last executing test programs: 2.452290845s ago: executing program 3 (id=448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000030c0001800800014000000004440000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x100000000000000) 2.35939499s ago: executing program 3 (id=450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="6c01000010001307000006000000000000000101000000000000000000000000000000004e210000020000001d00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.250830211s ago: executing program 3 (id=453): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c900"}) 2.076708949s ago: executing program 3 (id=456): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './dev\x00'}) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./dev\x00', r0, &(0x7f00000001c0)='./dev\x00', 0x114) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) fallocate(r1, 0x20, 0x492, 0x2) 1.976089336s ago: executing program 3 (id=459): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x6) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x36802, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f0000000240)=ANY=[], 0xff2e) removexattr(&(0x7f00000001c0)='./proc\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="737973166a70746d780000000000000000"]) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001440)='/sys/kernel/address_bits', 0x88082, 0x20) write$binfmt_misc(r2, &(0x7f00000014c0)='6', 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0x0, 0x1, 0x638, 0x80000005, 0x10, "0062ba7d82000000160000000000f738096304"}) syz_open_pts(r1, 0x900) write(r0, &(0x7f0000000000)='7', 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fanotify_init(0x2, 0x800) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x40000000000d091, 0x16d002) r9 = memfd_create(&(0x7f0000000940)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xefrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaFW&\x14\xf2\xf6?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/\x0e\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\x1e\xf1\xaf)\x04\xc3\x18)\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf13\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\nr0, {0x9}}, './file0\x00'}) r3 = syz_open_dev$dvb_dvr(&(0x7f00000000c0), 0x5, 0x181083) ioctl$DVB_DVR_DMX_DQBUF(r3, 0xc0186f40, &(0x7f0000000100)={0x1, 0x10000, 0xfff, 0x64, 0x2, 0x7f}) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000140)=0x8) close(r2) r4 = syz_open_dev$video(&(0x7f0000000180), 0x9, 0x8000) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@broadcast}}, &(0x7f0000000340)=0xe8) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000200)=@nullb, r6, &(0x7f0000000380)) ioctl$COMEDI_CANCEL(r2, 0x6407) mmap$snddsp_control(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000001, 0x4000010, r5, 0x83000000) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000003c0)={0x40000, 0x0, {[0x3, 0x81, 0xd, 0x7fffffff, 0x9041, 0x5, 0x7, 0x2]}}) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000440)=0x10) recvmmsg(r4, &(0x7f0000000b00)=[{{&(0x7f0000000480)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/200, 0xc8}], 0x2}}, {{&(0x7f0000000700)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/107, 0x6b}], 0x1, &(0x7f0000000840)=""/242, 0xf2}, 0xc}, {{&(0x7f0000000940)=@qipcrtr, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/227, 0xe3}, 0x2}], 0x3, 0x10000, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000bc0)=@gcm_128={{0x303}, "6216e6574883635a", "dc5f533d6f683f277e22d46d128d0a29", "1226cff1", "bbf21e4ceea99b78"}, 0x28) r8 = accept4$llc(r1, 0x0, &(0x7f0000000c00), 0x80000) accept4(r8, &(0x7f0000000c40)=@sco={0x1f, @fixed}, &(0x7f0000000cc0)=0x80, 0x80800) pipe(&(0x7f0000000d00)={0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000d40)={0x6, 0x2, 0x1, 0x0, 0x30}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x16}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x3c}}, 0x40000) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r5, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x58, 0x140c, 0x2, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x48001) ioctl$NILFS_IOCTL_GET_CPSTAT(r1, 0x80186e83, &(0x7f0000001000)) read$dsp(r9, &(0x7f0000001040)=""/4096, 0x1000) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000002040)=@x86={0x5, 0x8, 0x40, 0x0, 0x8, 0xf7, 0x6, 0x6, 0x5, 0x4, 0x8, 0x3, 0x0, 0x8, 0x80000000, 0x91, 0x0, 0xc, 0x5, '\x00', 0xff, 0xb}) 748.981116ms ago: executing program 2 (id=470): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100)='T', 0x1, 0x100200) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ee00"}) 688.08634ms ago: executing program 0 (id=471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000ff3948000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) 550.826493ms ago: executing program 0 (id=472): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0xac, "4567658c4055c4d83c22bd42937c40c36cab7dc76acb0d5de5e134cf7d6f059985436703c50ae4700ca75bad24bfb580179dbb8d1d1ea1edaad69f6b02afbca0e24516b690d3b9507aa36e36a492780a18414db424049a69f7d6f9f9a2d20ba567cbec51e72006a9a7dd147e397869c6fadde68c57d2e8ea53aeb0c576c2ab339f8840304007c7430cb84c347e91e36081ce5708059c862a1ed0df064af720460c8c08a61cba1709e173b4aa"}, &(0x7f0000000440)=0xb4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x0, @empty, 0x200}}, 0x1a, 0x8252, 0x2, 0x5, 0x18, 0x1, 0x8}, &(0x7f0000000540)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={r2, @in6={{0xa, 0x4e22, 0x0, @empty, 0x200}}, 0x1a, 0x8252, 0x2, 0x5, 0x18, 0x1, 0x8}, &(0x7f0000000540)=0x9c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f49a9}], 0x1c) cachestat(r0, &(0x7f0000000040)={0xffff, 0xd}, &(0x7f0000000100), 0x0) (async) cachestat(r0, &(0x7f0000000040)={0xffff, 0xd}, &(0x7f0000000100), 0x0) listen(r1, 0x100) r3 = dup(r1) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='tran']) ioctl$VT_GETMODE(r4, 0x5601, &(0x7f0000000000)) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0xc050) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @local, 0x7e3a}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fd6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x40}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000400)={0x1, 0x0, [{0x1, 0x0, 0x7, 0x7f, 0x8, 0xc, 0xffffffff}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 505.950089ms ago: executing program 1 (id=473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000003888fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14141700000000000000001a000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02"], 0x158}}, 0x0) 489.874989ms ago: executing program 2 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000600000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004000000000700000000000000ffffffffff08000740010000012400068014000400000000000000000000000000000000010c000380060002004e"], 0xb8}}, 0x0) 316.285272ms ago: executing program 1 (id=475): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$NILFS_IOCTL_SYNC(r0, 0x80086e8a, &(0x7f0000000040)) ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x7) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x6b0d42, 0x8a) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) r2 = accept4$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e, 0x80000) ioctl$sock_netdev_private(r2, 0x89fc, &(0x7f0000000280)="f5613f293eb41cda56b1eb50773f6ba3c4be5d4cd8850edbfe9801e3b23956560a29546ec9177257a376eadb51d00ef5ebad9b9ee8148f0844630740662bd3758b22177b65a409a6ac26f103a72722b8921a04b0ed97691c61495ea8a2") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x8001, 0x6, 0xb39, 0xd5, 0xcda7, 0x1b}, &(0x7f00000003c0)=0x9c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0xfb0e, 0x4, 0xd18dbb10740bb6de, 0x7, 0x9, 0x1, 0x0, 0x6, r3}, &(0x7f0000000440)=0x20) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000a00)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000009c0)={&(0x7f00000004c0)={0x4c8, 0x3f3, 0x2, 0x70bd27, 0x25dfdbfc, {0x5, 0x1, 0x19, [0xbc, 0x9, 0x2, 0x3, 0x8, 0xf, 0x91d, 0x3, 0x7, 0x6, 0x1, 0x0, 0x6bb00169, 0x6e7, 0x4, 0x3c000, 0xb, 0x2, 0x4, 0xfffffff7, 0xb3, 0x101, 0x200, 0xe, 0x3, 0x4, 0x1e0b, 0x2, 0x7fffffff, 0x9, 0x217, 0x1, 0x8, 0x5, 0x401, 0x7b, 0x4, 0x7a2, 0x9, 0x80, 0x9, 0x6, 0x6, 0x2, 0x8, 0x2, 0x400, 0x8, 0xffffffff, 0x8000, 0x1, 0xc, 0x4, 0x6, 0x7, 0xfffffff8, 0x40, 0x4, 0x7, 0x0, 0x0, 0x3, 0x100, 0x800], [0x9, 0x5a44, 0x7, 0x0, 0x8, 0x3, 0x81, 0x9d47, 0x1, 0xffff, 0x7ff, 0x7f, 0x4, 0xfff, 0x5, 0xa, 0x7, 0x1, 0x0, 0x11, 0x0, 0xe, 0x3, 0xffffffff, 0x7c82, 0x7ff, 0x10, 0x8, 0x9, 0x6, 0x7, 0xe2e9, 0x4f1a, 0x9, 0x7, 0x0, 0x1, 0x81, 0x9, 0x5, 0x1, 0xa, 0x2, 0x362, 0xe71d, 0x0, 0x80000000, 0x7fff, 0x0, 0x0, 0x101, 0xc, 0x9, 0x200000, 0x10000, 0x6, 0x0, 0x70, 0x6, 0xef, 0xc2, 0xfffffff9, 0x8001, 0xd], [0x0, 0xfffffff9, 0xfe3, 0x7, 0x7fff, 0x80000000, 0x8, 0xffff8001, 0x80000001, 0x9, 0x7, 