] Node 1 active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no
[ 179.259088][ T5629] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 179.296467][ T5629] lowmem_reserve[]: 0 2539 2540 2540 2540
[ 179.302798][ T5629] Node 0 DMA32 free:1497792kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1040kB inactive_anon:61396kB active_file:19072kB inactive_file:182952kB unevictable:1536kB writepending:552kB present:3129332kB managed:2606512kB mlocked:0kB bounce:0kB free_pcp:23336kB local_pcp:1664kB free_cma:0kB
[ 179.338906][ T5629] lowmem_reserve[]: 0 0 0 0 0
[ 179.346113][ T5629] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 179.376080][ T5629] lowmem_reserve[]: 0 0 0 0 0
[ 179.377925][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.497'.
[ 179.381509][ T5629] Node 1 Normal free:3911432kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:5500kB local_pcp:0kB free_cma:0kB
[ 179.435374][ T5629] lowmem_reserve[]: 0 0 0 0 0
[ 179.456613][ T5629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 179.480147][ T5629] Node 0 DMA32: 387*4kB (UME) 153*8kB (UME) 32*16kB (UE) 28*32kB (UME) 5*64kB (UME) 3*128kB (UE) 2*256kB (UE) 1*512kB (U) 3*1024kB (UME) 1*2048kB (E) 362*4096kB (M) = 1493780kB
[ 179.501611][ T2280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 179.520075][ T2280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 179.545507][ T5636] tipc: Enabled bearer , priority 0
[ 179.550587][ T5629] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 179.568346][ T5636] device syzkaller0 entered promiscuous mode
[ 179.574909][ T5629] Node 1 Normal: 212*4kB (UME) 55*8kB (UME) 22*16kB (UME) 185*32kB (UME) 74*64kB (UME) 22*128kB (UE) 8*256kB (UM) 4*512kB (U) 1*1024kB (U) 2*2048kB (UM) 949*4096kB (ME) = 3911432kB
[ 179.608994][ T5636] tipc: Resetting bearer
[ 179.612187][ T5629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 179.629538][ T5635] tipc: Resetting bearer
[ 179.640487][ T2280] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 179.649779][ T5629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 179.659590][ T2280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 179.670139][ T2280] usb 3-1: SerialNumber: syz
[ 179.688152][ T5635] tipc: Disabling bearer
[ 179.694503][ T5629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 179.718524][ T5629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[ 179.736066][ T5629] 64518 total pagecache pages
[ 179.746886][ T5629] 1 pages in swap cache
[ 179.771822][ T5629] Swap cache stats: add 11, delete 10, find 0/0
[ 179.799756][ T5629] Free swap = 124728kB
[ 179.812415][ T5629] Total swap = 124996kB
[ 179.816725][ T5629] 2097051 pages RAM
[ 179.826901][ T5629] 0 pages HighMem/MovableOnly
[ 179.838754][ T5629] 411500 pages reserved
[ 179.839322][ T5640] fuse: Bad value for 'fd'
[ 179.849464][ T5629] 0 pages cma reserved
[ 180.206008][ T2280] usb 3-1: 0:2 : does not exist
[ 180.213047][ T4239] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 180.272303][ T2280] usb 3-1: USB disconnect, device number 22
[ 180.418476][ T4239] usb 2-1: device descriptor read/64, error -71
[ 180.523448][ T5305] udevd[5305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 180.710254][ T4239] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 180.916051][ T4239] usb 2-1: device descriptor read/64, error -71
[ 181.040362][ T4239] usb usb2-port1: attempt power cycle
[ 181.450189][ T4239] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 181.522455][ T5673] FAULT_INJECTION: forcing a failure.
[ 181.522455][ T5673] name failslab, interval 1, probability 0, space 0, times 0
[ 181.565263][ T4239] usb 2-1: device descriptor read/8, error -71
[ 181.580498][ T5673] CPU: 0 PID: 5673 Comm: syz.3.510 Not tainted syzkaller #0
[ 181.587873][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 181.597965][ T5673] Call Trace:
[ 181.601277][ T5673]
[ 181.604242][ T5673] dump_stack_lvl+0x188/0x250
[ 181.608982][ T5673] ? show_regs_print_info+0x20/0x20
[ 181.614236][ T5673] ? load_image+0x410/0x410
[ 181.618806][ T5673] ? __might_sleep+0xf0/0xf0
[ 181.623641][ T5673] ? __lock_acquire+0x7b50/0x7b50
[ 181.628718][ T5673] ? memset+0x1e/0x40
[ 181.632751][ T5673] should_fail+0x383/0x4b0
[ 181.637219][ T5673] should_failslab+0x5/0x20
[ 181.641758][ T5673] slab_pre_alloc_hook+0x51/0xc0
[ 181.646742][ T5673] ? security_inode_alloc+0x30/0x110
[ 181.652075][ T5673] kmem_cache_alloc+0x3d/0x280
[ 181.656896][ T5673] security_inode_alloc+0x30/0x110
[ 181.662056][ T5673] inode_init_always+0x8e5/0xc90
[ 181.667054][ T5673] new_inode_pseudo+0x8e/0x210
[ 181.671876][ T5673] __sock_create+0x128/0x910
[ 181.676608][ T5673] start_sync_thread+0xdc8/0x2890
[ 181.681691][ T5673] ? sync_thread_master+0x900/0x900
[ 181.687033][ T5673] ? sb_queue_tail+0x3e0/0x3e0
[ 181.691885][ T5673] ? __lock_acquire+0x7b50/0x7b50
[ 181.697832][ T5673] ? __might_fault+0xb3/0x110
[ 181.702562][ T5673] do_ip_vs_set_ctl+0x40f/0xa10
[ 181.707473][ T5673] ? local_bh_enable+0x20/0x20
[ 181.712305][ T5673] ? mutex_unlock+0x10/0x10
[ 181.716852][ T5673] ? __local_bh_enable_ip+0x136/0x1c0
[ 181.722366][ T5673] ? lockdep_hardirqs_on+0x94/0x140
[ 181.727598][ T5673] ? __local_bh_enable_ip+0x136/0x1c0
[ 181.733100][ T5673] nf_setsockopt+0x25f/0x280
[ 181.737714][ T5673] ip_setsockopt+0x29c3/0x31e0
[ 181.742504][ T5673] ? ipv4_pktinfo_prepare+0x6b0/0x6b0
[ 181.747987][ T5673] ? __mutex_trylock_common+0x15c/0x260
[ 181.753561][ T5673] ? rcu_lock_release+0x20/0x20
[ 181.758440][ T5673] ? aa_label_sk_perm+0x3e6/0x540
[ 181.763491][ T5673] ? __mutex_lock_common+0x435/0x2400
[ 181.768890][ T5673] tcp_setsockopt+0x229/0x1e60
[ 181.773674][ T5673] ? tcp_set_window_clamp+0x1a0/0x1a0
[ 181.779064][ T5673] ? mutex_lock_io_nested+0x60/0x60
[ 181.784296][ T5673] ? __lock_acquire+0x7b50/0x7b50
[ 181.789385][ T5673] ? sock_common_setsockopt+0x32/0xb0
[ 181.794779][ T5673] ? sock_common_recvmsg+0x1c0/0x1c0
[ 181.800087][ T5673] smc_setsockopt+0x1b7/0xa30
[ 181.804797][ T5673] ? smc_shutdown+0x5c0/0x5c0
[ 181.809496][ T5673] ? aa_sock_opt_perm+0x74/0x100
[ 181.814455][ T5673] ? bpf_lsm_socket_setsockopt+0x5/0x10
[ 181.820036][ T5673] ? security_socket_setsockopt+0x7a/0xa0
[ 181.825783][ T5673] ? smc_shutdown+0x5c0/0x5c0
[ 181.830489][ T5673] __sys_setsockopt+0x2bf/0x3d0
[ 181.835367][ T5673] __x64_sys_setsockopt+0xb1/0xc0
[ 181.840421][ T5673] do_syscall_64+0x4c/0xa0
[ 181.844854][ T5673] ? clear_bhb_loop+0x30/0x80
[ 181.849572][ T5673] ? clear_bhb_loop+0x30/0x80
[ 181.854280][ T5673] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 181.860216][ T5673] RIP: 0033:0x7fa3946f7159
[ 181.864650][ T5673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 181.884509][ T5673] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 181.892976][ T5673] RAX: ffffffffffffffda RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 181.900989][ T5673] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004
[ 181.909005][ T5673] RBP: 00007fa39478e03b R08: 0000000000000018 R09: 0000000000000000
[ 181.917009][ T5673] R10: 00002000000007c0 R11: 0000000000000246 R12: 0000000000000000
[ 181.925006][ T5673] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 181.933016][ T5673]
[ 181.961251][ T5673] socket: no more sockets
[ 181.965965][ T5673] IPVS: Error during creation of socket; terminating
[ 182.010337][ T4239] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 182.100713][ T5677] fuse: Bad value for 'fd'
[ 182.110497][ T4239] usb 2-1: device descriptor read/8, error -71
[ 182.230357][ T4239] usb usb2-port1: unable to enumerate USB device
[ 182.470229][ T4239] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 182.710204][ T7] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[ 182.720375][ T4239] usb 4-1: Using ep0 maxpacket: 16
[ 182.840378][ T4239] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[ 182.855892][ T4239] usb 4-1: config 4 has no interface number 0
[ 182.862906][ T4239] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 182.873648][ T4239] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 182.883980][ T4239] usb 4-1: config 4 interface 9 has no altsetting 0
[ 182.923411][ T5692] jffs2: notice: (5692) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 183.060305][ T4239] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 183.074019][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 183.085643][ T4239] usb 4-1: Product: syz
[ 183.089996][ T4239] usb 4-1: Manufacturer: syz
[ 183.098618][ T4239] usb 4-1: SerialNumber: syz
[ 183.141087][ T5679] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 183.160418][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 183.171343][ T5679] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[ 183.182395][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 183.199544][ T4239] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 183.237323][ T5707] fuse: Bad value for 'fd'
[ 183.270859][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 183.279979][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 183.297694][ T7] usb 3-1: SerialNumber: syz
[ 183.409424][ T4239] usb 4-1: USB disconnect, device number 20
[ 183.420249][ T144] usb 4-1: Failed to submit usb control message: -71
[ 183.429914][ T144] usb 4-1: unable to send the bmi data to the device: -71
[ 183.437237][ T144] usb 4-1: unable to get target info from device
[ 183.443993][ T144] usb 4-1: could not get target info (-71)
[ 183.453288][ T144] usb 4-1: could not probe fw (-71)
[ 183.832911][ T7] usb 3-1: 0:2 : does not exist
[ 183.854951][ T7] usb 3-1: USB disconnect, device number 23
[ 184.102094][ T5305] udevd[5305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 184.451408][ T4239] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 184.571755][ T5734] jffs2: notice: (5734) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 184.650290][ T4239] usb 2-1: device descriptor read/64, error -71
[ 184.767701][ T5740] nvme nvme0: failed to connect socket: -111
[ 184.899434][ T5743] netlink: 4516 bytes leftover after parsing attributes in process `syz.2.534'.
[ 184.950381][ T4239] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 184.970369][ T5743] device hsr_slave_0 left promiscuous mode
[ 185.150102][ T4239] usb 2-1: device descriptor read/64, error -71
[ 185.280580][ T4239] usb usb2-port1: attempt power cycle
[ 185.440206][ T4221] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[ 185.450364][ T4229] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[ 185.680293][ T4221] usb 3-1: Using ep0 maxpacket: 16
[ 185.690191][ T4229] usb 4-1: Using ep0 maxpacket: 16
[ 185.695597][ T4239] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 185.790438][ T4239] usb 2-1: device descriptor read/8, error -71
[ 185.800409][ T4221] usb 3-1: config 4 has an invalid interface number: 9 but max is 0
[ 185.808723][ T4221] usb 3-1: config 4 has no interface number 0
[ 185.815119][ T4221] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 185.825036][ T4221] usb 3-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 185.835146][ T4221] usb 3-1: config 4 interface 9 has no altsetting 0
[ 185.970324][ T4229] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 185.986228][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 185.994754][ T4229] usb 4-1: Product: syz
[ 185.998947][ T4229] usb 4-1: Manufacturer: syz
[ 186.004617][ T4221] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 186.013750][ T4229] usb 4-1: SerialNumber: syz
[ 186.019217][ T4221] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 186.027897][ T4229] r8152-cfgselector 4-1: config 0 descriptor??
[ 186.034193][ T4221] usb 3-1: Product: syz
[ 186.038389][ T4221] usb 3-1: Manufacturer: syz
[ 186.043513][ T4221] usb 3-1: SerialNumber: syz
[ 186.060324][ T4239] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 186.070618][ T5747] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 186.078552][ T5747] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[ 186.094717][ T4221] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 186.150466][ T4239] usb 2-1: device descriptor read/8, error -71
[ 186.272248][ T4239] usb usb2-port1: unable to enumerate USB device
[ 186.297960][ T2280] usb 3-1: USB disconnect, device number 24
[ 186.320417][ T144] usb 3-1: Failed to submit usb control message: -71
[ 186.327673][ T144] usb 3-1: unable to send the bmi data to the device: -71
[ 186.335419][ T144] usb 3-1: unable to get target info from device
[ 186.345683][ T144] usb 3-1: could not get target info (-71)
[ 186.354977][ T144] usb 3-1: could not probe fw (-71)
[ 186.560412][ T4229] r8152-cfgselector 4-1: Unknown version 0x0000
[ 186.571375][ T4229] r8152-cfgselector 4-1: bad CDC descriptors
[ 186.592073][ T4229] r8152-cfgselector 4-1: Unknown version 0x0000
[ 186.607740][ T4229] r8152-cfgselector 4-1: USB disconnect, device number 21
[ 187.120261][ T2280] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[ 187.480436][ T2280] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 187.500890][ T2280] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 187.620398][ T2280] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 187.645971][ T2280] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 187.665267][ T2280] usb 3-1: SerialNumber: syz
[ 188.190155][ T4229] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 188.198582][ T2280] usb 3-1: 0:2 : does not exist
[ 188.211908][ T2280] usb 3-1: USB disconnect, device number 25
[ 188.430287][ T4239] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 188.432662][ T5305] udevd[5305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 188.590309][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 188.600856][ T4229] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 188.614218][ T4229] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 188.623763][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 188.684698][ T4229] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 188.850562][ T4239] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 188.860167][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 188.870981][ T4239] usb 4-1: config 0 descriptor??
