last executing test programs: 55.641755292s ago: executing program 2 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x9) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4c, &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES16=r3, @ANYRESOCT], 0x1, 0x3a2, &(0x7f0000000200)="$eJzs3U1rY+UXAPDTzPRl+v+36UIEFfFhdm5CW7/AFJkBsaDUiYyzEO/YdAy905QkVDKIzkJw6zdwP7h0J4hfoAvdu3PXjctZDBPJW5t0Yiv2JQ7+fhDuSZ5zkufmksvZhHNw59sH21uN0lbWjMKNFIWIKDyJWOpGPVP9Y6Ebz8SwR/Fm8c5vr3/w0d1319bXb26kdGvt9lurKaXFN376/Ivvr//c/N+HPyz+OBv7Sx8f/LH6+/7L+68cPLv9WbWRqo20U2umLN2r1ZrZvbySNquN7VJK7+eVrFFJ1Z1GpT6yvpXXdndbKdvZXJjfrVcajZTttNJ2pZWatdSst1J2P6vupFKplBbmg9OUH29sZGu9eO6EvBuXtSEuQL2+lnV+w7PPrZQfT2RDAMBEnan/Hyyc2v/fLQz1/3Pxl/3/dOj/z8X030sb7v//8ZvwL9fp/2f6v99R+n8AAAAAAAAAAAAAAHgRPGm3i+12uzg4tgd/Eu4/n/D2uGDPXf9jj0nvj4s19Me9uYj8m73yXrl37K2vbUU18qjEchTjaee2MNCLb72zfnM5dS3FwoOvuvXXf4koXxmtX4liLI2vX+nVp8P66BynY364fjU+iZfG16+OrZ+J5e+G6ktRjF8/jVrksdm9vR3Vf7mS0tvvrR+rn+3mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDfUEoDr0Vv7v1eOeJa7PXn95eOEpZG5+P36g/n6y9HMZ6On8+/PHY+/9V49epkzx0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABhqth9tZnlfqlxUMZv5neT4VM73gpKqpXvqjY0vXYjR59rT3OWNQODUnCkevXOuf5JjkZ+12uxvc//rctzp3uZfyLMF0RJyQ0+5/gWf/rP9HxPArV0ZzZiPiLB/RPuksOsFiJyic63d45VIu0yTuRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBZh0O/O0+mJr0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqXRerid5XmlfoHBpM8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgRfJnAAAA///+Owi8") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000640)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000006c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000700), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000cc0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="ffffffffffffaa"], 0x0) open(&(0x7f0000001000)='./file0\x00', 0x60840, 0x0) r6 = open(&(0x7f0000001040)='.\x00', 0x100000, 0x0) flock(r6, 0x1) 53.479864574s ago: executing program 2 (id=448): r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000580)) 53.168503266s ago: executing program 2 (id=449): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mkdir(&(0x7f0000000040)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x9a9046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2100060, 0x0) 52.994380794s ago: executing program 2 (id=450): r0 = add_key$keyring(&(0x7f00000004c0), &(0x7f0000000500)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @auto=[0x35, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000d40)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000dc0), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000f80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000001080)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x37}, 0x48, r0) add_key(&(0x7f0000001100)='keyring\x00', &(0x7f0000001140)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @desc4}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x31, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @desc1}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00000000000000000000000000000000007300", 0x28}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001480), &(0x7f00000014c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x37, 0x30, 0x33, 0x30, 0x63, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000001500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001580), &(0x7f00000015c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000001600)={0x0, "00112233448ee9f20599aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x43}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001680), &(0x7f00000016c0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x61, 0x39, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000001700)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001780), &(0x7f00000017c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000001800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000001880), &(0x7f00000018c0)={'fscrypt:', @auto=[0x32, 0x30, 0x30, 0x39, 0x30, 0x30, 0x0, 0x30, 0x31, 0x30, 0x63, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000001900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddee99aabbccddeeff00112233445566778899aabbccddefff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001980), &(0x7f00000019c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000001a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001a80), &(0x7f0000001ac0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x38, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66]}, &(0x7f0000001b00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001b80), &(0x7f0000001bc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000001c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001c80), &(0x7f0000001cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000001d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001d80), &(0x7f0000001dc0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$unlink(0x9, r1, r0) 52.790373225s ago: executing program 2 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000001c0)=@filename='./dev/sda1\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000280)='./mnt\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x0, 0x21) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() clock_nanosleep(0x2, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000400)=@v1={0x0, @aes128, 0x1, @desc1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r5, 0x200000) pwrite64(r5, &(0x7f0000000080)="0000010042", 0x5, 0x1be) pwrite64(r5, &(0x7f00000000c0)="55aa", 0x2, 0x1fe) pwrite64(r5, 0x0, 0x0, 0xc0c) pwrite64(r5, 0x0, 0x0, 0xd2b) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x2) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000600)='\x00', &(0x7f0000000640)='omfs\x00', 0x3800800, &(0x7f0000000680)='\x00\x00\x11\x11\"\"33') ioctl$LOOP_SET_FD(r6, 0x4c00, r5) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 52.382499027s ago: executing program 2 (id=457): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4f, 0x9, 0xb, 0x8, 0x4, 0x86, 0xd6, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) 37.282200381s ago: executing program 32 (id=457): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x4f, 0x9, 0xb, 0x8, 0x4, 0x86, 0xd6, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) 12.415533091s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 10.388177419s ago: executing program 4 (id=646): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040040010300000009210100000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000e80), 0x1, 0x121400) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000ec0)={&(0x7f0000000f00)=[{0x4, 0x1010, 0x0, 0x0}], 0x1}) 10.002295009s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 8.177484966s ago: executing program 4 (id=652): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.984061226s ago: executing program 3 (id=655): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fd", 0x1}], 0x1) 7.759819098s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 5.826997649s ago: executing program 4 (id=657): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x4000000) 5.686689002s ago: executing program 4 (id=658): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.453078037s ago: executing program 1 (id=661): pipe(0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mount$9p_fd(0x0, 0x0, &(0x7f0000000dc0), 0x801, &(0x7f0000000e00)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '$'}}]}}) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000bc0)=0x2, 0x4) setuid(0xee00) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000c40)=0x8, 0x4) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x5e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001080)=""/152, 0x0, 0x98, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, 0x0, 0x3ad, 0xee, &(0x7f0000000600)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff71ba}, 0x94) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000540), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x200000000622c, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 5.345038168s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 3.278394392s ago: executing program 1 (id=663): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffd, @control32=0x4004, 0x80}}, @nested_load_code={0x12e, 0x25, {0x0, "0f20c04883c80c0f22c0d9d0f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.272909592s ago: executing program 3 (id=664): unshare(0x40000000) 3.134868246s ago: executing program 1 (id=665): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffd, @control32=0x4004, 0x80}}, @nested_load_code={0x12e, 0x25, {0x0, "0f20c04883c80c0f22c0d9d0f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 3.10464812s ago: executing program 0 (id=666): syz_emit_vhci(&(0x7f00000001c0)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) 2.994586551s ago: executing program 1 (id=667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.834433137s ago: executing program 3 (id=668): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000108000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.720327329s ago: executing program 1 (id=669): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, 0x0, 0x4000000) 2.657803456s ago: executing program 4 (id=670): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000400)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000440)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 2.645841117s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) 485.073259ms ago: executing program 0 (id=671): mount(&(0x7f0000000480)=@filename='mtd0\x00', &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='jffs2\x00', 0x800000, 0x0) 484.826189ms ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000001180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001380)=0x6) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_create_resource$futex(&(0x7f0000001340)=0x1) futex(r1, 0xd, 0x2, 0x0, 0x0, 0x2) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000013c0)=0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) fcntl$setown(0xffffffffffffffff, 0x8, r0) tkill(r0, 0x13) 483.306329ms ago: executing program 3 (id=673): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f0000000300)="34000000070001020304050601", 0xd) 482.877399ms ago: executing program 4 (id=674): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mount$9p_fd(0x0, 0x0, 0x0, 0x801, &(0x7f0000000e00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@fscache}, {@privport}, {@directio}, {@access_uid={'access', 0x3d, 0xee00}}, {@aname={'aname', 0x3d, '$'}}]}}) r3 = socket$inet(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0xc}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x10d}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000bc0)=0x2, 0x4) setuid(0xee00) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000c40)=0x8, 0x4) bind$inet(r5, &(0x7f0000000c80)={0x2, 0x5e21, @local}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000fc0)={0x0, &(0x7f0000001080)=""/152, 0x0, 0x98, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x0, 0x0, 0x0, 0x3ad, 0xee, &(0x7f0000000600)=""/238, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff71ba}, 0x94) write$binfmt_misc(r1, &(0x7f0000000540), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) 363.327372ms ago: executing program 0 (id=675): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffd, @control32=0x4004, 0x80}}, @nested_load_code={0x12e, 0x25, {0x0, "0f20c04883c80c0f22c0d9d0f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 354.321853ms ago: executing program 3 (id=676): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 235.960265ms ago: executing program 0 (id=677): r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r1 = syz_kvm_add_vcpu$x86(r0, &(0x7f00000004c0)={0x0, &(0x7f0000000500)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0xfffffffffffffffd, @control32=0x4004, 0x80}}, @nested_load_code={0x12e, 0x25, {0x0, "0f20c04883c80c0f22c0d9d0f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0xa5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 234.661105ms ago: executing program 3 (id=678): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000080)="fd", 0x1}], 0x1) 98.559729ms ago: executing program 0 (id=679): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f6152567a8717021501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) 27.335066ms ago: executing program 0 (id=680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x55, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x7, 0x6773, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 5 (id=524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x8000) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./config\x00', &(0x7f00000003c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r3, &(0x7f0000000500)='file0', 0x5) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) kernel console output (not intermixed with test programs): 0196][ T4374] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 119.301184][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.313238][ T4374] usb 1-1: Product: syz [ 119.320761][ T3605] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 119.354131][ T3605] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 119.369972][ T4374] usb 1-1: Manufacturer: syz [ 119.380138][ T4374] usb 1-1: SerialNumber: syz [ 119.395704][ T3605] usb 2-1: Product: syz [ 119.409890][ T3605] usb 2-1: Manufacturer: syz [ 119.442577][ T3605] cdc_wdm 2-1:1.0: skipping garbage [ 119.448056][ T3605] cdc_wdm 2-1:1.0: skipping garbage [ 119.476644][ T3605] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 119.483070][ T3605] cdc_wdm 2-1:1.0: Unknown control protocol [ 119.598055][ T5182] loop4: detected capacity change from 0 to 128 [ 119.635486][ T4374] usb 1-1: interface 1 not found [ 119.667007][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 119.673850][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 119.681057][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 119.687704][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 119.696333][ T4374] usb 1-1: USB disconnect, device number 4 [ 119.708986][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 119.715684][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 119.730664][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 119.737332][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 119.744435][ T3605] usb 2-1: USB disconnect, device number 3 [ 120.130912][ T26] audit: type=1326 audit(1794165404.678:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5185 comm="syz.2.279" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcb85b9fb19 code=0x0 [ 120.604034][ T5203] loop4: detected capacity change from 0 to 512 [ 120.938940][ T5211] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 120.948997][ T5211] FAT-fs (loop4): Filesystem has been set read-only [ 122.091997][ T5228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 122.105104][ T5229] loop2: detected capacity change from 0 to 128 [ 122.683521][ T5238] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 122.730443][ T5238] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.746220][ T5238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.295'. [ 122.762864][ T5238] device dummy0 left promiscuous mode [ 122.787085][ T5238] bond1: (slave dummy0): making interface the new active one [ 122.796358][ T5238] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 122.806455][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 122.823271][ T5238] netlink: 'syz.4.295': attribute type 10 has an invalid length. [ 122.868351][ T5238] netlink: 40 bytes leftover after parsing attributes in process `syz.4.295'. [ 122.906525][ T5238] device dummy0 entered promiscuous mode [ 122.984132][ T5238] bond1: (slave dummy0): Releasing active interface [ 123.452736][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.483895][ T5267] loop1: detected capacity change from 0 to 512 [ 123.644864][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.682733][ T7] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 123.703960][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.817520][ T5271] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 123.827626][ T5271] FAT-fs (loop1): Filesystem has been set read-only [ 124.423134][ T5273] loop0: detected capacity change from 0 to 128 [ 125.395136][ T4383] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 125.417614][ T7] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 125.426803][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 125.434915][ T7] usb 4-1: Product: syz [ 125.439952][ T7] usb 4-1: Manufacturer: syz [ 125.448413][ T5249] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 125.458911][ T7] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 125.498298][ T7] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 125.599204][ T4383] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.629966][ T4383] usb 3-1: config 0 has no interfaces? [ 125.650432][ T5289] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 125.673303][ T5289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.682563][ T4383] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 125.722957][ T4383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.762525][ T4383] usb 3-1: Product: syz [ 125.766748][ T4383] usb 3-1: Manufacturer: syz [ 125.783104][ T4383] usb 3-1: SerialNumber: syz [ 125.798477][ T7] usb 4-1: USB disconnect, device number 4 [ 125.809170][ T5289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.312'. [ 125.824478][ T4383] usb 3-1: config 0 descriptor?? [ 125.834880][ T7] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 125.863517][ T7] garmin_gps 4-1:1.0: device disconnected [ 125.900932][ T5291] bond1: (slave dummy0): making interface the new active one [ 125.925602][ T5291] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 125.934720][ T5294] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 125.947846][ T5294] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 125.965083][ T5294] device dummy0 entered promiscuous mode [ 125.988855][ T5294] bond1: (slave dummy0): Releasing active interface [ 126.010655][ T5300] netlink: 'syz.1.316': attribute type 4 has an invalid length. [ 126.065496][ T4374] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.114359][ T5303] FAULT_INJECTION: forcing a failure. [ 126.114359][ T5303] name failslab, interval 1, probability 0, space 0, times 0 [ 126.133235][ T5303] CPU: 1 PID: 5303 Comm: syz.0.317 Not tainted syzkaller #0 [ 126.140610][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.150681][ T5303] Call Trace: [ 126.153961][ T5303] [ 126.156886][ T5303] dump_stack_lvl+0x188/0x24e [ 126.161597][ T5303] ? show_regs_print_info+0x12/0x12 [ 126.166831][ T5303] ? load_image+0x410/0x410 [ 126.171428][ T5303] ? __might_sleep+0xd0/0xd0 [ 126.176064][ T5303] ? __lock_acquire+0x7ea0/0x7ea0 [ 126.181192][ T5303] should_fail_ex+0x390/0x4c0 [ 126.185880][ T5303] should_failslab+0x5/0x20 [ 126.190396][ T5303] slab_pre_alloc_hook+0x59/0x300 [ 126.195457][ T5303] kmem_cache_alloc_lru+0x49/0x2e0 [ 126.200586][ T5303] ? __d_alloc+0x2e/0x6e0 [ 126.204920][ T5303] __d_alloc+0x2e/0x6e0 [ 126.209081][ T5303] ? d_alloc_pseudo+0xe/0x70 [ 126.213685][ T5303] d_alloc_pseudo+0x19/0x70 [ 126.218218][ T5303] alloc_file_pseudo+0xe0/0x200 [ 126.223093][ T5303] ? alloc_empty_file_noaccount+0x80/0x80 [ 126.229080][ T5303] ? alloc_anon_inode+0x22e/0x300 [ 126.234121][ T5303] ? memcpy+0x3c/0x60 [ 126.238130][ T5303] ? alloc_anon_inode+0x22e/0x300 [ 126.243174][ T5303] aio_setup_ring+0x1f1/0xf50 [ 126.247892][ T5303] ? free_ioctx_reqs+0x180/0x180 [ 126.252877][ T5303] ioctx_alloc+0x315/0x7b0 [ 126.257296][ T5303] __se_sys_io_setup+0x7b/0x190 [ 126.262160][ T5303] do_syscall_64+0x4c/0xa0 [ 126.266610][ T5303] ? clear_bhb_loop+0x60/0xb0 [ 126.271323][ T5303] ? clear_bhb_loop+0x60/0xb0 [ 126.276037][ T5303] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 126.281975][ T5303] RIP: 0033:0x7f1742d9fb19 [ 126.284250][ T7] usb 3-1: USB disconnect, device number 2 [ 126.286421][ T5303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.286463][ T5303] RSP: 002b:00007f1743c72028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 126.320349][ T5303] RAX: ffffffffffffffda RBX: 00007f1743025fa0 RCX: 00007f1742d9fb19 [ 126.328321][ T5303] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000004715 [ 126.337421][ T5303] RBP: 00007f1742e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 126.345415][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.353404][ T5303] R13: 00007f1743026038 R14: 00007f1743025fa0 R15: 00007ffe3b0286b8 [ 126.361403][ T5303] [ 126.412397][ T5308] loop0: detected capacity change from 0 to 128 [ 126.474015][ T4374] usb 5-1: Using ep0 maxpacket: 32 [ 126.485005][ T4374] usb 5-1: config 1 has an invalid interface number: 144 but max is 0 [ 126.499069][ T4374] usb 5-1: config 1 has no interface number 0 [ 126.520274][ T4374] usb 5-1: config 1 interface 144 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 126.531982][ T4374] usb 5-1: config 1 interface 144 has no altsetting 0 [ 126.553195][ T4374] usb 5-1: New USB device found, idVendor=046d, idProduct=0921, bcdDevice=a9.ce [ 126.568615][ T4374] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.587014][ T5310] loop3: detected capacity change from 0 to 512 [ 126.753525][ T4374] usb 5-1: Product: syz [ 126.757877][ T4374] usb 5-1: Manufacturer: syz [ 126.763168][ T4374] usb 5-1: SerialNumber: syz [ 126.921902][ T5314] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 126.932038][ T5314] FAT-fs (loop3): Filesystem has been set read-only [ 127.498734][ T4374] gspca_main: tv8532-2.14.0 probing 046d:0921 [ 127.686895][ T4374] usb 5-1: USB disconnect, device number 5 [ 127.842311][ T5319] Bluetooth: MGMT ver 1.22 [ 128.203598][ T4367] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 128.366805][ T5325] mmap: syz.2.324 (5325) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 128.405449][ T4367] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 128.436155][ T4367] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.514106][ T4367] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.547808][ T4367] usb 1-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 128.577465][ T4367] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.622976][ T4367] usb 1-1: config 0 descriptor?? [ 128.829266][ T4285] Bluetooth: hci0: unexpected cc 0x042f length: 9 > 7 [ 129.060800][ T4367] input: HID 17ef:6067 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:17EF:6067.0002/input/input7 [ 129.077077][ T5345] loop4: detected capacity change from 0 to 128 [ 129.176942][ T4367] lenovo 0003:17EF:6067.0002: input,hiddev0,hidraw0: USB HID vff.fd Device [HID 17ef:6067] on usb-dummy_hcd.0-1/input0 [ 129.264419][ T4367] usb 1-1: USB disconnect, device number 5 [ 129.452399][ T5349] fido_id[5349]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 129.471632][ T5354] netlink: 'syz.2.334': attribute type 1 has an invalid length. [ 129.543837][ T5354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.596044][ T5360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.334'. [ 129.619011][ T5354] device dummy0 left promiscuous mode [ 129.665640][ T5354] bond4: (slave dummy0): making interface the new active one [ 129.691989][ T5354] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 129.727696][ T429] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 129.738054][ T5360] netlink: 'syz.2.334': attribute type 10 has an invalid length. [ 129.774787][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.2.334'. [ 129.796645][ T5360] device dummy0 entered promiscuous mode [ 129.817262][ T5360] bond4: (slave dummy0): Releasing active interface [ 129.984964][ T5369] svc: failed to register nfsdv3 RPC service (errno 111). [ 130.015253][ T5369] svc: failed to register nfsaclv3 RPC service (errno 111). [ 130.241292][ T5383] loop4: detected capacity change from 0 to 512 [ 130.267734][ T2191] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.326404][ T5383] EXT4-fs (loop4): 1 orphan inode deleted [ 130.338936][ T429] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 130.357265][ T5383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 130.369440][ T5383] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.379672][ T429] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:4: Failed to release dquot type 1 [ 130.650023][ T2191] usb 1-1: Using ep0 maxpacket: 32 [ 130.657442][ T2191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.658715][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 130.668535][ T2191] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.668574][ T2191] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 130.668596][ T2191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.702832][ T2191] usb 1-1: config 0 descriptor?? [ 130.920636][ T3605] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 131.120397][ T3605] usb 4-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 131.130860][ T3605] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.135688][ T2191] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 131.141303][ T3605] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 131.158559][ T3605] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.168299][ T2191] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 131.175585][ T3605] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 131.188212][ T3605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.197863][ T3605] usb 4-1: Product: syz [ 131.202625][ T2191] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 131.218100][ T3605] usb 4-1: Manufacturer: syz [ 131.226977][ T3605] usb 4-1: SerialNumber: syz [ 131.232317][ T5403] loop1: detected capacity change from 0 to 128 [ 131.238391][ T5395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.264430][ T5395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 131.277750][ T3605] ims_pcu: probe of 4-1:1.1 failed with error -22 [ 131.335874][ T2191] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 131.483794][ T3605] usb 4-1: USB disconnect, device number 5 [ 131.624780][ T5409] netlink: 'syz.4.355': attribute type 1 has an invalid length. [ 131.665954][ T5409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 131.699903][ T5409] netlink: 28 bytes leftover after parsing attributes in process `syz.4.355'. [ 131.716015][ T5409] device dummy0 left promiscuous mode [ 131.739930][ T2191] ft260 0003:0403:6030.0003: failed to retrieve status: -71, no wakeup [ 131.749480][ T5409] bond2: (slave dummy0): making interface the new active one [ 131.754483][ T2191] ft260 0003:0403:6030.0003: failed to retrieve status: -71 [ 131.766928][ T2191] ft260 0003:0403:6030.0003: failed to reset I2C controller: -71 [ 131.777571][ T5409] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 131.796056][ T2191] usb 1-1: USB disconnect, device number 6 [ 131.838472][ T4471] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 131.858547][ T5413] netlink: 'syz.4.355': attribute type 10 has an invalid length. [ 131.882330][ T5413] netlink: 40 bytes leftover after parsing attributes in process `syz.4.355'. [ 131.907343][ T5417] fido_id[5417]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.908681][ T5413] device dummy0 entered promiscuous mode [ 131.942987][ T5413] bond2: (slave dummy0): Releasing active interface [ 132.019285][ T5419] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 132.019285][ T5419] [ 132.157747][ T5426] loop3: detected capacity change from 0 to 512 [ 132.246242][ T5426] EXT4-fs (loop3): 1 orphan inode deleted [ 132.258565][ T5426] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 132.268935][ T4471] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 132.280219][ T5426] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.295906][ T4471] EXT4-fs error (device loop3): ext4_release_dquot:6884: comm kworker/u4:8: Failed to release dquot type 1 [ 132.375441][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 132.386371][ T4291] EXT4-fs (loop3): unmounting filesystem. [ 132.631382][ T2191] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.659722][ T5445] X25: unknown 09 in state 3 [ 132.832018][ T2191] usb 2-1: Using ep0 maxpacket: 16 [ 132.839149][ T2191] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 132.872869][ T2191] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.910687][ T2191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.924480][ T5452] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 132.937620][ T2191] usb 2-1: Product: syz [ 132.946539][ T2191] usb 2-1: Manufacturer: syz [ 132.951185][ T2191] usb 2-1: SerialNumber: syz [ 132.990024][ T2191] usb 2-1: config 0 descriptor?? [ 133.013051][ T5452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 133.026592][ T5452] netlink: 28 bytes leftover after parsing attributes in process `syz.2.370'. [ 133.037448][ T5452] device dummy0 left promiscuous mode [ 133.046608][ T5452] bond5: (slave dummy0): making interface the new active one [ 133.056129][ T5452] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 133.065073][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 133.108417][ T5452] netlink: 'syz.2.370': attribute type 10 has an invalid length. [ 133.129451][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.370'. [ 133.151704][ T5461] netlink: 'syz.3.372': attribute type 9 has an invalid length. [ 133.174221][ T5452] device dummy0 entered promiscuous mode [ 133.199481][ T5452] bond5: (slave dummy0): Releasing active interface [ 133.206275][ T5461] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.372'. [ 133.315501][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.321848][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.399819][ T5470] loop3: detected capacity change from 0 to 128 [ 133.434362][ T5471] FAULT_FLAG_ALLOW_RETRY missing 801 [ 133.440072][ T5471] CPU: 0 PID: 5471 Comm: syz.2.374 Not tainted syzkaller #0 [ 133.447385][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 133.457462][ T5471] Call Trace: [ 133.460760][ T5471] [ 133.463701][ T5471] dump_stack_lvl+0x188/0x24e [ 133.468405][ T5471] ? show_regs_print_info+0x12/0x12 [ 133.473626][ T5471] ? load_image+0x410/0x410 [ 133.478163][ T5471] handle_userfault+0x108f/0x12d0 [ 133.483218][ T5471] ? free_unref_page+0x193/0x3f0 [ 133.488186][ T5471] ? do_raw_spin_trylock+0xae/0x190 [ 133.493406][ T5471] ? vma_has_uffd_without_event_remap+0x90/0x90 [ 133.499657][ T5471] ? free_unref_page+0x19d/0x3f0 [ 133.504602][ T5471] handle_mm_fault+0x343a/0x3d40 [ 133.509556][ T5471] ? numa_migrate_prep+0x250/0x250 [ 133.514683][ T5471] __get_user_pages+0x40d/0xec0 [ 133.519549][ T5471] ? populate_vma_page_range+0x2b0/0x2b0 [ 133.525197][ T5471] ? tlb_remove_table_rcu+0xf0/0xf0 [ 133.530842][ T5471] populate_vma_page_range+0x214/0x2b0 [ 133.536317][ T5471] mprotect_fixup+0x788/0x840 [ 133.541013][ T5471] ? change_protection+0x3980/0x3980 [ 133.546345][ T5471] ? apparmor_file_mprotect+0xf4/0x110 [ 133.551811][ T5471] ? bpf_lsm_file_mprotect+0x5/0x10 [ 133.557019][ T5471] ? security_file_mprotect+0x7e/0xb0 [ 133.562395][ T5471] do_mprotect_pkey+0x7ff/0xba0 [ 133.567248][ T5471] ? do_futex+0x2e2/0x320 [ 133.571582][ T5471] ? prot_none_test+0x10/0x10 [ 133.576267][ T5471] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 133.582258][ T5471] __x64_sys_mprotect+0x7c/0x90 [ 133.587167][ T5471] do_syscall_64+0x4c/0xa0 [ 