0x8, 0xfffffc00, 0x4, 0xb405, 0xc, 0x400, 0x4, 0x3e94, 0x4, 0x2, 0x2, 0x40, 0x4, 0x3, 0x80000001, 0x0, 0x80000000, 0xcb, 0x1, 0x80000001, 0x7, 0x9, 0x7, 0x2, 0xe, 0x4, 0x2, 0x4, 0x1, 0x1, 0xffffffff, 0x807, 0xf, 0x800, 0x2, 0xf82, 0x4, 0xb8, 0x7, 0x10001, 0x80000001, 0xffff, 0x8, 0xe26, 0x7, 0xffff, 0xffff, 0x7, 0xffff, 0x8, 0x6b5, 0x80, 0xffffffb1], [0x4, 0x6, 0x10001, 0xfdb6, 0x800, 0x8001, 0x1, 0x75, 0x81, 0xc000000, 0x4, 0x875, 0xc5d, 0x3, 0xb0000000, 0x1ff, 0x7, 0x2, 0x3, 0x6, 0x1, 0xfffffffc, 0xffffffff, 0x401, 0x1, 0x5, 0x0, 0x9, 0x8c, 0x7ff, 0x94c, 0xe0, 0x1, 0x439, 0xa187, 0x2, 0x2251, 0xde, 0xfc, 0x28d, 0x401, 0xffff, 0x6053, 0x1, 0x40, 0x8, 0x8, 0x0, 0x4, 0x2, 0x2, 0x8, 0x5, 0x9, 0x7, 0x3, 0xd, 0x2, 0xfffffffb, 0x3, 0x7, 0x4, 0x6, 0x4], 0xa5, ['\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '/proc/thread-self/attr/current\x00', '-/\x00', '/proc/thread-self/attr/current\x00', '[@.,(\x00', '/proc/thread-self/attr/current\x00']}, ["", "", "", "", "", "", "", "", ""]}, 0x4c8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) recvfrom$unix(r2, &(0x7f0000000a40)=""/127, 0x7f, 0x80000100, &(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000b40)={r4, 0x6, 0x9, 0x5}, 0x10) r5 = fsmount(r1, 0x1, 0xfd) sendto$inet_nvme_icreq_pdu(r5, &(0x7f0000000b80)={{0x0, 0x2, 0x80, 0x40}, 0x0, 0x0, 0x3, 0xfffffff7}, 0x80, 0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r5, 0xab03) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000c00)=0x360e) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000c40)) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000c80)={0xff, @broadcast, 0x4e21, 0x2, 'fo\x00', 0x29, 0xe648, 0x63}, 0x2c) ioctl$NBD_SET_SOCK(r5, 0xab00, r5) ioctl$XFS_IOC_FSGETXATTRA(r0, 0x801c582d, &(0x7f0000000cc0)) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f0000000d00)={0xa, 0x0, [{0x1, 0xc, 0x81, 0x6, 0x8000}, {0x40000000, 0x7, 0x1, 0xa37, 0x3}, {0xa, 0x6, 0x4, 0x2, 0x6}, {0x0, 0x401, 0x1, 0x0, 0xf67}, {0x80000019, 0x5, 0x2, 0x8, 0x2}, {0x80000001, 0xffff, 0x9, 0x9, 0x82}, {0x80000007, 0x1, 0xffffff63, 0xffff, 0xd0}, {0x80000001, 0x40000, 0x40, 0x9, 0x2000000}, {0xd, 0x54e8a516, 0x6, 0x7, 0x5}, {0x40000000, 0xf, 0x4, 0x2, 0x101}]}) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000e00)) read(r6, &(0x7f0000000e40)=""/138, 0x8a) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f0000000f00)=""/31, &(0x7f0000000f40)=0x1f) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000f80)={0x5, 0x7, 0x6, 0x8ba, 0x2, 0x0, [{0x8, 0x7fffffffffffffff, 0x7128, '\x00', 0x1}, {0x5, 0x80000001, 0x7}]}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001080), r5) sendmsg$TIPC_CMD_GET_NETID(r5, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4) 316.122122ms ago: executing program 2 (id=476): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', &(0x7f0000000100)={0x80900, 0x0, 0x20}, 0x18) mkdirat(r0, &(0x7f00000000c0)='./proc\x00', 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x1100) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffe4) 265.387494ms ago: executing program 1 (id=477): setns(0xc9, 0x0) r0 = socket(0x1f, 0x5, 0x8) setsockopt$ALG_SET_KEY(r0, 0x117, 0x14, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfd}, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)={0x18, 0x30, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x15c, 0x0, 0x0, @pid}]}, 0x18}], 0x1, 0x0, 0x0, 0x20000080}, 0x24040044) 171.261164ms ago: executing program 0 (id=478): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x3, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x8) 107.54622ms ago: executing program 1 (id=479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x13c, 0x13, 0x101, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x13}, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0x8c1, 0x40000}, [@tmpl={0x84, 0x5, [{{@in=@remote, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x3, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4dd, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x2, 0x48, 0xfffffffe, 0xffff, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000003e8000000000000000001"], 0xfdef) 73.790953ms ago: executing program 0 (id=480): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x440a, 0x0) mkdir(&(0x7f0000000400)='./nfsd_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./nfsd_mount\x00', &(0x7f0000000700)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd_mount/versions\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(r0, &(0x7f0000000800)='./nfsd_mount\x00', 0x1, 0x2) write(0xffffffffffffffff, &(0x7f0000000340)="006f00000000000000009faaf2406e945e108ae375fde523a122a43e88bdc93e0b6cef2f956615a668499e1357648c8984b9eb6f1fbad4a6ff4e4618f567bbd1c47783854bdbfaaabbc0165671c63000c63274c1c16bdd7852139862cbfed97ba4adf66db75f1d3f961cd20c6a8da8452b99f61c2c2e83ed0c65c1d41280cb5adda554d81cfc5d5efd990a2b10b18d", 0x8f) close(r1) write(0xffffffffffffffff, &(0x7f0000000b00)='0x0102\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffffff, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') write$P9_RWSTAT(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) syz_usb_connect$uac3(0x2, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020532b23004000010203010902790003010080f5080b0100010030040000000000010130000a2401041500090000000b240dfa070104000007000904010000010230000904010101010230000905010940000704010a2525080000000202000904020000010230000904020101010230000905820920009303020a25250000000007fcff"], 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r2, r2) 0s ago: executing program 1 (id=481): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x224, &(0x7f0000000340)={0x0, 0x2000003, 0x800, 0x20000002, 0x3e2}, &(0x7f0000000000)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000980)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000000c0)={0x2e, 0x9, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000080)=@any_dev={0x1, 0xe8d, 0x0, 0x0, 0x1000, 0x1}}}, 0x0) unshare(0x6a040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. [ 79.511032][ T5604] cgroup: Unknown subsys name 'net' [ 79.626233][ T5604] cgroup: Unknown subsys name 'cpuset' [ 79.629584][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.311952][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.888662][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.890757][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.892778][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.895584][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.899191][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.041415][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.042265][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.042912][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.043851][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.044611][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.125886][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.126335][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.128679][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.128946][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.130347][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.131042][ T5632] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.185407][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.185806][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.187037][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.187511][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.422221][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.422726][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.422850][ T5614] bridge_slave_0: entered allmulticast mode [ 86.424348][ T5614] bridge_slave_0: entered promiscuous mode [ 86.479672][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.479858][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.480002][ T5614] bridge_slave_1: entered allmulticast mode [ 86.482716][ T5614] bridge_slave_1: entered promiscuous mode [ 86.539644][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539736][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.539847][ T5621] bridge_slave_0: entered allmulticast mode [ 86.541541][ T5621] bridge_slave_0: entered promiscuous mode [ 86.568946][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.600107][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.600240][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.600342][ T5621] bridge_slave_1: entered allmulticast mode [ 86.603341][ T5621] bridge_slave_1: entered promiscuous mode [ 86.618118][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.706084][ T5614] team0: Port device team_slave_0 added [ 86.744115][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.749115][ T5614] team0: Port device team_slave_1 added [ 