last executing test programs: 3m52.589752532s ago: executing program 2 (id=318): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_pages(0x0, 0x2, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 3m52.17810191s ago: executing program 2 (id=319): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x8000) mount(&(0x7f0000000580)=@nullb, &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)='ext4\x00', 0x81001f, &(0x7f0000000340)='norecovery') r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x14, r1, 0x917, 0x0, 0xffffffe3}, 0x14}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="460000cb", @ANYRES16=r1, @ANYBLOB="02002bbd7000ffdbdf25010000000500050000000000050021000100000006000200010000000800110000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x2, 0x14, 0xf0, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x100000000000003, 0xfffffffffffffffe, 0x48, 0x4, 0xbdb], 0x10000, 0x304}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2c00000011000100000000000080000000000000", @ANYRESDEC=r0, @ANYBLOB="12000000", @ANYRES32, @ANYRES64=r3, @ANYRES64], 0x2c}], 0x1}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'vxcan1\x00', @remote}) 3m51.246046234s ago: executing program 2 (id=328): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000021, 0x0, 0xff}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x4000) 3m50.56751248s ago: executing program 2 (id=330): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_test', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="ab181ea412d483124bf45fa9a4adb3f55cff852a1203ef19fe9a78", 0x1b, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) write$cgroup_int(r0, &(0x7f0000000080)=0xd0e6, 0x12) syz_usb_connect(0x3, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120127b6068ac90212500102030109810003a6027f65d1488d550456c5b0ac4a680091b2cd3142f387ef5d2cadebd183a939f0107683b54265acc7c000628a8c3cb97e777a0eca03fb6142dc4b93db52d08e60c46156dd867b73ff160c0e968209025c0b614e707f0ee7e33dda1a8769e40a0e5d890b6d003660274d2d9cefeca4cd99feaff2c9a84f686c01b2d0d1f1b15b60a899ca804788c99e4a"], 0x0) 3m49.302382167s ago: executing program 2 (id=339): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async, rerun: 32) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) (async, rerun: 32) syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)={0x0, 0x0, 0xfffffffffffffe7d, 0x0, 0x0, [{0x0, &(0x7f0000000100)=@string={0x0, 0x3, "e732148f8b0278b01db6691ff9c116f5eee8bd6dccd32c8e001b9fc17b6aaf2a72ee824f0cd1b8798e2acdf89b45870218174adb5692fd5d93c1cd5861e716fba461b930d20cfa8462debd990a5ec0fa5d0882d6b57c26c9d52d35f2f7a488ced4267e633ed85b31fb585ff859f7f69357a355ba6c8df343ca38110c92235d9d4a4feda57e434d04f53c5a477552a81b5305aa93d3c31fe47b755c018b6dc6c5d3381b7f7e934dcee4b035dcb57135cd61591d804238004259dca011c292a1e997f0ed3ffafb6ad0651e1ac0671209f204142ae8cae55155914726a510d266fe782fd6a64e90896cc5ebe8c51f1852ff97ce8f198f20a3"}}, {0x0, &(0x7f0000000200)=@lang_id={0x0, 0x3, 0x416}}, {0x0, &(0x7f0000000240)=@lang_id={0x0, 0x3, 0x459}}, {0x0, &(0x7f0000000280)=@string={0x0, 0x3, "e3f6e0330dd5b4a089c445197cefcd27c8fc3ab8a44c91000580e64f8a221598599af7028c81a444b9a7a6499b6835e8567c8d0fcf0072cfd4fe15f546dedfaa639f4b2781d108c0438eb673467177d5e18f05557da689536845d6692b68fa733832ba"}}, {0x0, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0x413}}, {0x0, &(0x7f0000000340)=@string={0x0, 0x3, "81f65e2639675360c9beb5d3f6eef38058f3"}}, {0x0, &(0x7f0000000380)=@lang_id={0x0, 0x3, 0x3001}}]}) (async, rerun: 32) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0xc0040) 3m49.002152715s ago: executing program 2 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/155, 0x9b, 0x0, 0x0}, &(0x7f0000000400)=0x40) 3m48.533596658s ago: executing program 32 (id=342): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0xb66f) sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c962", 0x2}], 0x1}, 0x4004045) sendfile(r0, r1, 0x0, 0x7ffff006) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/155, 0x9b, 0x0, 0x0}, &(0x7f0000000400)=0x40) 7.203986034s ago: executing program 0 (id=1252): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}}, 0x14}}, 0x0) 7.022892564s ago: executing program 0 (id=1255): getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$IOMMU_HWPT_ALLOC$NONE(r2, 0x3b89, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa"], 0x0) fgetxattr(r2, &(0x7f0000000240)=@random={'btrfs.', 'keyring\x00'}, &(0x7f0000000340)=""/82, 0x52) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, 0xffffffffffffffff, 0x2000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, 0x0, 0x0) read(r0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 3.265767229s ago: executing program 1 (id=1260): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8001}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2f}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x87}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.006464668s ago: executing program 1 (id=1261): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2.861028923s ago: executing program 0 (id=1262): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x40002000}) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) 2.634689498s ago: executing program 0 (id=1263): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000004e00)=""/161) 2.56711683s ago: executing program 1 (id=1264): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r2}}}], 0x28}, 0x40c0) 2.330538793s ago: executing program 0 (id=1265): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0x4000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340), 0x20000099) sendto$inet(r4, &(0x7f0000000380), 0x0, 0x4000041, 0x0, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000140)=0x2000) ppoll(&(0x7f0000000040)=[{r5, 0x20}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x4000) sendto$inet(r4, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r4, 0x8983, &(0x7f0000000000)={0x8, 'veth0_to_team\x00', {'batadv_slave_0\x00'}, 0x20}) 2.09157186s ago: executing program 1 (id=1266): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r2], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) read(r0, &(0x7f0000000480)=""/84, 0x54) 1.549911187s ago: executing program 1 (id=1267): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vcan0\x00', 0x0}) sendto(r0, &(0x7f00000008c0)="d636006e745f02c7ed53323f4793f1f3f0ae93546c65f5a4395f3a8b39008aad0000000000000000000000c81e8ad837824bd5820800f8ffffffffffffad04272e28000c7605008e30fc14ae5da2899960ffdb645362c899679217b7d61dff7daae11043e88d1f4c0704b23914a10e31c860480a337bed2aeabb687458", 0x7d, 0x4000001, &(0x7f0000000700)=@can={0x1d, r1}, 0x80) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r6, 0x0, &(0x7f00000005c0)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) creat(&(0x7f0000000140)='./file0\x00', 0x34) r8 = dup3(r2, r7, 0x6700000000000000) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x100020, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0xf000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}], [{@fowner_eq={'fowner', 0x3d, r4}}, {@context={'context', 0x3d, 'unconfined_u'}}]}}) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000240)={0x3, 0x7f}) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r9, 0x3b86, &(0x7f0000000300)={0x18, r10, 0x100000001}) 1.266267436s ago: executing program 3 (id=1269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000000a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000"], 0xe4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 1.106375433s ago: executing program 4 (id=1270): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @loopback}, @ib={0x1b, 0x0, 0x9, {"0e000000000000000000000004000001"}, 0x0, 0x0, 0x3}}}, 0x118) 1.060149502s ago: executing program 4 (id=1271): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe6, 0x0, &(0x7f0000000200)={0x11, 0x19, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 938.629624ms ago: executing program 3 (id=1272): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) 811.055844ms ago: executing program 4 (id=1273): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x100003}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) close(0xffffffffffffffff) mkdir(&(0x7f00000000c0)='./file0\x00', 0x143) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x80000006) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) 756.729658ms ago: executing program 3 (id=1274): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1, 0xfffffffd}}, 0x10) bind$tipc(r0, 0x0, 0x0) 598.569913ms ago: executing program 3 (id=1275): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r2, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r2, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r3 = inotify_init() inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x200) 547.008832ms ago: executing program 4 (id=1276): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x400) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x2, 0x2, 0x4, 0x9}) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f00000000c0)) ioctl$TIOCGSERIAL(0xffffffffffffffff, 0x541e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000280)) r1 = msgget$private(0x0, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000002c0)={0x8, 0x10000, {}, {0xee00}, 0xc0, 0x7}) stat(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@ipv4={""/10, ""/2, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@private2}}, &(0x7f00000004c0)=0xe8) r5 = getgid() msgctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{0x0, r2, r3, r4, r5, 0x20, 0x3}, 0x0, 0x0, 0x7, 0x3, 0x2, 0x3, 0x7, 0x0, 0x5, 0x9}) renameat2(0xffffffffffffffff, &(0x7f00000005c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x3) mq_open(&(0x7f0000000640)='/dev/nbd#\x00', 0x40, 0x80, &(0x7f0000000680)={0x2, 0x7fffffffffffffff, 0x4, 0x1}) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) msgget(0x3, 0x89) 384.172859ms ago: executing program 3 (id=1277): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e28}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 345.905483ms ago: executing program 4 (id=1278): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000a1c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff"], 0x28}}], 0x1, 0x81) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000845}, 0x0) 323.017211ms ago: executing program 1 (id=1279): r0 = socket$igmp6(0xa, 0x3, 0x2) mq_open(&(0x7f0000000040)='*\x04\x02\x00\x00', 0x40, 0x118, 0x0) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) 230.467813ms ago: executing program 0 (id=1280): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000480)=[{0x6, 0x10, 0x0, 0x0}, {0x0, 0x800, 0x0, 0x0}, {0x5, 0x10, 0x0, 0x0}], 0x3}) 144.324727ms ago: executing program 3 (id=1281): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) sendfile(r3, r0, 0x0, 0x558410e9) 0s ago: executing program 4 (id=1282): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r0 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x169, 0x0) fcntl$setlease(r0, 0x400, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') kernel console output (not intermixed with test programs): ] RSP: 002b:00007f28861c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 332.420456][ T9335] RAX: ffffffffffffffda RBX: 00007f28855e5fa0 RCX: 00007f288538f749 [ 332.420473][ T9335] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 332.420488][ T9335] RBP: 00007f28861c6090 R08: 0000000000000000 R09: 0000000000000000 [ 332.420503][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.420517][ T9335] R13: 00007f28855e6038 R14: 00007f28855e5fa0 R15: 00007ffdac7b4498 [ 332.420554][ T9335] [ 332.420792][ T9335] Mem-Info: [ 332.874962][ T9343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.919888][ T9335] active_anon:55201 inactive_anon:0 isolated_anon:0 [ 332.919888][ T9335] active_file:18190 inactive_file:40476 isolated_file:0 [ 332.919888][ T9335] unevictable:768 dirty:33 writeback:0 [ 332.919888][ T9335] slab_reclaimable:14135 slab_unreclaimable:101151 [ 332.919888][ T9335] mapped:26473 shmem:50144 pagetables:1470 [ 332.919888][ T9335] sec_pagetables:0 bounce:0 [ 332.919888][ T9335] kernel_misc_reclaimable:0 [ 332.919888][ T9335] free:1258070 free_pcp:18788 free_cma:0 [ 332.974399][ T9335] Node 0 active_anon:220804kB inactive_anon:0kB active_file:72760kB inactive_file:161704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:105892kB dirty:132kB writeback:0kB shmem:199040kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12360kB pagetables:5592kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 333.007367][ T9335] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:188kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 333.140238][ T9335] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 333.205774][ T9335] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 333.222090][ T9335] Node 0 DMA32 free:1138640kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:220904kB inactive_anon:0kB active_file:72760kB inactive_file:161704kB unevictable:1536kB writepending:132kB zspages:0kB present:3129332kB managed:2551456kB mlocked:0kB bounce:0kB free_pcp:41748kB local_pcp:19996kB free_cma:0kB [ 333.305635][ T9335] lowmem_reserve[]: 0 0 0 0 0 [ 333.315948][ T9335] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 333.395575][ T9335] lowmem_reserve[]: 0 0 0 0 0 [ 333.400634][ T9335] Node 1 Normal free:3879080kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:35832kB local_pcp:26936kB free_cma:0kB [ 333.463941][ T9335] lowmem_reserve[]: 0 0 0 0 0 [ 333.481938][ T9335] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 333.512603][ T9335] Node 0 DMA32: 1736*4kB (UME) 1414*8kB (U) 584*16kB (UE) 50*32kB (UME) 42*64kB (UE) 5*128kB (UME) 54*256kB (UME) 33*512kB (ME) 7*1024kB (UME) 4*2048kB (UME) 259*4096kB (M) = 1139472kB [ 333.555775][ T9335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 333.594994][ T9335] Node 1 Normal: 145*4kB (UME) 35*8kB (UME) 32*16kB (UME) 134*32kB (UME) 31*64kB (UME) 8*128kB (UME) 7*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 942*4096kB (UM) = 3879132kB [ 333.634652][ T9335] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.665046][ T9335] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 333.687610][ T10] pegasus 2-1:0.0: can't locate MII phy, using default [ 333.711094][ T9335] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 333.716101][ T5828] usb 4-1: USB disconnect, device number 71 [ 333.721657][ T10] pegasus 2-1:0.0: eth5, D-Link DSB-650TX, b2:7f:17:bc:0c:33 [ 333.745394][ T9335] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 333.754903][ T9335] 108806 total pagecache pages [ 333.760860][ T9335] 0 pages in swap cache [ 333.765119][ T9335] Free swap = 124996kB [ 333.770524][ T9335] Total swap = 124996kB [ 333.774854][ T9335] 2097051 pages RAM [ 333.785593][ T9335] 0 pages HighMem/MovableOnly [ 333.786704][ T9350] o2cb: This node has not been configured. [ 333.799220][ T10] usb 2-1: USB disconnect, device number 71 [ 333.806252][ T9350] o2cb: Cluster check failed. Fix errors before retrying. [ 333.813452][ T9335] 427417 pages reserved [ 333.825680][ T9350] (syz.3.970,9350,0):user_dlm_register:674 ERROR: status = -22 [ 333.827213][ T9335] 0 pages cma reserved [ 333.833284][ T9350] (syz.3.970,9350,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 334.116249][ T9358] FAULT_INJECTION: forcing a failure. [ 334.116249][ T9358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.159995][ T9358] CPU: 0 UID: 0 PID: 9358 Comm: syz.4.972 Not tainted syzkaller #0 PREEMPT(full) [ 334.160028][ T9358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.160043][ T9358] Call Trace: [ 334.160053][ T9358] [ 334.160063][ T9358] dump_stack_lvl+0x189/0x250 [ 334.160090][ T9358] ? __pfx____ratelimit+0x10/0x10 [ 334.160120][ T9358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.160142][ T9358] ? __pfx__printk+0x10/0x10 [ 334.160173][ T9358] ? __might_fault+0xb0/0x130 [ 334.160212][ T9358] should_fail_ex+0x414/0x560 [ 334.160244][ T9358] _copy_to_iter+0x1de/0x1790 [ 334.160288][ T9358] ? __pfx__copy_to_iter+0x10/0x10 [ 334.160321][ T9358] ? chacha_block_generic+0x53/0xc80 [ 334.160366][ T9358] get_random_bytes_user+0x1a0/0x380 [ 334.160406][ T9358] ? __pfx_get_random_bytes_user+0x10/0x10 [ 334.160448][ T9358] ? common_file_perm+0x1b5/0x220 [ 334.160482][ T9358] ? bpf_lsm_file_permission+0x9/0x20 [ 334.160515][ T9358] ? security_file_permission+0x75/0x290 [ 334.160547][ T9358] aio_read+0x311/0x470 [ 334.160591][ T9358] ? __pfx_aio_read+0x10/0x10 [ 334.160634][ T9358] ? __might_fault+0xb0/0x130 [ 334.160681][ T9358] io_submit_one+0x755/0x1430 [ 334.160728][ T9358] ? __pfx_io_submit_one+0x10/0x10 [ 334.160758][ T9358] ? __might_fault+0xb0/0x130 [ 334.160798][ T9358] ? __might_fault+0xb0/0x130 [ 334.160829][ T9358] __se_sys_io_submit+0x185/0x320 [ 334.160859][ T9358] ? __pfx___se_sys_io_submit+0x10/0x10 [ 334.160884][ T9358] ? ksys_write+0x22a/0x250 [ 334.160924][ T9358] ? do_syscall_64+0xbe/0xf80 [ 334.160961][ T9358] do_syscall_64+0xfa/0xf80 [ 334.160994][ T9358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.161016][ T9358] ? clear_bhb_loop+0x60/0xb0 [ 334.161043][ T9358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.161066][ T9358] RIP: 0033:0x7f288538f749 [ 334.161085][ T9358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.161106][ T9358] RSP: 002b:00007f28861c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 334.161129][ T9358] RAX: ffffffffffffffda RBX: 00007f28855e5fa0 RCX: 00007f288538f749 [ 334.161146][ T9358] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007f28861a5000 [ 334.161163][ T9358] RBP: 00007f28861c6090 R08: 0000000000000000 R09: 0000000000000000 [ 334.161177][ T9358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.161190][ T9358] R13: 00007f28855e6038 R14: 00007f28855e5fa0 R15: 00007ffdac7b4498 [ 334.161226][ T9358] [ 334.545728][ T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 334.705578][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 334.712975][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 334.729169][ T10] usb 1-1: config 1 has an invalid interface number: 4 but max is 2 [ 334.752349][ T10] usb 1-1: config 1 has an invalid interface descriptor of length 6, skipping [ 334.777923][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.807173][ T10] usb 1-1: config 1 has no interface number 1 [ 334.817974][ T10] usb 1-1: config 1 interface 4 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 334.836536][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.849667][ T10] usb 1-1: config 1 interface 4 has no altsetting 0 [ 334.860373][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.880055][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.895896][ T10] usb 1-1: Product: syz [ 334.900415][ T10] usb 1-1: Manufacturer: syz [ 334.905107][ T10] usb 1-1: SerialNumber: syz [ 335.057033][ T912] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 335.127600][ T10] usb 1-1: 2:1 : invalid UAC_AS_GENERAL desc [ 335.160937][ T10] usb 1-1: USB disconnect, device number 63 [ 335.235923][ T912] usb 4-1: Invalid ep0 maxpacket: 16 [ 335.385652][ T912] usb 4-1: new low-speed USB device number 73 using dummy_hcd [ 335.385736][ T5895] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 335.545652][ T912] usb 4-1: Invalid ep0 maxpacket: 16 [ 335.551447][ T912] usb usb4-port1: attempt power cycle [ 335.568527][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 335.578371][ T5895] usb 5-1: unable to get BOS descriptor or descriptor too short [ 335.588811][ T5895] usb 5-1: config 7 has an invalid interface number: 60 but max is 0 [ 335.605590][ T5895] usb 5-1: config 7 has no interface number 0 [ 335.611765][ T5895] usb 5-1: config 7 interface 60 has no altsetting 0 [ 335.620931][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=0217, bcdDevice=75.54 [ 335.648009][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.669418][ T5895] usb 5-1: Product: syz [ 335.673653][ T5895] usb 5-1: Manufacturer: syz [ 335.685941][ T5895] usb 5-1: SerialNumber: syz [ 335.745819][ T5913] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 335.897294][ T5913] usb 2-1: too many configurations: 88, using maximum allowed: 8 [ 335.905673][ T912] usb 4-1: new low-speed USB device number 74 using dummy_hcd [ 335.914533][ T5913] usb 2-1: config index 0 descriptor too short (expected 107, got 45) [ 335.932718][ T5913] usb 2-1: config index 1 descriptor too short (expected 107, got 45) [ 335.944260][ T5913] usb 2-1: config index 2 descriptor too short (expected 107, got 45) [ 335.954248][ T912] usb 4-1: Invalid ep0 maxpacket: 16 [ 335.961304][ T5913] usb 2-1: config index 3 descriptor too short (expected 107, got 45) [ 335.972743][ T5913] usb 2-1: config index 4 descriptor too short (expected 107, got 45) [ 335.982786][ T5913] usb 2-1: config index 5 descriptor too short (expected 107, got 45) [ 335.992858][ T5913] usb 2-1: config index 6 descriptor too short (expected 107, got 45) [ 336.002792][ T5913] usb 2-1: config index 7 descriptor too short (expected 107, got 45) [ 336.016209][ T5913] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.028203][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.037533][ T5913] usb 2-1: Product: syz [ 336.041780][ T5913] usb 2-1: Manufacturer: syz [ 336.047095][ T5913] usb 2-1: SerialNumber: syz [ 336.081408][ T5895] appletouch 5-1:7.60: Could not find int-in endpoint [ 336.090158][ T5895] appletouch 5-1:7.60: probe with driver appletouch failed with error -5 [ 336.100048][ T5895] usbhid 5-1:7.60: couldn't find an input interrupt endpoint [ 336.105917][ T912] usb 4-1: new low-speed USB device number 75 using dummy_hcd [ 336.114601][ T5895] usb 5-1: USB disconnect, device number 46 [ 336.146568][ T912] usb 4-1: Invalid ep0 maxpacket: 16 [ 336.152511][ T912] usb usb4-port1: unable to enumerate USB device [ 336.165815][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 336.325597][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 336.332778][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 336.359309][ T10] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 336.368668][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.379209][ T10] usb 1-1: Product: syz [ 336.383416][ T10] usb 1-1: Manufacturer: syz [ 336.390404][ T10] usb 1-1: SerialNumber: syz [ 336.398261][ T10] usb 1-1: config 0 descriptor?? [ 336.408448][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 336.463446][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 336.476197][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 336.490126][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 336.502393][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 336.512737][ T5913] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 336.528153][ T5913] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 336.614467][ T10] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 336.644559][ T10] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 336.750838][ T9382] loop4: detected capacity change from 0 to 7 [ 336.760066][ T9382] Dev loop4: unable to read RDB block 7 [ 336.765771][ T9382] loop4: AHDI p1 p2 [ 336.769937][ T9382] loop4: partition table partially beyond EOD, truncated [ 336.777298][ T9382] loop4: p1 size 4261412863 extends beyond EOD, truncated [ 336.813357][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.980'. [ 336.847147][ T5913] usb 1-1: USB disconnect, device number 64 [ 337.425608][ T5913] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 337.480479][ T9394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 337.585590][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 337.594030][ T5913] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 337.603912][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.615365][ T5913] usb 4-1: config 0 descriptor?? [ 338.073648][ T5914] IPVS: starting estimator thread 0... [ 338.175894][ T9402] IPVS: using max 24 ests per chain, 57600 per kthread [ 338.493256][ T30] kauditd_printk_skb: 289 callbacks suppressed [ 338.493278][ T30] audit: type=1326 audit(1764473694.887:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f116058f749 code=0x0 [ 338.569221][ T912] usb 2-1: USB disconnect, device number 72 [ 338.635100][ T30] audit: type=1326 audit(1764473695.027:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.660031][ T30] audit: type=1326 audit(1764473695.027:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.685034][ T30] audit: type=1326 audit(1764473695.027:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.723093][ T30] audit: type=1326 audit(1764473695.027:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.745649][ T5912] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 338.772124][ T9412] openvswitch: netlink: Missing key (keys=40, expected=100) [ 338.785626][ T30] audit: type=1326 audit(1764473695.027:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.811803][ T30] audit: type=1326 audit(1764473695.027:2208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.821075][ T9412] virtiofs: Unknown parameter 'always1 0:00000000 0 [ 338.821075][ T9412] 18 nlmon0 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 20 batadv0 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 21 vxcan0 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 22 vxcan1 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 23 veth0 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 24 veth1 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 25 wg0 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 26 wg1 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 27 wg2 : 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 28 veth0_to_bridge: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 29 bridge_slave_0: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 30 veth1_to_bridge: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 31 bridge_slave_1: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 32 veth0_to_bond: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 33 bond_slave_0: 1 V3 [ 338.821075][ T9412] 010000E0 1 0:00000000 0 [ 338.821075][ T9412] 34 veth1_to_bond: [ 338.838040][ T30] audit: type=1326 audit(1764473695.027:2209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 338.987394][ T5912] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 339.025263][ T30] audit: type=1326 audit(1764473695.027:2210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 339.051988][ T30] audit: type=1326 audit(1764473695.027:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9404 comm="syz.0.988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 339.071897][ T5912] usb 5-1: config index 0 descriptor too short (expected 107, got 45) [ 339.121771][ T5912] usb 5-1: config index 1 descriptor too short (expected 107, got 45) [ 339.134595][ T5912] usb 5-1: config index 2 descriptor too short (expected 107, got 45) [ 339.167551][ T5912] usb 5-1: config index 3 descriptor too short (expected 107, got 45) [ 339.177538][ T5912] usb 5-1: config index 4 descriptor too short (expected 107, got 45) [ 339.188390][ T5912] usb 5-1: config index 5 descriptor too short (expected 107, got 45) [ 339.209835][ T5912] usb 5-1: config index 6 descriptor too short (expected 107, got 45) [ 339.226097][ T5912] usb 5-1: config index 7 descriptor too short (expected 107, got 45) [ 339.241330][ T5912] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 339.258854][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.267340][ T5912] usb 5-1: Product: syz [ 339.272701][ T5912] usb 5-1: Manufacturer: syz [ 339.277994][ T5912] usb 5-1: SerialNumber: syz [ 339.407145][ T5913] pegasus 4-1:0.0: can't locate MII phy, using default [ 339.428526][ T5913] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, 02:86:8b:d0:53:81 [ 339.449814][ T5913] usb 4-1: USB disconnect, device number 76 [ 339.664980][ T9423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.719218][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 339.736846][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 340.025715][ T5895] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 340.125981][ T10] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 340.225670][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 340.233201][ T5895] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 340.243718][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.257077][ T5895] usb 2-1: config 0 descriptor?? [ 340.275646][ T10] usb 1-1: device descriptor read/64, error -71 [ 340.469695][ T6694] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 340.515836][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 340.645867][ T10] usb 1-1: device descriptor read/64, error -71 [ 340.653122][ T6694] usb 4-1: too many configurations: 88, using maximum allowed: 8 [ 340.664191][ T6694] usb 4-1: config index 0 descriptor too short (expected 107, got 45) [ 340.674743][ T6694] usb 4-1: config index 1 descriptor too short (expected 107, got 45) [ 340.691920][ T6694] usb 4-1: config index 2 descriptor too short (expected 107, got 45) [ 340.704253][ T6694] usb 4-1: config index 3 descriptor too short (expected 107, got 45) [ 340.714777][ T6694] usb 4-1: config index 4 descriptor too short (expected 107, got 45) [ 340.725292][ T6694] usb 4-1: config index 5 descriptor too short (expected 107, got 45) [ 340.736027][ T6694] usb 4-1: config index 6 descriptor too short (expected 107, got 45) [ 340.747572][ T6694] usb 4-1: config index 7 descriptor too short (expected 107, got 45) [ 340.759561][ T6694] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 340.770795][ T10] usb usb1-port1: attempt power cycle [ 340.777991][ T6694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.786737][ T6694] usb 4-1: Product: syz [ 340.790981][ T6694] usb 4-1: Manufacturer: syz [ 340.796108][ T6694] usb 4-1: SerialNumber: syz [ 341.127687][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 341.156555][ T10] usb 1-1: device descriptor read/8, error -71 [ 341.218333][ T6694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 341.238176][ T6694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 341.251912][ T6694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 341.264943][ T6694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.278323][ T6694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 341.290830][ T6694] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 341.415869][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 341.446422][ T10] usb 1-1: device descriptor read/8, error -71 [ 341.556107][ T10] usb usb1-port1: unable to enumerate USB device [ 341.900632][ T5895] pegasus 2-1:0.0: can't locate MII phy, using default [ 341.945697][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 341.971921][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 341.992887][ T5895] pegasus 2-1:0.0: eth5, D-Link DSB-650TX, da:0f:e8:24:ef:fd [ 342.003952][ T5912] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 342.018063][ T5895] usb 2-1: USB disconnect, device number 73 [ 342.033431][ T5912] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 342.054963][ T5912] usb 5-1: USB disconnect, device number 47 [ 342.375702][ T5912] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 342.530003][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.546208][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 176, changing to 4 [ 342.557721][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 342.570585][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 342.581777][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 342.592999][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 342.604132][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 12 [ 342.620001][ T5912] usb 5-1: New USB device found, idVendor=1bc7, idProduct=10c0, bcdDevice=bd.c0 [ 342.631184][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.639566][ T5912] usb 5-1: Product: syz [ 342.643857][ T5912] usb 5-1: Manufacturer: syz [ 342.651153][ T5912] usb 5-1: SerialNumber: syz [ 342.659163][ T5912] usb 5-1: config 0 descriptor?? [ 