133.591607][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 133.596296][ T5471] ? clear_bhb_loop+0x60/0xb0 [ 133.600982][ T5471] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 133.606883][ T5471] RIP: 0033:0x7fcb85b9fb19 [ 133.611315][ T5471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.631016][ T5471] RSP: 002b:00007fcb86a99028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 133.639435][ T5471] RAX: ffffffffffffffda RBX: 00007fcb85e26090 RCX: 00007fcb85b9fb19 [ 133.647410][ T5471] RDX: 000000000000000a RSI: 0000000000c00000 RDI: 0000200000400000 [ 133.655427][ T5471] RBP: 00007fcb85c37af8 R08: 0000000000000000 R09: 0000000000000000 [ 133.663414][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.671390][ T5471] R13: 00007fcb85e26128 R14: 00007fcb85e26090 R15: 00007ffeee1f2ed8 [ 133.679382][ T5471] [ 134.132009][ T5487] loop4: detected capacity change from 0 to 512 [ 134.242803][ T5487] EXT4-fs (loop4): 1 orphan inode deleted [ 134.261932][ T5487] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 134.277735][ T5487] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.288505][ T48] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 134.351282][ T48] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:3: Failed to release dquot type 1 [ 134.459159][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 134.500597][ T5508] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 134.671573][ T5511] FAULT_INJECTION: forcing a failure. [ 134.671573][ T5511] name failslab, interval 1, probability 0, space 0, times 0 [ 134.702110][ T5514] loop3: detected capacity change from 0 to 512 [ 134.707296][ T5511] CPU: 0 PID: 5511 Comm: syz.4.384 Not tainted syzkaller #0 [ 134.715692][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 134.725801][ T5511] Call Trace: [ 134.729095][ T5511] [ 134.732310][ T5511] dump_stack_lvl+0x188/0x24e [ 134.737039][ T5511] ? show_regs_print_info+0x12/0x12 [ 134.742542][ T5511] ? load_image+0x410/0x410 [ 134.747092][ T5511] ? verify_lock_unused+0x140/0x140 [ 134.752341][ T5511] should_fail_ex+0x390/0x4c0 [ 134.757060][ T5511] should_failslab+0x5/0x20 [ 134.761595][ T5511] slab_pre_alloc_hook+0x59/0x300 [ 134.766666][ T5511] kmem_cache_alloc+0x56/0x2f0 [ 134.771465][ T5511] ? skb_clone+0x1e7/0x370 [ 134.775930][ T5511] skb_clone+0x1e7/0x370 [ 134.780216][ T5511] __netlink_deliver_tap+0x3e4/0x7e0 [ 134.785551][ T5511] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.790788][ T5511] netlink_deliver_tap+0x19c/0x1b0 [ 134.795953][ T5511] netlink_sendskb+0x64/0x130 [ 134.800675][ T5511] ctrl_getfamily+0x4c3/0x5b0 [ 134.805395][ T5511] ? nla_put_string+0x30/0x30 [ 134.810112][ T5511] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 134.816556][ T5511] genl_family_rcv_msg_doit+0x22f/0x350 [ 134.822154][ T5511] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 134.828092][ T5511] ? memcpy+0x3c/0x60 [ 134.832082][ T5511] ? genl_get_cmd+0x4cf/0x8b0 [ 134.836770][ T5511] genl_rcv_msg+0x601/0x790 [ 134.841289][ T5511] ? genl_bind+0x360/0x360 [ 134.846501][ T5511] ? nla_put_string+0x30/0x30 [ 134.851185][ T5511] ? ctrl_getfamily+0x5b0/0x5b0 [ 134.856051][ T5511] netlink_rcv_skb+0x1ef/0x440 [ 134.860820][ T5511] ? genl_bind+0x360/0x360 [ 134.865239][ T5511] ? netlink_ack+0x1160/0x1160 [ 134.870023][ T5511] ? down_read+0x1a8/0x2d0 [ 134.874444][ T5511] genl_rcv+0x24/0x40 [ 134.878436][ T5511] netlink_unicast+0x7ad/0x920 [ 134.883214][ T5511] netlink_sendmsg+0x8ad/0xbd0 [ 134.887994][ T5511] ? netlink_getsockopt+0x550/0x550 [ 134.893202][ T5511] ? apparmor_socket_sendmsg+0x8a/0x330 [ 134.898751][ T5511] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 134.904033][ T5511] ? security_socket_sendmsg+0x7c/0xa0 [ 134.909495][ T5511] __sys_sendto+0x497/0x650 [ 134.914003][ T5511] ? __ia32_sys_getpeername+0x80/0x80 [ 134.919408][ T5511] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 134.925400][ T5511] ? lock_chain_count+0x20/0x20 [ 134.930272][ T5511] __x64_sys_sendto+0xda/0xf0 [ 134.934962][ T5511] do_syscall_64+0x4c/0xa0 [ 134.939382][ T5511] ? clear_bhb_loop+0x60/0xb0 [ 134.944060][ T5511] ? clear_bhb_loop+0x60/0xb0 [ 134.948741][ T5511] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.954633][ T5511] RIP: 0033:0x7ff66c56034e [ 134.959046][ T5511] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 134.978651][ T5511] RSP: 002b:00007ff66d4ace88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 134.987099][ T5511] RAX: ffffffffffffffda RBX: 00007ff66d4ae6c0 RCX: 00007ff66c56034e [ 134.995072][ T5511] RDX: 0000000000000020 RSI: 00007ff66d4ad000 RDI: 0000000000000008 [ 135.003040][ T5511] RBP: 0000000000000000 R08: 00007ff66d4acf04 R09: 000000000000000c [ 135.011007][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008 [ 135.018984][ T5511] R13: 00007ff66d4acf58 R14: 00007ff66d4ad000 R15: 0000000000000000 [ 135.026970][ T5511] [ 135.178601][ T5519] netlink: 'syz.0.386': attribute type 1 has an invalid length. [ 135.231431][ T5519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.333613][ T5525] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 135.343687][ T5525] FAT-fs (loop3): Filesystem has been set read-only [ 135.650473][ T5519] netlink: 28 bytes leftover after parsing attributes in process `syz.0.386'. [ 135.720567][ T5527] device dummy0 left promiscuous mode [ 135.738916][ T3605] usb 2-1: USB disconnect, device number 4 [ 135.821856][ T5527] bond2: (slave dummy0): making interface the new active one [ 135.898898][ T5527] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 135.959350][ T5529] netlink: 'syz.0.386': attribute type 10 has an invalid length. [ 136.190656][ T5529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.386'. [ 136.224581][ T5529] device dummy0 entered promiscuous mode [ 136.238455][ T5529] bond2: (slave dummy0): Releasing active interface [ 136.814951][ T5545] loop2: detected capacity change from 0 to 128 [ 137.202951][ T5553] FAULT_INJECTION: forcing a failure. [ 137.202951][ T5553] name failslab, interval 1, probability 0, space 0, times 0 [ 137.236045][ T5553] CPU: 1 PID: 5553 Comm: syz.0.395 Not tainted syzkaller #0 [ 137.243402][ T5553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.254451][ T5553] Call Trace: [ 137.257752][ T5553] [ 137.260700][ T5553] dump_stack_lvl+0x188/0x24e [ 137.265419][ T5553] ? show_regs_print_info+0x12/0x12 [ 137.270655][ T5553] ? load_image+0x410/0x410 [ 137.275194][ T5553] ? __might_sleep+0xd0/0xd0 [ 137.279806][ T5553] ? __lock_acquire+0x7ea0/0x7ea0 [ 137.284863][ T5553] should_fail_ex+0x390/0x4c0 [ 137.289578][ T5553] should_failslab+0x5/0x20 [ 137.294100][ T5553] slab_pre_alloc_hook+0x59/0x300 [ 137.299143][ T5553] kmem_cache_alloc_lru+0x49/0x2e0 [ 137.304306][ T5553] ? proc_alloc_inode+0x26/0xb0 [ 137.309164][ T5553] proc_alloc_inode+0x26/0xb0 [ 137.313934][ T5553] ? proc_invalidate_siblings_dcache+0x6c0/0x6c0 [ 137.320273][ T5553] new_inode_pseudo+0x5f/0x1c0 [ 137.325044][ T5553] new_inode+0x25/0x1d0 [ 137.329251][ T5553] proc_pid_make_inode+0x20/0x1a0 [ 137.334281][ T5553] proc_ns_dir_lookup+0x6a0/0x7c0 [ 137.339330][ T5553] ? proc_ns_dir_readdir+0x430/0x430 [ 137.344662][ T5553] path_openat+0xff8/0x2f10 [ 137.349227][ T5553] ? do_filp_open+0x420/0x420 [ 137.354103][ T5553] do_filp_open+0x1ee/0x420 [ 137.358734][ T5553] ? vfs_tmpfile+0x490/0x490 [ 137.363368][ T5553] ? noop_direct_IO+0x10/0x10 [ 137.368090][ T5553] ? _raw_spin_unlock+0x24/0x40 [ 137.372986][ T5553] ? alloc_fd+0x590/0x640 [ 137.377331][ T5553] do_sys_openat2+0x14b/0x4f0 [ 137.382018][ T5553] ? do_sys_open+0xe0/0xe0 [ 137.386470][ T5553] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.392483][ T5553] ? lock_chain_count+0x20/0x20 [ 137.397381][ T5553] __x64_sys_openat+0x135/0x160 [ 137.402245][ T5553] do_syscall_64+0x4c/0xa0 [ 137.406671][ T5553] ? clear_bhb_loop+0x60/0xb0 [ 137.411352][ T5553] ? clear_bhb_loop+0x60/0xb0 [ 137.416031][ T5553] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.421933][ T5553] RIP: 0033:0x7f1742d6034e [ 137.426354][ T5553] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.446054][ T5553] RSP: 002b:00007f1743c71f18 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.454477][ T5553] RAX: ffffffffffffffda RBX: 00007f1743c726c0 RCX: 00007f1742d6034e [ 137.462455][ T5553] RDX: 0000000000000000 RSI: 00007f1742e37226 RDI: ffffffffffffff9c [ 137.470443][ T5553] RBP: 00007f1742e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 137.478418][ T5553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.486393][ T5553] R13: 00007f1743026038 R14: 00007f1743025fa0 R15: 00007ffe3b0286b8 [ 137.494376][ T5553] [ 137.685631][ T5559] FAULT_INJECTION: forcing a failure. [ 137.685631][ T5559] name failslab, interval 1, probability 0, space 0, times 0 [ 137.742146][ T5559] CPU: 0 PID: 5559 Comm: syz.4.397 Not tainted syzkaller #0 [ 137.749501][ T5559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.759584][ T5559] Call Trace: [ 137.762883][ T5559] [ 137.767152][ T5559] dump_stack_lvl+0x188/0x24e [ 137.771876][ T5559] ? show_regs_print_info+0x12/0x12 [ 137.777295][ T5559] ? load_image+0x410/0x410 [ 137.781828][ T5559] ? __might_sleep+0xd0/0xd0 [ 137.786450][ T5559] ? __lock_acquire+0x7ea0/0x7ea0 [ 137.791508][ T5559] ? __mutex_lock+0x1ab/0xb40 [ 137.796230][ T5559] should_fail_ex+0x390/0x4c0 [ 137.801009][ T5559] should_failslab+0x5/0x20 [ 137.805541][ T5559] slab_pre_alloc_hook+0x59/0x300 [ 137.810602][ T5559] ? mon_bin_open+0xd8/0x500 [ 137.815222][ T5559] __kmem_cache_alloc_node+0x4f/0x270 [ 137.820630][ T5559] ? mon_bin_open+0xd8/0x500 [ 137.825259][ T5559] kmalloc_trace+0x26/0xe0 [ 137.829712][ T5559] mon_bin_open+0xd8/0x500 [ 137.834166][ T5559] ? do_raw_spin_unlock+0x11d/0x230 [ 137.839401][ T5559] chrdev_open+0x585/0x5f0 [ 137.843851][ T5559] ? cd_forget+0x160/0x160 [ 137.848302][ T5559] ? fsnotify_perm+0x39b/0x550 [ 137.853115][ T5559] ? cd_forget+0x160/0x160 [ 137.857593][ T5559] do_dentry_open+0x7dd/0x10b0 [ 137.862416][ T5559] path_openat+0x2674/0x2f10 [ 137.867061][ T5559] ? kasan_set_track+0x60/0x70 [ 137.871903][ T5559] ? verify_lock_unused+0x140/0x140 [ 137.877144][ T5559] ? do_sys_openat2+0xdd/0x4f0 [ 137.881948][ T5559] ? do_filp_open+0x420/0x420 [ 137.886762][ T5559] do_filp_open+0x1ee/0x420 [ 137.891311][ T5559] ? vfs_tmpfile+0x490/0x490 [ 137.895964][ T5559] ? _raw_spin_unlock+0x24/0x40 [ 137.900875][ T5559] ? alloc_fd+0x590/0x640 [ 137.905245][ T5559] do_sys_openat2+0x14b/0x4f0 [ 137.909958][ T5559] ? do_sys_open+0xe0/0xe0 [ 137.914409][ T5559] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.920427][ T5559] ? lock_chain_count+0x20/0x20 [ 137.925322][ T5559] __x64_sys_openat+0x135/0x160 [ 137.930220][ T5559] do_syscall_64+0x4c/0xa0 [ 137.934671][ T5559] ? clear_bhb_loop+0x60/0xb0 [ 137.939382][ T5559] ? clear_bhb_loop+0x60/0xb0 [ 137.944103][ T5559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 137.950129][ T5559] RIP: 0033:0x7ff66c56034e [ 137.954577][ T5559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 137.974216][ T5559] RSP: 002b:00007ff66d4adb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.982680][ T5559] RAX: ffffffffffffffda RBX: 00007ff66d4ae6c0 RCX: 00007ff66c56034e [ 137.990688][ T5559] RDX: 0000000000000000 RSI: 00007ff66d4adc00 RDI: ffffffffffffff9c [ 137.998692][ T5559] RBP: 00007ff66d4adc00 R08: 0000000000000000 R09: 0000000000000000 [ 138.006697][ T5559] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 138.014834][ T5559] R13: 00007ff66c826038 R14: 00007ff66c825fa0 R15: 00007ffd9140dd68 [ 138.022854][ T5559] [ 138.029545][ T5572] loop0: detected capacity change from 0 to 512 [ 138.376636][ T5579] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 138.386751][ T5579] FAT-fs (loop0): Filesystem has been set read-only [ 139.256993][ T5590] capability: warning: `syz.2.408' uses deprecated v2 capabilities in a way that may be insecure [ 139.875276][ T5602] loop1: detected capacity change from 0 to 128 [ 140.336369][ T5612] FAULT_INJECTION: forcing a failure. [ 140.336369][ T5612] name failslab, interval 1, probability 0, space 0, times 0 [ 140.380695][ T5612] CPU: 0 PID: 5612 Comm: syz.2.414 Not tainted syzkaller #0 [ 140.388061][ T5612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 140.398127][ T5612] Call Trace: [ 140.401428][ T5612] [ 140.404372][ T5612] dump_stack_lvl+0x188/0x24e [ 140.409087][ T5612] ? show_regs_print_info+0x12/0x12 [ 140.414317][ T5612] ? load_image+0x410/0x410 [ 140.418985][ T5612] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.424485][ T5612] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 140.430486][ T5612] ? __lock_acquire+0x7ea0/0x7ea0 [ 140.435656][ T5612] should_fail_ex+0x390/0x4c0 [ 140.440353][ T5612] should_failslab+0x5/0x20 [ 140.444991][ T5612] slab_pre_alloc_hook+0x59/0x300 [ 140.450912][ T5612] ? copy_net_ns+0x10b/0x5b0 [ 140.455911][ T5612] __kmem_cache_alloc_node+0x4f/0x270 [ 140.462100][ T5612] ? copy_net_ns+0x10b/0x5b0 [ 140.466889][ T5612] __kmalloc+0xa3/0x240 [ 140.471048][ T5612] copy_net_ns+0x10b/0x5b0 [ 140.475497][ T5612] create_new_namespaces+0x3ce/0x700 [ 140.480921][ T5612] unshare_nsproxy_namespaces+0x116/0x160 [ 140.486672][ T5612] ksys_unshare+0x4f6/0x8e0 [ 140.491197][ T5612] ? sighand_ctor+0x40/0x40 [ 140.495709][ T5612] ? lock_chain_count+0x20/0x20 [ 140.500620][ T5612] ? syscall_enter_from_user_mode+0x21/0x80 [ 140.506538][ T5612] __x64_sys_unshare+0x34/0x40 [ 140.511311][ T5612] do_syscall_64+0x4c/0xa0 [ 140.515742][ T5612] ? clear_bhb_loop+0x60/0xb0 [ 140.520421][ T5612] ? clear_bhb_loop+0x60/0xb0 [ 140.525214][ T5612] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.531128][ T5612] RIP: 0033:0x7fcb85b9fb19 [ 140.535649][ T5612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.555968][ T5612] RSP: 002b:00007fcb86aba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 140.564562][ T5612] RAX: ffffffffffffffda RBX: 00007fcb85e25fa0 RCX: 00007fcb85b9fb19 [ 140.572642][ T5612] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 140.580635][ T5612] RBP: 00007fcb85c37af8 R08: 0000000000000000 R09: 0000000000000000 [ 140.588618][ T5612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.596595][ T5612] R13: 00007fcb85e26038 R14: 00007fcb85e25fa0 R15: 00007ffeee1f2ed8 [ 140.604590][ T5612] [ 140.852630][ T5618] loop4: detected capacity change from 0 to 512 [ 140.967737][ T5618] EXT4-fs (loop4): 1 orphan inode deleted [ 141.013100][ T5618] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.023581][ T1075] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 141.065281][ T1075] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:5: Failed to release dquot type 1 [ 141.079241][ T5625] autofs4:pid:5625:autofs_fill_super: called with bogus options [ 141.093907][ T5618] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.117551][ T5629] loop1: detected capacity change from 0 to 512 [ 141.445180][ T5639] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 141.455354][ T5639] FAT-fs (loop1): Filesystem has been set read-only [ 141.961794][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 142.371149][ T4372] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 142.595036][ T4372] usb 1-1: not running at top speed; connect to a high speed hub [ 142.627748][ T4372] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.692981][ T4372] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.788039][ T5657] loop4: detected capacity change from 0 to 128 [ 142.815358][ T4372] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 142.898708][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.973012][ T4372] usb 1-1: Product: syz [ 143.018198][ T4372] usb 1-1: Manufacturer: syz [ 143.051235][ T4372] usb 1-1: SerialNumber: syz [ 143.148959][ T4372] oti6858 1-1:1.0: required endpoints missing [ 143.298899][ T5664] FAULT_INJECTION: forcing a failure. [ 143.298899][ T5664] name failslab, interval 1, probability 0, space 0, times 0 [ 143.313036][ T5664] CPU: 0 PID: 5664 Comm: syz.1.430 Not tainted syzkaller #0 [ 143.323203][ T5664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 143.333733][ T5664] Call Trace: [ 143.337029][ T5664] [ 143.339969][ T5664] dump_stack_lvl+0x188/0x24e [ 143.345457][ T5664] ? show_regs_print_info+0x12/0x12 [ 143.350794][ T5664] ? load_image+0x410/0x410 [ 143.355681][ T5664] ? __might_sleep+0xd0/0xd0 [ 143.360962][ T5664] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.366383][ T5664] should_fail_ex+0x390/0x4c0 [ 143.373202][ T5664] should_failslab+0x5/0x20 [ 143.380817][ T5664] slab_pre_alloc_hook+0x59/0x300 [ 143.385974][ T5664] kmem_cache_alloc_node+0x5a/0x310 [ 143.391723][ T5664] ? __alloc_skb+0xf9/0x7d0 [ 143.396721][ T5664] __alloc_skb+0xf9/0x7d0 [ 143.402158][ T5664] sock_omalloc+0x86/0x170 [ 143.406916][ T5664] msg_zerocopy_realloc+0x93/0x7d0 [ 143.413537][ T5664] ? mark_lock+0x94/0x320 [ 143.418146][ T5664] __ip6_append_data+0xcc8/0x3e30 [ 143.424604][ T5664] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.431302][ T5664] ? ip_skb_dst_mtu+0xb60/0xb60 [ 143.436899][ T5664] ? ip6_setup_cork+0xff0/0xff0 [ 143.442367][ T5664] ? ip6_setup_cork+0xa4a/0xff0 [ 143.448076][ T5664] ip6_make_skb+0x398/0x520 [ 143.452774][ T5664] ? ip_skb_dst_mtu+0xb60/0xb60 [ 143.457817][ T5664] ? __ip6_flush_pending_frames+0x3a0/0x3a0 [ 143.464193][ T5664] ? ip6_dst_hoplimit+0x92/0x340 [ 143.471131][ T5664] ? ip6_dst_hoplimit+0x92/0x340 [ 143.476719][ T5664] udpv6_sendmsg+0x1b5a/0x22c0 [ 143.483107][ T5664] ? ip_skb_dst_mtu+0xb60/0xb60 [ 143.488169][ T5664] ? udp_v6_early_demux+0xf00/0xf00 [ 143.494248][ T5664] ? do_raw_spin_unlock+0x11d/0x230 [ 143.500061][ T5664] ? verify_lock_unused+0x140/0x140 [ 143.505563][ T5664] ? aa_af_perm+0x340/0x340 [ 143.510317][ T5664] ? sock_rps_record_flow+0x19/0x3f0 [ 143.516519][ T5664] ? inet_send_prepare+0x57/0x250 [ 143.523756][ T5664] ? inet6_sendmsg+0x5b/0xd0 [ 143.528660][ T5664] ? inet6_compat_ioctl+0x3c0/0x3c0 [ 143.534154][ T5664] ____sys_sendmsg+0x5ed/0x9a0 [ 143.539085][ T5664] ? __might_fault+0xa6/0x120 [ 143.544052][ T5664] ? __sys_sendmsg_sock+0x30/0x30 [ 143.549619][ T5664] ? __import_iovec+0x306/0x510 [ 143.555483][ T5664] ? import_iovec+0x6f/0xa0 [ 143.562450][ T5664] ___sys_sendmsg+0x2a2/0x360 [ 143.568395][ T5664] ? __lock_acquire+0x7ea0/0x7ea0 [ 143.573692][ T5664] ? __sys_sendmsg+0x2a0/0x2a0 [ 143.578513][ T5664] ? __might_fault+0xc2/0x120 [ 143.583632][ T5664] ? __might_fault+0xa6/0x120 [ 143.588330][ T5664] __sys_sendmmsg+0x2c3/0x510 [ 143.593130][ T5664] ? __ia32_sys_sendmsg+0x80/0x80 [ 143.598198][ T5664] ? __ia32_sys_get_robust_list+0x100/0x100 [ 143.604124][ T5664] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 143.610136][ T5664] ? lock_chain_count+0x20/0x20 [ 143.616453][ T5664] __x64_sys_sendmmsg+0x9c/0xb0 [ 143.622392][ T5664] do_syscall_64+0x4c/0xa0 [ 143.626924][ T5664] ? clear_bhb_loop+0x60/0xb0 [ 143.631607][ T5664] ? clear_bhb_loop+0x60/0xb0 [ 143.636317][ T5664] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 143.642413][ T5664] RIP: 0033:0x7fc18e79fb19 [ 143.646840][ T5664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.667413][ T5664] RSP: 002b:00007fc18f58b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 143.676739][ T5664] RAX: ffffffffffffffda RBX: 00007fc18ea25fa0 RCX: 00007fc18e79fb19 [ 143.688035][ T5664] RDX: 0400000000000172 RSI: 0000200000000280 RDI: 0000000000000004 [ 143.697689][ T5664] RBP: 00007fc18e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 143.706028][ T5664] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000000 [ 143.715777][ T5664] R13: 00007fc18ea26038 R14: 00007fc18ea25fa0 R15: 00007fff535be228 [ 143.725368][ T5664] [ 143.754865][ T2191] usb 1-1: USB disconnect, device number 7 [ 143.994471][ T5672] rxe_eth0 speed is unknown, defaulting to 1000 [ 144.130157][ T5676] i2c i2c-0: delete_device: Can't find device in list [ 144.253362][ T5678] loop4: detected capacity change from 0 to 512 [ 144.419250][ T5678] EXT4-fs (loop4): 1 orphan inode deleted [ 144.430412][ T5678] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 144.439861][ T11] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 144.450473][ T5678] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.494941][ T11] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:1: Failed to release dquot type 1 [ 144.580384][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 144.632112][ T5688] loop2: detected capacity change from 0 to 512 [ 144.829845][ T4387] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 144.989474][ T5698] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 144.999659][ T5698] FAT-fs (loop2): Filesystem has been set read-only [ 145.034725][ T4387] usb 1-1: Using ep0 maxpacket: 32 [ 145.107252][ T4387] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 145.270248][ T4387] usb 1-1: config 0 has no interface number 0 [ 145.495546][ T4387] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 145.539982][ T4387] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 145.573855][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.794839][ T4387] usb 1-1: Product: syz [ 145.812545][ T4387] usb 1-1: Manufacturer: syz [ 145.840423][ T4387] usb 1-1: SerialNumber: syz [ 145.863184][ T4387] usb 1-1: config 0 descriptor?? [ 145.871901][ T5683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.035302][ T27] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 146.056426][ T4367] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 146.139131][ T5683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.275382][ T4367] usb 2-1: Using ep0 maxpacket: 32 [ 146.283223][ T27] usb 4-1: config 1 has too many interfaces: 241, using maximum allowed: 32 [ 146.295669][ T4367] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 146.336849][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.393197][ T4367] usb 2-1: config 0 has no interface number 0 [ 146.423705][ T27] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 241 [ 146.448773][ T4367] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 146.495575][ T27] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 146.511867][ T4367] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.545532][ T27] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.573828][ T4367] usb 2-1: Product: syz [ 146.585657][ T4367] usb 2-1: Manufacturer: syz [ 146.611973][ T4367] usb 2-1: SerialNumber: syz [ 146.618503][ T4387] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 146.645284][ T4367] usb 2-1: config 0 descriptor?? [ 146.655142][ T4387] asix: probe of 1-1:0.188 failed with error -71 [ 146.663593][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.681191][ T4367] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 146.702199][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.723231][ T4387] usb 1-1: USB disconnect, device number 8 [ 146.730278][ T27] usb 4-1: Product: syz [ 146.750563][ T27] usb 4-1: Manufacturer: syz [ 146.756070][ T27] usb 4-1: SerialNumber: syz [ 146.880995][ T4367] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 146.898942][ T4367] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 147.053987][ T5713] option changes via remount are deprecated (pid=5712 comm=syz.2.449) [ 147.183964][ T27] cdc_ncm 4-1:1.0: bind() failure [ 147.207403][ T27] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 147.227175][ T27] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 147.245530][ T27] usbtest: probe of 4-1:1.1 failed with error -71 [ 147.270637][ T27] usb 4-1: USB disconnect, device number 6 [ 147.298146][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 147.332177][ T4367] usb 2-1: USB disconnect, device number 5 [ 147.342117][ T4367] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 147.361649][ T5719] loop4: detected capacity change from 0 to 512 [ 147.386485][ T4367] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 147.424500][ T4367] quatech2 2-1:0.51: device disconnected [ 147.436529][ T5722] syz.2.453 (pid 5722) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 147.462726][ T5719] EXT4-fs (loop4): 1 orphan inode deleted [ 147.469995][ T5719] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.476767][ T5722] loop0: detected capacity change from 0 to 4096 [ 147.493676][ T4471] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 147.511698][ T5719] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.523682][ T4471] EXT4-fs error (device loop4): ext4_release_dquot:6884: comm kworker/u4:8: Failed to release dquot type 1 [ 147.562206][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 147.610098][ T5722] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 147.631165][ T5722] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 147.643921][ T5722] loop0: [ 148.003689][ T5736] loop1: detected capacity change from 0 to 512 [ 148.367474][ T5742] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 148.383321][ T5742] FAT-fs (loop1): Filesystem has been set read-only [ 149.526443][ T5751] loop0: detected capacity change from 0 to 512 [ 149.613194][ T5751] EXT4-fs (loop0): 1 orphan inode deleted [ 149.620440][ T5751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 149.687588][ T5751] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.717587][ T4387] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 149.910619][ T4387] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 149.942491][ T4387] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 150.011972][ T4387] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 150.073507][ T4387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.083192][ T5745] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 150.112353][ T5745] EXT4-fs error (device loop0): ext4_release_dquot:6884: comm kworker/u4:16: Failed to release dquot type 1 [ 150.122778][ T4387] usb 5-1: Product: syz [ 150.134886][ T4387] usb 5-1: Manufacturer: syz [ 150.141511][ T4387] usb 5-1: SerialNumber: syz [ 150.163686][ T4387] usb 5-1: config 0 descriptor?? [ 150.177985][ T5749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.207622][ T5749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 150.235216][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 150.258139][ T4387] usb 5-1: ucan: probing device on interface #0 [ 150.264468][ T4387] usb 5-1: ucan: invalid EP count (1) [ 150.307580][ T4387] usb 5-1: ucan: probe failed; try to update the device firmware [ 150.777937][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 150.978565][ T27] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 151.012673][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 151.027923][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.037000][ T27] usb 2-1: Product: syz [ 151.047166][ T27] usb 2-1: Manufacturer: syz [ 151.053441][ T27] usb 2-1: SerialNumber: syz [ 151.108125][ T2191] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 151.319812][ T2191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.336970][ T2191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.355774][ T2191] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.376370][ T2191] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.397889][ T2191] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 151.422956][ T2191] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.482782][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 151.546539][ T26] audit: type=1804 audit(1794165436.051:4): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.583770][ T26] audit: type=1804 audit(1794165436.091:5): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.612230][ T26] audit: type=1804 audit(1794165436.091:6): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.637829][ T26] audit: type=1804 audit(1794165436.091:7): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.666893][ T26] audit: type=1804 audit(1794165436.091:8): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.694975][ T26] audit: type=1804 audit(1794165436.091:9): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.720776][ T26] audit: type=1804 audit(1794165436.091:10): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.748289][ T26] audit: type=1804 audit(1794165436.091:11): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 151.758349][ T4387] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 151.962518][ T4387] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.984149][ T4387] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 152.000500][ T4387] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 152.011450][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.020348][ T4387] usb 1-1: Product: syz [ 152.024937][ T4387] usb 1-1: Manufacturer: syz [ 152.031109][ T4387] usb 1-1: SerialNumber: syz [ 152.045191][ T3644] udevd[3644]: could not touch /run/udev/queue: No such file or directory [ 152.299314][ T4292] Bluetooth: hci1: unexpected event 0x04 length: 0 < 10 [ 152.416637][ T4367] usb 5-1: USB disconnect, device number 6 [ 152.485524][ T2191] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 152.501781][ T26] kauditd_printk_skb: 801 callbacks suppressed [ 152.501828][ T26] audit: type=1804 audit(1794165437.011:813): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.567481][ T5772] rxe_eth0 speed is unknown, defaulting to 1000 [ 152.575980][ T26] audit: type=1804 audit(1794165437.011:814): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.619030][ T26] audit: type=1804 audit(1794165437.011:815): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.666548][ T26] audit: type=1804 audit(1794165437.011:816): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.724454][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 152.744534][ T5770] FAULT_INJECTION: forcing a failure. [ 152.744534][ T5770] name failslab, interval 1, probability 0, space 0, times 0 [ 152.768104][ T26] audit: type=1804 audit(1794165437.011:817): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.770561][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 152.808775][ T2191] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 152.817770][ T5770] CPU: 1 PID: 5770 Comm: syz.0.472 Not tainted syzkaller #0 [ 152.827642][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 152.839906][ T5770] Call Trace: [ 152.844608][ T5770] [ 152.848284][ T2191] usb 4-1: USB disconnect, device number 7 [ 152.848673][ T5770] dump_stack_lvl+0x188/0x24e [ 152.848735][ T5770] ? show_regs_print_info+0x12/0x12 [ 152.871626][ T5770] ? load_image+0x410/0x410 [ 152.878231][ T26] audit: type=1804 audit(1794165437.011:818): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.878270][ T26] audit: type=1804 audit(1794165437.011:819): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 152.908304][ T5770] ? __might_sleep+0xd0/0xd0 [ 152.908336][ T5770] ? __lock_acquire+0x7ea0/0x7ea0 [ 152.908357][ T5770] ? _raw_spin_lock_irq+0xb7/0xf0 [ 152.908377][ T5770] ? _raw_spin_lock_irqsave+0x100/0x100 [ 152.908399][ T5770] should_fail_ex+0x390/0x4c0 [ 152.908424][ T5770] should_failslab+0x5/0x20 [ 152.908440][ T5770] slab_pre_alloc_hook+0x59/0x300 [ 152.908466][ T5770] kmem_cache_alloc+0x56/0x2f0 [ 152.992156][ T5770] ? fanotify_add_mark+0x411/0xd30 [ 152.997777][ T5770] fanotify_add_mark+0x411/0xd30 [ 153.005564][ T5770] ? fanotify_events_supported+0x1d7/0x2f0 [ 153.011849][ T5770] do_fanotify_mark+0xc4a/0xda0 [ 153.018262][ T5770] ? copy_fid_info_to_user+0x780/0x780 [ 153.024801][ T5770] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.031777][ T5770] ? lock_chain_count+0x20/0x20 [ 153.037993][ T5770] __x64_sys_fanotify_mark+0xb1/0xc0 [ 153.043586][ T5770] do_syscall_64+0x4c/0xa0 [ 153.044143][ T26] audit: type=1804 audit(1794165437.011:820): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 