[ 188.879383][ T5789] udc-core: couldn't find an available UDC or it's busy
[ 188.886867][ T5789] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 188.898854][ T2280] usb 2-1: USB disconnect, device number 39
[ 189.030200][ T4229] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[ 189.240336][ T4229] usb 3-1: device descriptor read/64, error -71
[ 189.342711][ T4239] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2
[ 189.350389][ T4239] [drm] Initialized udl on minor 2
[ 189.520251][ T4229] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[ 189.561077][ T4239] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 189.577898][ T4239] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 189.589394][ T4239] usb 4-1: USB disconnect, device number 22
[ 189.603955][ T2855] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[ 189.620815][ T2855] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[ 189.636492][ T2855] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[ 189.740790][ T4229] usb 3-1: device descriptor read/64, error -71
[ 189.870401][ T4229] usb usb3-port1: attempt power cycle
[ 190.061666][ T4199] Bluetooth: hci4: link tx timeout
[ 190.067108][ T4199] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 190.299481][ T5821] FAULT_INJECTION: forcing a failure.
[ 190.299481][ T5821] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 190.314386][ T5821] CPU: 0 PID: 5821 Comm: syz.1.563 Not tainted syzkaller #0
[ 190.321736][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 190.327326][ T4229] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 190.331854][ T5821] Call Trace:
[ 190.331898][ T5821]
[ 190.331909][ T5821] dump_stack_lvl+0x188/0x250
[ 190.350455][ T5821] ? show_regs_print_info+0x20/0x20
[ 190.355700][ T5821] ? load_image+0x410/0x410
[ 190.360251][ T5821] ? __lock_acquire+0x7b50/0x7b50
[ 190.365363][ T5821] should_fail+0x383/0x4b0
[ 190.369825][ T5821] prepare_alloc_pages+0x1e3/0x5b0
[ 190.374989][ T5821] __alloc_pages+0x11b/0x480
[ 190.379631][ T5821] ? zone_statistics+0x170/0x170
[ 190.384617][ T5821] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 190.390651][ T5821] ? lock_chain_count+0x20/0x20
[ 190.395544][ T5821] ? alloc_pages+0x452/0x560
[ 190.400176][ T5821] kmalloc_order+0x40/0x150
[ 190.404867][ T5821] kmalloc_order_trace+0x14/0xf0
[ 190.409868][ T5821] vhost_dev_set_owner+0x32e/0xa60
[ 190.415053][ T5821] ? vhost_dev_has_owner+0x40/0x40
[ 190.420212][ T5821] ? vhost_set_backend_features+0x1b0/0x1b0
[ 190.426160][ T5821] vhost_net_ioctl+0x6e0/0x1350
[ 190.431078][ T5821] ? vhost_net_chr_poll+0x50/0x50
[ 190.436157][ T5821] ? bpf_lsm_file_ioctl+0x5/0x10
[ 190.441135][ T5821] ? security_file_ioctl+0x7c/0xa0
[ 190.446295][ T5821] ? vhost_net_chr_poll+0x50/0x50
[ 190.451371][ T5821] __se_sys_ioctl+0xfa/0x170
[ 190.456008][ T5821] do_syscall_64+0x4c/0xa0
[ 190.460614][ T5821] ? clear_bhb_loop+0x30/0x80
[ 190.465509][ T5821] ? clear_bhb_loop+0x30/0x80
[ 190.470234][ T5821] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 190.476624][ T5821] RIP: 0033:0x7f74793a7159
[ 190.481092][ T5821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 190.500832][ T5821] RSP: 002b:00007f74775ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 190.509336][ T5821] RAX: ffffffffffffffda RBX: 00007f747962efa0 RCX: 00007f74793a7159
[ 190.517357][ T5821] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004
[ 190.525372][ T5821] RBP: 00007f747943e03b R08: 0000000000000000 R09: 0000000000000000
[ 190.533560][ T5821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 190.541575][ T5821] R13: 00007f747962f038 R14: 00007f747962efa0 R15: 00007ffc048410f8
[ 190.549617][ T5821]
[ 190.560642][ T4229] usb 3-1: device descriptor read/8, error -71
[ 190.840166][ T4229] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 190.940193][ T4279] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 190.941941][ T4229] usb 3-1: device descriptor read/8, error -71
[ 191.082284][ T4229] usb usb3-port1: unable to enumerate USB device
[ 191.301039][ T4279] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 191.317094][ T4279] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 191.343174][ T4279] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 191.352620][ T4279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 191.412246][ T4279] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 191.614894][ T5832] udc-core: couldn't find an available UDC or it's busy
[ 191.633754][ T5832] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 191.644387][ T4279] usb 2-1: USB disconnect, device number 40
[ 192.140193][ T2280] Bluetooth: hci4: command 0x0406 tx timeout
[ 192.240161][ T4279] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 192.491343][ T4279] usb 4-1: Using ep0 maxpacket: 16
[ 192.693100][ T5859] tipc: Enabling of bearer rejected, failed to enable media
[ 192.770472][ T4279] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 192.784782][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 192.793604][ T4279] usb 4-1: Product: syz
[ 192.797881][ T4279] usb 4-1: Manufacturer: syz
[ 192.815382][ T4279] usb 4-1: SerialNumber: syz
[ 192.822821][ T4279] r8152-cfgselector 4-1: config 0 descriptor??
[ 193.360204][ T4279] r8152-cfgselector 4-1: Unknown version 0x0000
[ 193.366573][ T4279] r8152-cfgselector 4-1: bad CDC descriptors
[ 193.400216][ T4279] r8152-cfgselector 4-1: Unknown version 0x0000
[ 193.408385][ T4279] r8152-cfgselector 4-1: USB disconnect, device number 23
[ 193.480213][ T4239] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 193.890463][ T4239] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 193.924062][ T4239] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice= 0.03
[ 193.957310][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 193.977093][ T4239] usb 2-1: config 0 descriptor??
[ 194.043338][ T4239] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[ 194.100173][ T2280] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 194.190215][ T4279] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 194.250314][ T4239] pwc: send_video_command error -71
[ 194.255753][ T4239] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 194.279649][ T4239] Philips webcam: probe of 2-1:0.0 failed with error -71
[ 194.312175][ T4239] usb 2-1: USB disconnect, device number 41
[ 194.396569][ T1419] ieee802154 phy0 wpan0: encryption failed: -22
[ 194.405415][ T1419] ieee802154 phy1 wpan1: encryption failed: -22
[ 194.478257][ T2280] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 194.496628][ T2280] usb 3-1: config 0 has no interfaces?
[ 194.560528][ T4279] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 194.586663][ T4279] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[ 194.607168][ T4279] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 194.616701][ T4279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 194.660557][ T2280] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[ 194.672374][ T4279] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 194.688709][ T2280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 194.714831][ T2280] usb 3-1: Product: syz
[ 194.724815][ T2280] usb 3-1: Manufacturer: syz
[ 194.734257][ T2280] usb 3-1: SerialNumber: syz
[ 194.756368][ T2280] usb 3-1: config 0 descriptor??
[ 194.879719][ T5880] udc-core: couldn't find an available UDC or it's busy
[ 194.898439][ T5880] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 194.928630][ T4195] Bluetooth: hci4: link tx timeout
[ 194.934530][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 194.945096][ T2280] usb 4-1: USB disconnect, device number 24
[ 194.951526][ T4195] Bluetooth: hci4: link tx timeout
[ 194.956681][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 195.026867][ T4186] usb 3-1: USB disconnect, device number 30
[ 195.092064][ T4195] Bluetooth: hci4: link tx timeout
[ 195.097319][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 195.120806][ T4239] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 195.128569][ T4195] Bluetooth: hci4: link tx timeout
[ 195.133972][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 195.184310][ T4195] Bluetooth: hci4: link tx timeout
[ 195.189511][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 195.520491][ T4239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 195.533910][ T4239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 195.548140][ T4239] usb 2-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[ 195.558547][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 195.575693][ T4195] Bluetooth: hci4: link tx timeout
[ 195.581204][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 195.642221][ T4239] spcp8x5 2-1:1.0: SPCP8x5 converter detected
[ 195.651275][ T4239] usb 2-1: SPCP8x5 converter now attached to ttyUSB0
[ 196.061444][ T4195] Bluetooth: hci4: link tx timeout
[ 196.066691][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 196.120548][ T5910] SPCP8x5 ttyUSB0: failed to set control lines: -110
[ 196.150256][ T5910] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32)
[ 196.180361][ T5910] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 196.320223][ T5909] SPCP8x5 ttyUSB0: failed to set control lines: -32
[ 196.350166][ T2280] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 196.364452][ T4186] usb 2-1: USB disconnect, device number 42
[ 196.374343][ T4186] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 196.383775][ T4186] spcp8x5 2-1:1.0: device disconnected
[ 196.461300][ T4279] Bluetooth: hci3: command 0x0406 tx timeout
[ 196.467618][ T4279] Bluetooth: hci2: command 0x0406 tx timeout
[ 196.470258][ T4239] Bluetooth: hci1: command 0x0406 tx timeout
[ 196.480491][ T4239] Bluetooth: hci0: command 0x0406 tx timeout
[ 196.600414][ T2280] usb 3-1: Using ep0 maxpacket: 16
[ 196.622323][ T4195] Bluetooth: hci4: link tx timeout
[ 196.627540][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 196.880411][ T2280] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 196.890563][ T2280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 196.898968][ T2280] usb 3-1: Product: syz
[ 196.903450][ T2280] usb 3-1: Manufacturer: syz
[ 196.908114][ T2280] usb 3-1: SerialNumber: syz
[ 196.927323][ T2280] r8152-cfgselector 3-1: config 0 descriptor??
[ 196.965629][ T4195] Bluetooth: hci4: link tx timeout
[ 196.970914][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 197.080147][ T4239] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 197.410309][ T2280] r8152-cfgselector 3-1: Unknown version 0x0000
[ 197.417312][ T2280] r8152-cfgselector 3-1: bad CDC descriptors
[ 197.450545][ T2280] r8152-cfgselector 3-1: Unknown version 0x0000
[ 197.484354][ T2280] r8152-cfgselector 3-1: USB disconnect, device number 31
[ 197.500406][ T4239] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 197.530118][ T4239] usb 4-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice= 0.03
[ 197.539250][ T4239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 197.558724][ T4239] usb 4-1: config 0 descriptor??
[ 197.612079][ T4239] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[ 197.663562][ T4195] Bluetooth: hci4: link tx timeout
[ 197.668838][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 197.840384][ T4239] pwc: send_video_command error -71
[ 197.845763][ T4239] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 197.854206][ T4239] Philips webcam: probe of 4-1:0.0 failed with error -71
[ 197.863437][ T4239] usb 4-1: USB disconnect, device number 25
[ 197.873457][ T5305] udevd[5305]: setting owner of /dev/bus/usb/004/025 to uid=0, gid=0 failed: No such file or directory
[ 197.889106][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.603'.
[ 198.207825][ T4186] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 198.241050][ T4229] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[ 198.580409][ T4186] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 198.601903][ T4186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 198.615408][ T4186] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[ 198.629275][ T4186] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 198.649960][ T4186] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 198.651754][ T4229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 198.659596][ T4186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 198.695629][ T4229] usb 3-1: config 0 has no interfaces?
[ 198.726741][ T4186] cxacru 2-1:1.0: submit of read urb for cm 0x90 failed (-90)
[ 198.744877][ T4186] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[ 198.765226][ T4186] cxacru: probe of 2-1:1.0 failed with error -22
[ 198.860457][ T4229] usb 3-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[ 198.870126][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 198.878896][ T4229] usb 3-1: Product: syz
[ 198.883707][ T4229] usb 3-1: Manufacturer: syz
[ 198.888432][ T4229] usb 3-1: SerialNumber: syz
[ 198.924772][ T4229] usb 3-1: config 0 descriptor??
[ 198.946761][ T5965] udc-core: couldn't find an available UDC or it's busy
[ 198.975921][ T5965] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 199.017301][ T4279] usb 2-1: USB disconnect, device number 43
[ 199.026392][ T4195] Bluetooth: hci4: link tx timeout
[ 199.032023][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 199.200874][ T2280] usb 3-1: USB disconnect, device number 32
[ 199.880307][ T4229] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 200.000194][ T4239] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 200.126478][ T4195] Bluetooth: hci4: link tx timeout
[ 200.131852][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 200.150195][ T2855] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 200.270292][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 200.280882][ T4239] usb 4-1: Using ep0 maxpacket: 16
[ 200.286263][ T4229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 200.370540][ T4229] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 200.379801][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 200.388660][ T4229] usb 2-1: SerialNumber: syz
[ 200.520308][ T2855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 200.531171][ T2855] usb 3-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice= 0.03
[ 200.540460][ T2855] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 200.550751][ T2855] usb 3-1: config 0 descriptor??
[ 200.570879][ T4239] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 200.580474][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 200.588520][ T4239] usb 4-1: Product: syz
[ 200.595277][ T2855] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected.
[ 200.602408][ T4239] usb 4-1: Manufacturer: syz
[ 200.607067][ T4239] usb 4-1: SerialNumber: syz
[ 200.615552][ T4239] r8152-cfgselector 4-1: config 0 descriptor??
[ 200.641867][ T6003] device syzkaller0 entered promiscuous mode
[ 200.752513][ T4229] usb 2-1: 0:2 : does not exist
[ 200.767317][ T4229] usb 2-1: USB disconnect, device number 44
[ 200.810254][ T2855] pwc: send_video_command error -71
[ 200.815585][ T2855] pwc: Failed to set video mode VGA@30 fps; return code = -71
[ 200.828128][ T2855] Philips webcam: probe of 3-1:0.0 failed with error -71
[ 200.837211][ T2855] usb 3-1: USB disconnect, device number 33
[ 200.965276][ T4195] Bluetooth: hci4: link tx timeout
[ 200.970593][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 201.002776][ T5305] udevd[5305]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 201.090289][ T4239] r8152-cfgselector 4-1: Unknown version 0x0000
[ 201.097080][ T4239] r8152-cfgselector 4-1: bad CDC descriptors
[ 201.130302][ T4239] r8152-cfgselector 4-1: Unknown version 0x0000
[ 201.139505][ T4239] r8152-cfgselector 4-1: USB disconnect, device number 26
[ 201.488732][ T4195] Bluetooth: hci4: link tx timeout
[ 201.494401][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 201.830276][ T4494] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 202.250770][ T4494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 202.266178][ T4494] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 202.295710][ T4494] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 202.316170][ T4494] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 202.355760][ T4494] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 202.374201][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 202.452090][ T4494] cxacru 3-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 202.620246][ T4186] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 202.659803][ T6029] udc-core: couldn't find an available UDC or it's busy
[ 202.702199][ T6054] FAULT_INJECTION: forcing a failure.