342.665415][ T9441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.674726][ T9441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 342.775647][ T6694] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 342.903657][ T5913] usb 5-1: USB disconnect, device number 48 [ 342.959954][ T6694] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 342.978685][ T6694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.010743][ T6694] usb 2-1: config 0 has no interface number 0 [ 343.025811][ T6694] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 343.055567][ T6694] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.073358][ T6694] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 343.093124][ T6694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.111839][ T6694] usb 2-1: Product: syz [ 343.125575][ T6694] usb 2-1: Manufacturer: syz [ 343.130337][ T6694] usb 2-1: SerialNumber: syz [ 343.140599][ T6694] usb 2-1: config 0 descriptor?? [ 343.274957][ T5913] usb 4-1: USB disconnect, device number 77 [ 343.436053][ T9457] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 343.576155][ T912] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 343.598535][ T9464] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 343.737059][ T912] usb 1-1: Using ep0 maxpacket: 32 [ 343.754381][ T912] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 343.762112][ T6694] usbtouchscreen 2-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 343.775002][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.787418][ T6694] usb 2-1: USB disconnect, device number 74 [ 343.814280][ T912] usb 1-1: config 0 descriptor?? [ 343.828483][ T912] gspca_main: sunplus-2.14.0 probing 041e:400b [ 343.935787][ T5913] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 344.095723][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 344.104896][ T5913] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 344.118860][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.131128][ T5913] usb 4-1: config 0 descriptor?? [ 344.175848][ T7825] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 344.347076][ T7825] usb 5-1: Using ep0 maxpacket: 16 [ 344.356403][ T7825] usb 5-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 344.366670][ T7825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.380940][ T7825] usb 5-1: config 0 descriptor?? [ 344.955906][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 345.083257][ T912] gspca_sunplus: reg_w_riv err -71 [ 345.093163][ T912] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 345.104489][ T912] usb 1-1: USB disconnect, device number 69 [ 345.116322][ T10] usb 2-1: too many configurations: 88, using maximum allowed: 8 [ 345.125375][ T10] usb 2-1: config index 0 descriptor too short (expected 107, got 45) [ 345.140441][ T10] usb 2-1: config index 1 descriptor too short (expected 107, got 45) [ 345.150473][ T10] usb 2-1: config index 2 descriptor too short (expected 107, got 45) [ 345.160638][ T10] usb 2-1: config index 3 descriptor too short (expected 107, got 45) [ 345.170580][ T10] usb 2-1: config index 4 descriptor too short (expected 107, got 45) [ 345.180507][ T10] usb 2-1: config index 5 descriptor too short (expected 107, got 45) [ 345.190510][ T10] usb 2-1: config index 6 descriptor too short (expected 107, got 45) [ 345.200809][ T10] usb 2-1: config index 7 descriptor too short (expected 107, got 45) [ 345.212042][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 345.221528][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.231677][ T10] usb 2-1: Product: syz [ 345.236104][ T10] usb 2-1: Manufacturer: syz [ 345.240742][ T10] usb 2-1: SerialNumber: syz [ 345.658342][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 345.685783][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 345.698926][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 345.712000][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 345.723705][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 345.740218][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 345.762225][ T5913] pegasus 4-1:0.0: can't locate MII phy, using default [ 345.798802][ T5913] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, 4e:31:20:5e:bd:f1 [ 345.814880][ T5913] usb 4-1: USB disconnect, device number 78 [ 346.011854][ T7825] pegasus 5-1:0.0: can't locate MII phy, using default [ 346.377626][ T7825] pegasus 5-1:0.0: eth5, D-Link DSB-650TX, 32:33:1c:d9:24:d5 [ 346.397467][ T7825] usb 5-1: USB disconnect, device number 49 [ 346.720991][ T9501] netlink: 'syz.4.1016': attribute type 16 has an invalid length. [ 346.940240][ T9511] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1019'. [ 346.969386][ T9511] fuse: Unknown parameter 'Ud' [ 346.977093][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1019'. [ 347.368731][ T9516] Invalid ELF header magic: != ELF [ 347.420451][ T9505] syzkaller1: entered promiscuous mode [ 347.426140][ T9505] syzkaller1: entered allmulticast mode [ 347.630928][ T30] kauditd_printk_skb: 154 callbacks suppressed [ 347.630949][ T30] audit: type=1326 audit(1764473704.027:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.4.1022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f288538f749 code=0x0 [ 347.705290][ T9505] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 957 [ 347.766091][ T912] usb 2-1: USB disconnect, device number 75 [ 347.896618][ T5829] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 347.896626][ T5833] Bluetooth: hci4: command 0x1003 tx timeout [ 348.676409][ T9246] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 348.835683][ T9246] usb 4-1: Using ep0 maxpacket: 16 [ 348.844028][ T9246] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 348.867476][ T9246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.897864][ T9246] usb 4-1: config 0 descriptor?? [ 349.087948][ T912] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 349.249325][ T912] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 349.269090][ T912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.269885][ T9545] netlink: 'syz.4.1029': attribute type 5 has an invalid length. [ 349.292096][ T912] usb 1-1: config 0 descriptor?? [ 349.344358][ T9547] loop3: detected capacity change from 0 to 7 [ 349.354976][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 349.364987][ T9547] Dev loop3: unable to read RDB block 7 [ 349.372246][ T9547] loop3: unable to read partition table [ 349.379407][ T9547] loop3: partition table beyond EOD, truncated [ 349.385825][ T9547] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 349.515815][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 349.525016][ T10] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.541433][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 349.548431][ T10] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 349.558557][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.575014][ T10] usb 2-1: config 0 descriptor?? [ 349.695756][ T5895] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 349.716070][ T912] usb 1-1: Cannot read MAC address [ 349.722898][ T912] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61 [ 349.856392][ T5895] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 349.868945][ T5895] usb 5-1: config index 0 descriptor too short (expected 107, got 45) [ 349.878960][ T5895] usb 5-1: config index 1 descriptor too short (expected 107, got 45) [ 349.889780][ T5895] usb 5-1: config index 2 descriptor too short (expected 107, got 45) [ 349.900017][ T5895] usb 5-1: config index 3 descriptor too short (expected 107, got 45) [ 349.910525][ T5895] usb 5-1: config index 4 descriptor too short (expected 107, got 45) [ 349.920800][ T5895] usb 5-1: config index 5 descriptor too short (expected 107, got 45) [ 349.931288][ T5895] usb 5-1: config index 6 descriptor too short (expected 107, got 45) [ 349.941750][ T5895] usb 5-1: config index 7 descriptor too short (expected 107, got 45) [ 349.954055][ T5895] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.963935][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.972454][ T5895] usb 5-1: Product: syz [ 349.977222][ T5895] usb 5-1: Manufacturer: syz [ 349.981983][ T5895] usb 5-1: SerialNumber: syz [ 349.989049][ T10] hid (null): unknown global tag 0xe [ 350.004311][ T10] corsair-cpro 0003:1B1C:0C10.0009: unknown global tag 0xe [ 350.018142][ T10] corsair-cpro 0003:1B1C:0C10.0009: item 0 2 1 14 parsing failed [ 350.028110][ T10] corsair-cpro 0003:1B1C:0C10.0009: probe with driver corsair-cpro failed with error -22 [ 350.194162][ T912] usb 2-1: USB disconnect, device number 76 [ 350.416282][ T5895] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 350.435610][ T5895] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 350.466599][ T5895] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 350.495817][ T5895] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 350.517398][ T5895] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 350.537982][ T9246] pegasus 4-1:0.0: can't locate MII phy, using default [ 350.538126][ T5895] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 350.575669][ T9246] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, e2:95:b7:1c:f3:a6 [ 350.597105][ T9246] usb 4-1: USB disconnect, device number 79 [ 350.827841][ T9554] FAULT_INJECTION: forcing a failure. [ 350.827841][ T9554] name failslab, interval 1, probability 0, space 0, times 0 [ 350.868080][ T9554] CPU: 0 UID: 0 PID: 9554 Comm: syz.1.1032 Not tainted syzkaller #0 PREEMPT(full) [ 350.868109][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 350.868129][ T9554] Call Trace: [ 350.868138][ T9554] [ 350.868146][ T9554] dump_stack_lvl+0x189/0x250 [ 350.868170][ T9554] ? __pfx____ratelimit+0x10/0x10 [ 350.868196][ T9554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.868215][ T9554] ? __pfx__printk+0x10/0x10 [ 350.868250][ T9554] ? __pfx___might_resched+0x10/0x10 [ 350.868278][ T9554] ? fs_reclaim_acquire+0x7d/0x100 [ 350.868312][ T9554] should_fail_ex+0x414/0x560 [ 350.868340][ T9554] should_failslab+0xa8/0x100 [ 350.868360][ T9554] kmem_cache_alloc_noprof+0x88/0x710 [ 350.868386][ T9554] ? __pfx___alloc_skb+0x10/0x10 [ 350.868412][ T9554] ? sctp_chunkify+0x5a/0x260 [ 350.868440][ T9554] sctp_chunkify+0x5a/0x260 [ 350.868466][ T9554] _sctp_make_chunk+0x122/0x290 [ 350.868492][ T9554] sctp_make_datafrag_empty+0x122/0x230 [ 350.868518][ T9554] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 350.868547][ T9554] ? sctp_datamsg_from_user+0x88/0xef0 [ 350.868573][ T9554] ? sctp_auth_send_cid+0x69/0x250 [ 350.868603][ T9554] sctp_datamsg_from_user+0x729/0xef0 [ 350.868649][ T9554] sctp_sendmsg_to_asoc+0x1059/0x18d0 [ 350.868690][ T9554] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 350.868732][ T9554] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 350.868758][ T9554] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 350.868786][ T9554] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 350.868812][ T9554] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 350.868837][ T9554] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 350.868863][ T9554] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 350.868896][ T9554] ? security_sctp_bind_connect+0x7e/0x2e0 [ 350.868933][ T9554] sctp_sendmsg+0x1941/0x2840 [ 350.868978][ T9554] ? __pfx_sctp_sendmsg+0x10/0x10 [ 350.869023][ T9554] ? __pfx_aa_sk_perm+0x10/0x10 [ 350.869044][ T9554] ? sock_rps_record_flow+0x19/0x410 [ 350.869068][ T9554] ? inet_sendmsg+0x2f4/0x370 [ 350.869092][ T9554] sock_sendmsg_nosec+0x128/0x1d0 [ 350.869126][ T9554] __sys_sendto+0x3ce/0x540 [ 350.869157][ T9554] ? __pfx___sys_sendto+0x10/0x10 [ 350.869182][ T9554] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 350.869225][ T9554] ? __fget_files+0x3a0/0x420 [ 350.869256][ T9554] ? ksys_write+0x22a/0x250 [ 350.869284][ T9554] ? __pfx_ksys_write+0x10/0x10 [ 350.869314][ T9554] __x64_sys_sendto+0xde/0x100 [ 350.869345][ T9554] do_syscall_64+0xfa/0xf80 [ 350.869374][ T9554] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.869393][ T9554] ? clear_bhb_loop+0x60/0xb0 [ 350.869417][ T9554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.869435][ T9554] RIP: 0033:0x7efed138f749 [ 350.869453][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.869470][ T9554] RSP: 002b:00007efed226b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 350.869491][ T9554] RAX: ffffffffffffffda RBX: 00007efed15e5fa0 RCX: 00007efed138f749 [ 350.869505][ T9554] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 350.869517][ T9554] RBP: 00007efed226b090 R08: 0000200000000100 R09: 000000000000001c [ 350.869530][ T9554] R10: 0000000000044004 R11: 0000000000000246 R12: 0000000000000002 [ 350.869542][ T9554] R13: 00007efed15e6038 R14: 00007efed15e5fa0 R15: 00007fff686b6c28 [ 350.869574][ T9554] [ 351.513026][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.542297][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.576809][ T9564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.611297][ T9564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.725589][ T912] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 351.735707][ T7825] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 351.895800][ T912] usb 4-1: Using ep0 maxpacket: 16 [ 351.909110][ T7825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.921952][ T7825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.935320][ T7825] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.944657][ T912] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 351.961395][ T912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.969936][ T7825] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 351.978411][ T912] usb 4-1: Product: syz [ 351.982738][ T912] usb 4-1: Manufacturer: syz [ 351.987893][ T7825] usb 2-1: Manufacturer: syz [ 351.992688][ T912] usb 4-1: SerialNumber: syz [ 352.002003][ T7825] usb 2-1: config 0 descriptor?? [ 352.014003][ T912] usb 4-1: config 0 descriptor?? [ 352.017154][ T5895] usb 1-1: USB disconnect, device number 70 [ 352.032794][ T912] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 352.229824][ T7825] usbhid 2-1:0.0: can't add hid device: -71 [ 352.240750][ T7825] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 352.253250][ T7825] usb 2-1: USB disconnect, device number 77 [ 352.395610][ T5895] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 352.502933][ T7825] usb 5-1: USB disconnect, device number 50 [ 352.571588][ T5895] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 352.582263][ T5895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.591486][ T5895] usb 1-1: Product: syz [ 352.597160][ T5895] usb 1-1: Manufacturer: syz [ 352.601892][ T5895] usb 1-1: SerialNumber: syz [ 352.610759][ T5895] usb 1-1: config 0 descriptor?? [ 352.620482][ T5895] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 352.844161][ T912] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 352.866495][ T7825] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 352.884457][ T912] usb 4-1: USB disconnect, device number 80 [ 353.059515][ T7825] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 353.085680][ T7825] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.106487][ T7825] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 353.127898][ T7825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 353.136471][ T5914] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 353.156066][ T7825] usb 5-1: SerialNumber: syz [ 353.171418][ T7825] usb 5-1: 0:2 : does not exist [ 353.287401][ T5914] usb 2-1: device descriptor read/64, error -71 [ 353.336136][ T5895] gspca_sunplus: reg_w_riv err -110 [ 353.348697][ T5895] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 353.535621][ T5914] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 353.685600][ T5914] usb 2-1: device descriptor read/64, error -71 [ 353.706071][ T9584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.736122][ T9584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.806027][ T5914] usb usb2-port1: attempt power cycle [ 