86.766804][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.855240][ T5621] team0: Port device team_slave_0 added [ 86.908755][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.908784][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.908812][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.951871][ T5629] Bluetooth: hci0: command tx timeout [ 86.975830][ T5621] team0: Port device team_slave_1 added [ 86.991485][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.991504][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.991539][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.101974][ T5629] Bluetooth: hci1: command tx timeout [ 87.121036][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.121054][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.121082][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.223807][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.223826][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.223854][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.264821][ T5629] Bluetooth: hci3: command tx timeout [ 87.265235][ T5629] Bluetooth: hci2: command tx timeout [ 87.371040][ T5614] hsr_slave_0: entered promiscuous mode [ 87.377902][ T5614] hsr_slave_1: entered promiscuous mode [ 87.445233][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.445343][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.445470][ T5625] bridge_slave_0: entered allmulticast mode [ 87.447215][ T5625] bridge_slave_0: entered promiscuous mode [ 87.479799][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.479905][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.480008][ T5624] bridge_slave_0: entered allmulticast mode [ 87.488790][ T5624] bridge_slave_0: entered promiscuous mode [ 87.526630][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.526805][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.526936][ T5625] bridge_slave_1: entered allmulticast mode [ 87.528787][ T5625] bridge_slave_1: entered promiscuous mode [ 87.571746][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.571853][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.571981][ T5624] bridge_slave_1: entered allmulticast mode [ 87.573768][ T5624] bridge_slave_1: entered promiscuous mode [ 87.635768][ T5621] hsr_slave_0: entered promiscuous mode [ 87.636574][ T5621] hsr_slave_1: entered promiscuous mode [ 87.637365][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 87.637454][ T5621] Cannot create hsr debugfs directory [ 87.677400][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.680680][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.701747][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.738066][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.812462][ T5625] team0: Port device team_slave_0 added [ 87.831071][ T5624] team0: Port device team_slave_0 added [ 87.848741][ T5625] team0: Port device team_slave_1 added [ 87.862580][ T5624] team0: Port device team_slave_1 added [ 87.947880][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.947896][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.947919][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.011455][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.011472][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.011494][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.019091][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.019105][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.019129][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.114874][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.114891][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.114918][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.295907][ T5625] hsr_slave_0: entered promiscuous mode [ 88.296684][ T5625] hsr_slave_1: entered promiscuous mode [ 88.297214][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 88.297234][ T5625] Cannot create hsr debugfs directory [ 88.325198][ T5624] hsr_slave_0: entered promiscuous mode [ 88.328287][ T5624] hsr_slave_1: entered promiscuous mode [ 88.330147][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 88.330198][ T5624] Cannot create hsr debugfs directory [ 88.429242][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.442885][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.444026][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.446718][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.495626][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.498726][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.499543][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.525589][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.715689][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.720373][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.738302][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.750826][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.768711][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.780313][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.781092][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.798993][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.888752][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.896566][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.900841][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.916679][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.917816][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.920941][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.958161][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.962975][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.021586][ T5616] Bluetooth: hci0: command tx timeout [ 89.069934][ T5624] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.080811][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.095729][ T5624] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.099474][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.100274][ T5624] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.126024][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.146412][ T5624] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.160686][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.182894][ T5616] Bluetooth: hci1: command tx timeout [ 89.186155][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.248119][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.284250][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.284377][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.323353][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.323428][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.344906][ T5629] Bluetooth: hci3: command tx timeout [ 89.345152][ T5616] Bluetooth: hci2: command tx timeout [ 89.364474][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.439776][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.453294][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.479771][ T3341] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.479866][ T3341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.518292][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.533502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.533593][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.571206][ T996] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.571358][ T996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.593969][ T996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.594233][ T996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.626890][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.733715][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.793779][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.793887][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.829305][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.829415][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.412116][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.538151][ T5614] veth0_vlan: entered promiscuous mode [ 90.576053][ T5614] veth1_vlan: entered promiscuous mode [ 90.656799][ T5614] veth0_macvtap: entered promiscuous mode [ 90.676886][ T5614] veth1_macvtap: entered promiscuous mode [ 90.757978][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.803376][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.847630][ T1301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.865979][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.090285][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.090308][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.104199][ T5616] Bluetooth: hci0: command tx timeout [ 91.128082][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.143579][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.175764][ T5621] veth0_vlan: entered promiscuous mode [ 91.190316][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190420][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216516][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.216536][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.255313][ T5621] veth1_vlan: entered promiscuous mode [ 91.262341][ T5616] Bluetooth: hci1: command tx timeout [ 91.268870][ T996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.338595][ T5624] veth0_vlan: entered promiscuous mode [ 91.351156][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.419847][ T5624] veth1_vlan: entered promiscuous mode [ 91.426566][ T5629] Bluetooth: hci3: command tx timeout [ 91.426796][ T5616] Bluetooth: hci2: command tx timeout [ 91.444069][ T5625] veth0_vlan: entered promiscuous mode [ 91.463212][ T5621] veth0_macvtap: entered promiscuous mode [ 91.494994][ T5625] veth1_vlan: entered promiscuous mode [ 91.499165][ T5621] veth1_macvtap: entered promiscuous mode [ 91.547148][ T5766] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.596391][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.616830][ T5624] veth0_macvtap: entered promiscuous mode [ 91.634583][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.654008][ T5624] veth1_macvtap: entered promiscuous mode [ 91.670929][ T5625] veth0_macvtap: entered promiscuous mode [ 91.683718][ T5625] veth1_macvtap: entered promiscuous mode [ 91.714210][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.749880][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.765289][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.796108][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.851512][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.851818][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.852161][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.859887][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.859908][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.923435][ T940] cfg80211: failed to load regulatory.db [ 91.961918][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.981053][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023727][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.023747][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.051682][ T5720] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.051718][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051764][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051802][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051836][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051865][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051896][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.051930][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.150862][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.150882][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.212868][ T5720] usb 1-1: Using ep0 maxpacket: 16 [ 92.217045][ T5720] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice=c9.1e [ 92.238679][ T3341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.238699][ T3341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.258618][ T5720] usb 1-1: config 8 has an invalid interface number: 25 but max is 0 [ 92.258645][ T5720] usb 1-1: config 8 has no interface number 0 [ 92.258687][ T5720] usb 1-1: config 8 interface 25 has no altsetting 0 [ 92.292360][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.292388][ T5720] usb 1-1: Product: syz [ 92.292404][ T5720] usb 1-1: Manufacturer: syz [ 92.292420][ T5720] usb 1-1: SerialNumber: syz [ 92.406933][ T3341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.406955][ T3341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.476364][ T5770] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 92.492891][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.492913][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.181482][ T5616] Bluetooth: hci0: command tx timeout [ 93.342605][ T5616] Bluetooth: hci1: command tx timeout [ 93.504596][ T5629] Bluetooth: hci3: command tx timeout [ 93.504650][ T5616] Bluetooth: hci2: command tx timeout [ 93.755065][ T5796] loop0: detected capacity change from 0 to 2049 [ 93.825881][ T5796] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 93.825913][ T5796] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 93.825954][ T5796] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 93.826026][ T5796] loop0: [ 94.081507][ T1559] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.241460][ T1559] usb 3-1: Using ep0 maxpacket: 8 [ 94.245290][ T1559] usb 3-1: unable to get BOS descriptor or descriptor too short [ 94.245345][ T1559] usb 3-1: New USB device found, idVendor=041e, idProduct=401d, bcdDevice=29.5c [ 94.245383][ T1559] usb 3-1: too many configurations: 113, using maximum allowed: 8 [ 94.266597][ T1559] usb 3-1: New USB device strings: Mfr=230, Product=0, SerialNumber=9 [ 94.266680][ T1559] usb 3-1: Manufacturer: syz [ 94.266711][ T1559] usb 3-1: SerialNumber: syz [ 94.293157][ T5699] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.441363][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.441502][ T5699] usb 2-1: device descriptor read/64, error -71 [ 94.592486][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 94.593557][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.594923][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 94.594956][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.595007][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.595033][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.595076][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.690967][ T5720] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.25/input/input5 [ 94.691467][ T5699] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.718453][ T4969] bcm5974 1-1:8.25: could not read from device [ 94.750643][ T4969] bcm5974 1-1:8.25: could not read from device [ 94.769700][ T5720] usb 1-1: USB disconnect, device number 2 [ 94.770984][ T4969] bcm5974 1-1:8.25: could not read from device [ 94.786679][ T4969] bcm5974 1-1:8.25: could not read from device [ 94.818311][ T9] usb 4-1: GET_CAPABILITIES returned 0 [ 94.818363][ T9] usbtmc 4-1:16.0: can't read capabilities [ 94.845067][ T5699] usb 2-1: device descriptor read/64, error -71 [ 94.961748][ T5699] usb usb2-port1: attempt power cycle [ 95.065435][ T1559] gspca_main: 041e:401d too many config [ 95.083866][ T1559] usb 3-1: USB disconnect, device number 2 [ 95.115012][ T5720] usb 4-1: USB disconnect, device number 2 [ 95.224934][ T5819] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 95.224958][ T5819] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 95.311352][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 95.333634][ T5699] usb 2-1: device descriptor read/8, error -71 [ 95.572354][ T5699] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.592910][ T5699] usb 2-1: device descriptor read/8, error -71 [ 95.714816][ T5699] usb usb2-port1: unable to enumerate USB device [ 95.907706][ T5834] loop0: detected capacity change from 0 to 2049 [ 95.936064][ T5834] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 95.936092][ T5834] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 95.936106][ T5834] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 95.936183][ T5834] loop0: [ 95.950482][ T5835] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 96.221849][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.337584][ T5843] netlink: 196 bytes leftover after parsing attributes in process `syz.2.27'. [ 96.337626][ T5843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27'. [ 96.371435][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 96.373696][ T25] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.373745][ T25] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 96.374758][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.374805][ T25] usb 1-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 96.374833][ T25] usb 1-1: config 1 interface 0 has no altsetting 0 [ 96.376898][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.376924][ T25] usb 1-1: Product: syz [ 96.376940][ T25] usb 1-1: Manufacturer: syz [ 96.376967][ T25] usb 1-1: SerialNumber: syz [ 96.581373][ T5699] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.741326][ T5699] usb 3-1: Using ep0 maxpacket: 8 [ 96.742100][ T5699] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 96.745163][ T5699] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 96.747344][ T5699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.747369][ T5699] usb 3-1: Product: syz [ 96.747383][ T5699] usb 3-1: Manufacturer: syz [ 96.747399][ T5699] usb 3-1: SerialNumber: syz [ 96.756655][ T5699] usb 3-1: config 0 descriptor?? [ 96.801746][ T5699] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 