[ 202.702199][ T6054] name failslab, interval 1, probability 0, space 0, times 0
[ 202.724842][ T6029] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 202.733263][ T6054] CPU: 0 PID: 6054 Comm: syz.4.635 Not tainted syzkaller #0
[ 202.740597][ T6054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 202.750686][ T6054] Call Trace:
[ 202.753995][ T6054]
[ 202.756952][ T6054] dump_stack_lvl+0x188/0x250
[ 202.761668][ T6054] ? show_regs_print_info+0x20/0x20
[ 202.766905][ T6054] ? load_image+0x410/0x410
[ 202.771465][ T6054] ? __might_sleep+0xf0/0xf0
[ 202.776090][ T6054] ? __lock_acquire+0x7b50/0x7b50
[ 202.781158][ T6054] should_fail+0x383/0x4b0
[ 202.785627][ T6054] should_failslab+0x5/0x20
[ 202.790164][ T6054] slab_pre_alloc_hook+0x51/0xc0
[ 202.795142][ T6054] kmem_cache_alloc_trace+0x47/0x290
[ 202.800467][ T6054] ? __list_lru_init+0x535/0xac0
[ 202.805454][ T6054] __list_lru_init+0x535/0xac0
[ 202.810277][ T6054] alloc_super+0x787/0x970
[ 202.814741][ T6054] ? kill_litter_super+0xa0/0xa0
[ 202.819712][ T6054] sget_fc+0x2d4/0x6f0
[ 202.823812][ T6054] ? kill_litter_super+0xa0/0xa0
[ 202.828943][ T6054] ? proc_reconfigure+0x370/0x370
[ 202.834010][ T6054] get_tree_nodev+0x26/0x160
[ 202.838647][ T6054] vfs_get_tree+0x88/0x270
[ 202.843119][ T6054] do_new_mount+0x247/0xa40
[ 202.847723][ T6054] __se_sys_mount+0x2e3/0x3d0
[ 202.852459][ T6054] ? __x64_sys_mount+0xc0/0xc0
[ 202.857372][ T6054] ? lockdep_hardirqs_on+0x94/0x140
[ 202.862742][ T6054] ? __x64_sys_mount+0x1c/0xc0
[ 202.867583][ T6054] do_syscall_64+0x4c/0xa0
[ 202.872030][ T6054] ? clear_bhb_loop+0x30/0x80
[ 202.876748][ T6054] ? clear_bhb_loop+0x30/0x80
[ 202.881466][ T6054] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 202.887400][ T6054] RIP: 0033:0x7fef147e2159
[ 202.891857][ T6054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 202.911523][ T6054] RSP: 002b:00007fef12a3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 202.919986][ T6054] RAX: ffffffffffffffda RBX: 00007fef14a69fa0 RCX: 00007fef147e2159
[ 202.927998][ T6054] RDX: 0000200000000280 RSI: 0000200000000080 RDI: 0000000000000000
[ 202.936096][ T6054] RBP: 00007fef1487903b R08: 0000000000000000 R09: 0000000000000000
[ 202.944784][ T6054] R10: 0000000003000002 R11: 0000000000000246 R12: 0000000000000000
[ 202.953024][ T6054] R13: 00007fef14a6a038 R14: 00007fef14a69fa0 R15: 00007ffd3a8d5ec8
[ 202.961177][ T6054]
[ 202.969116][ T4494] usb 3-1: USB disconnect, device number 34
[ 203.210280][ T4186] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 203.226523][ T4186] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 203.311214][ T4186] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 203.320624][ T4186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 203.328673][ T4186] usb 2-1: SerialNumber: syz
[ 203.414132][ T4195] Bluetooth: hci4: link tx timeout
[ 203.419567][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 203.440185][ T2855] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 203.578976][ T6045] device syzkaller0 entered promiscuous mode
[ 203.694056][ T4186] usb 2-1: 0:2 : does not exist
[ 203.709175][ T4186] usb 2-1: USB disconnect, device number 45
[ 203.720388][ T2855] usb 4-1: Using ep0 maxpacket: 16
[ 203.820377][ T4229] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[ 203.930972][ T5305] udevd[5305]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 204.060377][ T2855] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 204.069958][ T2855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 204.079170][ T2855] usb 4-1: Product: syz
[ 204.084012][ T2855] usb 4-1: Manufacturer: syz
[ 204.088639][ T2855] usb 4-1: SerialNumber: syz
[ 204.095751][ T2855] r8152-cfgselector 4-1: config 0 descriptor??
[ 204.410265][ T4229] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 204.419503][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 204.427786][ T4229] usb 3-1: Product: syz
[ 204.432134][ T4229] usb 3-1: Manufacturer: syz
[ 204.436767][ T4229] usb 3-1: SerialNumber: syz
[ 204.444235][ T4229] usb 3-1: config 0 descriptor??
[ 204.493842][ T4229] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 204.510857][ T2280] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 204.580337][ T2855] r8152-cfgselector 4-1: Unknown version 0x0000
[ 204.586873][ T2855] r8152-cfgselector 4-1: bad CDC descriptors
[ 204.611284][ T2855] r8152-cfgselector 4-1: Unknown version 0x0000
[ 204.620319][ T2855] r8152-cfgselector 4-1: USB disconnect, device number 27
[ 204.880551][ T2280] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 204.897547][ T2280] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 204.909309][ T2280] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 204.924279][ T2280] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 204.934105][ T2280] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 204.964906][ T4195] Bluetooth: hci4: link tx timeout
[ 204.970558][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 205.413728][ T2280] cxacru 2-1:1.0: send of cm 0x91 failed (-71)
[ 205.422659][ T4195] Bluetooth: hci4: link tx timeout
[ 205.427902][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 205.436105][ T2280] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[ 205.464911][ T2280] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[ 205.482332][ T2280] cxacru: probe of 2-1:1.0 failed with error -71
[ 205.511587][ T2280] usb 2-1: USB disconnect, device number 46
[ 205.728764][ T6107] device syzkaller0 entered promiscuous mode
[ 205.940160][ T4279] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[ 206.180204][ T4279] usb 4-1: Using ep0 maxpacket: 16
[ 206.300681][ T4279] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[ 206.314977][ T4279] usb 4-1: config 4 has no interface number 0
[ 206.321569][ T4279] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 206.335768][ T4279] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 206.346048][ T4279] usb 4-1: config 4 interface 9 has no altsetting 0
[ 206.510263][ T4279] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 206.519520][ T4279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 206.527724][ T4279] usb 4-1: Product: syz
[ 206.532037][ T4279] usb 4-1: Manufacturer: syz
[ 206.536664][ T4279] usb 4-1: SerialNumber: syz
[ 206.560447][ T6104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 206.567621][ T6104] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 206.583556][ T4279] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 206.785196][ T4279] usb 4-1: USB disconnect, device number 28
[ 206.790913][ T144] usb 4-1: Failed to submit usb control message: -71
[ 206.800111][ T144] usb 4-1: unable to send the bmi data to the device: -71
[ 206.814568][ T144] usb 4-1: unable to get target info from device
[ 206.823553][ T144] usb 4-1: could not get target info (-71)
[ 206.829466][ T144] usb 4-1: could not probe fw (-71)
[ 207.169717][ T4195] Bluetooth: hci4: link tx timeout
[ 207.175353][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 207.250163][ T4221] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 207.419751][ T6149] autofs4:pid:6149:autofs_fill_super: called with bogus options
[ 207.424054][ T4195] Bluetooth: hci4: link tx timeout
[ 207.433167][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 207.490231][ T4221] usb 2-1: Using ep0 maxpacket: 16
[ 207.511155][ T6067] udc-core: couldn't find an available UDC or it's busy
[ 207.518690][ T6067] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 207.556993][ T4229] gspca_stk1135: reg_w 0x351 err -71
[ 207.563613][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.579192][ T4229] gspca_stk1135: Sensor write failed
[ 207.585814][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.592983][ T4229] gspca_stk1135: Sensor write failed
[ 207.598493][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.605891][ T4229] gspca_stk1135: Sensor read failed
[ 207.612520][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.619005][ T4229] gspca_stk1135: Sensor read failed
[ 207.624669][ T4229] gspca_stk1135: Detected sensor type unknown (0x0)
[ 207.640170][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.647918][ T4229] gspca_stk1135: Sensor read failed
[ 207.654166][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.679484][ T4229] gspca_stk1135: Sensor read failed
[ 207.686276][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.699271][ T4229] gspca_stk1135: Sensor write failed
[ 207.706074][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 207.718250][ T4229] gspca_stk1135: Sensor write failed
[ 207.725588][ T4229] stk1135: probe of 3-1:0.0 failed with error -71
[ 207.744359][ T4229] usb 3-1: USB disconnect, device number 35
[ 207.771542][ T4221] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 207.786165][ T4221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 207.806557][ T4221] usb 2-1: Product: syz
[ 207.811970][ T4221] usb 2-1: Manufacturer: syz
[ 207.830297][ T4221] usb 2-1: SerialNumber: syz
[ 207.850821][ T4221] r8152-cfgselector 2-1: config 0 descriptor??
[ 208.077084][ T6167] md: array md0 already initialised!
[ 208.190407][ T2855] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[ 208.330323][ T4221] r8152-cfgselector 2-1: Unknown version 0x0000
[ 208.336913][ T4221] r8152-cfgselector 2-1: bad CDC descriptors
[ 208.360360][ T4221] r8152-cfgselector 2-1: Unknown version 0x0000
[ 208.368204][ T4221] r8152-cfgselector 2-1: USB disconnect, device number 47
[ 208.440217][ T2855] usb 4-1: Using ep0 maxpacket: 8
[ 208.470289][ T4186] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 208.503845][ T6165] udc-core: couldn't find an available UDC or it's busy
[ 208.511056][ T6165] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 208.600313][ T2855] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 208.660255][ T2855] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 208.667886][ T2855] usb 4-1: can't read configurations, error -71
[ 208.870376][ T4186] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 208.965439][ T4195] Bluetooth: hci4: link tx timeout
[ 208.971079][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 208.982653][ T4186] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 209.107234][ T6185] autofs4:pid:6185:autofs_fill_super: called with bogus options
[ 209.160493][ T4186] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00
[ 209.176248][ T4186] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 209.184819][ T4186] usb 3-1: Product: syz
[ 209.189046][ T4186] usb 3-1: Manufacturer: syz
[ 209.193815][ T4186] usb 3-1: SerialNumber: syz
[ 209.220370][ T4239] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 209.241837][ T4186] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected
[ 209.268035][ T4186] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0
[ 209.282941][ T4186] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1
[ 209.295179][ T6189] =======================================================
[ 209.295179][ T6189] WARNING: The mand mount option has been deprecated and
[ 209.295179][ T6189] and is ignored by this kernel. Remove the mand
[ 209.295179][ T6189] option from the mount to silence this warning.
[ 209.295179][ T6189] =======================================================
[ 209.460377][ T4239] usb 2-1: Using ep0 maxpacket: 16
[ 209.588615][ T4239] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[ 209.600263][ T4239] usb 2-1: config 4 has no interface number 0
[ 209.606424][ T4239] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 209.642332][ T6199] Config c/1 of g_uac2 needs at least one function.
[ 209.649782][ T6199] udc usbip-vudc.0: failed to start g_uac2: -22
[ 209.679827][ T4239] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 209.699393][ T4239] usb 2-1: config 4 interface 9 has no altsetting 0
[ 209.870311][ T4239] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 209.879423][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 209.944709][ T4239] usb 2-1: Product: syz
[ 209.949142][ T4239] usb 2-1: Manufacturer: syz
[ 209.963997][ T4239] usb 2-1: SerialNumber: syz
[ 210.000450][ T6180] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 210.007583][ T6180] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 210.045176][ T4239] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 210.260171][ T7] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 210.472312][ T6228] autofs4:pid:6228:autofs_fill_super: called with bogus options
[ 210.650414][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 210.662603][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 210.672905][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 210.683210][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 210.696570][ T7] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 210.705997][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 210.763269][ T7] cxacru 4-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 210.965789][ T6216] udc-core: couldn't find an available UDC or it's busy
[ 210.972884][ T6216] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 210.983259][ T7] usb 4-1: USB disconnect, device number 31
[ 211.110232][ T144] usb 2-1: Failed to submit usb control message: -110
[ 211.117580][ T144] usb 2-1: unable to send the bmi data to the device: -110
[ 211.125370][ T144] usb 2-1: unable to get target info from device
[ 211.132414][ T144] usb 2-1: could not get target info (-110)
[ 211.138450][ T144] usb 2-1: could not probe fw (-110)
[ 211.524741][ T6233] jffs2: notice: (6233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 211.912098][ T7] usb 2-1: USB disconnect, device number 48
[ 212.179904][ T6257] device syzkaller1 entered promiscuous mode
[ 212.230283][ T4239] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 212.620362][ T4239] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 212.700319][ T2855] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 212.790226][ T6172] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110
[ 212.810442][ T4239] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 212.815717][ T6172] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32
[ 212.819565][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 212.819591][ T4239] usb 4-1: Product: syz
[ 212.829118][ T6172] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32
[ 212.863508][ T4239] usb 4-1: Manufacturer: syz
[ 212.868206][ T4239] usb 4-1: SerialNumber: syz
[ 212.891615][ T6172] ti_usb_3410_5052_2 ttyUSB0: ti_get_lsr - get port status command failed, -32
[ 212.930190][ T6172] ti_usb_3410_5052_2 ttyUSB0: ti_close - cannot send close port command, -32
[ 212.936273][ T4239] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 212.978488][ T4284] usb 3-1: USB disconnect, device number 36
[ 213.015635][ T4284] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0
[ 213.069578][ T4284] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1
[ 213.098134][ T4284] ti_usb_3410_5052 3-1:2.0: device disconnected
[ 213.140448][ T6274] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[ 213.149961][ T6274] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[ 213.166012][ T2855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 213.177970][ T2855] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 213.200259][ T2855] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[ 213.213394][ T2855] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 213.223997][ T2855] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 213.272857][ T2855] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 213.512392][ T6262] udc-core: couldn't find an available UDC or it's busy
[ 213.519811][ T6262] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 213.538037][ T4284] usb 2-1: USB disconnect, device number 49
[ 213.760229][ T4494] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 214.137028][ T4239] gspca_mr97310a: reg read [21] error -71
[ 214.143372][ T4239] mr97310a: probe of 4-1:1.0 failed with error -71
[ 214.170325][ T4239] usb 4-1: USB disconnect, device number 32
[ 214.186404][ T4494] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 214.217446][ T4494] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 214.228386][ T4494] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 214.246586][ T4494] usb 3-1: config 0 descriptor??
[ 214.322409][ T4494] pwc: Askey VC010 type 2 USB webcam detected.
[ 214.760251][ T4494] pwc: recv_control_msg error -32 req 02 val 2b00
[ 214.785705][ T6323] md: array md0 already initialised!
[ 214.802295][ T4494] pwc: recv_control_msg error -32 req 02 val 2700
[ 214.862120][ T4494] pwc: recv_control_msg error -32 req 02 val 2c00
[ 214.867091][ T5191] cxacru 5-1:1.0: firmware (cxacru-fw.bin) unavailable (system misconfigured?)