353.899627][ T9588] random: crng reseeded on system resumption [ 354.176494][ T5914] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 354.206302][ T5914] usb 2-1: device descriptor read/8, error -71 [ 354.457337][ T5914] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 354.487717][ T5914] usb 2-1: device descriptor read/8, error -71 [ 354.525661][ T5913] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 354.677588][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.728506][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.767203][ T5914] usb usb2-port1: unable to enumerate USB device [ 354.784623][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.827675][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.845599][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 354.852589][ T5913] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 354.875644][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.886797][ T5913] usb 4-1: config 0 descriptor?? [ 354.899718][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.936450][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.623551][ T9599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.646180][ T9599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.524364][ T5913] pegasus 4-1:0.0: can't locate MII phy, using default [ 356.566058][ T5913] pegasus 4-1:0.0: eth5, D-Link DSB-650TX, e2:ab:b8:cd:6d:50 [ 356.597903][ T5913] usb 4-1: USB disconnect, device number 81 [ 356.995619][ T7825] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 357.181171][ T7825] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.209587][ T7825] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 357.245736][ T7825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.285740][ T7825] usb 2-1: config 0 descriptor?? [ 357.738764][ T7825] steelseries 0003:1038:12B6.000A: ignoring exceeding usage max [ 357.779008][ T7825] steelseries 0003:1038:12B6.000A: item fetching failed at offset 5/7 [ 357.798590][ T7825] steelseries 0003:1038:12B6.000A: probe with driver steelseries failed with error -22 [ 357.852236][ T7825] usb 5-1: USB disconnect, device number 51 [ 358.176356][ T5895] usb 2-1: USB disconnect, device number 82 [ 358.355658][ T7825] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 358.535598][ T7825] usb 4-1: Using ep0 maxpacket: 32 [ 358.552938][ T7825] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 358.575618][ T7825] usb 4-1: config 0 has no interface number 0 [ 358.601153][ T7825] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 358.620868][ T7825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.645602][ T7825] usb 4-1: Product: syz [ 358.655587][ T7825] usb 4-1: Manufacturer: syz [ 358.660254][ T7825] usb 4-1: SerialNumber: syz [ 358.688438][ T7825] usb 4-1: config 0 descriptor?? [ 358.711581][ T7825] smsc95xx v2.0.0 [ 359.646111][ T30] audit: type=1326 audit(1764473716.047:2367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9639 comm="syz.4.1060" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f288538f749 code=0x0 [ 359.829217][ T9644] nfs: Deprecated parameter 'intr' [ 360.187884][ T9646] autofs: Unknown parameter 'ÿ0x0000000000000000' [ 360.706274][ T9652] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 360.732339][ T9653] tmpfs: Unknown parameter 'noinode32' [ 361.018727][ T5895] usb 1-1: USB disconnect, device number 71 [ 361.084676][ T7825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 361.140836][ T7825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 361.152679][ T9658] loop3: detected capacity change from 0 to 7 [ 361.176812][ T9658] Dev loop3: unable to read RDB block 7 [ 361.186438][ T7825] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 361.205941][ T9658] loop3: unable to read partition table [ 361.212363][ T9658] loop3: partition table beyond EOD, truncated [ 361.219661][ T7825] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 361.275689][ T7825] usb 4-1: USB disconnect, device number 82 [ 361.289289][ T9658] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 361.351245][ T5195] Dev loop3: unable to read RDB block 7 [ 361.358014][ T5195] loop3: unable to read partition table [ 361.365774][ T5195] loop3: partition table beyond EOD, truncated [ 361.467190][ T9663] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1066'. [ 361.480442][ T9663] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1066'. [ 361.635770][ T30] audit: type=1326 audit(1764473718.017:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f116058f749 code=0x0 [ 361.714516][ T30] audit: type=1326 audit(1764473718.107:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 361.757496][ T30] audit: type=1326 audit(1764473718.107:2370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 361.809928][ T30] audit: type=1326 audit(1764473718.107:2371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 361.864769][ T30] audit: type=1326 audit(1764473718.107:2372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 361.885989][ T9674] FAULT_INJECTION: forcing a failure. [ 361.885989][ T9674] name failslab, interval 1, probability 0, space 0, times 0 [ 361.916263][ T9674] CPU: 1 UID: 0 PID: 9674 Comm: syz.3.1071 Not tainted syzkaller #0 PREEMPT(full) [ 361.916296][ T9674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.916310][ T9674] Call Trace: [ 361.916320][ T9674] [ 361.916330][ T9674] dump_stack_lvl+0x189/0x250 [ 361.916356][ T9674] ? __pfx____ratelimit+0x10/0x10 [ 361.916388][ T9674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.916409][ T9674] ? __pfx__printk+0x10/0x10 [ 361.916445][ T9674] ? __pfx___might_resched+0x10/0x10 [ 361.916485][ T9674] ? fs_reclaim_acquire+0x7d/0x100 [ 361.916522][ T9674] should_fail_ex+0x414/0x560 [ 361.916554][ T9674] should_failslab+0xa8/0x100 [ 361.916577][ T9674] kmem_cache_alloc_noprof+0x88/0x710 [ 361.916618][ T9674] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 361.916652][ T9674] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 361.916690][ T9674] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 361.916736][ T9674] mmu_topup_memory_caches+0x21/0x170 [ 361.916775][ T9674] kvm_mmu_load+0x9d/0x22d0 [ 361.916795][ T9674] ? kvm_msr_allowed+0x9a/0x490 [ 361.916817][ T9674] ? kvm_msr_allowed+0x3f4/0x490 [ 361.916840][ T9674] ? kvm_msr_allowed+0x9a/0x490 [ 361.916861][ T9674] ? kvm_msr_allowed+0x9a/0x490 [ 361.916890][ T9674] ? kvm_apic_has_interrupt+0x744/0x770 [ 361.916914][ T9674] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 361.916953][ T9674] vcpu_run+0x54d7/0x76b0 [ 361.917064][ T9674] ? __pfx_vcpu_run+0x10/0x10 [ 361.917101][ T9674] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 361.917137][ T9674] ? rcu_is_watching+0x15/0xb0 [ 361.917164][ T9674] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 361.917208][ T9674] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 361.917240][ T9674] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 361.917271][ T9674] ? __lock_acquire+0x6b6/0x2cf0 [ 361.917304][ T9674] ? __mutex_lock+0x335/0x1350 [ 361.917348][ T9674] ? kasan_quarantine_put+0xdd/0x220 [ 361.917377][ T9674] ? lockdep_hardirqs_on+0x98/0x140 [ 361.917440][ T9674] kvm_vcpu_ioctl+0x99a/0xed0 [ 361.917480][ T9674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.917505][ T9674] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 361.917560][ T9674] ? __fget_files+0x2a/0x420 [ 361.917588][ T9674] ? __fget_files+0x3a0/0x420 [ 361.917609][ T9674] ? __fget_files+0x2a/0x420 [ 361.917629][ T30] audit: type=1326 audit(1764473718.107:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 361.917634][ T9674] ? bpf_lsm_file_ioctl+0x9/0x20 [ 361.917667][ T9674] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 361.917689][ T9674] __se_sys_ioctl+0xfc/0x170 [ 361.917719][ T9674] do_syscall_64+0xfa/0xf80 [ 361.917756][ T9674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.917782][ T9674] ? clear_bhb_loop+0x60/0xb0 [ 361.917814][ T9674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.917838][ T9674] RIP: 0033:0x7f464598f749 [ 361.917861][ T9674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.917885][ T9674] RSP: 002b:00007f46467b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.917912][ T9674] RAX: ffffffffffffffda RBX: 00007f4645be5fa0 RCX: 00007f464598f749 [ 361.917932][ T9674] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 361.917948][ T9674] RBP: 00007f46467b1090 R08: 0000000000000000 R09: 0000000000000000 [ 361.917963][ T9674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 361.917979][ T9674] R13: 00007f4645be6038 R14: 00007f4645be5fa0 R15: 00007ffecd4b0258 [ 361.918020][ T9674] [ 362.286153][ T5895] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 362.366830][ T30] audit: type=1326 audit(1764473718.107:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 362.415596][ T30] audit: type=1326 audit(1764473718.107:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 362.455567][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 362.485642][ T5895] usb 5-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 362.494753][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.533812][ T30] audit: type=1326 audit(1764473718.107:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.0.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 362.567003][ T5895] usb 5-1: config 0 descriptor?? [ 362.837945][ T9686] FAULT_INJECTION: forcing a failure. [ 362.837945][ T9686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.876236][ T9686] CPU: 0 UID: 0 PID: 9686 Comm: syz.0.1073 Not tainted syzkaller #0 PREEMPT(full) [ 362.876269][ T9686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 362.876284][ T9686] Call Trace: [ 362.876294][ T9686] [ 362.876303][ T9686] dump_stack_lvl+0x189/0x250 [ 362.876331][ T9686] ? __pfx____ratelimit+0x10/0x10 [ 362.876365][ T9686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.876386][ T9686] ? __pfx__printk+0x10/0x10 [ 362.876419][ T9686] ? __might_fault+0xb0/0x130 [ 362.876458][ T9686] should_fail_ex+0x414/0x560 [ 362.876489][ T9686] _copy_from_user+0x2d/0xb0 [ 362.876523][ T9686] restore_altstack+0x9d/0x4b0 [ 362.876554][ T9686] ? __pfx_restore_altstack+0x10/0x10 [ 362.876601][ T9686] ? _raw_spin_unlock_irq+0x23/0x50 [ 362.876631][ T9686] ? lockdep_hardirqs_on+0x98/0x140 [ 362.876664][ T9686] __ia32_sys_rt_sigreturn+0x281/0x860 [ 362.876703][ T9686] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 362.876735][ T9686] ? arch_do_signal_or_restart+0x465/0x7a0 [ 362.876780][ T9686] ? __task_pid_nr_ns+0x28/0x490 [ 362.876809][ T9686] ? do_syscall_64+0xbe/0xf80 [ 362.876844][ T9686] do_syscall_64+0xfa/0xf80 [ 362.876876][ T9686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.876898][ T9686] ? clear_bhb_loop+0x60/0xb0 [ 362.876925][ T9686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.876947][ T9686] RIP: 0033:0x7f116052b829 [ 362.876968][ T9686] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 362.876988][ T9686] RSP: 002b:00007f11614b3a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 362.877012][ T9686] RAX: ffffffffffffffda RBX: 00007f11607e5fa0 RCX: 00007f116052b829 [ 362.877030][ T9686] RDX: 00007f11614b3a80 RSI: 00007f11614b3bb0 RDI: 0000000000000021 [ 362.877045][ T9686] RBP: 00007f11614b4090 R08: 0000200000000100 R09: 000000000000001c [ 362.877060][ T9686] R10: 0000000000044004 R11: 0000000000000202 R12: 0000000000000002 [ 362.877074][ T9686] R13: 00007f11607e6038 R14: 00007f11607e5fa0 R15: 00007ffc77d28388 [ 362.877118][ T9686] [ 363.206411][ T9696] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.975707][ T5913] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 364.019795][ T9721] netlink: 'syz.0.1086': attribute type 16 has an invalid length. [ 364.029498][ T9721] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1086'. [ 364.146652][ T5913] usb 4-1: too many configurations: 88, using maximum allowed: 8 [ 364.158553][ T5913] usb 4-1: config index 0 descriptor too short (expected 107, got 45) [ 364.176807][ T5913] usb 4-1: config index 1 descriptor too short (expected 107, got 45) [ 364.188105][ T6694] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 364.197353][ T5913] usb 4-1: config index 2 descriptor too short (expected 107, got 45) [ 364.217879][ T5913] usb 4-1: config index 3 descriptor too short (expected 107, got 45) [ 364.239815][ T5913] usb 4-1: config index 4 descriptor too short (expected 107, got 45) [ 364.256915][ T5913] usb 4-1: config index 5 descriptor too short (expected 107, got 45) [ 364.266743][ T5913] usb 4-1: config index 6 descriptor too short (expected 107, got 45) [ 364.276740][ T5913] usb 4-1: config index 7 descriptor too short (expected 107, got 45) [ 364.292665][ T5913] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 364.306473][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.314744][ T5913] usb 4-1: Product: syz [ 364.337333][ T5913] usb 4-1: Manufacturer: syz [ 364.342227][ T5913] usb 4-1: SerialNumber: syz [ 364.357435][ T6694] usb 2-1: too many configurations: 88, using maximum allowed: 8 [ 364.377506][ T6694] usb 2-1: config index 0 descriptor too short (expected 107, got 45) [ 364.397540][ T6694] usb 2-1: config index 1 descriptor too short (expected 107, got 45) [ 364.414939][ T5895] pegasus 5-1:0.0: can't locate MII phy, using default [ 364.439516][ T6694] usb 2-1: config index 2 descriptor too short (expected 107, got 45) [ 364.462105][ T6694] usb 2-1: config index 3 descriptor too short (expected 107, got 45) [ 364.475884][ T5895] pegasus 5-1:0.0: eth5, D-Link DSB-650TX, da:21:65:51:70:ff [ 364.487597][ T6694] usb 2-1: config index 4 descriptor too short (expected 107, got 45) [ 364.499713][ T5895] usb 5-1: USB disconnect, device number 52 [ 364.506958][ T6694] usb 2-1: config index 5 descriptor too short (expected 107, got 45) [ 364.521877][ T6694] usb 2-1: config index 6 descriptor too short (expected 107, got 45) [ 364.551755][ T6694] usb 2-1: config index 7 descriptor too short (expected 107, got 45) [ 364.583080][ T6694] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 364.602794][ T6694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.619235][ T6694] usb 2-1: Product: syz [ 364.623606][ T6694] usb 2-1: Manufacturer: syz [ 364.628668][ T6694] usb 2-1: SerialNumber: syz [ 364.649924][ T9732] input: syz0 as /devices/virtual/input/input27 [ 364.737727][ T9734] FAULT_INJECTION: forcing a failure. [ 364.737727][ T9734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.751343][ T9734] CPU: 1 UID: 0 PID: 9734 Comm: syz.0.1091 Not tainted syzkaller #0 PREEMPT(full) [ 364.751373][ T9734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 364.751395][ T9734] Call Trace: [ 364.751406][ T9734] [ 364.751415][ T9734] dump_stack_lvl+0x189/0x250 [ 364.751441][ T9734] ? __pfx____ratelimit+0x10/0x10 [ 364.751472][ T9734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.751493][ T9734] ? __pfx__printk+0x10/0x10 [ 364.751524][ T9734] ? __might_fault+0xb0/0x130 [ 364.751564][ T9734] should_fail_ex+0x414/0x560 [ 364.751595][ T9734] _copy_to_iter+0x1de/0x1790 [ 364.751641][ T9734] ? __pfx__copy_to_iter+0x10/0x10 [ 364.751673][ T9734] ? chacha_block_generic+0x53/0xc80 [ 364.751719][ T9734] get_random_bytes_user+0x1a0/0x380 [ 364.751757][ T9734] ? __pfx_get_random_bytes_user+0x10/0x10 [ 364.751800][ T9734] ? common_file_perm+0x1b5/0x220 [ 364.751834][ T9734] ? bpf_lsm_file_permission+0x9/0x20 [ 364.751866][ T9734] ? security_file_permission+0x75/0x290 [ 364.751908][ T9734] aio_read+0x311/0x470 [ 364.751945][ T9734] ? __pfx_aio_read+0x10/0x10 [ 364.751988][ T9734] ? __might_fault+0xb0/0x130 [ 364.752036][ T9734] io_submit_one+0x755/0x1430 [ 364.752082][ T9734] ? __pfx_io_submit_one+0x10/0x10 [ 364.752113][ T9734] ? __might_fault+0xb0/0x130 [ 364.752153][ T9734] ? __might_fault+0xb0/0x130 [ 364.752185][ T9734] __se_sys_io_submit+0x185/0x320 [ 364.752215][ T9734] ? __pfx___se_sys_io_submit+0x10/0x10 [ 364.752238][ T9734] ? ksys_write+0x22a/0x250 [ 364.752279][ T9734] ? do_syscall_64+0xbe/0xf80 [ 364.752316][ T9734] do_syscall_64+0xfa/0xf80 [ 364.752349][ T9734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.752372][ T9734] ? clear_bhb_loop+0x60/0xb0 [ 364.752400][ T9734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.752446][ T9734] RIP: 0033:0x7f116058f749 [ 364.752467][ T9734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.752487][ T9734] RSP: 002b:00007f11614b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 364.752511][ T9734] RAX: ffffffffffffffda RBX: 00007f11607e5fa0 RCX: 00007f116058f749 [ 364.752529][ T9734] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007f1161493000 [ 364.752545][ T9734] RBP: 00007f11614b4090 R08: 0000000000000000 R09: 0000000000000000 [ 364.752560][ T9734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.752574][ T9734] R13: 00007f11607e6038 R14: 00007f11607e5fa0 R15: 00007ffc77d28388 [ 364.752610][ T9734] [ 365.108592][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 365.147894][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 365.220155][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1092'. [ 365.229823][ T9736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1092'. [ 365.251341][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 365.285731][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 365.537346][ T9742] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1094'. [ 365.565321][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 365.584715][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 365.614600][ T5913] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 365.664277][ T5913] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 366.490723][ T9759] fuseblk: Unknown parameter 'rOotmode' [ 366.511188][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 366.591885][ T9761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1099'. [ 366.745808][ T9719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.753514][ T5913] usb 4-1: USB disconnect, device number 83 [ 366.772069][ T9719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.962023][ T9769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1102'. [ 367.115706][ T5913] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 367.193945][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 367.224817][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 367.250751][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 367.281942][ T6694] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.285771][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 367.309539][ T6694] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 367.318447][ T5913] usb 4-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 367.335734][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.354841][ T6694] usb 2-1: USB disconnect, device number 83 [ 367.362348][ T5913] usb 4-1: config 0 descriptor?? [ 367.477437][ T9773] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 367.477752][ T9772] IPVS: stopping backup sync thread 9773 ... [ 367.777073][ T9775] syzkaller1: entered promiscuous mode [ 367.803093][ T9775] syzkaller1: entered allmulticast mode [ 367.892730][ T9777] fuse: Unknown parameter '' [ 367.993159][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 368.032594][ T9777] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.1105'. [ 368.053413][ T9777] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 368.288390][ T9782] loop3: detected capacity change from 0 to 7 [ 368.302531][ T9782] Dev loop3: unable to read RDB block 7 [ 368.331522][ T9782] loop3: unable to read partition table [ 368.350481][ T9782] loop3: partition table beyond EOD, truncated [ 368.377052][ T9782] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 368.389502][ T5913] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 368.805607][ T5923] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 368.966950][ T5923] usb 2-1: too many configurations: 88, using maximum allowed: 8 [ 368.982585][ T9790] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 368.989172][ T9790] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 368.999968][ T5923] usb 2-1: config index 0 descriptor too short (expected 107, got 45) [ 369.008837][ T9790] vhci_hcd vhci_hcd.0: Device attached [ 369.015330][ T5923] usb 2-1: config index 1 descriptor too short (expected 107, got 45) [ 369.019496][ T9794] FAULT_INJECTION: forcing a failure. [ 369.019496][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 369.034461][ T5923] usb 2-1: config index 2 descriptor too short (expected 107, got 45) [ 369.039748][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.4.1111 Not tainted syzkaller #0 PREEMPT(full) [ 369.039783][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.039801][ T9794] Call Trace: [ 369.039811][ T9794] [ 369.039823][ T9794] dump_stack_lvl+0x189/0x250 [ 369.039852][ T9794] ? __pfx____ratelimit+0x10/0x10 [ 369.039887][ T9794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.039912][ T9794] ? __pfx__printk+0x10/0x10 [ 369.039952][ T9794] ? __pfx___might_resched+0x10/0x10 [ 369.039989][ T9794] ? fs_reclaim_acquire+0x7d/0x100 [ 369.040030][ T9794] should_fail_ex+0x414/0x560 [ 369.040065][ T9794] should_failslab+0xa8/0x100 [ 369.040090][ T9794] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 369.040124][ T9794] ? __alloc_skb+0x255/0x430 [ 369.040158][ T9794] ? napi_skb_cache_get+0x4a5/0x780 [ 369.040191][ T9794] ? napi_skb_cache_get+0x151/0x780 [ 369.040232][ T9794] __alloc_skb+0x255/0x430 [ 369.040270][ T9794] ? __pfx___alloc_skb+0x10/0x10 [ 369.040307][ T9794] ? __local_bh_enable_ip+0x12d/0x1c0 [ 369.040344][ T9794] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 369.040386][ T9794] sock_wmalloc+0xb2/0x130 [ 369.040412][ T9794] pppoe_sendmsg+0x2a8/0x790 [ 369.040446][ T9794] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 369.040482][ T9794] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 369.040505][ T9794] sock_sendmsg_nosec+0x18f/0x1d0 [ 369.040539][ T9794] ____sys_sendmsg+0x577/0x880 [ 369.040580][ T9794] ? __pfx_____sys_sendmsg+0x10/0x10 [ 369.040615][ T9794] ? import_iovec+0x74/0xa0 [ 369.040655][ T9794] ___sys_sendmsg+0x21f/0x2a0 [ 369.040682][ T9794] ? __pfx____sys_sendmsg+0x10/0x10 [ 369.040702][ T9794] ? __lock_acquire+0x6b6/0x2cf0 [ 369.040789][ T9794] ? __might_fault+0xb0/0x130 [ 369.040826][ T9794] __sys_sendmmsg+0x227/0x430 [ 369.040857][ T9794] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.040894][ T9794] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 369.040953][ T9794] ? ksys_write+0x22a/0x250 [ 369.040990][ T9794] ? __pfx_ksys_write+0x10/0x10 [ 369.041029][ T9794] __x64_sys_sendmmsg+0xa0/0xc0 [ 369.041056][ T9794] do_syscall_64+0xfa/0xf80 [ 369.041094][ T9794] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.041120][ T9794] ? clear_bhb_loop+0x60/0xb0 [ 369.041150][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.041175][ T9794] RIP: 0033:0x7f288538f749 [ 369.041197][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.041222][ T9794] RSP: 002b:00007f28861c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.041249][ T9794] RAX: ffffffffffffffda RBX: 00007f28855e5fa0 RCX: 00007f288538f749 [ 369.041268][ T9794] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000005 [ 369.041285][ T9794] RBP: 00007f28861c6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.041302][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.041316][ T9794] R13: 00007f28855e6038 R14: 00007f28855e5fa0 R15: 00007ffdac7b4498 [ 369.041357][ T9794] [ 369.111064][ T9791] usbip_core: unknown command [ 369.120454][ T5923] usb 2-1: config index 3 descriptor too short (expected 107, got 45) [ 369.144506][ T9791] vhci_hcd: unknown pdu 3302376543 [ 369.156908][ T5923] usb 2-1: config index 4 descriptor too short (expected 107, got 45) [ 369.166067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.375660][ T5923] usb 2-1: config index 5 descriptor too short (expected 107, got 45) [ 369.386883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 369.387110][ T5923] usb 2-1: config index 6 descriptor too short (expected 107, got 45) [ 369.396605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 369.413904][ T5923] usb 2-1: config index 7 descriptor too short (expected 107, got 45) [ 369.426324][ T9791] usbip_core: unknown command [ 369.431535][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 369.443052][ T6023] vhci_hcd vhci_hcd.0: stop threads [ 369.443347][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.449163][ T6023] vhci_hcd vhci_hcd.0: release socket [ 369.449328][ T6023] vhci_hcd vhci_hcd.0: disconnect device [ 369.471512][ T5923] usb 2-1: Product: syz [ 369.476705][ T5923] usb 2-1: Manufacturer: syz [ 369.481470][ T5923] usb 2-1: SerialNumber: syz [ 369.581352][ T9797] FAULT_INJECTION: forcing a failure. [ 369.581352][ T9797] name failslab, interval 1, probability 0, space 0, times 0 [ 369.594315][ T9797] CPU: 1 UID: 0 PID: 9797 Comm: syz.4.1112 Not tainted syzkaller #0 PREEMPT(full) [ 369.594347][ T9797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 369.594362][ T9797] Call Trace: [ 369.594372][ T9797] [ 369.594382][ T9797] dump_stack_lvl+0x189/0x250 [ 369.594409][ T9797] ? __pfx____ratelimit+0x10/0x10 [ 369.594440][ T9797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.594462][ T9797] ? __pfx__printk+0x10/0x10 [ 369.594499][ T9797] ? __pfx___might_resched+0x10/0x10 [ 369.594532][ T9797] ? fs_reclaim_acquire+0x7d/0x100 [ 369.594582][ T9797] should_fail_ex+0x414/0x560 [ 369.594614][ T9797] should_failslab+0xa8/0x100 [ 369.594638][ T9797] kmem_cache_alloc_noprof+0x88/0x710 [ 369.594667][ T9797] ? __kvm_mmu_topup_memory_cache+0x463/0x610 [ 369.594702][ T9797] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 369.594741][ T9797] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 369.594792][ T9797] mmu_topup_memory_caches+0x21/0x170 [ 369.594830][ T9797] kvm_mmu_load+0x9d/0x22d0 [ 369.594850][ T9797] ? kvm_msr_allowed+0x9a/0x490 [ 369.594873][ T9797] ? kvm_msr_allowed+0x3f4/0x490 [ 369.594896][ T9797] ? kvm_msr_allowed+0x9a/0x490 [ 369.594918][ T9797] ? kvm_msr_allowed+0x9a/0x490 [ 369.594947][ T9797] ? kvm_apic_has_interrupt+0x744/0x770 [ 369.594972][ T9797] ? vmx_set_intercept_for_msr+0x2ea/0x3e0 [ 369.595011][ T9797] vcpu_run+0x54d7/0x76b0 [ 369.595120][ T9797] ? __pfx_vcpu_run+0x10/0x10 [ 369.595160][ T9797] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 369.595197][ T9797] ? rcu_is_watching+0x15/0xb0 [ 369.595225][ T9797] kvm_arch_vcpu_ioctl_run+0x1148/0x1c90 [ 369.595270][ T9797] ? kvm_arch_vcpu_ioctl_run+0x285/0x1c90 [ 369.595299][ T9797] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 369.595330][ T9797] ? __lock_acquire+0x6b6/0x2cf0 [ 369.595365][ T9797] ? __mutex_lock+0x335/0x1350 [ 369.595408][ T9797] ? kasan_quarantine_put+0xdd/0x220 [ 369.595439][ T9797] ? lockdep_hardirqs_on+0x98/0x140 [ 369.595520][ T9797] kvm_vcpu_ioctl+0x99a/0xed0 [ 369.595551][ T9797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.595583][ T9797] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 369.595638][ T9797] ? __fget_files+0x2a/0x420 [ 369.595666][ T9797] ? __fget_files+0x3a0/0x420 [ 369.595687][ T9797] ? __fget_files+0x2a/0x420 [ 369.595713][ T9797] ? bpf_lsm_file_ioctl+0x9/0x20 [ 369.595746][ T9797] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 369.595770][ T9797] __se_sys_ioctl+0xfc/0x170 [ 369.595803][ T9797] do_syscall_64+0xfa/0xf80 [ 369.595836][ T9797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.595859][ T9797] ? clear_bhb_loop+0x60/0xb0 [ 369.595885][ T9797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.595907][ T9797] RIP: 0033:0x7f288538f749 [ 369.595927][ T9797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.595946][ T9797] RSP: 002b:00007f28861c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.595970][ T9797] RAX: ffffffffffffffda RBX: 00007f28855e5fa0 RCX: 00007f288538f749 [ 369.595987][ T9797] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 369.596001][ T9797] RBP: 00007f28861c6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.596015][ T9797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 369.596028][ T9797] R13: 00007f28855e6038 R14: 00007f28855e5fa0 R15: 00007ffdac7b4498 [ 369.596065][ T9797] [ 370.072099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 370.095721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 370.275919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 370.295836][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 370.304906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 370.320125][ T5914] usb 4-1: USB disconnect, device number 84 [ 370.331084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 370.363419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 370.543516][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 370.563820][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 370.635820][ T5914] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 370.796787][ T5914] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 370.819038][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.838570][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.860019][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.868989][ T9814] tmpfs: Unknown parameter 'max' [ 370.875599][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.902137][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.915794][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.923833][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.945851][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.954092][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.969427][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.977814][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 370.985881][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 370.995935][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.026875][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 371.045604][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.045611][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 371.046317][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 371.063270][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 371.105652][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.121255][ T5923] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 371.134633][ T5914] usb 4-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 371.154768][ T5914] usb 4-1: New USB device strings: Mfr=232, Product=255, SerialNumber=255 [ 371.175850][ T5914] usb 4-1: Product: syz [ 371.180092][ T5914] usb 4-1: Manufacturer: syz [ 371.184696][ T5914] usb 4-1: SerialNumber: syz [ 371.208460][ T5914] usb 4-1: config 0 descriptor?? [ 371.226196][ T9802] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 371.345931][ T5923] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 371.443966][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 371.443987][ T30] audit: type=1326 audit(1764473727.837:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9799 comm="syz.3.1113" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464598f749 code=0x0 [ 371.520537][ T5923] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.532189][ T5895] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 371.540314][ T5923] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 371.555151][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.567861][ T5923] usb 1-1: config 0 descriptor?? [ 371.699325][ T5895] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.713337][ T5895] usb 5-1: config 0 interface 0 altsetting 10 endpoint 0x8 has invalid maxpacket 1001, setting to 64 [ 371.724995][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 371.737547][ T5895] usb 5-1: New USB device found, idVendor=05ac, idProduct=02e0, bcdDevice= 0.00 [ 371.749649][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.762107][ T5895] usb 5-1: config 0 descriptor?? [ 371.778667][ T5923] usbhid 1-1:0.0: can't add hid device: -71 [ 371.784976][ T5923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 371.797211][ T5923] usb 1-1: USB