153.048210][ T5770] ? clear_bhb_loop+0x60/0xb0 [ 153.048244][ T5770] ? clear_bhb_loop+0x60/0xb0 [ 153.048268][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 153.048289][ T5770] RIP: 0033:0x7f1742d9fb19 [ 153.048307][ T5770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.078557][ T26] audit: type=1804 audit(1794165437.011:821): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 153.083090][ T5770] RSP: 002b:00007f1743c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 153.083116][ T5770] RAX: ffffffffffffffda RBX: 00007f1743025fa0 RCX: 00007f1742d9fb19 [ 153.083128][ T5770] RDX: 0000000040009975 RSI: 0000000000000105 RDI: 0000000000000008 [ 153.083138][ T5770] RBP: 00007f1742e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 153.083148][ T5770] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 153.083158][ T5770] R13: 00007f1743026038 R14: 00007f1743025fa0 R15: 00007ffe3b0286b8 [ 153.083185][ T5770] [ 153.103989][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 153.155038][ T4383] usb 1-1: USB disconnect, device number 9 [ 153.173067][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 153.174486][ T4285] Bluetooth: hci5: CSR: Local version failed (-71) [ 153.185125][ T26] audit: type=1804 audit(1794165437.031:822): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 153.279108][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 153.308935][ T4367] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.339324][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 153.373856][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 153.414605][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 153.427859][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 153.448303][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 153.465421][ T27] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 153.488087][ T27] lan78xx: probe of 2-1:1.0 failed with error -71 [ 153.505583][ T4367] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.524628][ T27] usb 2-1: USB disconnect, device number 6 [ 153.536101][ T4367] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 153.556053][ T4367] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.568475][ T4367] usb 5-1: Product: syz [ 153.576637][ T4367] usb 5-1: Manufacturer: syz [ 153.587693][ T4367] usb 5-1: SerialNumber: syz [ 153.761857][ T5779] loop1: detected capacity change from 0 to 512 [ 153.973856][ T4367] usb 5-1: selecting invalid altsetting 1 [ 153.983007][ T4367] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 153.994454][ T4367] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 154.004971][ T4367] speedtch: probe of 5-1:1.0 failed with error -22 [ 154.030618][ T4367] usb 5-1: selecting invalid altsetting 1 [ 154.037762][ T4367] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 154.055913][ T4367] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 154.065577][ T4367] speedtch: probe of 5-1:1.1 failed with error -22 [ 154.118923][ T5781] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 154.130130][ T5781] FAT-fs (loop1): Filesystem has been set read-only [ 154.161398][ T4367] usb 5-1: USB disconnect, device number 7 [ 155.418328][ T5787] device syzkaller1 entered promiscuous mode [ 156.123952][ T5802] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 156.198906][ T5802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.231262][ T5806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.484'. [ 156.293433][ T5806] device bond2 entered promiscuous mode [ 156.352457][ T5802] netlink: 'syz.1.484': attribute type 10 has an invalid length. [ 156.362399][ T5805] block device autoloading is deprecated and will be removed. [ 156.388147][ T5802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.484'. [ 156.633240][ T4285] Bluetooth: Wrong link type (-22) [ 156.641034][ T4285] Bluetooth: hci2: link tx timeout [ 156.649354][ T4285] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 156.671866][ T4285] Bluetooth: hci2: link tx timeout [ 156.677389][ T4285] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 156.903868][ T5818] loop0: detected capacity change from 0 to 512 [ 157.243456][ T5820] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 157.253670][ T5820] FAT-fs (loop0): Filesystem has been set read-only [ 157.514945][ T26] kauditd_printk_skb: 2153 callbacks suppressed [ 157.514978][ T26] audit: type=1804 audit(1794165442.029:2976): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 157.845533][ T26] audit: type=1804 audit(1794165442.089:2977): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 157.989384][ T26] audit: type=1804 audit(1794165442.129:2978): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.115019][ T26] audit: type=1804 audit(1794165442.149:2979): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.186385][ T26] audit: type=1804 audit(1794165442.169:2980): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.266234][ T26] audit: type=1804 audit(1794165442.189:2981): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.348479][ T26] audit: type=1804 audit(1794165442.309:2982): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.415592][ T26] audit: type=1804 audit(1794165442.309:2983): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.447260][ T26] audit: type=1804 audit(1794165442.309:2984): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.496883][ T26] audit: type=1804 audit(1794165442.309:2985): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 158.712333][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 158.778951][ T5829] process 'syz.3.494' launched './file1' with NULL argv: empty string added [ 159.133590][ T5839] 9pnet_fd: Insufficient options for proto=fd [ 159.310579][ T5843] jffs2: notice: (5843) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 160.081920][ T5861] loop0: detected capacity change from 0 to 512 [ 160.426926][ T5867] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 160.438093][ T5867] FAT-fs (loop0): Filesystem has been set read-only [ 160.773395][ T4285] Bluetooth: hci2: command 0x0406 tx timeout [ 162.301577][ T5887] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.431843][ T4370] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 162.522166][ T26] kauditd_printk_skb: 1688 callbacks suppressed [ 162.522181][ T26] audit: type=1804 audit(1794165447.038:4674): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.555389][ T26] audit: type=1804 audit(1794165447.038:4675): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.581840][ T26] audit: type=1804 audit(1794165447.038:4676): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.607049][ T26] audit: type=1804 audit(1794165447.038:4677): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.640610][ T26] audit: type=1804 audit(1794165447.038:4678): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.669568][ T26] audit: type=1804 audit(1794165447.038:4679): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.679588][ T4370] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.697486][ T26] audit: type=1804 audit(1794165447.038:4680): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.727225][ T4370] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 162.739353][ T26] audit: type=1804 audit(1794165447.038:4681): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.778161][ T4370] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.791835][ T26] audit: type=1804 audit(1794165447.038:4682): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 162.803157][ T4370] usb 4-1: config 0 descriptor?? [ 162.829621][ T4370] pwc: Askey VC010 type 2 USB webcam detected. [ 162.831246][ T26] audit: type=1804 audit(1794165447.038:4683): pid=4277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/114/mnt/root/swap-file" dev="sda1" ino=2026 res=1 errno=0 [ 163.172480][ T5905] FAULT_INJECTION: forcing a failure. [ 163.172480][ T5905] name failslab, interval 1, probability 0, space 0, times 0 [ 163.216890][ T5905] CPU: 0 PID: 5905 Comm: syz.1.525 Not tainted syzkaller #0 [ 163.225725][ T5905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 163.235814][ T5905] Call Trace: [ 163.239113][ T5905] [ 163.242045][ T5905] dump_stack_lvl+0x188/0x24e [ 163.246857][ T5905] ? show_regs_print_info+0x12/0x12 [ 163.252291][ T5905] ? load_image+0x410/0x410 [ 163.256961][ T5905] ? __lock_acquire+0x7ea0/0x7ea0 [ 163.262613][ T5905] should_fail_ex+0x390/0x4c0 [ 163.268193][ T5905] should_failslab+0x5/0x20 [ 163.273052][ T5905] slab_pre_alloc_hook+0x59/0x300 [ 163.278175][ T5905] ? __vmalloc_node_range+0x584/0x1380 [ 163.284108][ T5905] __kmem_cache_alloc_node+0x4f/0x270 [ 163.289495][ T5905] ? __vmalloc_node_range+0x584/0x1380 [ 163.295417][ T5905] __kmalloc_node+0xa2/0x240 [ 163.300334][ T5905] __vmalloc_node_range+0x584/0x1380 [ 163.305668][ T5905] ? snprintf+0xe5/0x140 [ 163.309969][ T5905] ? free_vm_area+0x50/0x50 [ 163.315422][ T5905] ? vscnprintf+0x80/0x80 [ 163.320593][ T5905] ? alloc_fd+0x590/0x640 [ 163.325591][ T5905] ? kvm_dev_ioctl+0x1a9/0x17f0 [ 163.331372][ T5905] __vmalloc+0x76/0x80 [ 163.336428][ T5905] ? kvm_dev_ioctl+0x1a9/0x17f0 [ 163.344376][ T5905] kvm_dev_ioctl+0x1a9/0x17f0 [ 163.352954][ T5905] ? __fget_files+0x28/0x460 [ 163.359569][ T5905] ? hardware_enable_nolock+0x220/0x220 [ 163.367693][ T5905] ? bpf_lsm_file_ioctl+0x5/0x10 [ 163.374341][ T5905] ? security_file_ioctl+0x7c/0xa0 [ 163.380342][ T5905] ? hardware_enable_nolock+0x220/0x220 [ 163.386520][ T5905] __se_sys_ioctl+0xfa/0x170 [ 163.392377][ T5905] do_syscall_64+0x4c/0xa0 [ 163.397410][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 163.402467][ T5905] ? clear_bhb_loop+0x60/0xb0 [ 163.407256][ T5905] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 163.414646][ T5905] RIP: 0033:0x7fc18e79fb19 [ 163.420231][ T5905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.441018][ T5905] RSP: 002b:00007fc18f58b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.450936][ T5905] RAX: ffffffffffffffda RBX: 00007fc18ea25fa0 RCX: 00007fc18e79fb19 [ 163.460064][ T5905] RDX: 0000000000000001 RSI: 000000000000ae01 RDI: 0000000000000005 [ 163.468041][ T5905] RBP: 00007fc18e837af8 R08: 0000000000000000 R09: 0000000000000000 [ 163.476652][ T5905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.485630][ T5905] R13: 00007fc18ea26038 R14: 00007fc18ea25fa0 R15: 00007fff535be228 [ 163.498201][ T5905] [ 163.510667][ T4370] pwc: recv_control_msg error -32 req 02 val 2b00 [ 163.533041][ T4370] pwc: recv_control_msg error -32 req 02 val 2700 [ 163.541402][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 163.550748][ T4370] pwc: recv_control_msg error -32 req 02 val 2c00 [ 163.558286][ T4294] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 163.567151][ T4294] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 163.582748][ T4294] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 163.591000][ T4370] pwc: recv_control_msg error -32 req 04 val 1000 [ 163.599087][ T4294] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 163.607401][ T4294] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.624231][ T4370] pwc: recv_control_msg error -32 req 04 val 1300 [ 163.631571][ T4370] pwc: recv_control_msg error -32 req 04 val 1400 [ 163.649486][ T4370] pwc: recv_control_msg error -32 req 02 val 2000 [ 163.668896][ T4370] pwc: recv_control_msg error -32 req 02 val 2100 [ 163.703226][ T4370] pwc: recv_control_msg error -32 req 04 val 1500 [ 163.725415][ T4370] pwc: recv_control_msg error -32 req 02 val 2500 [ 163.763310][ T4370] pwc: recv_control_msg error -32 req 02 val 2400 [ 163.785277][ T4370] pwc: recv_control_msg error -32 req 02 val 2600 [ 163.886005][ T5912] rxe_eth0 speed is unknown, defaulting to 1000 [ 164.006051][ T4370] pwc: recv_control_msg error -71 req 02 val 2800 [ 164.053181][ T4370] pwc: recv_control_msg error -71 req 04 val 1100 [ 164.082204][ T4370] pwc: recv_control_msg error -71 req 04 val 1200 [ 164.115004][ T4370] pwc: Registered as video103. [ 164.142379][ T4370] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 164.197003][ T4370] usb 4-1: USB disconnect, device number 8 [ 164.277744][ T5922] udevd[5922]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': No such file or directory [ 164.392307][ T5928] netlink: 'syz.4.533': attribute type 1 has an invalid length. [ 164.471057][ T5928] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.479032][ T5932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.533'. [ 164.509858][ T5932] device bond3 entered promiscuous mode [ 164.510163][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.529280][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.540079][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.559246][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.563788][ T5928] netlink: 'syz.4.533': attribute type 10 has an invalid length. [ 164.576353][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.584506][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.590433][ T5928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.533'. [ 164.702449][ T4387] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 164.894680][ T4387] usb 1-1: not running at top speed; connect to a high speed hub [ 164.909030][ T4387] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 164.927857][ T4387] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 164.946317][ T4387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.957071][ T4387] usb 1-1: Product: syz [ 164.962279][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 164.966166][ T4387] usb 1-1: Manufacturer: syz [ 164.976515][ T4387] usb 1-1: SerialNumber: syz [ 164.998417][ T4387] oti6858 1-1:1.0: oti6858 converter detected [ 165.021024][ T4387] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 165.088094][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 165.112425][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 165.121108][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 165.135504][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 165.143863][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 165.151445][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.156132][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.182916][ T5945] FAULT_INJECTION: forcing a failure. [ 165.182916][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 165.215695][ T5945] CPU: 1 PID: 5945 Comm: syz.1.538 Not tainted syzkaller #0 [ 165.224123][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 165.224317][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 165.234723][ T5945] Call Trace: [ 165.234742][ T5945] [ 165.234751][ T5945] dump_stack_lvl+0x188/0x24e [ 165.234786][ T5945] ? show_regs_print_info+0x12/0x12 [ 165.234810][ T5945] ? load_image+0x410/0x410 [ 165.234831][ T5945] ? __lock_acquire+0x7ea0/0x7ea0 [ 165.253075][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.255756][ T5945] should_fail_ex+0x390/0x4c0 [ 165.260673][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.265712][ T5945] should_failslab+0x5/0x20 [ 165.265739][ T5945] slab_pre_alloc_hook+0x59/0x300 [ 165.265760][ T5945] ? key_alloc+0x346/0x1030 [ 165.265781][ T5945] __kmem_cache_alloc_node+0x4f/0x270 [ 165.265803][ T5945] ? key_alloc+0x346/0x1030 [ 165.270493][ T7] usb 4-1: Product: syz [ 165.275377][ T5945] __kmalloc_node_track_caller+0xa0/0x240 [ 165.275413][ T5945] kmemdup+0x27/0x60 [ 165.275437][ T5945] key_alloc+0x346/0x1030 [ 165.275466][ T5945] keyring_alloc+0x41/0xa0 [ 165.275490][ T5945] lookup_user_key+0x4e1/0x1120 [ 165.275522][ T5945] ? lookup_user_key_possessed+0x40/0x40 [ 165.275541][ T5945] ? search_process_keyrings_rcu+0x360/0x360 [ 165.275565][ T5945] ? __check_object_size+0x86/0xa70 [ 165.275584][ T5945] ? pkcs_1_v1_5_decode_emsa+0x1f1/0x250 [ 165.275606][ T5945] ? strncpy_from_user+0x1dc/0x340 [ 165.275628][ T5945] __se_sys_add_key+0x311/0x410 [ 165.275654][ T5945] ? __x64_sys_add_key+0xc0/0xc0 [ 165.275684][ T5945] ? lockdep_hardirqs_on+0x94/0x140 [ 165.275702][ T5945] ? __x64_sys_add_key+0x1c/0xc0 [ 165.275725][ T5945] do_syscall_64+0x4c/0xa0 [ 165.275748][ T5945] ? clear_bhb_loop+0x60/0xb0 [ 165.275770][ T5945] ? clear_bhb_loop+0x60/0xb0 [ 165.275793][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.275815][ T5945] RIP: 0033:0x7fc18e79fb19 [ 165.275833][ T5945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.275848][ T5945] RSP: 002b:00007fc18f58b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 165.275868][ T5945] RAX: ffffffffffffffda RBX: 00007fc18ea25fa0 RCX: 00007fc18e79fb19 [ 165.275882][ T5945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 165.275893][ T5945] RBP: 00007fc18e837af8 R08: fffffffffffffffe R09: 0000000000000000 [ 165.275906][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.275917][ T5945] R13: 00007fc18ea26038 R14: 00007fc18ea25fa0 R15: 00007fff535be228 [ 165.275944][ T5945] [ 165.434775][ T27] usb 1-1: USB disconnect, device number 10 [ 165.455039][ T7] usb 4-1: Manufacturer: syz [ 165.455059][ T7] usb 4-1: SerialNumber: syz [ 165.476433][ T27] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 165.527574][ T27] oti6858 1-1:1.0: device disconnected [ 165.725158][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.753964][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.771561][ T5936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.797170][ T5936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.820490][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 165.864935][ T7] usb 4-1: USB disconnect, device number 9 [ 165.906934][ T5950] ptrace attach of ""[5952] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[5950] [ 166.107939][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 166.121514][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 166.132916][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 166.140926][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 166.148977][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 166.156485][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 166.432584][ T7] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 166.632666][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 166.640152][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 166.650241][ T7] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 166.660740][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.670522][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.680896][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 166.691383][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.702570][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.717027][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 166.726576][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.938974][ T7] usb 4-1: usb_control_msg returned -32 [ 166.945196][ T7] usbtmc 4-1:16.0: can't read capabilities [ 166.953954][ C0] usbtmc 4-1:16.0: invalid notification: 9 [ 166.960001][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 166.967038][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 166.977168][ C0] usbtmc 4-1:16.0: invalid notification: 11 [ 166.994994][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.005776][ C0] usbtmc 4-1:16.0: invalid notification: 2 [ 167.012288][ C0] usbtmc 4-1:16.0: invalid notification: 5 [ 167.032799][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.038959][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.050802][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.063021][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.069887][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.089943][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 167.089980][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.090863][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.102594][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 167.104391][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.112020][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 167.130691][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.137069][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.143412][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 167.143496][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.164971][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 167.165372][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.179644][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.186308][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 167.190773][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.200291][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 167.200379][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.213577][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.221464][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.227603][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.234285][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.240704][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.258085][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.265149][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.279841][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.286162][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.292185][ T4370] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.299969][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.306418][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.313161][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.314479][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.319535][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.337377][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.340642][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.344802][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.360539][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.366927][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.368695][ T27] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 167.373411][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.373620][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.390416][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 167.395166][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.408542][ T27] usb 1-1: SerialNumber: syz [ 167.409549][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.420808][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.427195][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.433430][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.439490][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.456060][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.462780][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.468858][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.483266][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.489803][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.495873][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.501931][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.512173][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.518493][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.525301][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.531462][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.538014][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.552640][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.558714][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.565232][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.571967][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.579771][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.588299][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.594427][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.600816][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.607393][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.613680][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.619767][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.626038][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.632508][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.639479][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.646298][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.648531][ T27] usb 1-1: 0:2 : does not exist [ 167.657048][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.665028][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.676157][ T4370] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 167.687410][ T4370] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.696477][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.703357][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.720643][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.728230][ T4370] usb 2-1: config 0 descriptor?? [ 167.736717][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.748544][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.755064][ T27] usb 1-1: USB disconnect, device number 11 [ 167.763996][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.779170][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.785757][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.792354][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.800343][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.811828][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.818065][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.824599][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.830711][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.837270][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.843619][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.850325][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.857411][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.864382][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.871198][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.878252][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.885655][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.892245][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.899300][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.906096][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.914261][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.922128][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.930013][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.937271][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.943871][ C0] usbtmc 4-1:16.0: invalid notification: 0 [ 167.972587][ T4367] usb 4-1: USB disconnect, device number 10 [ 168.005113][ T4279] udevd[4279]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.204600][ T4370] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 168.212179][ T4370] [drm] Initialized udl on minor 2 [ 168.420093][ T4370] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 168.444530][ T4370] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 168.464797][ T4370] usb 2-1: USB disconnect, device number 7 [ 168.471838][ T2191] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 168.497000][ T2191] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 168.524308][ T2191] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 168.774703][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 168.804141][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 168.814123][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 168.822370][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 168.830589][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 168.838587][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.013469][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.026177][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.043195][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.054801][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.068696][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.079392][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.393604][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.406909][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.418210][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.428296][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.436810][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.443627][ T4370] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.460187][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.673967][ T4370] usb 2-1: too many configurations: 87, using maximum allowed: 8 [ 171.714950][ T4370] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 171.724638][ T4370] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.732774][ T4370] usb 2-1: Product: syz [ 171.737556][ T4370] usb 2-1: Manufacturer: syz [ 171.742175][ T4370] usb 2-1: SerialNumber: syz [ 172.158046][ T4370] net_ratelimit: 1 callbacks suppressed [ 172.158061][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 172.618637][ T6045] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 172.672749][ T6045] 8021q: adding VLAN 0 to HW filter on device bond4 [ 172.770264][ T6045] netlink: 28 bytes leftover after parsing attributes in process `syz.4.575'. [ 172.789691][ T6045] device bond4 entered promiscuous mode [ 172.813619][ T6045] netlink: 'syz.4.575': attribute type 10 has an invalid length. [ 172.832373][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.4.575'. [ 172.923581][ T4383] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 173.103543][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.119123][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.129761][ T4383] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 173.140581][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.147531][ T4383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.159629][ T4383] usb 1-1: Product: syz [ 173.164809][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.169308][ T4383] usb 1-1: Manufacturer: syz [ 173.181048][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.181207][ T4383] usb 1-1: SerialNumber: syz [ 173.203590][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.229611][ T4383] usb 1-1: config 0 descriptor?? [ 173.480770][ T4383] usb 1-1: Firmware version (0.0) predates our first public release. [ 173.512992][ T4383] usb 1-1: Please update to version 0.2 or newer [ 173.570385][ T4383] usb 1-1: USB disconnect, device number 12 [ 173.603617][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.803596][ T27] usb 5-1: Using ep0 maxpacket: 8 [ 173.812586][ T27] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.825530][ T27] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.836411][ T27] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 173.850295][ T27] usb 5-1: config 0 interface 0 has no altsetting 0 [ 173.857104][ T27] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 173.874229][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.902053][ T27] usb 5-1: config 0 descriptor?? [ 174.319285][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.327898][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.335555][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.342826][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.349987][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.359129][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.366380][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.373566][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.380635][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.389050][ T27] corsair 