[ 214.920414][ T4494] pwc: recv_control_msg error -32 req 04 val 1000
[ 214.930479][ T6333] jffs2: notice: (6333) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 214.960369][ T4494] pwc: recv_control_msg error -32 req 04 val 1300
[ 215.020549][ T4494] pwc: recv_control_msg error -32 req 04 val 1400
[ 215.072237][ T4494] pwc: recv_control_msg error -32 req 02 val 2000
[ 215.120283][ T4494] pwc: recv_control_msg error -32 req 02 val 2100
[ 215.190514][ T4494] pwc: recv_control_msg error -32 req 04 val 1500
[ 215.240324][ T4494] pwc: recv_control_msg error -32 req 02 val 2500
[ 215.306085][ T4494] pwc: recv_control_msg error -32 req 02 val 2400
[ 215.363771][ T4239] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 215.371866][ T4494] pwc: recv_control_msg error -32 req 02 val 2600
[ 215.640405][ T6289] xt_nfacct: accounting object `syz0' does not exist
[ 215.670571][ T4494] pwc: recv_control_msg error -71 req 02 val 2800
[ 215.690846][ T4494] pwc: recv_control_msg error -71 req 04 val 1100
[ 215.720328][ T4494] pwc: recv_control_msg error -71 req 04 val 1200
[ 215.740540][ T4229] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[ 215.748981][ T4494] pwc: Registered as video103.
[ 215.763456][ T4494] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[ 215.795589][ T4239] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 215.809517][ T4494] usb 3-1: USB disconnect, device number 37
[ 215.830227][ T4239] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 215.854971][ T4239] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 215.883920][ T4239] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 215.953329][ T4239] cxacru 2-1:1.0: usbatm_usb_probe: bind failed: -19!
[ 216.155013][ T6340] udc-core: couldn't find an available UDC or it's busy
[ 216.180222][ T6340] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[ 216.199458][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 216.243792][ T4279] usb 2-1: USB disconnect, device number 50
[ 216.400402][ T4229] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 216.409676][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 216.418590][ T4229] usb 5-1: Product: syz
[ 216.419942][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.724'.
[ 216.430195][ T4229] usb 5-1: Manufacturer: syz
[ 216.440826][ T4229] usb 5-1: SerialNumber: syz
[ 216.492715][ T4229] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 216.574457][ T6369] md: array md0 already initialised!
[ 216.651180][ T6373] jffs2: notice: (6373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 216.952564][ T6388] device syzkaller0 entered promiscuous mode
[ 217.226732][ T6397] IPVS: lblc: FWM 3 0x00000003 - no destination available
[ 217.494122][ C0] ODEBUG: Out of memory. ODEBUG disabled
[ 217.631238][ T4229] gspca_mr97310a: reg read [21] error -71
[ 217.637084][ T4229] mr97310a: probe of 5-1:1.0 failed with error -71
[ 217.670218][ T4229] usb 5-1: USB disconnect, device number 7
[ 217.716515][ T6406] md: array md0 already initialised!
[ 218.148468][ T6421] device syzkaller0 entered promiscuous mode
[ 218.206919][ T6426] netlink: 32 bytes leftover after parsing attributes in process `syz.3.746'.
[ 218.670216][ T4229] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 218.931392][ T4229] usb 2-1: Using ep0 maxpacket: 16
[ 219.060229][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 219.076378][ T4229] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 219.089289][ T4229] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[ 219.104859][ T4229] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 219.119544][ T4229] usb 2-1: config 0 interface 0 has no altsetting 0
[ 219.141243][ T4229] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00
[ 219.170097][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 219.193066][ T4229] usb 2-1: config 0 descriptor??
[ 219.200199][ T4494] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 219.275630][ T6455] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.757'.
[ 219.287048][ T6454] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.757'.
[ 219.409723][ T6459] device syzkaller0 entered promiscuous mode
[ 219.590543][ T4494] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 219.706715][ T26] audit: type=1800 audit(1789327707.169:73): pid=6467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.762" name=08 dev="sda1" ino=2048 res=0 errno=0
[ 220.098530][ T4229] logitech-djreceiver 0003:046D:C53A.0002: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0
[ 220.130373][ T4494] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 220.144036][ T4494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 220.153058][ T4494] usb 3-1: Product: syz
[ 220.157275][ T4494] usb 3-1: Manufacturer: syz
[ 220.162034][ T4494] usb 3-1: SerialNumber: syz
[ 220.184069][ T4229] usb 2-1: USB disconnect, device number 51
[ 220.202638][ T4494] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 220.437468][ T6477] fido_id[6477]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 220.573500][ T6490] device syzkaller0 entered promiscuous mode
[ 221.330821][ T6452] netlink: 'syz.2.756': attribute type 10 has an invalid length.
[ 221.362749][ T6452] team0 (unregistering): Port device team_slave_0 removed
[ 221.378682][ T6452] team0 (unregistering): Port device team_slave_1 removed
[ 221.450263][ T4494] gspca_mr97310a: reg write [21] error -71
[ 221.456250][ T4494] mr97310a: probe of 3-1:1.0 failed with error -71
[ 221.473755][ T4494] usb 3-1: USB disconnect, device number 38
[ 222.244340][ T6521] FAULT_INJECTION: forcing a failure.
[ 222.244340][ T6521] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 222.258968][ T6521] CPU: 1 PID: 6521 Comm: syz.4.780 Not tainted syzkaller #0
[ 222.266303][ T6521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 222.276727][ T6521] Call Trace:
[ 222.280048][ T6521]
[ 222.283023][ T6521] dump_stack_lvl+0x188/0x250
[ 222.287755][ T6521] ? show_regs_print_info+0x20/0x20
[ 222.293000][ T6521] ? load_image+0x410/0x410
[ 222.297651][ T6521] ? uncharge_page+0x490/0x490
[ 222.302494][ T6521] should_fail+0x383/0x4b0
[ 222.306959][ T6521] prepare_alloc_pages+0x1e3/0x5b0
[ 222.312121][ T6521] __alloc_pages+0x11b/0x480
[ 222.316757][ T6521] ? zone_statistics+0x170/0x170
[ 222.321744][ T6521] ? rcu_lock_acquire+0x30/0x30
[ 222.326636][ T6521] ? alloc_pages+0x452/0x560
[ 222.331914][ T6521] __get_free_pages+0x8/0x30
[ 222.336667][ T6521] __tlb_remove_page_size+0x1f2/0x3f0
[ 222.342079][ T6521] unmap_page_range+0xfcf/0x2410
[ 222.347116][ T6521] unmap_vmas+0x131/0x250
[ 222.351514][ T6521] ? unmap_page_range+0x2410/0x2410
[ 222.356751][ T6521] ? __mutex_lock_common+0x435/0x2400
[ 222.362194][ T6521] ? exit_mm_release+0x16/0x30
[ 222.367005][ T6521] exit_mmap+0x3b9/0x640
[ 222.371300][ T6521] ? vm_brk+0x20/0x20
[ 222.375499][ T6521] ? uprobe_clear_state+0x2f6/0x460
[ 222.380738][ T6521] __mmput+0x115/0x390
[ 222.384846][ T6521] exit_mm+0x632/0x7b0
[ 222.388945][ T6521] ? perf_pmu_migrate_context+0xb70/0xb70
[ 222.394879][ T6521] ? do_exit+0x2110/0x2110
[ 222.399340][ T6521] ? __ia32_sys_timer_delete+0x40/0x40
[ 222.404833][ T6521] ? hrtimer_try_to_cancel+0x3d6/0x420
[ 222.410433][ T6521] ? tty_audit_exit+0x149/0x1f0
[ 222.415307][ T6521] do_exit+0x5b8/0x2110
[ 222.419577][ T6521] ? put_task_struct+0x80/0x80
[ 222.424443][ T6521] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 222.430451][ T6521] ? _raw_spin_lock_irq+0xb7/0xf0
[ 222.435592][ T6521] do_group_exit+0x12c/0x2f0
[ 222.440377][ T6521] ? lockdep_hardirqs_on+0x94/0x140
[ 222.445608][ T6521] get_signal+0x7eb/0x12e0
[ 222.450066][ T6521] arch_do_signal_or_restart+0xe6/0x12a0
[ 222.455830][ T6521] ? futex_exit_release+0x1c0/0x1c0
[ 222.461223][ T6521] ? get_sigframe_size+0x10/0x10
[ 222.466189][ T6521] ? __context_tracking_exit+0x4c/0x80
[ 222.471781][ T6521] ? exit_to_user_mode_loop+0x3b/0x130
[ 222.477258][ T6521] exit_to_user_mode_loop+0x9e/0x130
[ 222.482648][ T6521] exit_to_user_mode_prepare+0xee/0x180
[ 222.488230][ T6521] syscall_exit_to_user_mode+0x16/0x40
[ 222.493729][ T6521] do_syscall_64+0x58/0xa0
[ 222.498162][ T6521] ? clear_bhb_loop+0x30/0x80
[ 222.502863][ T6521] ? clear_bhb_loop+0x30/0x80
[ 222.507564][ T6521] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 222.513482][ T6521] RIP: 0033:0x7fef147e2159
[ 222.518053][ T6521] Code: Unable to access opcode bytes at RIP 0x7fef147e212f.
[ 222.525440][ T6521] RSP: 002b:00007fef12a3a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 222.533875][ T6521] RAX: 0000000000000001 RBX: 00007fef14a69fa8 RCX: 00007fef147e2159
[ 222.541965][ T6521] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef14a69fac
[ 222.549953][ T6521] RBP: 00007fef14a69fa0 R08: 000a05dbdf509be4 R09: 0000000000000000
[ 222.558027][ T6521] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 222.566017][ T6521] R13: 00007fef14a6a038 R14: 00007ffd3a8d5de0 R15: 00007ffd3a8d5ec8
[ 222.574018][ T6521]
[ 222.762471][ T6536] FAULT_INJECTION: forcing a failure.
[ 222.762471][ T6536] name failslab, interval 1, probability 0, space 0, times 0
[ 222.762595][ T6536] CPU: 0 PID: 6536 Comm: syz.3.785 Not tainted syzkaller #0
[ 222.762627][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 222.762641][ T6536] Call Trace:
[ 222.762648][ T6536]
[ 222.762658][ T6536] dump_stack_lvl+0x188/0x250
[ 222.762691][ T6536] ? show_regs_print_info+0x20/0x20
[ 222.762719][ T6536] ? load_image+0x410/0x410
[ 222.762758][ T6536] should_fail+0x383/0x4b0
[ 222.762787][ T6536] should_failslab+0x5/0x20
[ 222.762807][ T6536] slab_pre_alloc_hook+0x51/0xc0
[ 222.762831][ T6536] __kmalloc_node_track_caller+0x68/0x3a0
[ 222.762854][ T6536] ? _sctp_make_chunk+0x5b/0x430
[ 222.762885][ T6536] ? __alloc_skb+0xf4/0x750
[ 222.762908][ T6536] ? _sctp_make_chunk+0x5b/0x430
[ 222.762936][ T6536] __alloc_skb+0x22c/0x750
[ 222.762964][ T6536] _sctp_make_chunk+0x5b/0x430
[ 222.762988][ T6536] ? sctp_make_abort_user+0x1c/0xf50
[ 222.763016][ T6536] sctp_make_abort_user+0x3a/0xf50
[ 222.763041][ T6536] ? skb_dequeue+0x120/0x150
[ 222.763063][ T6536] ? sctp_queue_purge_ulpevents+0x10/0x120
[ 222.763094][ T6536] sctp_close+0x2a0/0x890
[ 222.763129][ T6536] ? __sctp_write_space+0x500/0x500
[ 222.763158][ T6536] ? rwsem_write_trylock+0x135/0x1c0
[ 222.763183][ T6536] ? clear_nonspinnable+0x60/0x60
[ 222.763207][ T6536] ? ip_mc_drop_socket+0x25f/0x270
[ 222.763238][ T6536] inet_release+0x139/0x180
[ 222.763264][ T6536] sock_close+0xbf/0x210
[ 222.763288][ T6536] ? sock_mmap+0x90/0x90
[ 222.763311][ T6536] __fput+0x212/0x8c0
[ 222.763342][ T6536] task_work_run+0x125/0x1a0
[ 222.763373][ T6536] exit_to_user_mode_loop+0x10f/0x130
[ 222.763395][ T6536] exit_to_user_mode_prepare+0xee/0x180
[ 222.763417][ T6536] syscall_exit_to_user_mode+0x16/0x40
[ 222.763442][ T6536] do_syscall_64+0x58/0xa0
[ 222.763462][ T6536] ? clear_bhb_loop+0x30/0x80
[ 222.763483][ T6536] ? clear_bhb_loop+0x30/0x80
[ 222.763508][ T6536] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 222.763531][ T6536] RIP: 0033:0x7fa3946f7159
[ 222.763550][ T6536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 222.763569][ T6536] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 222.763595][ T6536] RAX: 0000000000000000 RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 222.763618][ T6536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 222.763633][ T6536] RBP: 00007fa39478e03b R08: 0000000000000000 R09: 0000000000000000
[ 222.763647][ T6536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 222.763662][ T6536] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 222.763695][ T6536]
[ 222.995578][ T6541] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.787'.
[ 222.996093][ T6540] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.787'.
[ 223.490249][ T4494] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 223.538350][ T6556] FAULT_INJECTION: forcing a failure.
[ 223.538350][ T6556] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 223.551837][ T6556] CPU: 1 PID: 6556 Comm: syz.0.794 Not tainted syzkaller #0
[ 223.559163][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 223.569257][ T6556] Call Trace:
[ 223.572571][ T6556]
[ 223.575625][ T6556] dump_stack_lvl+0x188/0x250
[ 223.580454][ T6556] ? show_regs_print_info+0x20/0x20
[ 223.585696][ T6556] ? load_image+0x410/0x410
[ 223.590255][ T6556] ? uncharge_page+0x490/0x490
[ 223.595063][ T6556] should_fail+0x383/0x4b0
[ 223.599763][ T6556] prepare_alloc_pages+0x1e3/0x5b0
[ 223.604930][ T6556] __alloc_pages+0x11b/0x480
[ 223.609597][ T6556] ? zone_statistics+0x170/0x170
[ 223.614574][ T6556] ? rcu_lock_acquire+0x30/0x30
[ 223.619466][ T6556] ? alloc_pages+0x452/0x560
[ 223.624099][ T6556] __get_free_pages+0x8/0x30
[ 223.628726][ T6556] __tlb_remove_page_size+0x1f2/0x3f0
[ 223.634150][ T6556] unmap_page_range+0xfcf/0x2410
[ 223.639153][ T6556] unmap_vmas+0x131/0x250
[ 223.643521][ T6556] ? unmap_page_range+0x2410/0x2410
[ 223.648747][ T6556] ? __mutex_lock_common+0x435/0x2400
[ 223.654138][ T6556] ? exit_mm_release+0x16/0x30
[ 223.658949][ T6556] exit_mmap+0x3b9/0x640
[ 223.663250][ T6556] ? vm_brk+0x20/0x20
[ 223.667291][ T6556] ? uprobe_clear_state+0x2f6/0x460
[ 223.672533][ T6556] __mmput+0x115/0x390
[ 223.676639][ T6556] exit_mm+0x632/0x7b0
[ 223.680744][ T6556] ? perf_pmu_migrate_context+0xb70/0xb70
[ 223.686527][ T6556] ? do_exit+0x2110/0x2110
[ 223.690977][ T6556] ? __ia32_sys_timer_delete+0x40/0x40
[ 223.696479][ T6556] ? hrtimer_try_to_cancel+0x3d6/0x420
[ 223.701981][ T6556] ? tty_audit_exit+0x149/0x1f0
[ 223.706875][ T6556] do_exit+0x5b8/0x2110
[ 223.711104][ T6556] ? put_task_struct+0x80/0x80
[ 223.715898][ T6556] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 223.721927][ T6556] ? _raw_spin_lock_irq+0xb7/0xf0
[ 223.726991][ T6556] do_group_exit+0x12c/0x2f0
[ 223.731621][ T6556] ? lockdep_hardirqs_on+0x94/0x140
[ 223.736851][ T6556] get_signal+0x7eb/0x12e0
[ 223.741303][ T6556] arch_do_signal_or_restart+0xe6/0x12a0
[ 223.746977][ T6556] ? futex_exit_release+0x1c0/0x1c0
[ 223.752207][ T6556] ? get_sigframe_size+0x10/0x10
[ 223.757189][ T6556] ? __context_tracking_exit+0x4c/0x80
[ 223.762770][ T6556] ? exit_to_user_mode_loop+0x3b/0x130
[ 223.768339][ T6556] exit_to_user_mode_loop+0x9e/0x130
[ 223.773667][ T6556] exit_to_user_mode_prepare+0xee/0x180
[ 223.779323][ T6556] syscall_exit_to_user_mode+0x16/0x40
[ 223.784914][ T6556] do_syscall_64+0x58/0xa0
[ 223.789346][ T6556] ? clear_bhb_loop+0x30/0x80
[ 223.794044][ T6556] ? clear_bhb_loop+0x30/0x80
[ 223.798917][ T6556] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 223.804825][ T6556] RIP: 0033:0x7fd34513b159
[ 223.809258][ T6556] Code: Unable to access opcode bytes at RIP 0x7fd34513b12f.