disconnect, device number 72 [ 371.983900][ T9826] tmpfs: Group quota block hardlimit too large. [ 372.068044][ T5923] usb 2-1: USB disconnect, device number 84 [ 372.190031][ T5895] hid-generic 0003:05AC:02E0.000B: hidraw0: USB HID v0.00 Device [HID 05ac:02e0] on usb-dummy_hcd.4-1/input0 [ 372.378849][ T912] usb 5-1: USB disconnect, device number 53 [ 372.417335][ T5828] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 372.505816][ T5923] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 372.575722][ T5828] usb 1-1: Using ep0 maxpacket: 16 [ 372.589642][ T5828] usb 1-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 372.599357][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.612674][ T5828] usb 1-1: config 0 descriptor?? [ 372.689604][ T5923] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 372.715593][ T5923] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 372.724790][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.741804][ T5923] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 373.044419][ T5914] usbhid 4-1:0.0: can't add hid device: -71 [ 373.056071][ T5914] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 373.068756][ T5914] usb 4-1: USB disconnect, device number 85 [ 373.215652][ T912] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 373.365735][ T912] usb 5-1: Using ep0 maxpacket: 8 [ 373.373846][ T912] usb 5-1: config 0 has an invalid interface number: 32 but max is 0 [ 373.383335][ T912] usb 5-1: config 0 has no interface number 0 [ 373.392131][ T912] usb 5-1: config 0 interface 32 has no altsetting 0 [ 373.403133][ T912] usb 5-1: New USB device found, idVendor=0856, idProduct=bc03, bcdDevice=44.6e [ 373.414570][ T912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.423228][ T912] usb 5-1: Product: syz [ 373.428229][ T912] usb 5-1: Manufacturer: syz [ 373.433922][ T912] usb 5-1: SerialNumber: syz [ 373.445174][ T912] usb 5-1: config 0 descriptor?? [ 373.635200][ T5828] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 373.816074][ T5923] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 374.017667][ T5923] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 374.027798][ T5923] stv0680 2-1:4.0: last error: 132, command = 0x14 [ 374.043954][ T5923] usb 2-1: USB disconnect, device number 85 [ 374.075196][ T912] mos7840 5-1:0.32: required endpoints missing [ 374.095634][ T912] usb 5-1: USB disconnect, device number 54 [ 374.899885][ T9858] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1131'. [ 374.909357][ T5923] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 374.925762][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 374.933577][ T9858] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 375.046658][ T5923] usb 4-1: device descriptor read/64, error -71 [ 375.086527][ T9] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 375.108902][ T9] usb 5-1: config index 0 descriptor too short (expected 107, got 45) [ 375.137992][ T9] usb 5-1: config index 1 descriptor too short (expected 107, got 45) [ 375.168223][ T5912] usb 1-1: USB disconnect, device number 73 [ 375.175763][ T9] usb 5-1: config index 2 descriptor too short (expected 107, got 45) [ 375.205731][ T9] usb 5-1: config index 3 descriptor too short (expected 107, got 45) [ 375.227674][ T9] usb 5-1: config index 4 descriptor too short (expected 107, got 45) [ 375.240395][ T9] usb 5-1: config index 5 descriptor too short (expected 107, got 45) [ 375.252651][ T9] usb 5-1: config index 6 descriptor too short (expected 107, got 45) [ 375.262693][ T9] usb 5-1: config index 7 descriptor too short (expected 107, got 45) [ 375.273993][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 375.284148][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.293157][ T9] usb 5-1: Product: syz [ 375.297765][ T5923] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 375.316259][ T9] usb 5-1: Manufacturer: syz [ 375.324501][ T9] usb 5-1: SerialNumber: syz [ 375.445902][ T5923] usb 4-1: device descriptor read/64, error -71 [ 375.569224][ T5923] usb usb4-port1: attempt power cycle [ 375.746441][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 375.775648][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 375.915775][ T5923] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 375.936077][ T912] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 375.946524][ T5923] usb 4-1: device descriptor read/8, error -71 [ 376.098939][ T912] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 376.118634][ T912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 376.138857][ T912] usb 2-1: SerialNumber: syz [ 376.152367][ T912] usb 2-1: config 0 descriptor?? [ 376.161306][ T912] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 376.173397][ T912] dvb-usb: bulk message failed: -22 (3/0) [ 376.186942][ T912] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 376.187684][ T5923] usb 4-1: new low-speed USB device number 89 using dummy_hcd [ 376.196550][ T912] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 376.212547][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 376.213138][ T912] usb 2-1: media controller created [ 376.230506][ T912] dvb-usb: bulk message failed: -22 (5/0) [ 376.240666][ T912] dvb-usb: MAC address reading failed. [ 376.247533][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 376.251680][ T912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 376.257634][ T5923] usb 4-1: device descriptor read/8, error -71 [ 376.272626][ T912] dvb-usb: bulk message failed: -22 (6/0) [ 376.282242][ T912] dvb-usb: bulk message failed: -22 (6/0) [ 376.286301][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 376.288697][ T912] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 376.316419][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 376.334930][ T912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 376.389467][ T912] dvb-usb: schedule remote query interval to 100 msecs. [ 376.405752][ T912] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 376.418106][ T5923] usb usb4-port1: unable to enumerate USB device [ 376.421371][ T912] usb 2-1: USB disconnect, device number 86 [ 376.465464][ T912] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 376.616623][ T9894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1141'. [ 376.943254][ T9900] tmpfs: Bad value for 'mpol' [ 376.955404][ T9900] bond0: entered promiscuous mode [ 376.961569][ T9900] bond_slave_0: entered promiscuous mode [ 376.967928][ T9900] bond_slave_1: entered promiscuous mode [ 377.458269][ T5923] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 377.620807][ T5923] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 377.630914][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.639602][ T5923] usb 2-1: Product: syz [ 377.649803][ T5923] usb 2-1: Manufacturer: syz [ 377.660101][ T5923] usb 2-1: SerialNumber: syz [ 377.738493][ T9] usb 5-1: USB disconnect, device number 55 [ 377.914601][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 377.936374][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 377.948313][ T5923] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 377.960129][ T5923] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 377.981839][ T5923] usb 2-1: USB disconnect, device number 87 [ 377.988298][ T9914] netlink: 'syz.3.1148': attribute type 10 has an invalid length. [ 378.017967][ T9914] veth0_vlan: left promiscuous mode [ 378.030756][ T9914] veth0_vlan: entered promiscuous mode [ 378.061506][ T9914] team0: Device veth0_vlan failed to register rx_handler [ 379.242699][ T9933] evm: overlay not supported [ 379.705611][ T5923] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 379.889171][ T5923] usb 4-1: too many configurations: 88, using maximum allowed: 8 [ 379.901510][ T5923] usb 4-1: config index 0 descriptor too short (expected 107, got 45) [ 379.911844][ T5923] usb 4-1: config index 1 descriptor too short (expected 107, got 45) [ 379.923848][ T5923] usb 4-1: config index 2 descriptor too short (expected 107, got 45) [ 379.934330][ T5923] usb 4-1: config index 3 descriptor too short (expected 107, got 45) [ 379.949052][ T5923] usb 4-1: config index 4 descriptor too short (expected 107, got 45) [ 379.967005][ T5923] usb 4-1: config index 5 descriptor too short (expected 107, got 45) [ 379.977992][ T5923] usb 4-1: config index 6 descriptor too short (expected 107, got 45) [ 379.989090][ T5923] usb 4-1: config index 7 descriptor too short (expected 107, got 45) [ 380.001715][ T5923] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 380.013915][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.029913][ T5923] usb 4-1: Product: syz [ 380.036476][ T5923] usb 4-1: Manufacturer: syz [ 380.043475][ T5923] usb 4-1: SerialNumber: syz [ 380.494986][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 380.535639][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 380.691538][ T9959] sp0: Synchronizing with TNC [ 380.968081][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 381.010946][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 381.014086][ T9969] openvswitch: netlink: Actions may not be safe on all matching packets [ 381.039849][ T5923] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 381.062332][ T5923] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 381.299039][ T30] audit: type=1326 audit(1764473737.697:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efed138f749 code=0x0 [ 381.361717][ T30] audit: type=1326 audit(1764473737.747:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed138f749 code=0x7ffc0000 [ 381.415751][ T30] audit: type=1326 audit(1764473737.747:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.439097][ T30] audit: type=1326 audit(1764473737.747:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efed138f749 code=0x7ffc0000 [ 381.463967][ T30] audit: type=1326 audit(1764473737.757:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.491460][ T30] audit: type=1326 audit(1764473737.757:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.491515][ T30] audit: type=1326 audit(1764473737.757:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.491563][ T30] audit: type=1326 audit(1764473737.757:2449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.491611][ T30] audit: type=1326 audit(1764473737.757:2450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efed13c2005 code=0x7ffc0000 [ 381.491661][ T30] audit: type=1326 audit(1764473737.797:2451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9971 comm="syz.1.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efed132b829 code=0x7ffc0000 [ 381.768813][ T9987] overlayfs: failed to get inode (-116) [ 381.788065][ T9987] overlayfs: failed to get inode (-116) [ 381.795202][ T9984] overlayfs: failed to get inode (-116) [ 381.806897][ T9984] overlayfs: failed to get inode (-116) [ 382.225630][ T5895] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 382.395612][ T5895] usb 5-1: Using ep0 maxpacket: 16 [ 382.406773][ T5895] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 382.420200][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 382.437335][ T5895] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 382.447260][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.456684][ T5895] usb 5-1: Product: syz [ 382.461063][ T5895] usb 5-1: Manufacturer: syz [ 382.471195][ T5895] usb 5-1: SerialNumber: syz [ 382.484314][ T5895] usb 5-1: config 0 descriptor?? [ 382.495633][ T5828] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 382.500327][ T5895] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 382.528590][ T5912] usb 4-1: USB disconnect, device number 90 [ 382.536909][ T5895] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 382.635648][ T5828] usb 2-1: device descriptor read/64, error -71 [ 382.885629][ T5828] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 382.956117][ T5895] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 382.966835][ T5895] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 382.977166][ T5912] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 382.991038][ T5895] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 383.001581][ T5895] em28xx 5-1:0.0: No AC97 audio processor [ 383.015605][ T5828] usb 2-1: device descriptor read/64, error -71 [ 383.017797][ T5895] usb 5-1: USB disconnect, device number 56 [ 383.032423][ T5895] em28xx 5-1:0.0: Disconnecting em28xx [ 383.039922][ T5895] em28xx 5-1:0.0: Freeing device [ 383.125958][ T5828] usb usb2-port1: attempt power cycle [ 383.155895][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 383.170300][ T5912] usb 4-1: config 2 has an invalid interface number: 32 but max is 2 [ 383.195383][ T5912] usb 4-1: config 2 has an invalid interface number: 196 but max is 2 [ 383.210575][ T5912] usb 4-1: config 2 has no interface number 1 [ 383.229756][ T5912] usb 4-1: config 2 has no interface number 2 [ 383.238915][ T5912] usb 4-1: config 2 interface 32 has no altsetting 0 [ 383.249106][ T5912] usb 4-1: config 2 interface 0 has no altsetting 0 [ 383.256511][ T5912] usb 4-1: config 2 interface 196 has no altsetting 0 [ 383.266579][ T5912] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=65.11 [ 383.277139][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.285265][ T5912] usb 4-1: Product: syz [ 383.296103][ T5912] usb 4-1: Manufacturer: syz [ 383.301069][ T5912] usb 4-1: SerialNumber: syz [ 383.319476][T10019] FAULT_INJECTION: forcing a failure. [ 383.319476][T10019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 383.333674][T10019] CPU: 0 UID: 0 PID: 10019 Comm: syz.4.1176 Not tainted syzkaller #0 PREEMPT(full) [ 383.333706][T10019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 383.333721][T10019] Call Trace: [ 383.333731][T10019] [ 383.333740][T10019] dump_stack_lvl+0x189/0x250 [ 383.333766][T10019] ? __pfx____ratelimit+0x10/0x10 [ 383.333798][T10019] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.333819][T10019] ? __pfx__printk+0x10/0x10 [ 383.333853][T10019] ? __might_fault+0xb0/0x130 [ 383.333892][T10019] should_fail_ex+0x414/0x560 [ 383.333924][T10019] _copy_to_iter+0x1de/0x1790 [ 383.333969][T10019] ? __pfx__copy_to_iter+0x10/0x10 [ 383.333999][T10019] ? chacha_block_generic+0x53/0xc80 [ 383.334044][T10019] get_random_bytes_user+0x1a0/0x380 [ 383.334083][T10019] ? __pfx_get_random_bytes_user+0x10/0x10 [ 383.334123][T10019] ? common_file_perm+0x1b5/0x220 [ 383.334156][T10019] ? bpf_lsm_file_permission+0x9/0x20 [ 383.334189][T10019] ? security_file_permission+0x75/0x290 [ 383.334220][T10019] aio_read+0x311/0x470 [ 383.334254][T10019] ? __pfx_aio_read+0x10/0x10 [ 383.334323][T10019] ? __might_fault+0xb0/0x130 [ 383.334371][T10019] io_submit_one+0x755/0x1430 [ 383.334417][T10019] ? __pfx_io_submit_one+0x10/0x10 [ 383.334448][T10019] ? __might_fault+0xb0/0x130 [ 383.334487][T10019] ? __might_fault+0xb0/0x130 [ 383.334518][T10019] __se_sys_io_submit+0x185/0x320 [ 383.334548][T10019] ? __pfx___se_sys_io_submit+0x10/0x10 [ 383.334573][T10019] ? ksys_write+0x22a/0x250 [ 383.334622][T10019] ? do_syscall_64+0xbe/0xf80 [ 383.334658][T10019] do_syscall_64+0xfa/0xf80 [ 383.334691][T10019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.334714][T10019] ? clear_bhb_loop+0x60/0xb0 [ 383.334741][T10019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.334763][T10019] RIP: 0033:0x7f288538f749 [ 383.334783][T10019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.334803][T10019] RSP: 002b:00007f28861c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 383.334827][T10019] RAX: ffffffffffffffda RBX: 00007f28855e5fa0 RCX: 00007f288538f749 [ 383.334843][T10019] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 00007f28861a5000 [ 383.334859][T10019] RBP: 00007f28861c6090 R08: 0000000000000000 R09: 0000000000000000 [ 383.334874][T10019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.334888][T10019] R13: 00007f28855e6038 R14: 00007f28855e5fa0 R15: 00007ffdac7b4498 [ 383.334923][T10019] [ 383.485769][ T5828] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 383.513366][T10006] fuse: Unknown parameter '' [ 