0003:1B1C:1B3E.0004: unknown main item tag 0x0 [ 174.397108][ T27] corsair 0003:1B1C:1B3E.0004: unbalanced collection at end of report description [ 174.408070][ T27] corsair 0003:1B1C:1B3E.0004: parse failed [ 174.414381][ T27] corsair: probe of 0003:1B1C:1B3E.0004 failed with error -22 [ 174.561612][ T27] usb 5-1: USB disconnect, device number 8 [ 174.798457][ T26] kauditd_printk_skb: 59 callbacks suppressed [ 174.798473][ T26] audit: type=1800 audit(1794165459.306:4743): pid=6093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.589" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 174.806174][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.826933][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -71 [ 174.856562][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.869560][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.879045][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.889247][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.898427][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.898928][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -71 [ 174.953128][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -71 [ 174.977833][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -71 [ 174.986292][ T6097] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 175.034374][ T6097] 8021q: adding VLAN 0 to HW filter on device bond3 [ 175.053957][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000090. ret = -71 [ 175.070175][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 175.081913][ T4370] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 175.086047][ T6097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.590'. [ 175.104187][ T6097] device bond3 entered promiscuous mode [ 175.116808][ T4370] lan78xx: probe of 2-1:1.0 failed with error -71 [ 175.150019][ T6097] device dummy0 left promiscuous mode [ 175.156017][ T4370] usb 2-1: USB disconnect, device number 8 [ 175.169030][ T6097] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 175.187663][ T6097] netlink: 40 bytes leftover after parsing attributes in process `syz.0.590'. [ 175.197280][ T6097] device dummy0 entered promiscuous mode [ 176.543420][ T6113] FAULT_INJECTION: forcing a failure. [ 176.543420][ T6113] name fail_futex, interval 1, probability 0, space 0, times 1 [ 176.594956][ T6113] CPU: 0 PID: 6113 Comm: syz.1.595 Not tainted syzkaller #0 [ 176.602389][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 176.612466][ T6113] Call Trace: [ 176.615763][ T6113] [ 176.618704][ T6113] dump_stack_lvl+0x188/0x24e [ 176.623417][ T6113] ? show_regs_print_info+0x12/0x12 [ 176.628648][ T6113] ? load_image+0x410/0x410 [ 176.633178][ T6113] ? stack_trace_save+0xa6/0xf0 [ 176.638066][ T6113] ? __stack_depot_save+0x35/0x480 [ 176.643212][ T6113] should_fail_ex+0x390/0x4c0 [ 176.647943][ T6113] get_futex_key+0x1a6/0xe70 [ 176.652563][ T6113] ? futex_setup_timer+0xc0/0xc0 [ 176.657531][ T6113] futex_wake+0x123/0x4f0 [ 176.661901][ T6113] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 176.667927][ T6113] ? futex_wake_mark+0x150/0x150 [ 176.672938][ T6113] ? lockdep_hardirqs_on+0x94/0x140 [ 176.678200][ T6113] do_futex+0x2e2/0x320 [ 176.682390][ T6113] ? __ia32_sys_get_robust_list+0x100/0x100 [ 176.688317][ T6113] __se_sys_futex+0x381/0x410 [ 176.693027][ T6113] ? __x64_sys_futex+0xf0/0xf0 [ 176.698010][ T6113] ? __x64_sys_futex+0x1d/0xf0 [ 176.702833][ T6113] do_syscall_64+0x4c/0xa0 [ 176.707305][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 176.711991][ T6113] ? clear_bhb_loop+0x60/0xb0 [ 176.716698][ T6113] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 176.722615][ T6113] RIP: 0033:0x7fc18e79fb19 [ 176.727030][ T6113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.746641][ T6113] RSP: 002b:00007fc18f58b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 176.755054][ T6113] RAX: ffffffffffffffda RBX: 00007fc18ea25fa8 RCX: 00007fc18e79fb19 [ 176.763033][ T6113] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc18ea25fac [ 176.771003][ T6113] RBP: 00007fc18ea25fa0 R08: 003ab651c61c82f8 R09: 0000000000000000 [ 176.778987][ T6113] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 176.787044][ T6113] R13: 00007fc18ea26038 R14: 00007fff535be140 R15: 00007fff535be228 [ 176.795028][ T6113] [ 176.921030][ T6113] kAFS: bad VL server IP address [ 177.133258][ T4294] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.143477][ T4294] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.153283][ T4294] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.167886][ T4294] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.175795][ T4294] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.183045][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.232655][ T6116] gadgetfs: bound to dummy_udc driver [ 177.361228][ T6134] netlink: 'syz.1.602': attribute type 1 has an invalid length. [ 177.464023][ T6134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.471501][ T6138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.602'. [ 177.511942][ T6138] device bond3 entered promiscuous mode [ 177.559352][ T6134] device dummy0 left promiscuous mode [ 177.614302][ T6138] netlink: 'syz.1.602': attribute type 10 has an invalid length. [ 177.623107][ T6138] netlink: 40 bytes leftover after parsing attributes in process `syz.1.602'. [ 177.632542][ T6138] device dummy0 entered promiscuous mode [ 178.797912][ T6145] FAULT_INJECTION: forcing a failure. [ 178.797912][ T6145] name failslab, interval 1, probability 0, space 0, times 0 [ 178.814042][ T6145] CPU: 0 PID: 6145 Comm: syz.0.604 Not tainted syzkaller #0 [ 178.821365][ T6145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 178.831426][ T6145] Call Trace: [ 178.834721][ T6145] [ 178.837663][ T6145] dump_stack_lvl+0x188/0x24e [ 178.842369][ T6145] ? show_regs_print_info+0x12/0x12 [ 178.847593][ T6145] ? load_image+0x410/0x410 [ 178.852123][ T6145] ? __might_sleep+0xd0/0xd0 [ 178.856736][ T6145] ? __lock_acquire+0x7ea0/0x7ea0 [ 178.861805][ T6145] should_fail_ex+0x390/0x4c0 [ 178.866521][ T6145] should_failslab+0x5/0x20 [ 178.871042][ T6145] slab_pre_alloc_hook+0x59/0x300 [ 178.876093][ T6145] ? kvmalloc_node+0x6c/0x180 [ 178.880791][ T6145] __kmem_cache_alloc_node+0x4f/0x270 [ 178.886187][ T6145] ? __kmem_cache_alloc_node+0x19d/0x270 [ 178.891845][ T6145] ? kvmalloc_node+0x6c/0x180 [ 178.896539][ T6145] __kmalloc_node+0xa2/0x240 [ 178.901152][ T6145] kvmalloc_node+0x6c/0x180 [ 178.905672][ T6145] nf_tables_newchain+0x1db0/0x2a30 [ 178.910913][ T6145] ? nf_tables_deltable+0xd90/0xd90 [ 178.916157][ T6145] ? __lock_acquire+0x7ea0/0x7ea0 [ 178.921207][ T6145] ? nf_tables_newtable+0xd19/0x16c0 [ 178.926532][ T6145] ? __nla_parse+0x3c/0x50 [ 178.930990][ T6145] nfnetlink_rcv+0x1119/0x2470 [ 178.935807][ T6145] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 178.941473][ T6145] ? ref_tracker_free+0x682/0x830 [ 178.946545][ T6145] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.951947][ T6145] ? __netlink_deliver_tap+0x7a9/0x7e0 [ 178.957450][ T6145] ? netlink_deliver_tap+0x2e/0x1b0 [ 178.962684][ T6145] netlink_unicast+0x7ad/0x920 [ 178.967489][ T6145] netlink_sendmsg+0x8ad/0xbd0 [ 178.972291][ T6145] ? netlink_getsockopt+0x550/0x550 [ 178.977521][ T6145] ? apparmor_socket_sendmsg+0x8a/0x330 [ 178.983094][ T6145] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 178.988406][ T6145] ? security_socket_sendmsg+0x7c/0xa0 [ 178.993896][ T6145] ? netlink_getsockopt+0x550/0x550 [ 178.999124][ T6145] ____sys_sendmsg+0x5ed/0x9a0 [ 179.003928][ T6145] ? __sys_sendmsg_sock+0x30/0x30 [ 179.009066][ T6145] ? __import_iovec+0x306/0x510 [ 179.013952][ T6145] ? import_iovec+0x6f/0xa0 [ 179.018490][ T6145] ___sys_sendmsg+0x2a2/0x360 [ 179.023210][ T6145] ? __sys_sendmsg+0x2a0/0x2a0 [ 179.028064][ T6145] __se_sys_sendmsg+0x1c3/0x2b0 [ 179.032960][ T6145] ? __x64_sys_sendmsg+0x80/0x80 [ 179.037946][ T6145] ? lockdep_hardirqs_on+0x94/0x140 [ 179.043183][ T6145] do_syscall_64+0x4c/0xa0 [ 179.048087][ T6145] ? clear_bhb_loop+0x60/0xb0 [ 179.052805][ T6145] ? clear_bhb_loop+0x60/0xb0 [ 179.057513][ T6145] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 179.063452][ T6145] RIP: 0033:0x7f1742d9fb19 [ 179.067901][ T6145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.084500][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 179.087519][ T6145] RSP: 002b:00007f1743c72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.087547][ T6145] RAX: ffffffffffffffda RBX: 00007f1743025fa0 RCX: 00007f1742d9fb19 [ 179.087560][ T6145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 179.087572][ T6145] RBP: 00007f1742e37af8 R08: 0000000000000000 R09: 0000000000000000 [ 179.087584][ T6145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.098899][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 179.103159][ T6145] R13: 00007f1743026038 R14: 00007f1743025fa0 R15: 00007ffe3b0286b8 [ 179.103193][ T6145] [ 179.159032][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 179.168553][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 179.178813][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 179.187102][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.753107][ T6165] device syzkaller1 entered promiscuous mode [ 180.916931][ T6171] FAULT_INJECTION: forcing a failure. [ 180.916931][ T6171] name failslab, interval 1, probability 0, space 0, times 0 [ 180.986664][ T6171] CPU: 1 PID: 6171 Comm: syz.4.615 Not tainted syzkaller #0 [ 180.991088][ T6173] netlink: 'syz.0.616': attribute type 1 has an invalid length. [ 180.994001][ T6171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 180.994028][ T6171] Call Trace: [ 180.994034][ T6171] [ 180.994042][ T6171] dump_stack_lvl+0x188/0x24e [ 180.994076][ T6171] ? show_regs_print_info+0x12/0x12 [ 181.027948][ T6171] ? load_image+0x410/0x410 [ 181.032530][ T6171] ? __might_sleep+0xd0/0xd0 [ 181.037147][ T6171] ? __lock_acquire+0x7ea0/0x7ea0 [ 181.042204][ T6171] should_fail_ex+0x390/0x4c0 [ 181.046915][ T6171] should_failslab+0x5/0x20 [ 181.051437][ T6171] slab_pre_alloc_hook+0x59/0x300 [ 181.056490][ T6171] ? tomoyo_encode+0x28a/0x550 [ 181.056967][ T6173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.061257][ T6171] __kmem_cache_alloc_node+0x4f/0x270 [ 181.061288][ T6171] ? tomoyo_encode+0x28a/0x550 [ 181.078019][ T6171] __kmalloc+0xa3/0x240 [ 181.082203][ T6171] tomoyo_encode+0x28a/0x550 [ 181.086820][ T6171] tomoyo_realpath_from_path+0x578/0x5c0 [ 181.092476][ T6171] ? tomoyo_domain+0xd2/0x120 [ 181.097181][ T6171] ? tomoyo_path_number_perm+0x205/0x650 [ 181.102842][ T6171] tomoyo_path_number_perm+0x22f/0x650 [ 181.108333][ T6171] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 181.113860][ T6171] ? __fget_files+0x28/0x460 [ 181.117771][ T6173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.616'. [ 181.118469][ T6171] security_file_ioctl+0x6c/0xa0 [ 181.118503][ T6171] __se_sys_ioctl+0x48/0x170 [ 181.127484][ T6173] device bond4 entered promiscuous mode [ 181.132256][ T6171] do_syscall_64+0x4c/0xa0 [ 181.132287][ T6171] ? clear_bhb_loop+0x60/0xb0 [ 181.151500][ T6171] ? clear_bhb_loop+0x60/0xb0 [ 181.156179][ T6171] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 181.162070][ T6171] RIP: 0033:0x7ff66c59fb19 [ 181.166479][ T6171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.186086][ T6171] RSP: 002b:00007ff66d4ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.194526][ T6171] RAX: ffffffffffffffda RBX: 00007ff66c825fa0 RCX: 00007ff66c59fb19 [ 181.202517][ T6171] RDX: 0000000000000000 RSI: 000000008010671f RDI: 0000000000000006 [ 181.204047][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.210485][ T6171] RBP: 00007ff66c637af8 R08: 0000000000000000 R09: 0000000000000000 [ 181.210504][ T6171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.210513][ T6171] R13: 00007ff66c826038 R14: 00007ff66c825fa0 R15: 00007ffd9140dd68 [ 181.210539][ T6171] [ 181.227301][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.268785][ T6171] ERROR: Out of memory at tomoyo_realpath_from_path. [ 181.278157][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.290181][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.297995][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 181.305566][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.433001][ T6185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.619'. [ 181.624167][ T4370] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 181.814981][ T4370] usb 1-1: too many configurations: 87, using maximum allowed: 8 [ 181.835512][ T4370] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.844764][ T4370] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.852766][ T4370] usb 1-1: Product: syz [ 181.857347][ T4370] usb 1-1: Manufacturer: syz [ 181.861990][ T4370] usb 1-1: SerialNumber: syz [ 182.282329][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 183.005164][ T6191] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.120215][ T6191] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.194362][ T4387] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 183.202789][ T6191] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.249477][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.261782][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.270996][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.287869][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.306521][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.315157][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.317242][ T6191] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.398674][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.412772][ T4387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.422952][ T4387] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 183.432932][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.445060][ T4387] usb 4-1: config 0 descriptor?? [ 183.505511][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 183.506917][ T6191] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.527045][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 183.552634][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 183.554589][ T6191] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.577642][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 183.588239][ T6191] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.602818][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 183.611970][ T6191] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.634598][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 183.657247][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 183.690271][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 183.716833][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 183.730085][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 183.740122][ T4370] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 183.765622][ T4370] lan78xx: probe of 1-1:1.0 failed with error -71 [ 183.780490][ T4370] usb 1-1: USB disconnect, device number 13 [ 183.866540][ T4387] hid_parser_main: 4 callbacks suppressed [ 183.866559][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.880134][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.887325][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.894526][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.901534][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.909155][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.916233][ T4387] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 183.926504][ T4387] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 184.067538][ T4387] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 184.466785][ T4387] cp2112 0003:10C4:EA90.0005: error setting SMBus config [ 184.477065][ T4387] cp2112: probe of 0003:10C4:EA90.0005 failed with error -71 [ 184.487232][ T4387] usb 4-1: USB disconnect, device number 11 [ 184.507512][ T6199] udevd[6199]: failed to execute '/lib/udev/fido_id' 'fido_id': No such file or directory [ 185.454579][ T4387] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 185.557695][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.567787][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.577287][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.593623][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.601641][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.610976][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.654500][ T4387] usb 2-1: Using ep0 maxpacket: 32 [ 185.658196][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.635'. [ 185.675436][ T4387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.685991][ T4387] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.696309][ T4387] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.713779][ T4387] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 185.725701][ T4387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.741734][ T4387] usb 2-1: Product: syz [ 185.746151][ T4387] usb 2-1: Manufacturer: syz [ 185.750969][ T4387] usb 2-1: SerialNumber: syz [ 185.769436][ T4387] usb 2-1: interface 2 not found [ 185.976686][ T27] usb 2-1: USB disconnect, device number 9 [ 187.635049][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.648259][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.656656][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.668687][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 187.678647][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 187.688126][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 187.736417][ T4387] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 187.946023][ T4387] usb 4-1: too many configurations: 87, using maximum allowed: 8 [ 187.966203][ T4387] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.975796][ T4387] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.983889][ T4387] usb 4-1: Product: syz [ 187.989510][ T4387] usb 4-1: Manufacturer: syz [ 187.995623][ T4387] usb 4-1: SerialNumber: syz [ 188.428550][ T4387] net_ratelimit: 1 callbacks suppressed [ 188.428566][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 189.661126][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 189.700302][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 189.740715][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 189.780038][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 189.815777][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 189.843574][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 189.874856][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 189.906789][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 189.934887][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 189.955262][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 189.975008][ T4387] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.002034][ T4387] lan78xx: probe of 4-1:1.0 failed with error -71 [ 190.013110][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 190.017912][ T4387] usb 4-1: USB disconnect, device number 12 [ 190.037750][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 190.048507][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 190.070465][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 190.079306][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 190.087015][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 190.110547][ T4374] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 190.304654][ T4374] usb 5-1: Using ep0 maxpacket: 16 [ 190.311342][ T4374] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.322529][ T4374] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.332447][ T4374] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.339252][ T4374] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 190.349184][ T4374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.360454][ T4374] usb 5-1: config 0 descriptor?? [ 190.774304][ T4374] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 190.781482][ T4374] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 190.788912][ T4374] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 190.797202][ T4374] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 190.804339][ T4374] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 190.812886][ T4374] mcp2221 0003:04D8:00DD.0006: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 190.988322][ T4374] usb 5-1: USB disconnect, device number 9 [ 192.273351][ T4285] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 192.285038][ T4285] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.293514][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.304280][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.313075][ T4285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.314766][ T4387] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 192.329516][ T4294] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.491030][ T4374] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 192.526251][ T4387] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.535634][ T4387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.545545][ T4387] usb 5-1: config 0 descriptor?? [ 192.555948][ T4387] cp210x 5-1:0.0: cp210x converter detected [ 192.678690][ T4374] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.687483][ T4374] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.698414][ T4374] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.708309][ T4374] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 192.719545][ T4374] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 192.733362][ T4374] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.742538][ T4374] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.751136][ T4374] usb 4-1: Product: syz [ 192.755498][ T4374] usb 4-1: Manufacturer: syz [ 192.765778][ T4374] cdc_wdm 4-1:1.0: skipping garbage [ 192.771062][ T4374] cdc_wdm 4-1:1.0: skipping garbage [ 192.779442][ T4374] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 192.785565][ T4374] cdc_wdm 4-1:1.0: Unknown control protocol [ 192.962630][ T4387] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 192.977159][ T4387] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 192.984976][ T4387] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 192.993665][ T4387] usb 5-1: cp210x converter now attached to ttyUSB0 [ 193.002914][ T4387] usb 5-1: USB disconnect, device number 10 [ 193.013956][ T4387] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.026827][ T4387] cp210x 5-1:0.0: device disconnected [ 194.613181][ T6292] jffs2: notice: (6292) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.651136][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.660964][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.671119][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.680012][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.688301][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.697585][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.734776][ T4387] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 194.784710][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.791073][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.927374][ T4387] usb 5-1: Using ep0 maxpacket: 32 [ 194.939914][ T4387] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 194.956236][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 194.969487][ T4387] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 194.984317][ T4387] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 194.994359][ T4387] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.004346][ T4387] usb 5-1: Product: syz [ 195.009682][ T4387] usb 5-1: Manufacturer: syz [ 195.015136][ T4387] usb 5-1: SerialNumber: syz [ 195.022568][ T4387] usb 5-1: config 0 descriptor?? [ 195.204107][ T4387] usb 4-1: USB disconnect, device number 13 [ 196.865305][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 196.869996][ T4294] Bluetooth: hci3: command 0x0406 tx timeout [ 196.910212][ T6300] rxe_eth0 speed is unknown, defaulting to 1000 [ 197.342310][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 197.363330][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 197.373438][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 197.382473][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 197.390194][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 197.397725][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 197.483854][ T4383] usb 5-1: USB disconnect, device number 11 [ 197.645064][ T4387] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 197.847209][ T4387] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 197.856375][ T4387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.872012][ T4387] usb 4-1: config 0 descriptor?? [ 197.893390][ T4387] cp210x 4-1:0.0: cp210x converter detected [ 198.290425][ T4387] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 198.299622][ T4387] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 198.307482][ T4387] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 198.316552][ T4387] usb 4-1: cp210x converter now attached to ttyUSB0 [ 198.328739][ T4387] usb 4-1: USB disconnect, device number 14 [ 198.338426][ T4387] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 198.347846][ T4387] cp210x 4-1:0.0: device disconnected [ 200.015016][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.033332][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.042119][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.050561][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.059330][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.067521][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.255889][ T2191] usb 4-1: new high-speed USB device number 15 using dummy_hcd SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=5 req=524 state=3 status=67 (errno 9: Bad file descriptor) [ 200.465521][ T2191] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.484871][ T2191] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 200.526923][ T2191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 200.545011][ T2191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 200.586328][ T2191] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 201.333095][ T2191] usb 4-1: string descriptor 0 read error: -71 [ 201.339999][ T2191] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.349701][ T2191] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.364410][ T2191] usb 4-1: can't set config #1, error -71 [ 201.406280][ T2191] usb 4-1: USB disconnect, device number 15 [ 201.452797][ T4563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.551099][ T4563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.608632][ T4563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.711686][ T4563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.826258][ T4563] device hsr_slave_0 left promiscuous mode [ 202.832963][ T4563] device hsr_slave_1 left promiscuous mode [ 202.839954][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.848117][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.856726][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.864200][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.871955][ T4563] device bridge_slave_1 left promiscuous mode [ 202.879548][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.892786][ T4563] device bridge_slave_0 left promiscuous mode [ 202.901240][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.930140][ T4563] device veth1_macvtap left promiscuous mode [ 202.937926][ T4563] device veth0_macvtap left promiscuous mode [ 202.944323][ T4563] device veth1_vlan left promiscuous mode [ 202.952089][ T4563] device veth0_vlan left promiscuous mode [ 203.475559][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 203.516594][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 203.567090][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.614283][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.917671][ T4563] bond0 (unregistering): Released all slaves [ 204.360412][ T4563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.411253][ T4563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.480422][ T4563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.530819][ T4563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.643349][ T4563] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.691600][ T4563] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.739025][ T4563] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.803044][ T4563] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.279800][ T4563] device hsr_slave_0 left promiscuous mode [ 206.286268][ T4563] device hsr_slave_1 left promiscuous mode [ 206.292520][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.301320][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.310272][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.317990][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.325947][ T4563] device bridge_slave_1 left promiscuous mode [ 206.332192][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.344818][ T4563] device bridge_slave_0 left promiscuous mode [ 206.359545][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.374823][ T4563] device hsr_slave_0 left promiscuous mode [ 206.384207][ T4563] device hsr_slave_1 left promiscuous mode [ 206.391096][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.398930][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.407018][ T4563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.414513][ T4563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.422507][ T4563] device bridge_slave_1 left promiscuous mode [ 206.431481][ T4563] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.439853][ T4563] device bridge_slave_0 left promiscuous mode [ 206.446433][ T4563] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.486025][ T4563] device veth1_macvtap left promiscuous mode [ 206.492926][ T4563] device veth0_macvtap left promiscuous mode [ 206.500032][ T4563] device veth1_vlan left promiscuous mode [ 206.507963][ T4563] device veth0_vlan left promiscuous mode [ 206.516499][ T4563] device veth1_macvtap left promiscuous mode [ 206.523652][ T4563] device veth0_macvtap left promiscuous mode [ 206.531078][ T4563] device veth1_vlan left promiscuous mode [ 206.537134][ T4563] device veth0_vlan left promiscuous mode [ 206.805016][ T4563] bond4 (unregistering): Released all slaves [ 206.935606][ T4563] bond3 (unregistering): Released all slaves [ 207.057664][ T4563] bond2 (unregistering): Released all slaves [ 207.181884][ T4563] bond1 (unregistering): Released all slaves [ 207.652693][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 207.695536][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 207.744160][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.784396][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.110398][ T4563] bond0 (unregistering): Released all slaves [ 208.270320][ T4563] bond3 (unregistering): Released all slaves [ 208.393852][ T4563] bond2 (unregistering): Released all slaves [ 208.503137][ T4563] bond1 (unregistering): Released all slaves [ 208.939119][ T4563] team0 (unregistering): Port device team_slave_1 removed [ 208.979388][ T4563] team0 (unregistering): Port device team_slave_0 removed [ 209.027624][ T4563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.070987][ T4563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.403018][ T4563] bond0 (unregistering): Released all slaves