[ 223.816738][ T6556] RSP: 002b:00007fd3433930e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 223.825433][ T6556] RAX: 0000000000000001 RBX: 00007fd3453c2fa8 RCX: 00007fd34513b159
[ 223.833436][ T6556] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd3453c2fac
[ 223.841511][ T6556] RBP: 00007fd3453c2fa0 R08: 001c80157790aa36 R09: 0000000000000000
[ 223.849500][ T6556] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000
[ 223.858061][ T6556] R13: 00007fd3453c3038 R14: 00007ffd40584290 R15: 00007ffd40584378
[ 223.866072][ T6556]
[ 223.880070][ T4221] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 224.060928][ T4195] Bluetooth: hci4: link tx timeout
[ 224.063761][ T6568] FAULT_INJECTION: forcing a failure.
[ 224.063761][ T6568] name failslab, interval 1, probability 0, space 0, times 0
[ 224.066139][ T4195] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[ 224.091991][ T6568] CPU: 1 PID: 6568 Comm: syz.0.799 Not tainted syzkaller #0
[ 224.099346][ T6568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 224.109439][ T6568] Call Trace:
[ 224.112731][ T6568]
[ 224.115669][ T6568] dump_stack_lvl+0x188/0x250
[ 224.120365][ T6568] ? exit_to_user_mode_prepare+0xee/0x180
[ 224.126094][ T6568] ? do_syscall_64+0x58/0xa0
[ 224.130698][ T6568] ? show_regs_print_info+0x20/0x20
[ 224.135910][ T6568] ? load_image+0x410/0x410
[ 224.140437][ T6568] should_fail+0x383/0x4b0
[ 224.144876][ T6568] should_failslab+0x5/0x20
[ 224.149387][ T6568] slab_pre_alloc_hook+0x51/0xc0
[ 224.154346][ T6568] kmem_cache_alloc_node+0x47/0x2c0
[ 224.159552][ T6568] ? __alloc_skb+0xf4/0x750
[ 224.164069][ T6568] __alloc_skb+0xf4/0x750
[ 224.168604][ T6568] _sctp_make_chunk+0x5b/0x430
[ 224.173390][ T6568] ? sctp_make_abort_user+0x1c/0xf50
[ 224.178715][ T6568] sctp_make_abort_user+0x3a/0xf50
[ 224.183839][ T6568] ? skb_dequeue+0x120/0x150
[ 224.188438][ T6568] ? sctp_queue_purge_ulpevents+0x10/0x120
[ 224.194258][ T6568] sctp_close+0x2a0/0x890
[ 224.198701][ T6568] ? __sctp_write_space+0x500/0x500
[ 224.204018][ T6568] ? rwsem_write_trylock+0x135/0x1c0
[ 224.209451][ T6568] ? clear_nonspinnable+0x60/0x60
[ 224.214594][ T6568] ? ip_mc_drop_socket+0x25f/0x270
[ 224.219757][ T6568] inet_release+0x139/0x180
[ 224.224275][ T6568] sock_close+0xbf/0x210
[ 224.228678][ T6568] ? sock_mmap+0x90/0x90
[ 224.233134][ T6568] __fput+0x212/0x8c0
[ 224.237146][ T6568] task_work_run+0x125/0x1a0
[ 224.241786][ T6568] exit_to_user_mode_loop+0x10f/0x130
[ 224.247196][ T6568] exit_to_user_mode_prepare+0xee/0x180
[ 224.252751][ T6568] syscall_exit_to_user_mode+0x16/0x40
[ 224.258225][ T6568] do_syscall_64+0x58/0xa0
[ 224.262765][ T6568] ? clear_bhb_loop+0x30/0x80
[ 224.267454][ T6568] ? clear_bhb_loop+0x30/0x80
[ 224.272163][ T6568] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 224.278068][ T6568] RIP: 0033:0x7fd34513b159
[ 224.282524][ T6568] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 224.302147][ T6568] RSP: 002b:00007fd343393028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[ 224.310751][ T6568] RAX: 0000000000000000 RBX: 00007fd3453c2fa0 RCX: 00007fd34513b159
[ 224.318753][ T6568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 224.326732][ T6568] RBP: 00007fd3451d203b R08: 0000000000000000 R09: 0000000000000000
[ 224.334721][ T6568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 224.342965][ T6568] R13: 00007fd3453c3038 R14: 00007fd3453c2fa0 R15: 00007ffd40584378
[ 224.350972][ T6568]
[ 224.560481][ T4494] usb 2-1: config 1 has an invalid interface number: 188 but max is 0
[ 224.573771][ T4494] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 224.584867][ T4494] usb 2-1: config 1 has no interface number 0
[ 224.593391][ T4494] usb 2-1: config 1 interface 188 altsetting 209 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 224.607430][ T4221] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 224.621176][ T4494] usb 2-1: config 1 interface 188 has no altsetting 0
[ 224.820309][ T4221] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 224.829609][ T4494] usb 2-1: New USB device found, idVendor=2040, idProduct=7210, bcdDevice=5b.6b
[ 224.839155][ T4221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 224.847730][ T4494] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 224.856108][ T4221] usb 4-1: Product: syz
[ 224.860418][ T4221] usb 4-1: Manufacturer: syz
[ 224.865084][ T4221] usb 4-1: SerialNumber: syz
[ 224.869855][ T4494] usb 2-1: Product: syz
[ 224.874136][ T4494] usb 2-1: Manufacturer: syz
[ 224.889193][ T4494] usb 2-1: SerialNumber: syz
[ 224.952786][ T4221] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 225.252820][ T4494] usb 2-1: unknown interface protocol 0xc1, assuming v1
[ 225.260679][ T4494] usb 2-1: skipping empty audio interface (v1)
[ 225.270146][ T4253] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 225.285266][ T4494] snd-usb-audio: probe of 2-1:1.188 failed with error -22
[ 225.303599][ T4494] usb 2-1: USB disconnect, device number 52
[ 225.313648][ T4297] udevd[4297]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.188/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 225.550141][ T4253] usb 5-1: Using ep0 maxpacket: 16
[ 225.890431][ T4253] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 225.910818][ T6588] jffs2: notice: (6588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 226.063128][ T6549] netlink: 'syz.3.786': attribute type 10 has an invalid length.
[ 226.590153][ T4221] gspca_mr97310a: reg write [21] error -110
[ 226.744962][ T6549] team0 (unregistering): Port device team_slave_0 removed
[ 226.805089][ T4221] mr97310a: probe of 4-1:1.0 failed with error -110
[ 226.811970][ T4253] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 226.831046][ T4253] usb 5-1: Product: syz
[ 226.835991][ T4253] usb 5-1: Manufacturer: syz
[ 226.840904][ T4253] usb 5-1: SerialNumber: syz
[ 226.851987][ T6549] team0 (unregistering): Port device team_slave_1 removed
[ 226.860394][ T4253] r8152-cfgselector 5-1: config 0 descriptor??
[ 226.888183][ T26] audit: type=1800 audit(1789327714.349:74): pid=6596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.809" name="syzkaller0" dev="sda1" ino=2049 res=0 errno=0
[ 226.974388][ T6598] FAULT_INJECTION: forcing a failure.
[ 226.974388][ T6598] name failslab, interval 1, probability 0, space 0, times 0
[ 226.989825][ T6598] CPU: 1 PID: 6598 Comm: syz.2.808 Not tainted syzkaller #0
[ 226.997178][ T6598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 227.007281][ T6598] Call Trace:
[ 227.010601][ T6598]
[ 227.013566][ T6598] dump_stack_lvl+0x188/0x250
[ 227.018296][ T6598] ? show_regs_print_info+0x20/0x20
[ 227.023532][ T6598] ? load_image+0x410/0x410
[ 227.028084][ T6598] ? __lock_acquire+0x7b50/0x7b50
[ 227.033158][ T6598] should_fail+0x383/0x4b0
[ 227.037617][ T6598] should_failslab+0x5/0x20
[ 227.042158][ T6598] slab_pre_alloc_hook+0x51/0xc0
[ 227.047139][ T6598] kmem_cache_alloc_trace+0x47/0x290
[ 227.052455][ T6598] ? x509_cert_parse+0x97/0x7a0
[ 227.057349][ T6598] x509_cert_parse+0x97/0x7a0
[ 227.062072][ T6598] x509_key_preparse+0x60/0x5d0
[ 227.066970][ T6598] ? down_read+0x1aa/0x2e0
[ 227.071437][ T6598] asymmetric_key_preparse+0xa5/0x140
[ 227.076861][ T6598] key_create_or_update+0x432/0xa40
[ 227.082103][ T6598] ? security_key_permission+0x7c/0xa0
[ 227.087628][ T6598] ? key_type_put+0x20/0x20
[ 227.092183][ T6598] ? lookup_user_key_possessed+0x40/0x40
[ 227.097878][ T6598] ? __might_fault+0xb3/0x110
[ 227.102609][ T6598] __se_sys_add_key+0x34b/0x410
[ 227.107509][ T6598] ? __x64_sys_add_key+0xc0/0xc0
[ 227.112512][ T6598] ? lockdep_hardirqs_on+0x94/0x140
[ 227.117764][ T6598] ? __x64_sys_add_key+0x1c/0xc0
[ 227.122748][ T6598] do_syscall_64+0x4c/0xa0
[ 227.127241][ T6598] ? clear_bhb_loop+0x30/0x80
[ 227.131954][ T6598] ? clear_bhb_loop+0x30/0x80
[ 227.136671][ T6598] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 227.142609][ T6598] RIP: 0033:0x7fe5a0415159
[ 227.147174][ T6598] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 227.166852][ T6598] RSP: 002b:00007fe59e66d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 227.175410][ T6598] RAX: ffffffffffffffda RBX: 00007fe5a069cfa0 RCX: 00007fe5a0415159
[ 227.183432][ T6598] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 227.191445][ T6598] RBP: 00007fe5a04ac03b R08: ffffffffffffffff R09: 0000000000000000
[ 227.199453][ T6598] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 227.207547][ T6598] R13: 00007fe5a069d038 R14: 00007fe5a069cfa0 R15: 00007ffe7a4a9cc8
[ 227.215578][ T6598]
[ 227.246596][ T4229] usb 4-1: USB disconnect, device number 33
[ 227.299057][ T6600] FAULT_INJECTION: forcing a failure.