383.556333][ T5828] usb 2-1: device descriptor read/8, error -71 [ 383.726226][ T5912] usb 4-1: USB disconnect, device number 91 [ 383.795696][ T5828] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 383.819386][ T5828] usb 2-1: device descriptor read/8, error -71 [ 383.968434][ T5828] usb usb2-port1: unable to enumerate USB device [ 383.986644][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.993446][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.325651][ T5828] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 384.346935][ T5913] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 384.506006][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 384.513426][ T5913] usb 1-1: too many configurations: 88, using maximum allowed: 8 [ 384.533570][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 384.549918][ T5913] usb 1-1: config index 0 descriptor too short (expected 107, got 45) [ 384.568868][ T5828] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 384.580330][ T5913] usb 1-1: config index 1 descriptor too short (expected 107, got 45) [ 384.595751][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.607839][ T5913] usb 1-1: config index 2 descriptor too short (expected 107, got 45) [ 384.630268][ T5913] usb 1-1: config index 3 descriptor too short (expected 107, got 45) [ 384.639333][ T5828] usb 5-1: config 0 descriptor?? [ 384.663304][ T5913] usb 1-1: config index 4 descriptor too short (expected 107, got 45) [ 384.675831][ T5913] usb 1-1: config index 5 descriptor too short (expected 107, got 45) [ 384.688845][ T5913] usb 1-1: config index 6 descriptor too short (expected 107, got 45) [ 384.699069][ T5913] usb 1-1: config index 7 descriptor too short (expected 107, got 45) [ 384.711686][ T5913] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 384.721429][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.730041][ T5913] usb 1-1: Product: syz [ 384.734315][ T5913] usb 1-1: Manufacturer: syz [ 384.739996][ T5913] usb 1-1: SerialNumber: syz [ 385.063230][ T5828] lua 0003:1E7D:2C2E.000C: unbalanced collection at end of report description [ 385.139209][ T5828] lua 0003:1E7D:2C2E.000C: parse failed [ 385.145095][ T5828] lua 0003:1E7D:2C2E.000C: probe with driver lua failed with error -22 [ 385.185313][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 385.226188][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 385.289417][ T5828] usb 5-1: USB disconnect, device number 57 [ 385.565598][ T5895] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 385.718501][ T5895] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 385.745549][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.757249][ T5895] usb 2-1: config 0 descriptor?? [ 385.883901][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 385.899193][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 385.910209][ T5913] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.922481][ T5913] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 385.966252][ T5895] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 386.126231][ T5912] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 386.189954][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.203093][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.290475][ T5912] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.306265][ T5912] usb 5-1: config 1 has no interface number 0 [ 386.313640][ T5912] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 386.330092][ T5912] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 386.341717][ T5895] [drm:udl_init] *ERROR* Selecting channel failed [ 386.349376][ T5912] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 386.374897][ T5912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 386.392008][ T5895] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 386.399262][ T5912] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 172, setting to 64 [ 386.410968][ T5895] [drm] Initialized udl on minor 2 [ 386.419769][ T5895] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.436626][ T5912] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.449523][ T5895] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 386.459200][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.473472][ T9] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 386.486290][ T5912] usb 5-1: Product: syz [ 386.490556][ T5912] usb 5-1: Manufacturer: syz [ 386.496067][ T5895] usb 2-1: USB disconnect, device number 92 [ 386.506323][ T9] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 386.514281][ T5912] usb 5-1: SerialNumber: syz [ 386.524878][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 386.549929][T10065] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 386.575709][T10065] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 386.748722][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 386.756818][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 386.945699][ T5895] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 386.966479][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 387.156147][ T9] usb 1-1: USB disconnect, device number 74 [ 387.167075][ T5895] usb 4-1: too many configurations: 88, using maximum allowed: 8 [ 387.188562][ T5895] usb 4-1: config index 0 descriptor too short (expected 107, got 45) [ 387.198345][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1193'. [ 387.212448][ T5895] usb 4-1: config index 1 descriptor too short (expected 107, got 45) [ 387.232607][ T5895] usb 4-1: config index 2 descriptor too short (expected 107, got 45) [ 387.254743][ T5895] usb 4-1: config index 3 descriptor too short (expected 107, got 45) [ 387.279055][ T5895] usb 4-1: config index 4 descriptor too short (expected 107, got 45) [ 387.306954][ T5895] usb 4-1: config index 5 descriptor too short (expected 107, got 45) [ 387.326832][ T5895] usb 4-1: config index 6 descriptor too short (expected 107, got 45) [ 387.365711][ T5895] usb 4-1: config index 7 descriptor too short (expected 107, got 45) [ 387.388893][T10062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.393249][T10080] FAULT_INJECTION: forcing a failure. [ 387.393249][T10080] name failslab, interval 1, probability 0, space 0, times 0 [ 387.397590][ T5895] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 387.410566][T10080] CPU: 1 UID: 0 PID: 10080 Comm: syz.0.1194 Not tainted syzkaller #0 PREEMPT(full) [ 387.410596][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 387.410611][T10080] Call Trace: [ 387.410620][T10080] [ 387.410630][T10080] dump_stack_lvl+0x189/0x250 [ 387.410657][T10080] ? __pfx____ratelimit+0x10/0x10 [ 387.410688][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.410710][T10080] ? __pfx__printk+0x10/0x10 [ 387.410744][T10080] ? __pfx_skb_network_protocol+0x10/0x10 [ 387.410769][T10080] ? __kernel_text_address+0xd/0x40 [ 387.410798][T10080] should_fail_ex+0x414/0x560 [ 387.410834][T10080] should_failslab+0xa8/0x100 [ 387.410864][T10080] kmem_cache_alloc_noprof+0x88/0x710 [ 387.410899][T10080] ? skb_clone+0x212/0x3a0 [ 387.410922][T10080] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 387.410954][T10080] skb_clone+0x212/0x3a0 [ 387.410979][T10080] ? dev_queue_xmit_nit+0x27d/0xad0 [ 387.411019][T10080] dev_queue_xmit_nit+0x29a/0xad0 [ 387.411053][T10080] ? rcu_read_lock_bh_held+0x79/0xe0 [ 387.411081][T10080] ? dev_queue_xmit_nit+0x2d/0xad0 [ 387.411130][T10080] dev_hard_start_xmit+0x1c1/0x800 [ 387.411176][T10080] __dev_queue_xmit+0x1493/0x3140 [ 387.411216][T10080] ? __dev_queue_xmit+0x289/0x3140 [ 387.411260][T10080] ? __pfx___dev_queue_xmit+0x10/0x10 [ 387.411304][T10080] ? _copy_from_iter+0x2d3/0x1630 [ 387.411335][T10080] ? __build_skb_around+0x22d/0x3c0 [ 387.411386][T10080] ? __pfx__copy_from_iter+0x10/0x10 [ 387.411421][T10080] ? eth_header+0x11b/0x200 [ 387.411450][T10080] ? __asan_memcpy+0x40/0x70 [ 387.411480][T10080] ? pppoe_sendmsg+0x53a/0x790 [ 387.411513][T10080] pppoe_sendmsg+0x58b/0x790 [ 387.411545][T10080] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 387.411582][T10080] ? __pfx_pppoe_sendmsg+0x10/0x10 [ 387.411605][T10080] sock_sendmsg_nosec+0x18f/0x1d0 [ 387.411639][T10080] ____sys_sendmsg+0x577/0x880 [ 387.411675][T10080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.411711][T10080] ? import_iovec+0x74/0xa0 [ 387.411751][T10080] ___sys_sendmsg+0x21f/0x2a0 [ 387.411778][T10080] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.411799][T10080] ? __lock_acquire+0x6b6/0x2cf0 [ 387.411887][T10080] ? __might_fault+0xb0/0x130 [ 387.411924][T10080] __sys_sendmmsg+0x227/0x430 [ 387.411954][T10080] ? __pfx___sys_sendmmsg+0x10/0x10 [ 387.411990][T10080] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 387.412049][T10080] ? ksys_write+0x22a/0x250 [ 387.412086][T10080] ? __pfx_ksys_write+0x10/0x10 [ 387.412128][T10080] __x64_sys_sendmmsg+0xa0/0xc0 [ 387.412155][T10080] do_syscall_64+0xfa/0xf80 [ 387.412192][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.412219][T10080] ? clear_bhb_loop+0x60/0xb0 [ 387.412248][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.412275][T10080] RIP: 0033:0x7f116058f749 [ 387.412309][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.412332][T10080] RSP: 002b:00007f11614b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 387.412359][T10080] RAX: ffffffffffffffda RBX: 00007f11607e5fa0 RCX: 00007f116058f749 [ 387.412378][T10080] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000005 [ 387.412395][T10080] RBP: 00007f11614b4090 R08: 0000000000000000 R09: 0000000000000000 [ 387.412411][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.412426][T10080] R13: 00007f11607e6038 R14: 00007f11607e5fa0 R15: 00007ffc77d28388 [ 387.412467][T10080] [ 387.469516][T10062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.476564][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.563898][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 387.805595][ T5895] usb 4-1: Product: syz [ 387.809865][ T5895] usb 4-1: Manufacturer: syz [ 387.814529][ T5895] usb 4-1: SerialNumber: syz [ 387.967837][T10062] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 387.979107][ T5912] cdc_ncm 5-1:1.1: bind() failure [ 388.035213][T10073] "syz.1.1192" (10073) uses obsolete ecb(arc4) skcipher [ 388.263158][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 388.329272][ T5828] usb 5-1: USB disconnect, device number 58 [ 388.336285][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 388.356163][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 388.527805][ T5912] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 388.725828][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 388.737604][ T5912] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 388.757943][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 388.785551][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 388.803125][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 388.827117][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.874019][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 388.903325][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.134218][ T5912] usb 1-1: GET_CAPABILITIES returned 0 [ 389.148159][ T5912] usbtmc 1-1:16.0: can't read capabilities [ 389.332894][ T5912] usb 1-1: USB disconnect, device number 75 [ 389.717991][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 389.925862][ T5913] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 390.085598][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 390.092865][ T5913] usb 5-1: config 0 has an invalid interface number: 202 but max is 0 [ 390.111902][ T5913] usb 5-1: config 0 has no interface number 0 [ 390.132163][ T5913] usb 5-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 390.165410][ T5913] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 390.185256][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.207095][ T5913] usb 5-1: Product: syz [ 390.211505][ T5913] usb 5-1: Manufacturer: syz [ 390.225674][ T5913] usb 5-1: SerialNumber: syz [ 390.241050][ T5913] usb 5-1: config 0 descriptor?? [ 390.278688][ T5913] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 390.365985][ T5828] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 390.458315][ T5913] usb 5-1: USB disconnect, device number 59 [ 390.464879][ T49] usb 5-1: Failed to submit usb control message: -71 [ 390.485071][ T49] usb 5-1: unable to send the bmi data to the device: -71 [ 390.505431][ T49] usb 5-1: unable to get target info from device [ 390.513901][ T49] usb 5-1: could not get target info (-71) [ 390.526269][ T5828] usb 1-1: too many configurations: 88, using maximum allowed: 8 [ 390.535612][ T49] usb 5-1: could not probe fw (-71) [ 390.546664][ T5828] usb 1-1: config index 0 descriptor too short (expected 107, got 45) [ 390.559021][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 390.580363][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 390.593242][ T5828] usb 1-1: config index 1 descriptor too short (expected 107, got 45) [ 390.606329][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 390.624848][ T5828] usb 1-1: config index 2 descriptor too short (expected 107, got 45) [ 390.625459][ T5895] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 390.667190][ T5828] usb 1-1: config index 3 descriptor too short (expected 107, got 45) [ 390.680396][ T5828] usb 1-1: config index 4 descriptor too short (expected 107, got 45) [ 390.680464][ T5895] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 390.707014][ T5828] usb 1-1: config index 5 descriptor too short (expected 107, got 45) [ 390.727237][ T5828] usb 1-1: config index 6 descriptor too short (expected 107, got 45) [ 390.742026][ T5895] usb 4-1: USB disconnect, device number 92 [ 390.748962][ T5828] usb 1-1: config index 7 descriptor too short (expected 107, got 45) [ 390.762550][ T5828] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.794250][ T5828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.814630][ T5828] usb 1-1: Product: syz [ 390.824765][ T5828] usb 1-1: Manufacturer: syz [ 390.830267][ T5828] usb 1-1: SerialNumber: syz [ 391.256083][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 391.285677][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 391.929386][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 391.969702][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 391.992903][ T5828] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 392.021777][ T5828] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 392.145607][ T5895] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 392.228233][T10136] delete_channel: no stack [ 392.232825][T10136] delete_channel: no stack [ 392.311954][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 392.335569][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 392.355860][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 392.365318][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.407157][T10134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.414613][T10134] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.450139][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.648836][ T5828] usb 4-1: USB disconnect, device number 93 [ 393.150879][ T5828] usb 1-1: USB disconnect, device number 76 [ 393.247049][ T30] kauditd_printk_skb: 225 callbacks suppressed [ 393.247070][ T30] audit: type=1326 audit(1764473749.647:2677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1207" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f116058f749 code=0x0 [ 393.309509][ T30] audit: type=1326 audit(1764473749.707:2678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 393.353653][ T30] audit: type=1326 audit(1764473749.737:2679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10141 comm="syz.0.1207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116058f749 code=0x7ffc0000 [ 393.487909][T10150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.780454][T10161] gadgetfs: Unknown parameter 'fd' [ 394.046107][ T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 394.216804][ T9] usb 5-1: too many configurations: 88, using maximum allowed: 8 [ 394.246176][ T9] usb 5-1: config index 0 descriptor too short (expected 107, got 45) [ 394.306476][ T9] usb 5-1: config index 1 descriptor too short (expected 107, got 45) [ 394.339360][ T9] usb 5-1: config index 2 descriptor too short (expected 107, got 45) [ 394.368201][ T9] usb 5-1: config index 3 descriptor too short (expected 107, got 45) [ 394.395632][ T9] usb 5-1: config index 4 descriptor too short (expected 107, got 45) [ 394.415032][ T9] usb 5-1: config index 5 descriptor too short (expected 107, got 45) [ 394.425227][ T9] usb 5-1: config index 6 descriptor too short (expected 107, got 45) [ 394.445369][ T9] usb 5-1: config index 7 descriptor too short (expected 107, got 45) [ 394.466716][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 394.476294][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.484691][ T9] usb 5-1: Product: syz [ 394.515550][ T9] usb 5-1: Manufacturer: syz [ 394.528358][ T9] usb 5-1: SerialNumber: syz [ 394.554202][T10171] overlayfs: missing 'lowerdir' [ 394.565739][ T5912] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 394.728927][ T5912] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 394.745647][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.787299][ T5912] usb 1-1: config 0 descriptor?? [ 394.808659][ T5912] cp210x 1-1:0.0: cp210x converter detected [ 394.975422][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 395.025699][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 395.038255][ T5912] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 395.065743][ T5912] cp210x 1-1:0.0: querying part number failed [ 395.089327][ T5912] usb 1-1: cp210x converter now attached to ttyUSB0 [ 395.423978][T10173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1220'. [ 395.627451][T10181] loop3: detected capacity change from 0 to 7 [ 395.668600][T10181] Dev loop3: unable to read RDB block 7 [ 395.674439][T10181] loop3: unable to read partition table [ 395.678415][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 395.736219][T10181] loop3: partition table beyond EOD, truncated [ 395.750089][T10181] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 395.772273][T10182] 9pnet_virtio: no channels available for device syz [ 395.786892][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.806411][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.842581][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 395.882469][T10185] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'. [ 395.951174][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'. [ 396.008776][ T30] audit: type=1326 audit(1764473752.407:2680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10186 comm="syz.3.1224" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f464598f749 code=0x0 [ 396.873709][ T9] usb 5-1: USB disconnect, device number 60 [ 397.109217][T10200] netlink: 'syz.1.1227': attribute type 1 has an invalid length. [ 397.546580][ T5828] usb 1-1: USB disconnect, device number 77 [ 397.570467][ T5828] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 397.596161][ T5828] cp210x 1-1:0.0: device disconnected [ 398.357105][T10231] syzkaller1: entered promiscuous mode [ 398.362648][T10231] syzkaller1: entered allmulticast mode [ 398.642577][T10240] program syz.4.1245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.575795][ T5828] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 400.518203][ T5828] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 400.527116][ T7825] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 400.536996][ T5828] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.592561][ T5828] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 400.613103][ T5828] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.634924][ T5828] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 400.875265][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.071314][ T7825] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 401.085033][ T7825] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.123309][ T7825] usb 1-1: config 0 has no interface number 0 [ 401.712699][ T7825] usb 1-1: config 0 interface 113 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 401.745855][ T5828] usb 2-1: Product: syz [ 401.756286][ T5828] usb 2-1: Manufacturer: syz [ 401.765860][ T7825] usb 1-1: config 0 interface 113 has no altsetting 0 [ 402.020481][ T7825] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 402.031019][ T5828] cdc_wdm 2-1:1.0: skipping garbage [ 402.036512][ T7825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.045416][ T7825] usb 1-1: Product: syz [ 402.051798][ T5828] cdc_wdm 2-1:1.0: skipping garbage [ 402.057316][ T5828] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 402.065580][ T7825] usb 1-1: Manufacturer: syz [ 402.074338][ T7825] usb 1-1: SerialNumber: syz [ 402.086045][ T7825] usb 1-1: config 0 descriptor?? [ 402.095831][ T7825] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 402.240890][ T7825] usb 2-1: USB disconnect, device number 93 [ 402.256112][ T5912] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 402.662827][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 402.682722][ T5912] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.722129][ T5912] usb 5-1: config 0 has no interface number 0 [ 402.771079][ T5912] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 402.795563][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.823745][ T5912] usb 5-1: Product: syz [ 402.830950][ T5912] usb 5-1: Manufacturer: syz [ 402.847084][ T5912] usb 5-1: SerialNumber: syz [ 402.876342][ T5912] usb 5-1: config 0 descriptor?? [ 402.983801][ T5912] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 403.058217][ T5912] usb 5-1: selecting invalid altsetting 1 [ 403.064021][ T5912] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 403.142460][ T5912] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 403.170883][ T5912] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 403.220693][ T5912] usb 5-1: media controller created [ 403.344144][ T5895] usb 1-1: USB disconnect, device number 78 [ 403.364369][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.609012][ T5912] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 404.617632][ T5912] zl10353_read_register: readreg error (reg=127, ret==-110) [ 404.957929][ T7825] usb 5-1: USB disconnect, device number 61 [ 405.155186][T10311] netlink: 'syz.3.1269': attribute type 2 has an invalid length. [ 405.223638][T10311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1269'. [ 406.705693][ T5828] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 406.727193][T10343] Leaked locks on dev=0x0:0x29 ino=0xc428: [ 406.733432][T10343] LEASE: fl_owner=ffff88807ecb0a80 fl_flags=0x20 fl_type=0x0 fl_pid=10342 [ 406.858933][T10342] ================================================================== [ 406.867232][T10342] BUG: KASAN: slab-use-after-free in locks_remove_posix+0x10f/0x630 [ 406.875239][T10342] Read of size 8 at addr ffff888078eee890 by task syz.4.1282/10342 [ 406.883229][T10342] [ 406.885586][T10342] CPU: 0 UID: 0 PID: 10342 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(full) [ 406.885606][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 406.885617][T10342] Call Trace: [ 406.885626][T10342] [ 406.885634][T10342] dump_stack_lvl+0x189/0x250 [ 406.885654][T10342] ? __kasan_check_byte+0x12/0x40 [ 406.885680][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.885694][T10342] ? lock_release+0x4b/0x3b0 [ 406.885719][T10342] ? __virt_addr_valid+0x4a5/0x5c0 [ 406.885738][T10342] print_report+0xca/0x240 [ 406.885754][T10342] ? locks_remove_posix+0x10f/0x630 [ 406.885770][T10342] kasan_report+0x118/0x150 [ 406.885785][T10342] ? locks_remove_posix+0x10f/0x630 [ 406.885803][T10342] locks_remove_posix+0x10f/0x630 [ 406.885820][T10342] ? __pfx_locks_remove_posix+0x10/0x10 [ 406.885845][T10342] ? do_raw_spin_unlock+0x122/0x240 [ 406.885863][T10342] ? dnotify_flush+0x1db/0x5e0 [ 406.885885][T10342] ? mqueue_flush_file+0x21c/0x270 [ 406.885899][T10342] ? filp_flush+0xae/0x190 [ 406.885918][T10342] filp_flush+0x113/0x190 [ 406.885937][T10342] filp_close+0x1d/0x40 [ 406.885954][T10342] __se_sys_close_range+0x359/0x650 [ 406.885972][T10342] ? __pfx___se_sys_close_range+0x10/0x10 [ 406.885990][T10342] ? do_syscall_64+0xbe/0xf80 [ 406.886025][T10342] do_syscall_64+0xfa/0xf80 [ 406.886058][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.886081][T10342] ? clear_bhb_loop+0x60/0xb0 [ 406.886107][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.886123][T10342] RIP: 0033:0x7f288538f749 [ 406.886138][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.886152][T10342] RSP: 002b:00007ffdac7b45f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 406.886169][T10342] RAX: ffffffffffffffda RBX: 00007f28855e7da0 RCX: 00007f288538f749 [ 406.886181][T10342] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 406.886191][T10342] RBP: 00007f28855e7da0 R08: 000000000000007c R09: 00000004ac7b48ef [ 406.886202][T10342] R10: 00000000003ffd60 R11: 0000000000000246 R12: 0000000000063646 [ 406.886212][T10342] R13: 00007ffdac7b46f0 R14: ffffffffffffffff R15: 00007ffdac7b4710 [ 406.886231][T10342] [ 406.886236][T10342] [ 407.117955][T10342] Allocated by task 10343: [ 407.122986][T10342] kasan_save_track+0x3e/0x80 [ 407.127870][T10342] __kasan_slab_alloc+0x6c/0x80 [ 407.132997][T10342] kmem_cache_alloc_noprof+0x37d/0x710 [ 407.138483][T10342] locks_get_lock_context+0x134/0x3b0 [ 407.143929][T10342] generic_setlease+0x528/0x1280 [ 407.149171][T10342] do_fcntl_add_lease+0x34d/0x460 [ 407.154207][T10342] fcntl_setlease+0x123/0x180 [ 407.158893][T10342] do_fcntl+0x867/0x1a50 [ 407.163321][T10342] __se_sys_fcntl+0xc8/0x150 [ 407.168007][T10342] do_syscall_64+0xfa/0xf80 [ 407.172618][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.178653][T10342] [ 407.181072][T10342] Freed by task 10343: [ 407.185144][T10342] kasan_save_track+0x3e/0x80 [ 407.189928][T10342] kasan_save_free_info+0x46/0x50 [ 407.194972][T10342] __kasan_slab_free+0x5c/0x80 [ 407.199744][T10342] kmem_cache_free+0x197/0x620 [ 407.204607][T10342] __destroy_inode+0x2ea/0x670 [ 407.209370][T10342] evict+0x87d/0xae0 [ 407.213272][T10342] __se_sys_mq_unlink+0x2c5/0x360 [ 407.218400][T10342] do_syscall_64+0xfa/0xf80 [ 407.223015][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.228935][T10342] [ 407.231283][T10342] The buggy address belongs to the object at ffff888078eee840 [ 407.231283][T10342] which belongs to the cache file_lock_ctx of size 112 [ 407.245525][T10342] The buggy address is located 80 bytes inside of [ 407.245525][T10342] freed 112-byte region [ffff888078eee840, ffff888078eee8b0) [ 407.259333][T10342] [ 407.261658][T10342] The buggy address belongs to the physical page: [ 407.268090][T10342] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888078eee790 pfn:0x78eee [ 407.278615][T10342] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 407.285826][T10342] page_type: f5(slab) [ 407.290116][T10342] raw: 00fff00000000000 ffff88801ded3140 dead000000000122 0000000000000000 [ 407.299787][T10342] raw: ffff888078eee790 0000000080170014 00000000f5000000 0000000000000000 [ 407.308565][T10342] page dumped because: kasan: bad access detected [ 407.315085][T10342] page_owner tracks the page as allocated [ 407.320810][T10342] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5202, tgid 5202 (udevd), ts 54768373951, free_ts 54757384308 [ 407.339515][T10342] post_alloc_hook+0x234/0x290 [ 407.344477][T10342] get_page_from_freelist+0x2365/0x2440 [ 407.350087][T10342] __alloc_frozen_pages_noprof+0x181/0x370 [ 407.355925][T10342] alloc_pages_mpol+0x232/0x4a0 [ 407.360966][T10342] allocate_slab+0x86/0x3b0 [ 407.365572][T10342] ___slab_alloc+0xf2b/0x1960 [ 407.370271][T10342] __slab_alloc+0x65/0x100 [ 407.374702][T10342] kmem_cache_alloc_noprof+0x40f/0x710 [ 407.380172][T10342] locks_get_lock_context+0x134/0x3b0 [ 407.385581][T10342] flock_lock_inode+0xf2/0x1410 [ 407.390707][T10342] locks_lock_inode_wait+0x107/0x410 [ 407.396084][T10342] __se_sys_flock+0x467/0x5b0 [ 407.400776][T10342] do_syscall_64+0xfa/0xf80 [ 407.405848][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.411841][T10342] page last free pid 5205 tgid 5205 stack trace: [ 407.418270][T10342] __free_frozen_pages+0xbc8/0xd30 [ 407.423468][T10342] rcu_core+0xd70/0x1870 [ 407.427744][T10342] handle_softirqs+0x27d/0x850 [ 407.432527][T10342] __irq_exit_rcu+0xca/0x1f0 [ 407.437134][T10342] irq_exit_rcu+0x9/0x30 [ 407.441563][T10342] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 407.447308][T10342] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 407.454178][T10342] [ 407.456525][T10342] Memory state around the buggy address: [ 407.462185][T10342] ffff888078eee780: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 407.470275][T10342] ffff888078eee800: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 407.478372][T10342] >ffff888078eee880: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 407.486457][T10342] ^ [ 407.491069][T10342] ffff888078eee900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 407.499604][T10342] ffff888078eee980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 407.507769][T10342] ================================================================== [ 407.527321][T10342] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 407.534765][T10342] CPU: 1 UID: 0 PID: 10342 Comm: syz.4.1282 Not tainted syzkaller #0 PREEMPT(full) [ 407.544177][T10342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 407.554307][T10342] Call Trace: [ 407.557609][T10342] [ 407.560550][T10342] dump_stack_lvl+0x99/0x250 [ 407.565151][T10342] ? __asan_memcpy+0x40/0x70 [ 407.569852][T10342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.575238][T10342] ? __pfx__printk+0x10/0x10 [ 407.579853][T10342] vpanic+0x237/0x6d0 [ 407.583873][T10342] ? __pfx_vpanic+0x10/0x10 [ 407.588476][T10342] ? preempt_schedule+0xae/0xc0 [ 407.593361][T10342] ? __pfx_preempt_schedule+0x10/0x10 [ 407.598755][T10342] panic+0xb9/0xc0 [ 407.602491][T10342] ? __pfx_panic+0x10/0x10 [ 407.606935][T10342] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 407.612854][T10342] ? locks_remove_posix+0x10f/0x630 [ 407.618059][T10342] check_panic_on_warn+0x89/0xb0 [ 407.623013][T10342] ? locks_remove_posix+0x10f/0x630 [ 407.628219][T10342] end_report+0x6f/0x140 [ 407.632472][T10342] kasan_report+0x129/0x150 [ 407.636997][T10342] ? locks_remove_posix+0x10f/0x630 [ 407.642223][T10342] locks_remove_posix+0x10f/0x630 [ 407.647262][T10342] ? __pfx_locks_remove_posix+0x10/0x10 [ 407.652924][T10342] ? do_raw_spin_unlock+0x122/0x240 [ 407.658152][T10342] ? dnotify_flush+0x1db/0x5e0 [ 407.662946][T10342] ? mqueue_flush_file+0x21c/0x270 [ 407.668249][T10342] ? filp_flush+0xae/0x190 [ 407.672694][T10342] filp_flush+0x113/0x190 [ 407.677052][T10342] filp_close+0x1d/0x40 [ 407.681410][T10342] __se_sys_close_range+0x359/0x650 [ 407.686684][T10342] ? __pfx___se_sys_close_range+0x10/0x10 [ 407.692436][T10342] ? do_syscall_64+0xbe/0xf80 [ 407.697185][T10342] do_syscall_64+0xfa/0xf80 [ 407.701719][T10342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.707898][T10342] ? clear_bhb_loop+0x60/0xb0 [ 407.712601][T10342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.718616][T10342] RIP: 0033:0x7f288538f749 [ 407.723062][T10342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.742789][T10342] RSP: 002b:00007ffdac7b45f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 407.751239][T10342] RAX: ffffffffffffffda RBX: 00007f28855e7da0 RCX: 00007f288538f749 [ 407.759242][T10342] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 407.767252][T10342] RBP: 00007f28855e7da0 R08: 000000000000007c R09: 00000004ac7b48ef [ 407.775242][T10342] R10: 00000000003ffd60 R11: 0000000000000246 R12: 0000000000063646 [ 407.783231][T10342] R13: 00007ffdac7b46f0 R14: ffffffffffffffff R15: 00007ffdac7b4710 [ 407.791465][T10342] [ 407.794928][T10342] Kernel Offset: disabled [ 407.799287][T10342] Rebooting in 86400 seconds..