[ 227.299057][ T6600] name failslab, interval 1, probability 0, space 0, times 0
[ 227.347511][ T6600] CPU: 1 PID: 6600 Comm: syz.3.810 Not tainted syzkaller #0
[ 227.354882][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 227.364998][ T6600] Call Trace:
[ 227.368337][ T6600]
[ 227.371339][ T6600] dump_stack_lvl+0x188/0x250
[ 227.376061][ T6600] ? show_regs_print_info+0x20/0x20
[ 227.381332][ T6600] ? load_image+0x410/0x410
[ 227.385888][ T6600] ? __might_sleep+0xf0/0xf0
[ 227.390519][ T6600] ? __lock_acquire+0x7b50/0x7b50
[ 227.395960][ T6600] ? crypto_alg_lookup+0x186/0x1d0
[ 227.401145][ T6600] should_fail+0x383/0x4b0
[ 227.405633][ T6600] should_failslab+0x5/0x20
[ 227.410193][ T6600] slab_pre_alloc_hook+0x51/0xc0
[ 227.415188][ T6600] __kmalloc_node+0x6d/0x3a0
[ 227.419833][ T6600] ? crypto_create_tfm_node+0x72/0x340
[ 227.425352][ T6600] crypto_create_tfm_node+0x72/0x340
[ 227.430698][ T6600] ? crypto_alg_mod_lookup+0x47f/0x6d0
[ 227.436212][ T6600] crypto_alloc_tfm_node+0x177/0x360
[ 227.441559][ T6600] public_key_verify_signature+0x27b/0xd40
[ 227.447419][ T6600] ? __kasan_kmalloc+0xaf/0xe0
[ 227.452225][ T6600] ? asymmetric_key_generate_id+0x52/0xd0
[ 227.458008][ T6600] ? x509_cert_parse+0x53a/0x7a0
[ 227.462987][ T6600] ? x509_key_preparse+0x60/0x5d0
[ 227.468048][ T6600] ? asymmetric_key_preparse+0xa5/0x140
[ 227.473787][ T6600] ? key_create_or_update+0x432/0xa40
[ 227.479208][ T6600] ? __se_sys_add_key+0x34b/0x410
[ 227.484270][ T6600] ? do_syscall_64+0x4c/0xa0
[ 227.488909][ T6600] ? public_key_free+0x80/0x80
[ 227.493744][ T6600] ? asymmetric_key_id_same+0x63/0xe0
[ 227.499175][ T6600] x509_check_for_self_signed+0x317/0x420
[ 227.504941][ T6600] x509_cert_parse+0x59c/0x7a0
[ 227.509755][ T6600] x509_key_preparse+0x60/0x5d0
[ 227.514650][ T6600] ? down_read+0x1aa/0x2e0
[ 227.519114][ T6600] asymmetric_key_preparse+0xa5/0x140
[ 227.524531][ T6600] key_create_or_update+0x432/0xa40
[ 227.529877][ T6600] ? security_key_permission+0x7c/0xa0
[ 227.535385][ T6600] ? key_type_put+0x20/0x20
[ 227.539933][ T6600] ? lookup_user_key_possessed+0x40/0x40
[ 227.545625][ T6600] ? __might_fault+0xb3/0x110
[ 227.550363][ T6600] __se_sys_add_key+0x34b/0x410
[ 227.555266][ T6600] ? __x64_sys_add_key+0xc0/0xc0
[ 227.560257][ T6600] ? lockdep_hardirqs_on+0x94/0x140
[ 227.565498][ T6600] ? __x64_sys_add_key+0x1c/0xc0
[ 227.570485][ T6600] do_syscall_64+0x4c/0xa0
[ 227.574939][ T6600] ? clear_bhb_loop+0x30/0x80
[ 227.579655][ T6600] ? clear_bhb_loop+0x30/0x80
[ 227.584373][ T6600] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 227.590331][ T6600] RIP: 0033:0x7fa3946f7159
[ 227.594780][ T6600] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 227.614439][ T6600] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 227.622905][ T6600] RAX: ffffffffffffffda RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 227.630920][ T6600] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 227.638934][ T6600] RBP: 00007fa39478e03b R08: ffffffffffffffff R09: 0000000000000000
[ 227.647039][ T6600] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 227.655054][ T6600] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 227.663232][ T6600]
[ 227.690171][ T4253] r8152-cfgselector 5-1: Unknown version 0x0000
[ 227.696634][ T4253] r8152-cfgselector 5-1: bad CDC descriptors
[ 227.730472][ T4253] r8152-cfgselector 5-1: Unknown version 0x0000
[ 227.748735][ T4253] r8152-cfgselector 5-1: USB disconnect, device number 8
[ 228.080114][ T4279] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 228.330117][ T4279] usb 3-1: Using ep0 maxpacket: 8
[ 228.450344][ T4279] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 228.458709][ T4279] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 228.490087][ T4279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 228.499908][ T4279] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 228.530122][ T4279] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 228.550181][ T4279] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 228.556293][ T4253] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 228.559286][ T4279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 228.761675][ T6628] jffs2: notice: (6628) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 228.860706][ T4279] usb 3-1: usb_control_msg returned -32
[ 228.866601][ T4279] usbtmc 3-1:16.0: can't read capabilities
[ 228.900198][ T4284] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 229.010166][ T4253] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 229.280508][ T4284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 229.490764][ T4284] usb 2-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[ 229.536471][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 229.592499][ T4284] usb 2-1: Product: syz
[ 229.626235][ T4284] usb 2-1: Manufacturer: syz
[ 229.658421][ T4284] usb 2-1: SerialNumber: syz
[ 229.711123][ T4253] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 229.721958][ T4253] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 229.734911][ T4253] usb 5-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 229.744034][ T4253] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 229.771783][ T4284] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[ 229.908349][ T6634] FAULT_INJECTION: forcing a failure.
[ 229.908349][ T6634] name failslab, interval 1, probability 0, space 0, times 0
[ 229.927772][ T4195] Bluetooth: hci2: SCO packet for unknown connection handle 0
[ 229.930407][ T6634] CPU: 1 PID: 6634 Comm: syz.3.822 Not tainted syzkaller #0
[ 229.943454][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 229.953549][ T6634] Call Trace:
[ 229.956869][ T6634]
[ 229.959836][ T6634] dump_stack_lvl+0x188/0x250
[ 229.964684][ T6634] ? show_regs_print_info+0x20/0x20
[ 229.969938][ T6634] ? load_image+0x410/0x410
[ 229.974483][ T6634] ? __lock_acquire+0x7b50/0x7b50
[ 229.979570][ T6634] should_fail+0x383/0x4b0
[ 229.984160][ T6634] should_failslab+0x5/0x20
[ 229.988701][ T6634] slab_pre_alloc_hook+0x51/0xc0
[ 229.993688][ T6634] kmem_cache_alloc_trace+0x47/0x290
[ 229.999011][ T6634] ? x509_cert_parse+0x97/0x7a0
[ 230.003917][ T6634] x509_cert_parse+0x97/0x7a0
[ 230.008644][ T6634] x509_key_preparse+0x60/0x5d0
[ 230.013544][ T6634] ? down_read+0x1aa/0x2e0
[ 230.018024][ T6634] asymmetric_key_preparse+0xa5/0x140
[ 230.023439][ T6634] key_create_or_update+0x432/0xa40
[ 230.028679][ T6634] ? security_key_permission+0x7c/0xa0
[ 230.034191][ T6634] ? key_type_put+0x20/0x20
[ 230.038739][ T6634] ? lookup_user_key_possessed+0x40/0x40
[ 230.044429][ T6634] ? __might_fault+0xb3/0x110
[ 230.049153][ T6634] __se_sys_add_key+0x34b/0x410
[ 230.054054][ T6634] ? __x64_sys_add_key+0xc0/0xc0
[ 230.059040][ T6634] ? lockdep_hardirqs_on+0x94/0x140
[ 230.064281][ T6634] ? __x64_sys_add_key+0x1c/0xc0
[ 230.069285][ T6634] do_syscall_64+0x4c/0xa0
[ 230.073738][ T6634] ? clear_bhb_loop+0x30/0x80
[ 230.078457][ T6634] ? clear_bhb_loop+0x30/0x80
[ 230.083360][ T6634] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 230.089308][ T6634] RIP: 0033:0x7fa3946f7159
[ 230.093766][ T6634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 230.113409][ T6634] RSP: 002b:00007fa39294f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 230.121984][ T6634] RAX: ffffffffffffffda RBX: 00007fa39497efa0 RCX: 00007fa3946f7159
[ 230.130087][ T6634] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 230.138095][ T6634] RBP: 00007fa39478e03b R08: ffffffffffffffff R09: 0000000000000000
[ 230.146113][ T6634] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[ 230.154130][ T6634] R13: 00007fa39497f038 R14: 00007fa39497efa0 R15: 00007fff425e6d28
[ 230.162179][ T6634]
[ 230.250488][ T6635] usbtmc 3-1:16.0: usb_control_msg returned -32
[ 230.293163][ T4229] usb 3-1: USB disconnect, device number 39
[ 230.410184][ T4253] cxacru 5-1:1.0: send of cm 0x91 failed (-71)
[ 230.417211][ T4253] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[ 230.425587][ T4253] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[ 230.433853][ T4253] cxacru: probe of 5-1:1.0 failed with error -71
[ 230.444189][ T4253] usb 5-1: USB disconnect, device number 9
[ 230.452970][ T4297] udevd[4297]: setting owner of /dev/bus/usb/005/009 to uid=0, gid=0 failed: No such file or directory
[ 230.580234][ T4186] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 230.820107][ T4186] usb 4-1: Using ep0 maxpacket: 16
[ 230.887025][ T6625] netlink: 'syz.1.820': attribute type 10 has an invalid length.
[ 230.910187][ T4284] gspca_mr97310a: reg write [21] error -71
[ 230.916134][ T4284] mr97310a: probe of 2-1:1.0 failed with error -71
[ 230.940451][ T4186] usb 4-1: config 4 has an invalid interface number: 9 but max is 0
[ 230.948601][ T4186] usb 4-1: config 4 has no interface number 0
[ 230.957976][ T4186] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 230.973308][ T4284] usb 2-1: USB disconnect, device number 53
[ 230.990280][ T4186] usb 4-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 231.011572][ T4186] usb 4-1: config 4 interface 9 has no altsetting 0
[ 231.089773][ T6649] FAULT_INJECTION: forcing a failure.
[ 231.089773][ T6649] name failslab, interval 1, probability 0, space 0, times 0
[ 231.110262][ T6649] CPU: 0 PID: 6649 Comm: syz.2.829 Not tainted syzkaller #0
[ 231.117632][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 231.127901][ T6649] Call Trace:
[ 231.131226][ T6649]
[ 231.134190][ T6649] dump_stack_lvl+0x188/0x250
[ 231.138924][ T6649] ? show_regs_print_info+0x20/0x20
[ 231.144203][ T6649] ? load_image+0x410/0x410
[ 231.148757][ T6649] ? __might_sleep+0xf0/0xf0
[ 231.153390][ T6649] ? __lock_acquire+0x7b50/0x7b50
[ 231.158460][ T6649] ? crypto_alg_lookup+0x186/0x1d0
[ 231.163623][ T6649] should_fail+0x383/0x4b0
[ 231.168093][ T6649] should_failslab+0x5/0x20
[ 231.172645][ T6649] slab_pre_alloc_hook+0x51/0xc0
[ 231.178843][ T6649] __kmalloc_node+0x6d/0x3a0
[ 231.183479][ T6649] ? crypto_create_tfm_node+0x72/0x340
[ 231.188999][ T6649] crypto_create_tfm_node+0x72/0x340
[ 231.194429][ T6649] ? crypto_alg_mod_lookup+0x47f/0x6d0
[ 231.200122][ T6649] crypto_alloc_tfm_node+0x177/0x360
[ 231.205470][ T6649] public_key_verify_signature+0x27b/0xd40
[ 231.211373][ T6649] ? __kasan_kmalloc+0xaf/0xe0
[ 231.216185][ T6649] ? asymmetric_key_generate_id+0x52/0xd0
[ 231.221952][ T6649] ? x509_cert_parse+0x53a/0x7a0
[ 231.226939][ T6649] ? x509_key_preparse+0x60/0x5d0
[ 231.232012][ T6649] ? asymmetric_key_preparse+0xa5/0x140
[ 231.237598][ T6649] ? key_create_or_update+0x432/0xa40
[ 231.243011][ T6649] ? __se_sys_add_key+0x34b/0x410
[ 231.248167][ T6649] ? do_syscall_64+0x4c/0xa0
[ 231.252830][ T6649] ? public_key_free+0x80/0x80
[ 231.257906][ T6649] ? asymmetric_key_id_same+0x63/0xe0
[ 231.263332][ T6649] x509_check_for_self_signed+0x317/0x420
[ 231.269219][ T6649] x509_cert_parse+0x59c/0x7a0
[ 231.274039][ T6649] x509_key_preparse+0x60/0x5d0
[ 231.278943][ T6649] ? down_read+0x1aa/0x2e0
[ 231.283402][ T6649] asymmetric_key_preparse+0xa5/0x140
[ 231.288825][ T6649] key_create_or_update+0x432/0xa40
[ 231.294070][ T6649] ? security_key_permission+0x7c/0xa0
[ 231.299581][ T6649] ? key_type_put+0x20/0x20
[ 231.304121][ T6649] ? lookup_user_key_possessed+0x40/0x40
[ 231.309783][ T6649] ? __might_fault+0xb3/0x110
[ 231.314491][ T6649] __se_sys_add_key+0x34b/0x410
[ 231.319350][ T6649] ? __x64_sys_add_key+0xc0/0xc0
[ 231.324307][ T6649] ? lockdep_hardirqs_on+0x94/0x140
[ 231.329571][ T6649] ? __x64_sys_add_key+0x1c/0xc0
[ 231.334544][ T6649] do_syscall_64+0x4c/0xa0
[ 231.338993][ T6649] ? clear_bhb_loop+0x30/0x80
[ 231.343697][ T6649] ? clear_bhb_loop+0x30/0x80
[ 231.348403][ T6649] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 231.354320][ T6649] RIP: 0033:0x7fe5a0415159
[ 231.358742][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 231.378622][ T6649] RSP: 002b:00007fe59e66d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 231.387088][ T6649] RAX: ffffffffffffffda RBX: 00007fe5a069cfa0 RCX: 00007fe5a0415159
[ 231.395097][ T6649] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 231.403077][ T6649] RBP: 00007fe5a04ac03b R08: ffffffffffffffff R09: 0000000000000000
[ 231.411057][ T6649] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 231.419038][ T6649] R13: 00007fe5a069d038 R14: 00007fe5a069cfa0 R15: 00007ffe7a4a9cc8
[ 231.427045][ T6649]
[ 231.510345][ T4186] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 231.530274][ T4229] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 231.560647][ T6656] jffs2: notice: (6656) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[ 231.850068][ T4229] usb 5-1: Using ep0 maxpacket: 16
[ 232.150785][ T4229] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 232.199393][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 232.238411][ T4229] usb 5-1: Product: syz
[ 232.255296][ T4229] usb 5-1: Manufacturer: syz
[ 232.284998][ T4229] usb 5-1: SerialNumber: syz
[ 232.389029][ T4229] r8152-cfgselector 5-1: config 0 descriptor??
[ 232.456163][ T4186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 232.464316][ T4186] usb 4-1: Product: syz
[ 232.469286][ T4186] usb 4-1: Manufacturer: syz
[ 232.474003][ T4186] usb 4-1: SerialNumber: syz
[ 232.500356][ T6638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 232.507478][ T6638] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[ 232.551968][ T6665] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(3)
[ 232.568780][ T6665] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(4.50.0), cmd(9)
[ 232.581308][ T4186] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 232.690339][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 232.710234][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 232.716847][ T4229] r8152-cfgselector 5-1: bad CDC descriptors
[ 232.740200][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 232.757783][ T4229] r8152-cfgselector 5-1: USB disconnect, device number 10
[ 232.920321][ T4494] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[ 233.160147][ T4494] usb 3-1: Using ep0 maxpacket: 16
[ 233.280390][ T4494] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 233.450262][ T4494] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 233.464152][ T4494] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 233.486852][ T4494] usb 3-1: Product: syz
[ 233.497502][ T4494] usb 3-1: Manufacturer: syz
[ 233.515493][ T4494] usb 3-1: SerialNumber: syz
[ 233.538651][ T4494] usb 3-1: config 0 descriptor??
[ 233.580297][ T4229] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 233.591047][ T4494] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 233.601249][ T4494] em28xx 3-1:0.0: DVB interface 0 found: bulk
[ 233.680237][ T6594] usb 4-1: Failed to submit usb control message: -110
[ 233.694269][ T6594] usb 4-1: unable to send the bmi data to the device: -110
[ 233.704913][ T6594] usb 4-1: unable to get target info from device
[ 233.715513][ T6594] usb 4-1: could not get target info (-110)
[ 233.724386][ T6594] usb 4-1: could not probe fw (-110)
[ 233.772749][ T7] usb 4-1: USB disconnect, device number 34
[ 233.850111][ T4284] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 234.230246][ T4494] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 234.230566][ T4284] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 234.260086][ T4284] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64
[ 234.280054][ T4284] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[ 234.310121][ T4284] usb 2-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 234.319250][ T4284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 234.510116][ T7] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 234.557672][ T6693] FAULT_INJECTION: forcing a failure.
[ 234.557672][ T6693] name failslab, interval 1, probability 0, space 0, times 0
[ 234.576871][ T6693] CPU: 1 PID: 6693 Comm: syz.0.843 Not tainted syzkaller #0
[ 234.584351][ T6693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 234.594567][ T6693] Call Trace:
[ 234.597886][ T6693]
[ 234.600933][ T6693] dump_stack_lvl+0x188/0x250
[ 234.605666][ T6693] ? show_regs_print_info+0x20/0x20
[ 234.610919][ T6693] ? load_image+0x410/0x410
[ 234.615478][ T6693] ? __lock_acquire+0x7b50/0x7b50
[ 234.620560][ T6693] should_fail+0x383/0x4b0
[ 234.625035][ T6693] should_failslab+0x5/0x20
[ 234.629591][ T6693] slab_pre_alloc_hook+0x51/0xc0
[ 234.634589][ T6693] __kmalloc+0x6b/0x340
[ 234.638796][ T6693] ? public_key_verify_signature+0x3db/0xd40
[ 234.644849][ T6693] public_key_verify_signature+0x3db/0xd40
[ 234.650831][ T6693] ? asymmetric_key_preparse+0xa5/0x140
[ 234.656437][ T6693] ? public_key_free+0x80/0x80
[ 234.661283][ T6693] ? asymmetric_key_id_same+0x63/0xe0
[ 234.666704][ T6693] x509_check_for_self_signed+0x317/0x420
[ 234.672476][ T6693] x509_cert_parse+0x59c/0x7a0
[ 234.677291][ T6693] x509_key_preparse+0x60/0x5d0
[ 234.682189][ T6693] ? down_read+0x1aa/0x2e0
[ 234.686662][ T6693] asymmetric_key_preparse+0xa5/0x140
[ 234.692079][ T6693] key_create_or_update+0x432/0xa40
[ 234.697313][ T6693] ? security_key_permission+0x7c/0xa0
[ 234.702815][ T6693] ? key_type_put+0x20/0x20
[ 234.707368][ T6693] ? lookup_user_key_possessed+0x40/0x40
[ 234.713078][ T6693] ? __might_fault+0xb3/0x110
[ 234.717938][ T6693] __se_sys_add_key+0x34b/0x410
[ 234.722838][ T6693] ? __x64_sys_add_key+0xc0/0xc0
[ 234.727865][ T6693] ? lockdep_hardirqs_on+0x94/0x140
[ 234.733105][ T6693] ? __x64_sys_add_key+0x1c/0xc0
[ 234.738093][ T6693] do_syscall_64+0x4c/0xa0
[ 234.742556][ T6693] ? clear_bhb_loop+0x30/0x80
[ 234.747276][ T6693] ? clear_bhb_loop+0x30/0x80
[ 234.751992][ T6693] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 234.757936][ T6693] RIP: 0033:0x7fd34513b159
[ 234.762380][ T6693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 234.782121][ T6693] RSP: 002b:00007fd343393028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 234.790603][ T6693] RAX: ffffffffffffffda RBX: 00007fd3453c2fa0 RCX: 00007fd34513b159
[ 234.798607][ T6693] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 234.806636][ T6693] RBP: 00007fd3451d203b R08: ffffffffffffffff R09: 0000000000000000
[ 234.814638][ T6693] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 234.822638][ T6693] R13: 00007fd3453c3038 R14: 00007fd3453c2fa0 R15: 00007ffd40584378
[ 234.830660][ T6693]
[ 234.860564][ T7] usb 4-1: Using ep0 maxpacket: 8
[ 234.920310][ T4494] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 234.932022][ T4494] em28xx 3-1:0.0: board has no eeprom
[ 234.980267][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[ 234.988789][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 234.998671][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 235.009694][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 235.019779][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 235.034389][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 235.043541][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 235.090322][ T4284] cxacru 2-1:1.0: send of cm 0x91 failed (-71)
[ 235.096562][ T4284] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71
[ 235.105669][ T4284] ATM dev 0: usbatm_atm_init: atm_start failed: -71!
[ 235.113592][ T4284] cxacru: probe of 2-1:1.0 failed with error -71
[ 235.123338][ T4284] usb 2-1: USB disconnect, device number 54
[ 235.260239][ T4494] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 235.268409][ T4494] em28xx 3-1:0.0: dvb set to bulk mode.
[ 235.275466][ T4221] em28xx 3-1:0.0: Binding DVB extension
[ 235.297080][ T4494] usb 3-1: USB disconnect, device number 40
[ 235.300725][ T7] usb 4-1: usb_control_msg returned -32
[ 235.311137][ T4494] em28xx 3-1:0.0: Disconnecting em28xx
[ 235.323164][ T7] usbtmc 4-1:16.0: can't read capabilities
[ 235.358824][ T4221] em28xx 3-1:0.0: Registering input extension
[ 235.367207][ T4494] em28xx 3-1:0.0: Closing input extension
[ 235.441857][ T4494] em28xx 3-1:0.0: Freeing device
[ 236.135802][ T6721] usbtmc 4-1:16.0: usb_control_msg returned -32
[ 236.165851][ T7] usb 4-1: USB disconnect, device number 35
[ 236.220153][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 236.320218][ T4284] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 236.470178][ T4229] usb 5-1: Using ep0 maxpacket: 16
[ 236.620327][ T4284] usb 2-1: Using ep0 maxpacket: 16
[ 236.751280][ T4229] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 236.753608][ T4284] usb 2-1: config 4 has an invalid interface number: 9 but max is 0
[ 236.768896][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 236.768925][ T4229] usb 5-1: Product: syz
[ 236.768952][ T4229] usb 5-1: Manufacturer: syz
[ 236.768970][ T4229] usb 5-1: SerialNumber: syz
[ 236.791836][ T4229] r8152-cfgselector 5-1: config 0 descriptor??
[ 236.830095][ T4284] usb 2-1: config 4 has no interface number 0
[ 236.836253][ T4284] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 236.860041][ T4284] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x84 has invalid maxpacket 64
[ 236.878185][ T4284] usb 2-1: config 4 interface 9 has no altsetting 0
[ 236.951925][ T6727] FAULT_INJECTION: forcing a failure.
[ 236.951925][ T6727] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 236.965524][ T6727] CPU: 0 PID: 6727 Comm: syz.3.854 Not tainted syzkaller #0
[ 236.972948][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 236.983136][ T6727] Call Trace:
[ 236.986453][ T6727]
[ 236.989419][ T6727] dump_stack_lvl+0x188/0x250
[ 236.994178][ T6727] ? show_regs_print_info+0x20/0x20
[ 236.999448][ T6727] ? load_image+0x410/0x410
[ 237.004000][ T6727] ? uncharge_page+0x490/0x490
[ 237.006238][ T6723] syz.2.853 (6723): drop_caches: 2
[ 237.008968][ T6727] should_fail+0x383/0x4b0
[ 237.009360][ T6727] prepare_alloc_pages+0x1e3/0x5b0
[ 237.024978][ T6727] __alloc_pages+0x11b/0x480
[ 237.029614][ T6727] ? zone_statistics+0x170/0x170
[ 237.034593][ T6727] ? rcu_lock_acquire+0x30/0x30
[ 237.039491][ T6727] ? alloc_pages+0x452/0x560
[ 237.044131][ T6727] __get_free_pages+0x8/0x30
[ 237.048852][ T6727] __tlb_remove_page_size+0x1f2/0x3f0
[ 237.054280][ T6727] unmap_page_range+0xfcf/0x2410
[ 237.059296][ T6727] unmap_vmas+0x131/0x250
[ 237.063703][ T6727] ? unmap_page_range+0x2410/0x2410
[ 237.068938][ T6727] ? __mutex_lock_common+0x435/0x2400
[ 237.074373][ T6727] ? exit_mm_release+0x16/0x30
[ 237.079218][ T6727] exit_mmap+0x3b9/0x640
[ 237.083502][ T6727] ? vm_brk+0x20/0x20
[ 237.087534][ T6727] ? uprobe_clear_state+0x2f6/0x460
[ 237.092778][ T6727] __mmput+0x115/0x390
[ 237.096881][ T6727] exit_mm+0x632/0x7b0
[ 237.100995][ T6727] ? perf_pmu_migrate_context+0xb70/0xb70
[ 237.106753][ T6727] ? do_exit+0x2110/0x2110
[ 237.111732][ T6727] ? __ia32_sys_timer_delete+0x40/0x40
[ 237.117233][ T6727] ? hrtimer_try_to_cancel+0x3d6/0x420
[ 237.122889][ T6727] ? tty_audit_exit+0x149/0x1f0
[ 237.127793][ T6727] do_exit+0x5b8/0x2110
[ 237.131993][ T6727] ? put_task_struct+0x80/0x80
[ 237.136820][ T6727] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 237.142982][ T6727] ? _raw_spin_lock_irq+0xb7/0xf0
[ 237.148053][ T6727] do_group_exit+0x12c/0x2f0
[ 237.152783][ T6727] ? lockdep_hardirqs_on+0x94/0x140
[ 237.158060][ T6727] get_signal+0x7eb/0x12e0
[ 237.162532][ T6727] arch_do_signal_or_restart+0xe6/0x12a0
[ 237.168410][ T6727] ? futex_exit_release+0x1c0/0x1c0
[ 237.173672][ T6727] ? get_sigframe_size+0x10/0x10
[ 237.178671][ T6727] ? __context_tracking_exit+0x4c/0x80
[ 237.184354][ T6727] ? exit_to_user_mode_loop+0x3b/0x130
[ 237.189855][ T6727] exit_to_user_mode_loop+0x9e/0x130
[ 237.195193][ T6727] exit_to_user_mode_prepare+0xee/0x180
[ 237.200777][ T6727] syscall_exit_to_user_mode+0x16/0x40
[ 237.206265][ T6727] do_syscall_64+0x58/0xa0
[ 237.210800][ T6727] ? clear_bhb_loop+0x30/0x80
[ 237.215596][ T6727] ? clear_bhb_loop+0x30/0x80
[ 237.220308][ T6727] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 237.226235][ T6727] RIP: 0033:0x7fa3946f7159
[ 237.230669][ T6727] Code: Unable to access opcode bytes at RIP 0x7fa3946f712f.
[ 237.238051][ T6727] RSP: 002b:00007fa39294f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 237.246488][ T6727] RAX: 0000000000000001 RBX: 00007fa39497efa8 RCX: 00007fa3946f7159
[ 237.254506][ T6727] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa39497efac
[ 237.262510][ T6727] RBP: 00007fa39497efa0 R08: 0034f030efce4e64 R09: 0000000000000000
[ 237.270509][ T6727] R10: 000000000000004e R11: 0000000000000246 R12: 0000000000000000
[ 237.278502][ T6727] R13: 00007fa39497f038 R14: 00007fff425e6c40 R15: 00007fff425e6d28
[ 237.286532][ T6727]
[ 237.300289][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 237.320262][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 237.336990][ T4229] r8152-cfgselector 5-1: bad CDC descriptors
[ 237.383719][ T4229] r8152-cfgselector 5-1: Unknown version 0x0000
[ 237.392383][ T4229] r8152-cfgselector 5-1: USB disconnect, device number 12
[ 237.430339][ T4284] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[ 237.439538][ T4284] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 237.447645][ T4284] usb 2-1: Product: syz
[ 237.451988][ T4284] usb 2-1: Manufacturer: syz
[ 237.456633][ T4284] usb 2-1: SerialNumber: syz
[ 237.480471][ T6717] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 237.488243][ T6717] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[ 237.514996][ T4284] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 237.873450][ T6739] FAULT_INJECTION: forcing a failure.
[ 237.873450][ T6739] name failslab, interval 1, probability 0, space 0, times 0
[ 237.893244][ T6739] CPU: 1 PID: 6739 Comm: syz.4.855 Not tainted syzkaller #0
[ 237.900607][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 237.910697][ T6739] Call Trace:
[ 237.914015][ T6739]
[ 237.916978][ T6739] dump_stack_lvl+0x188/0x250
[ 237.921702][ T6739] ? show_regs_print_info+0x20/0x20
[ 237.926947][ T6739] ? load_image+0x410/0x410
[ 237.931497][ T6739] ? __might_sleep+0xf0/0xf0
[ 237.936128][ T6739] ? __lock_acquire+0x7b50/0x7b50
[ 237.941209][ T6739] ? crypto_alg_lookup+0x186/0x1d0
[ 237.946405][ T6739] should_fail+0x383/0x4b0
[ 237.950869][ T6739] should_failslab+0x5/0x20
[ 237.955418][ T6739] slab_pre_alloc_hook+0x51/0xc0
[ 237.960397][ T6739] __kmalloc_node+0x6d/0x3a0
[ 237.965059][ T6739] ? crypto_create_tfm_node+0x72/0x340
[ 237.970575][ T6739] crypto_create_tfm_node+0x72/0x340
[ 237.975909][ T6739] ? crypto_alg_mod_lookup+0x47f/0x6d0
[ 237.981416][ T6739] crypto_alloc_tfm_node+0x177/0x360
[ 237.986758][ T6739] public_key_verify_signature+0x27b/0xd40
[ 237.992620][ T6739] ? __kasan_kmalloc+0xaf/0xe0
[ 237.997435][ T6739] ? asymmetric_key_generate_id+0x52/0xd0
[ 237.997911][ T6741] netlink: 'syz.0.844': attribute type 10 has an invalid length.
[ 238.003190][ T6739] ? x509_cert_parse+0x53a/0x7a0
[ 238.003215][ T6739] ? x509_key_preparse+0x60/0x5d0
[ 238.003236][ T6739] ? asymmetric_key_preparse+0xa5/0x140
[ 238.003256][ T6739] ? key_create_or_update+0x432/0xa40
[ 238.003276][ T6739] ? __se_sys_add_key+0x34b/0x410
[ 238.003296][ T6739] ? do_syscall_64+0x4c/0xa0
[ 238.003319][ T6739] ? public_key_free+0x80/0x80
[ 238.003375][ T6739] ? asymmetric_key_id_same+0x63/0xe0
[ 238.003404][ T6739] x509_check_for_self_signed+0x317/0x420
[ 238.057548][ T6739] x509_cert_parse+0x59c/0x7a0
[ 238.062350][ T6739] x509_key_preparse+0x60/0x5d0
[ 238.067222][ T6739] ? down_read+0x1aa/0x2e0
[ 238.071666][ T6739] asymmetric_key_preparse+0xa5/0x140
[ 238.077083][ T6739] key_create_or_update+0x432/0xa40
[ 238.082454][ T6739] ? security_key_permission+0x7c/0xa0
[ 238.087966][ T6739] ? key_type_put+0x20/0x20
[ 238.092509][ T6739] ? lookup_user_key_possessed+0x40/0x40
[ 238.098189][ T6739] ? __might_fault+0xb3/0x110
[ 238.102912][ T6739] __se_sys_add_key+0x34b/0x410
[ 238.107799][ T6739] ? __x64_sys_add_key+0xc0/0xc0
[ 238.112776][ T6739] ? lockdep_hardirqs_on+0x94/0x140
[ 238.117999][ T6739] ? __x64_sys_add_key+0x1c/0xc0
[ 238.122957][ T6739] do_syscall_64+0x4c/0xa0
[ 238.127395][ T6739] ? clear_bhb_loop+0x30/0x80
[ 238.132099][ T6739] ? clear_bhb_loop+0x30/0x80
[ 238.136801][ T6739] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 238.142720][ T6739] RIP: 0033:0x7fef147e2159
[ 238.147166][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 238.166941][ T6739] RSP: 002b:00007fef12a3a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8
[ 238.175392][ T6739] RAX: ffffffffffffffda RBX: 00007fef14a69fa0 RCX: 00007fef147e2159
[ 238.183386][ T6739] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000
[ 238.191405][ T6739] RBP: 00007fef1487903b R08: ffffffffffffffff R09: 0000000000000000
[ 238.199393][ T6739] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000
[ 238.207384][ T6739] R13: 00007fef14a6a038 R14: 00007fef14a69fa0 R15: 00007ffd3a8d5ec8
[ 238.215421][ T6739]
[ 238.365630][ T6741] team0 (unregistering): Port device team_slave_0 removed
[ 238.394120][ T6746] comedi comedi1: rti802: I/O port conflict (0x9,4)
[ 238.424046][ T6741] team0 (unregistering): Port device team_slave_1 removed
[ 238.530123][ T4229] usb 3-1: new full-speed USB device number 41 using dummy_hcd
[ 238.550370][ T4251] usb 2-1: Failed to submit usb control message: -110
[ 238.558075][ T4251] usb 2-1: unable to send the bmi data to the device: -110
[ 238.581738][ T4251] usb 2-1: unable to get target info from device
[ 238.588468][ T4251] usb 2-1: could not get target info (-110)
[ 238.594959][ T4251] usb 2-1: could not probe fw (-110)
[ 238.978185][ T4253] usb 2-1: USB disconnect, device number 55
[ 239.070264][ T4229] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[ 239.087917][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 239.096509][ T4229] usb 3-1: Product: syz
[ 239.102176][ T4229] usb 3-1: Manufacturer: syz
[ 239.107170][ T4229] usb 3-1: SerialNumber: syz
[ 239.125483][ T6766] input: syz0 as /devices/virtual/input/input9
[ 239.134428][ T4229] usb 3-1: config 0 descriptor??
[ 239.173727][ T4229] gspca_main: stk1135-2.14.0 probing 174f:6a31
[ 239.187968][ T6766] netlink: 36 bytes leftover after parsing attributes in process `syz.1.867'.
[ 239.220729][ T6766] device veth1_to_team entered promiscuous mode
[ 239.259943][ T4239]
[ 239.262334][ T4239] ======================================================
[ 239.269418][ T4239] WARNING: possible circular locking dependency detected
[ 239.276468][ T4239] syzkaller #0 Not tainted
[ 239.280909][ T4239] ------------------------------------------------------
[ 239.287951][ T4239] kworker/1:7/4239 is trying to acquire lock:
[ 239.294040][ T4239] ffff888062d1d028 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xfa/0x210
[ 239.305129][ T4239]
[ 239.305129][ T4239] but task is already holding lock:
[ 239.312525][ T4239] ffffffff8d6d6128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[ 239.321617][ T4239]
[ 239.321617][ T4239] which lock already depends on the new lock.
[ 239.321617][ T4239]
[ 239.332042][ T4239]
[ 239.332042][ T4239] the existing dependency chain (in reverse order) is:
[ 239.341087][ T4239]
[ 239.341087][ T4239] -> #5 (rfkill_global_mutex){+.+.}-{3:3}:
[ 239.349139][ T4239] __mutex_lock_common+0x1e5/0x2400
[ 239.354870][ T4239] mutex_lock_nested+0x17/0x20
[ 239.360333][ T4239] rfkill_register+0x2f/0x970
[ 239.365656][ T4239] hci_register_dev+0x459/0x980
[ 239.371097][ T4239] vhci_create_device+0x32e/0x5c0
[ 239.376669][ T4239] vhci_write+0x389/0x440
[ 239.381535][ T4239] vfs_write+0x748/0xd70
[ 239.386341][ T4239] ksys_write+0x153/0x260
[ 239.391198][ T4239] do_syscall_64+0x4c/0xa0
[ 239.396146][ T4239] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 239.402575][ T4239]
[ 239.402575][ T4239] -> #4 (&data->open_mutex){+.+.}-{3:3}:
[ 239.410429][ T4239] __mutex_lock_common+0x1e5/0x2400
[ 239.416192][ T4239] mutex_lock_nested+0x17/0x20
[ 239.421499][ T4239] vhci_send_frame+0x88/0x100
[ 239.426704][ T4239] hci_send_frame+0x1a9/0x2e0
[ 239.431949][ T4239] hci_cmd_work+0x197/0x320
[ 239.436992][ T4239] process_one_work+0x867/0xff0
[ 239.442377][ T4239] worker_thread+0xad7/0x12a0
[ 239.447683][ T4239] kthread+0x42e/0x520
[ 239.452302][ T4239] ret_from_fork+0x1f/0x30
[ 239.457443][ T4239]
[ 239.457443][ T4239] -> #3 ((work_completion)(&hdev->cmd_work)){+.+.}-{0:0}:
[ 239.466745][ T4239] process_one_work+0x7ba/0xff0
[ 239.472166][ T4239] worker_thread+0xad7/0x12a0
[ 239.477397][ T4239] kthread+0x42e/0x520
[ 239.482422][ T4239] ret_from_fork+0x1f/0x30
[ 239.487502][ T4239]
[ 239.487502][ T4239] -> #2 ((wq_completion)hci0#2){+.+.}-{0:0}:
[ 239.495708][ T4239] flush_workqueue+0x16a/0x1390
[ 239.501114][ T4239] drain_workqueue+0xca/0x370
[ 239.506316][ T4239] hci_dev_reset+0x1ab/0x710
[ 239.511550][ T4239] sock_do_ioctl+0xfb/0x320
[ 239.516603][ T4239] sock_ioctl+0x48a/0x700
[ 239.521486][ T4239] __se_sys_ioctl+0xfa/0x170
[ 239.526625][ T4239] do_syscall_64+0x4c/0xa0
[ 239.531715][ T4239] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 239.538163][ T4239]
[ 239.538163][ T4239] -> #1 (&hdev->req_lock){+.+.}-{3:3}:
[ 239.545837][ T4239] __mutex_lock_common+0x1e5/0x2400
[ 239.551593][ T4239] mutex_lock_nested+0x17/0x20
[ 239.557001][ T4239] bg_scan_update+0x44/0x3b0
[ 239.562142][ T4239] process_one_work+0x867/0xff0
[ 239.567566][ T4239] worker_thread+0xad7/0x12a0
[ 239.572798][ T4239] kthread+0x42e/0x520
[ 239.577418][ T4239] ret_from_fork+0x1f/0x30
[ 239.582391][ T4239]
[ 239.582391][ T4239] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}:
[ 239.592246][ T4239] __lock_acquire+0x2c66/0x7b50
[ 239.597662][ T4239] lock_acquire+0x19e/0x400
[ 239.602726][ T4239] __flush_work+0x116/0x210
[ 239.607801][ T4239] __cancel_work_timer+0x3f4/0x560
[ 239.613470][ T4239] hci_request_cancel_all+0xcc/0x300
[ 239.619305][ T4239] hci_dev_do_close+0x4e/0x1020
[ 239.624705][ T4239] hci_rfkill_set_block+0x101/0x180
[ 239.630464][ T4239] rfkill_set_block+0x1c1/0x3c0
[ 239.635869][ T4239] rfkill_epo+0x75/0x170
[ 239.640664][ T4239] rfkill_op_handler+0x76/0x220
[ 239.646106][ T4239] process_one_work+0x867/0xff0
[ 239.651526][ T4239] worker_thread+0xad7/0x12a0
[ 239.656729][ T4239] kthread+0x42e/0x520
[ 239.661939][ T4239] ret_from_fork+0x1f/0x30
[ 239.666906][ T4239]
[ 239.666906][ T4239] other info that might help us debug this:
[ 239.666906][ T4239]
[ 239.677184][ T4239] Chain exists of:
[ 239.677184][ T4239] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex
[ 239.677184][ T4239]
[ 239.692938][ T4239] Possible unsafe locking scenario:
[ 239.692938][ T4239]
[ 239.700400][ T4239] CPU0 CPU1
[ 239.705810][ T4239] ---- ----
[ 239.711193][ T4239] lock(rfkill_global_mutex);
[ 239.716000][ T4239] lock(&data->open_mutex);
[ 239.723220][ T4239] lock(rfkill_global_mutex);
[ 239.730530][ T4239] lock((work_completion)(&hdev->bg_scan_update));
[ 239.737128][ T4239]
[ 239.737128][ T4239] *** DEADLOCK ***
[ 239.737128][ T4239]
[ 239.745371][ T4239] 3 locks held by kworker/1:7/4239:
[ 239.750659][ T4239] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0
[ 239.760982][ T4239] #1: ffffc900031afd00 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0
[ 239.771294][ T4239] #2: ffffffff8d6d6128 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_epo+0x43/0x170
[ 239.780820][ T4239]
[ 239.780820][ T4239] stack backtrace:
[ 239.786732][ T4239] CPU: 1 PID: 4239 Comm: kworker/1:7 Not tainted syzkaller #0
[ 239.794226][ T4239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 239.804310][ T4239] Workqueue: events rfkill_op_handler
[ 239.809811][ T4239] Call Trace:
[ 239.813134][ T4239]
[ 239.816092][ T4239] dump_stack_lvl+0x188/0x250
[ 239.820787][ T4239] ? load_image+0x410/0x410
[ 239.825307][ T4239] ? show_regs_print_info+0x20/0x20
[ 239.830527][ T4239] ? print_circular_bug+0x12b/0x1a0
[ 239.835757][ T4239] check_noncircular+0x296/0x330
[ 239.840717][ T4239] ? look_up_lock_class+0x71/0x110
[ 239.845844][ T4239] ? add_chain_block+0x9b0/0x9b0
[ 239.850795][ T4239] ? lockdep_lock+0xf1/0x1f0
[ 239.855407][ T4239] ? __lock_acquire+0x1305/0x7b50
[ 239.860459][ T4239] ? mark_lock+0x94/0x320
[ 239.864804][ T4239] ? _find_first_zero_bit+0xd1/0xf0
[ 239.870024][ T4239] __lock_acquire+0x2c66/0x7b50
[ 239.874901][ T4239] ? verify_lock_unused+0x140/0x140
[ 239.880123][ T4239] ? add_lock_to_list+0x18d/0x280
[ 239.885178][ T4239] ? verify_lock_unused+0x140/0x140
[ 239.890399][ T4239] ? __lock_acquire+0x2844/0x7b50
[ 239.895443][ T4239] lock_acquire+0x19e/0x400
[ 239.899991][ T4239] ? __flush_work+0xfa/0x210
[ 239.904600][ T4239] ? __lock_acquire+0x7b50/0x7b50
[ 239.909670][ T4239] ? read_lock_is_recursive+0x10/0x10
[ 239.915085][ T4239] ? start_flush_work+0x784/0x830
[ 239.920130][ T4239] ? __lock_acquire+0x13dc/0x7b50
[ 239.925168][ T4239] __flush_work+0x116/0x210
[ 239.929690][ T4239] ? __flush_work+0xfa/0x210
[ 239.934383][ T4239] ? flush_work+0x20/0x20
[ 239.938725][ T4239] ? try_to_grab_pending+0xfb/0x820
[ 239.943936][ T4239] ? mark_lock+0x94/0x320
[ 239.948276][ T4239] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 239.954273][ T4239] ? lock_chain_count+0x20/0x20
[ 239.959142][ T4239] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 239.965053][ T4239] ? _raw_spin_unlock+0x40/0x40
[ 239.969919][ T4239] ? __cancel_work_timer+0x36a/0x560
[ 239.975216][ T4239] __cancel_work_timer+0x3f4/0x560
[ 239.980341][ T4239] ? cancel_work_sync+0x20/0x20
[ 239.985208][ T4239] ? remove_wait_queue+0x120/0x120
[ 239.990331][ T4239] ? __cancel_work+0x1f9/0x2e0
[ 239.995108][ T4239] ? __cancel_work+0x27b/0x2e0
[ 239.999888][ T4239] ? cancel_work+0x20/0x20
[ 240.004320][ T4239] ? __rwlock_init+0x140/0x140
[ 240.009135][ T4239] hci_request_cancel_all+0xcc/0x300
[ 240.014439][ T4239] hci_dev_do_close+0x4e/0x1020
[ 240.019331][ T4239] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 240.025235][ T4239] ? _raw_spin_unlock+0x40/0x40
[ 240.030098][ T4239] hci_rfkill_set_block+0x101/0x180
[ 240.035309][ T4239] ? rcu_lock_release+0x20/0x20
[ 240.040177][ T4239] rfkill_set_block+0x1c1/0x3c0
[ 240.045043][ T4239] rfkill_epo+0x75/0x170
[ 240.049301][ T4239] rfkill_op_handler+0x76/0x220
[ 240.054168][ T4239] process_one_work+0x867/0xff0
[ 240.059040][ T4239] ? worker_detach_from_pool+0x240/0x240
[ 240.064688][ T4239] ? lockdep_hardirqs_off+0x70/0x100
[ 240.069988][ T4239] ? _raw_spin_lock_irq+0xb7/0xf0
[ 240.075031][ T4239] ? _raw_spin_lock_irqsave+0x100/0x100
[ 240.080620][ T4239] ? wq_worker_running+0x97/0x170
[ 240.085854][ T4239] worker_thread+0xad7/0x12a0
[ 240.090672][ T4239] kthread+0x42e/0x520
[ 240.094777][ T4239] ? rcu_lock_release+0x20/0x20
[ 240.099657][ T4239] ? kthread_blkcg+0xd0/0xd0
[ 240.104275][ T4239] ret_from_fork+0x1f/0x30
[ 240.108720][ T4239]
[ 240.140174][ T4229] gspca_stk1135: reg_w 0x2 err -110
[ 240.152204][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.163487][ T4229] gspca_stk1135: Sensor write failed
[ 240.169035][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.176571][ T4229] gspca_stk1135: Sensor write failed
[ 240.186545][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.197615][ T4229] gspca_stk1135: Sensor read failed
[ 240.206207][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.212900][ T4229] gspca_stk1135: Sensor read failed
[ 240.218198][ T4229] gspca_stk1135: Detected sensor type unknown (0x0)
[ 240.225213][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.231857][ T4229] gspca_stk1135: Sensor read failed
[ 240.237161][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.244478][ T4229] gspca_stk1135: Sensor read failed
[ 240.250270][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.256923][ T4229] gspca_stk1135: Sensor write failed
[ 240.262684][ T4229] gspca_stk1135: serial bus timeout: status=0x00
[ 240.269044][ T4229] gspca_stk1135: Sensor write failed
[ 240.274679][ T4229] stk1135: probe of 3-1:0.0 failed with error -110
[ 241.135002][ T7] usb 3-1: USB disconnect, device number 41