96.825240][ T5837] netlink: 512 bytes leftover after parsing attributes in process `syz.0.24'. [ 96.845493][ T25] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 96.849388][ T25] usb 1-1: USB disconnect, device number 3 [ 96.973778][ T5699] gspca_zc3xx: reg_w_i err -71 [ 97.295870][ T5858] FAULT_INJECTION: forcing a failure. [ 97.295870][ T5858] name fail_futex, interval 1, probability 0, space 0, times 1 [ 97.295921][ T5858] CPU: 1 UID: 0 PID: 5858 Comm: syz.1.33 Not tainted syzkaller #0 PREEMPT(full) [ 97.295948][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.295971][ T5858] Call Trace: [ 97.295984][ T5858] [ 97.295995][ T5858] dump_stack_lvl+0xe8/0x150 [ 97.296040][ T5858] should_fail_ex+0x3eb/0x540 [ 97.296073][ T5858] get_futex_key+0x1b4/0x1580 [ 97.296123][ T5858] ? __pfx_get_futex_key+0x10/0x10 [ 97.296174][ T5858] futex_wake+0x119/0x5f0 [ 97.296211][ T5858] ? __pfx_futex_wake+0x10/0x10 [ 97.296252][ T5858] ? evict+0x987/0xb50 [ 97.296278][ T5858] do_futex+0x458/0x4e0 [ 97.296308][ T5858] ? __pfx_do_futex+0x10/0x10 [ 97.296331][ T5858] ? do_raw_spin_unlock+0xf5/0x200 [ 97.296378][ T5858] __se_sys_futex+0x3a8/0x450 [ 97.296423][ T5858] ? __pfx___se_sys_futex+0x10/0x10 [ 97.296457][ T5858] ? __x64_sys_futex+0x21/0xf0 [ 97.296485][ T5858] do_syscall_64+0x166/0x520 [ 97.296506][ T5858] ? trace_irq_disable+0x3b/0x140 [ 97.296538][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.296561][ T5858] ? clear_bhb_loop+0x70/0xc0 [ 97.296588][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.296611][ T5858] RIP: 0033:0x7f26ac99e159 [ 97.296655][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.296675][ T5858] RSP: 002b:00007f26ad8970e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 97.296704][ T5858] RAX: ffffffffffffffda RBX: 00007f26acc25fa8 RCX: 00007f26ac99e159 [ 97.296722][ T5858] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f26acc25fac [ 97.296737][ T5858] RBP: 00007f26acc25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 97.296753][ T5858] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 97.296768][ T5858] R13: 00007f26acc26038 R14: 00007ffee6eaca50 R15: 00007ffee6eacb38 [ 97.296803][ T5858] [ 97.563210][ T5699] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 97.563291][ T5699] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 97.566442][ T5699] usb 3-1: USB disconnect, device number 3 [ 97.706294][ T5863] loop0: detected capacity change from 0 to 2049 [ 97.748680][ T5863] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 97.748710][ T5863] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 97.748723][ T5863] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 97.748788][ T5863] loop0: [ 98.295413][ T5879] profile_transition: unconfined exec no attachment [ 98.706593][ T5892] loop0: detected capacity change from 0 to 2049 [ 98.736463][ T5892] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 98.736492][ T5892] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 98.736505][ T5892] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 98.736561][ T5892] loop0: [ 99.151799][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.166319][ T5904] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 99.185657][ T5903] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 99.206536][ T5903] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 99.227501][ T5903] iommufd_mock iommufd_mock3: Adding to iommu group 3 [ 99.303448][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 99.305711][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.305769][ T25] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.305809][ T25] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 99.305837][ T25] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 99.310015][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.310041][ T25] usb 4-1: Product: syz [ 99.310058][ T25] usb 4-1: Manufacturer: syz [ 99.310074][ T25] usb 4-1: SerialNumber: syz [ 99.566889][ T5911] profile_transition: unconfined exec no attachment [ 99.878636][ T5923] process 'syz.0.57' launched './file0' with NULL argv: empty string added [ 99.878745][ T5923] profile_transition: unconfined exec no attachment [ 99.979254][ T5925] loop0: detected capacity change from 0 to 2049 [ 100.023512][ T5925] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 100.023550][ T5925] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 100.023564][ T5925] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 100.023622][ T5925] loop0: [ 100.451412][ T5721] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 100.485699][ T25] cdc_ncm 4-1:1.0: bind() failure [ 100.509452][ T25] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 100.510214][ T25] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 100.531385][ T940] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.531889][ T25] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 100.540981][ T25] usb 4-1: USB disconnect, device number 3 [ 100.601329][ T5721] usb 1-1: Using ep0 maxpacket: 16 [ 100.602625][ T5721] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 100.604208][ T5721] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 100.604234][ T5721] usb 1-1: config 0 has no interface number 0 [ 100.604276][ T5721] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 100.604304][ T5721] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 100.606920][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.606946][ T5721] usb 1-1: Product: syz [ 100.606970][ T5721] usb 1-1: Manufacturer: syz [ 100.606986][ T5721] usb 1-1: SerialNumber: syz [ 100.692038][ T5721] usb 1-1: config 0 descriptor?? [ 100.693335][ T5929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.693521][ T5929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.702298][ T940] usb 3-1: Using ep0 maxpacket: 16 [ 100.729674][ T940] usb 3-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 100.731351][ T940] usb 3-1: config 0 interface 0 altsetting 134 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 100.731527][ T940] usb 3-1: config 0 interface 0 has no altsetting 0 [ 100.731701][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.754310][ T940] usb 3-1: config 0 descriptor?? [ 100.895268][ T5929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.895512][ T5929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.098591][ T5721] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 101.125630][ T5941] profile_transition: unconfined exec no attachment [ 101.224076][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224118][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224146][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224173][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224228][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224255][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224282][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224310][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224362][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.224399][ T940] microsoft 0003:045E:00F9.0001: unknown main item tag 0x0 [ 101.328324][ T940] microsoft 0003:045E:00F9.0001: hidraw0: USB HID v0.08 Device [HID 045e:00f9] on usb-dummy_hcd.2-1/input0 [ 101.381027][ T5943] profile_transition: unconfined exec no attachment [ 101.420224][ T940] usb 3-1: USB disconnect, device number 4 [ 101.767644][ T5943] fido_id[5943]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 102.167386][ T5953] loop0: detected capacity change from 0 to 2049 [ 102.179219][ T5929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.60'. [ 102.179805][ T5929] openvswitch: netlink: Message has 4 unknown bytes. [ 102.191414][ T5721] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 102.191444][ T5721] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 102.192007][ T5721] asix 1-1:0.34: probe with driver asix failed with error -71 [ 102.232151][ T5953] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 102.232789][ T5936] syz.1.63 (5936): drop_caches: 2 [ 102.234629][ T5721] usb 1-1: USB disconnect, device number 4 [ 102.235807][ T5953] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 102.235825][ T5953] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 102.235887][ T5953] loop0: [ 102.528782][ T5960] profile_transition: unconfined exec no attachment [ 102.637131][ T5963] profile_transition: unconfined exec no attachment [ 102.703379][ T5961] ======================================================= [ 102.703379][ T5961] WARNING: The mand mount option has been deprecated and [ 102.703379][ T5961] and is ignored by this kernel. Remove the mand [ 102.703379][ T5961] option from the mount to silence this warning. [ 102.703379][ T5961] ======================================================= [ 102.705360][ T5961] jffs2: notice: (5961) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.108983][ T5975] profile_transition: unconfined exec no attachment [ 103.426243][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.573055][ T10] usb 1-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 103.575065][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.575099][ T10] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.575125][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.575169][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.638113][ T5973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.638272][ T5973] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 103.657141][ T10] pl2303 1-1:1.0: pl2303 converter detected [ 103.677588][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 103.873037][ T5994] loop0: detected capacity change from 0 to 2049 [ 103.894257][ T5994] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 103.894288][ T5994] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 103.894302][ T5994] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 103.894364][ T5994] loop0: [ 103.974974][ T5968] pl2303 1-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 103.980948][ T5968] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 103.998816][ T5968] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 104.000874][ T5968] pl2303 1-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 104.026350][ T5968] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 104.195329][ T6002] profile_transition: unconfined exec no attachment [ 104.288583][ T6004] profile_transition: unconfined exec no attachment [ 104.310831][ T5968] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 104.328271][ T5968] pl2303 ttyUSB0: error sending break = -32 [ 104.343784][ T30] usb 1-1: USB disconnect, device number 5 [ 104.403016][ T30] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 104.437313][ T30] pl2303 1-1:1.0: device disconnected [ 104.445163][ T5616] Bluetooth: hci1: unexpected cc 0x042d length: 1 < 7 [ 104.495717][ T6008] profile_transition: unconfined exec no attachment [ 104.512018][ T6005] netlink: 'syz.3.81': attribute type 19 has an invalid length. [ 104.512042][ T6005] netlink: 36 bytes leftover after parsing attributes in process `syz.3.81'. [ 104.518180][ T6005] 9p: Bad value for 'wfdno' [ 104.625959][ T6010] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 104.626322][ T6010] device-mapper: raid: Choosing default region size of 4MiB [ 104.822284][ T6010] device-mapper: table: 248:0: raid: Component device(s) too small (-EINVAL) [ 104.822317][ T6010] device-mapper: ioctl: error adding target to table [ 105.201390][ T30] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 105.310509][ T6027] syzkaller1: entered promiscuous mode [ 105.310534][ T6027] syzkaller1: entered allmulticast mode [ 105.331644][ T30] usb 2-1: device descriptor read/64, error -71 [ 105.573205][ T30] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 105.656291][ T6032] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure [ 105.701926][ T30] usb 2-1: device descriptor read/64, error -71 [ 105.812983][ T30] usb usb2-port1: attempt power cycle [ 106.034467][ T5699] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 106.151472][ T30] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.172143][ T30] usb 2-1: device descriptor read/8, error -71 [ 106.206010][ T6044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.98'. [ 106.220160][ T5699] usb 1-1: Using ep0 maxpacket: 8 [ 106.233913][ T5699] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.236228][ T5699] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 106.236263][ T5699] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.236279][ T5699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.236296][ T5699] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.236312][ T5699] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.236343][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.314512][ T6044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.320814][ T6044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.411335][ T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 106.432097][ T30] usb 2-1: device descriptor read/8, error -71 [ 106.441379][ T5721] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.519320][ T5699] usb 1-1: usb_control_msg returned -32 [ 106.519366][ T5699] usbtmc 1-1:16.0: can't read capabilities [ 106.546114][ T30] usb usb2-port1: unable to enumerate USB device [ 106.572087][ T5721] usb 3-1: device descriptor read/64, error -71 [ 106.821416][ T5721] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.961664][ T5721] usb 3-1: device descriptor read/64, error -71 [ 107.058511][ T6060] loop0: detected capacity change from 0 to 2049 [ 107.071709][ T5721] usb usb3-port1: attempt power cycle [ 107.093861][ T6060] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 107.093882][ T6060] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 107.093894][ T6060] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 107.093949][ T6060] loop0: [ 107.431390][ T940] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.431598][ T5721] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 107.461957][ T5721] usb 3-1: device descriptor read/8, error -71 [ 107.561853][ T940] usb 4-1: device descriptor read/64, error -71 [ 107.702717][ T5721] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 107.722051][ T5721] usb 3-1: device descriptor read/8, error -71 [ 107.801338][ T940] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 107.831730][ T5721] usb usb3-port1: unable to enumerate USB device [ 107.931327][ T940] usb 4-1: device descriptor read/64, error -71 [ 108.042168][ T940] usb usb4-port1: attempt power cycle [ 108.381642][ T940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.402139][ T940] usb 4-1: device descriptor read/8, error -71 [ 108.456781][ T6072] profile_transition: unconfined exec no attachment [ 108.490563][ T6073] profile_transition: unconfined exec no attachment [ 108.641331][ T940] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 108.672950][ T940] usb 4-1: device descriptor read/8, error -71 [ 108.782562][ T940] usb usb4-port1: unable to enumerate USB device [ 108.798967][ T940] usb 1-1: USB disconnect, device number 6 [ 108.915914][ T6079] loop6: detected capacity change from 0 to 2640 [ 109.288792][ T6089] profile_transition: unconfined exec no attachment [ 109.512580][ T6100] profile_transition: unconfined exec no attachment [ 109.648103][ T6102] profile_transition: unconfined exec no attachment [ 109.724547][ T6103] profile_transition: unconfined exec no attachment [ 109.813816][ T6106] profile_transition: unconfined exec no attachment [ 109.900679][ T6109] profile_transition: unconfined exec no attachment [ 109.979389][ T6111] profile_transition: unconfined exec no attachment [ 110.080282][ T6114] profile_transition: unconfined exec no attachment [ 110.184077][ T6118] profile_transition: unconfined exec no attachment [ 110.252818][ T6119] profile_transition: unconfined exec no attachment [ 110.319254][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 110.454997][ T6124] syzkaller1: entered promiscuous mode [ 110.455021][ T6124] syzkaller1: entered allmulticast mode [ 110.772420][ T6135] loop0: detected capacity change from 0 to 2049 [ 110.797203][ T6135] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 110.797231][ T6135] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 110.797245][ T6135] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 110.797303][ T6135] loop0: [ 111.182526][ T5616] Bluetooth: hci2: command tx timeout [ 111.320484][ T6152] FAULT_INJECTION: forcing a failure. [ 111.320484][ T6152] name failslab, interval 1, probability 0, space 0, times 1 [ 111.320533][ T6152] CPU: 1 UID: 0 PID: 6152 Comm: syz.1.127 Not tainted syzkaller #0 PREEMPT(full) [ 111.320562][ T6152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.320581][ T6152] Call Trace: [ 111.320591][ T6152] [ 111.320602][ T6152] dump_stack_lvl+0xe8/0x150 [ 111.320653][ T6152] should_fail_ex+0x3eb/0x540 [ 111.320687][ T6152] should_failslab+0xa8/0x100 [ 111.320717][ T6152] __kmalloc_noprof+0xf9/0x710 [ 111.320764][ T6152] ? group_cpus_evenly+0xcf/0x5e0 [ 111.320803][ T6152] ? group_cpus_evenly+0xcf/0x5e0 [ 111.320848][ T6152] group_cpus_evenly+0xcf/0x5e0 [ 111.320890][ T6152] ? __pfx_group_cpus_evenly+0x10/0x10 [ 111.320943][ T6152] blk_mq_map_queues+0xb1/0x490 [ 111.320972][ T6152] ? trace_kmalloc+0x2a/0xf0 [ 111.321010][ T6152] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 111.321036][ T6152] ? __kmalloc_node_noprof+0x2eb/0x720 [ 111.321071][ T6152] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 111.321099][ T6152] ? blk_mq_update_queue_map+0x383/0x450 [ 111.321136][ T6152] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 111.321182][ T6152] loop_add+0x436/0xb40 [ 111.321224][ T6152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 111.321251][ T6152] ? __pfx_loop_add+0x10/0x10 [ 111.321321][ T6152] loop_control_ioctl+0x12b/0x5a0 [ 111.321359][ T6152] ? __fget_files+0x2a/0x420 [ 111.321390][ T6152] ? __pfx_loop_control_ioctl+0x10/0x10 [ 111.321426][ T6152] ? __fget_files+0x2a/0x420 [ 111.321471][ T6152] ? bpf_lsm_file_ioctl+0x9/0x20 [ 111.321501][ T6152] ? __pfx_loop_control_ioctl+0x10/0x10 [ 111.321556][ T6152] __se_sys_ioctl+0xfc/0x170 [ 111.321598][ T6152] do_syscall_64+0x166/0x520 [ 111.321621][ T6152] ? trace_irq_disable+0x3b/0x140 [ 111.321657][ T6152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.321683][ T6152] ? clear_bhb_loop+0x70/0xc0 [ 111.321714][ T6152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.321750][ T6152] RIP: 0033:0x7f26ac99e159 [ 111.321782][ T6152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.321803][ T6152] RSP: 002b:00007f26ad897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.321835][ T6152] RAX: ffffffffffffffda RBX: 00007f26acc25fa0 RCX: 00007f26ac99e159 [ 111.321854][ T6152] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 111.321870][ T6152] RBP: 00007f26aca3506b R08: 0000000000000000 R09: 0000000000000000 [ 111.321885][ T6152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.321900][ T6152] R13: 00007f26acc26038 R14: 00007f26acc25fa0 R15: 00007ffee6eacb38 [ 111.321937][ T6152] [ 111.964219][ T940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 112.121345][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 112.122120][ T940] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 112.123167][ T940] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 112.128250][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.128276][ T940] usb 4-1: Product: syz [ 112.128292][ T940] usb 4-1: Manufacturer: syz [ 112.128308][ T940] usb 4-1: SerialNumber: syz [ 112.145219][ T940] usb 4-1: config 0 descriptor?? [ 112.207623][ T940] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 112.378858][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.389942][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.409250][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.420940][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.831988][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.136'. [ 112.936771][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 113.411399][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.566173][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 113.569247][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 113.595191][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.595221][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.595248][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 113.641711][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.641741][ T10] usb 3-1: Product: syz [ 113.641757][ T10] usb 3-1: Manufacturer: syz [ 113.641773][ T10] usb 3-1: SerialNumber: syz [ 113.673680][ T10] usb 3-1: config 0 descriptor?? [ 113.990132][ T6217] syzkaller1: entered promiscuous mode [ 113.990157][ T6217] syzkaller1: entered allmulticast mode [ 114.275213][ T940] gspca_zc3xx: reg_r err -32 [ 114.348571][ T6229] profile_transition: 29 callbacks suppressed [ 114.348596][ T6229] profile_transition: unconfined exec no attachment [ 114.400260][ T6231] profile_transition: unconfined exec no attachment [ 114.450037][ T6232] loop0: detected capacity change from 0 to 2049 [ 114.486529][ T6232] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 114.486559][ T6232] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 114.486574][ T6232] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 114.486636][ T6232] loop0: [ 114.611783][ T10] gs_usb 3-1:0.0: Couldn't get device config: (err=-71) [ 114.611820][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 114.646071][ T10] usb 3-1: USB disconnect, device number 9 [ 114.861566][ T940] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 114.861667][ T940] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -32 [ 114.886778][ T6244] netlink: 12 bytes leftover after parsing attributes in process `syz.0.148'. [ 115.374180][ T5721] usb 4-1: USB disconnect, device number 8 [ 115.493301][ T940] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 115.519169][ T6261] syzkaller1: entered promiscuous mode [ 115.519196][ T6261] syzkaller1: entered allmulticast mode [ 115.557375][ T6263] loop0: detected capacity change from 0 to 2049 [ 115.644037][ T940] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 115.645114][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 115.645143][ T940] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 115.645182][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.648298][ T940] usb 1-1: config 0 descriptor?? [ 115.723214][ T6267] profile_transition: unconfined exec no attachment [ 115.804895][ T6269] FAULT_INJECTION: forcing a failure. [ 115.804895][ T6269] name failslab, interval 1, probability 0, space 0, times 0 [ 115.804929][ T6269] CPU: 0 UID: 0 PID: 6269 Comm: syz.2.156 Not tainted syzkaller #0 PREEMPT(full) [ 115.804955][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 115.804970][ T6269] Call Trace: [ 115.804979][ T6269] [ 115.804989][ T6269] dump_stack_lvl+0xe8/0x150 [ 115.805027][ T6269] should_fail_ex+0x3eb/0x540 [ 115.805058][ T6269] should_failslab+0xa8/0x100 [ 115.805084][ T6269] ? do_getname+0x2e/0x250 [ 115.805109][ T6269] kmem_cache_alloc_noprof+0x9c/0x600 [ 115.805141][ T6269] ? make_kuid+0x1e5/0x670 [ 115.805174][ T6269] ? do_getname+0x2e/0x250 [ 115.805205][ T6269] do_getname+0x2e/0x250 [ 115.805228][ T6269] ? getname_uflags+0x11/0x30 [ 115.805257][ T6269] do_faccessat+0x553/0xd70 [ 115.805293][ T6269] ? __pfx_do_faccessat+0x10/0x10 [ 115.805332][ T6269] __x64_sys_faccessat2+0x9a/0xb0 [ 115.805370][ T6269] do_syscall_64+0x166/0x520 [ 115.805392][ T6269] ? trace_irq_disable+0x3b/0x140 [ 115.805426][ T6269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.805451][ T6269] ? clear_bhb_loop+0x70/0xc0 [ 115.805480][ T6269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.805503][ T6269] RIP: 0033:0x7f5df5f9e159 [ 115.805524][ T6269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.805542][ T6269] RSP: 002b:00007f5df41f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 115.805568][ T6269] RAX: ffffffffffffffda RBX: 00007f5df6225fa0 RCX: 00007f5df5f9e159 [ 115.805586][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 115.805601][ T6269] RBP: 00007f5df603506b R08: 0000000000000000 R09: 0000000000000000 [ 115.805615][ T6269] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 115.805629][ T6269] R13: 00007f5df6226038 R14: 00007f5df6225fa0 R15: 00007ffdecef6258 [ 115.805665][ T6269] [ 116.025756][ T6270] profile_transition: unconfined exec no attachment [ 116.049331][ T940] hdpvr 1-1:0.0: firmware version 0x0 dated [ 116.049353][ T940] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 116.198246][ T6280] netlink: 92 bytes leftover after parsing attributes in process `syz.2.158'. [ 116.451726][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 116.490189][ T6294] cgroup: Need name or subsystem set [ 116.509512][ T6294] evm: overlay not supported [ 116.541804][ T940] hdpvr 1-1:0.0: Could not setup controls [ 116.543536][ T940] hdpvr 1-1:0.0: registering videodev failed [ 116.598917][ T940] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -71 [ 116.615114][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 116.617093][ T940] usb 1-1: USB disconnect, device number 7 [ 116.636994][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 116.637022][ T10] usb 3-1: config 0 has no interface number 0 [ 116.637062][ T10] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 116.637089][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x4 has invalid maxpacket 252, setting to 64 [ 116.685870][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 116.685901][ T10] usb 3-1: Product: syz [ 116.685918][ T10] usb 3-1: SerialNumber: syz [ 116.716391][ T10] usb 3-1: config 0 descriptor?? [ 116.737845][ T10] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 116.926560][ T10] usb 3-1: USB disconnect, device number 10 [ 117.182184][ T6290] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.184813][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.230405][ T6290] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.245308][ T6290] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.245422][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.264411][ T6290] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.278917][ T6290] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.279049][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.291537][ T6290] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.309382][ T6290] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.310519][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.327810][ T6290] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.938975][ T6322] syzkaller1: entered promiscuous mode [ 117.939000][ T6322] syzkaller1: entered allmulticast mode [ 118.017499][ T6324] loop0: detected capacity change from 0 to 2049 [ 118.066050][ T6324] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 118.066077][ T6324] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 118.066089][ T6324] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 118.066139][ T6324] loop0: [ 118.233448][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 118.399028][ T6334] wusb3801 0-0004: supply vbus not found, using dummy regulator [ 118.447053][ T6334] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x04 [ 118.541963][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.573117][ T6344] openvswitch: netlink: Flow key attribute not present in set flow. [ 119.021386][ T6355] syzkaller1: entered promiscuous mode [ 119.021421][ T6355] syzkaller1: entered allmulticast mode [ 119.203429][ T5721] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 119.261700][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.288473][ T6359] loop0: detected capacity change from 0 to 2049 [ 119.334301][ T6359] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 119.334330][ T6359] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 119.334344][ T6359] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 119.334403][ T6359] loop0: [ 119.341989][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.342111][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.381425][ T5721] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 119.385467][ T5721] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 119.410918][ T5721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.410959][ T5721] usb 2-1: Product: syz [ 119.410975][ T5721] usb 2-1: Manufacturer: syz [ 119.410991][ T5721] usb 2-1: SerialNumber: syz [ 119.467633][ T5721] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 119.467941][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 119.493573][ T5721] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 119.522800][ T5721] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 119.522863][ T5721] dvb_usb_umt_010 2-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 119.615523][ T6364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'. [ 119.669403][ T5721] usb 2-1: USB disconnect, device number 10 [ 119.911738][ T6372] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 120.213841][ T6380] syzkaller1: entered promiscuous mode [ 120.213866][ T6380] syzkaller1: entered allmulticast mode [ 120.369977][ T6386] loop0: detected capacity change from 0 to 2049 [ 120.424631][ T6386] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 120.424660][ T6386] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 120.424675][ T6386] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 120.424733][ T6386] loop0: [ 120.615486][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.196'. [ 120.630366][ T5629] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.978390][ T6403] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.978704][ T6403] IPv6: NLM_F_REPLACE set, but no existing node found! [ 121.152930][ T6410] profile_transition: unconfined exec no attachment [ 121.230027][ T6416] profile_transition: unconfined exec no attachment [ 121.244458][ T6417] profile_transition: unconfined exec no attachment [ 121.271574][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 121.344240][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 121.391784][ T6419] syzkaller1: entered promiscuous mode [ 121.391810][ T6419] syzkaller1: entered allmulticast mode [ 121.414152][ T1559] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.423000][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.423078][ T5629] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.455796][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 121.459386][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.459404][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 121.459435][ T10] usb 2-1: config 0 interface 0 altsetting 243 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 121.459453][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.482944][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.483007][ T10] usb 2-1: Product: syz [ 121.483054][ T10] usb 2-1: Manufacturer: syz [ 121.483087][ T10] usb 2-1: SerialNumber: syz [ 121.538119][ T10] usb 2-1: config 0 descriptor?? [ 121.561163][ T10] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 121.571278][ T1559] usb 3-1: Using ep0 maxpacket: 16 [ 121.573151][ T1559] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 121.574415][ T1559] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.574447][ T1559] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.574481][ T1559] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.636840][ T1559] usb 3-1: config 0 descriptor?? [ 121.707138][ T6426] loop0: detected capacity change from 0 to 2049 [ 121.746177][ T6426] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 121.746205][ T6426] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 121.746218][ T6426] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 121.746274][ T6426] loop0: [ 121.908786][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.212'. [ 121.944445][ T10] usb 2-1: USB disconnect, device number 11 [ 122.104024][ T6412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.107671][ T6412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.110417][ T6412] profile_transition: unconfined exec no attachment [ 122.133225][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 122.301373][ T5721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 122.337776][ T1559] usbhid 3-1:0.0: can't add hid device: -71 [ 122.337884][ T1559] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 122.362156][ T1559] usb 3-1: USB disconnect, device number 11 [ 122.448682][ T6440] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.214'. [ 122.448708][ T6440] netlink: 4388 bytes leftover after parsing attributes in process `syz.3.214'. [ 122.472759][ T5721] usb 1-1: New USB device found, idVendor=1738, idProduct=1709, bcdDevice= 0.00 [ 122.473729][ T5721] usb 1-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 122.473754][ T5721] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.473791][ T5721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.476789][ T5721] usb 1-1: config 0 descriptor?? [ 122.701853][ T5616] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.704742][ T5721] usb 1-1: string descriptor 0 read error: -71 [ 122.723474][ T5721] usb 1-1: USB disconnect, device number 8 [ 122.804024][ T6448] netlink: 96 bytes leftover after parsing attributes in process `syz.1.217'. [ 123.041311][ T1559] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 123.171350][ T1559] usb 2-1: device descriptor read/64, error -71 [ 123.303956][ T6472] profile_transition: unconfined exec no attachment [ 123.366754][ T6473] profile_transition: unconfined exec no attachment [ 123.419247][ T1559] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 123.421417][ T5616] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.473764][ T6470] syzkaller1: entered promiscuous mode [ 123.473788][ T6470] syzkaller1: entered allmulticast mode [ 123.501772][ T5616] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.501810][ T5616] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.551424][ T1559] usb 2-1: device descriptor read/64, error -71 [ 123.663378][ T1559] usb usb2-port1: attempt power cycle [ 123.700000][ T6477] loop0: detected capacity change from 0 to 2049 [ 123.737658][ T6477] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 123.737687][ T6477] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 123.737700][ T6477] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 123.737756][ T6477] loop0: [ 123.810845][ T6481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.225'. [ 124.004952][ T1559] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 124.024929][ T1559] usb 2-1: device descriptor read/8, error -71 [ 124.261877][ T1559] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 124.283243][ T1559] usb 2-1: device descriptor read/8, error -71 [ 124.298410][ T5721] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 124.350370][ T5629] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 124.351048][ T5629] Bluetooth: hci0: unexpected event for opcode 0x0419 [ 124.392381][ T1559] usb usb2-port1: unable to enumerate USB device [ 124.471425][ T5721] usb 3-1: Invalid ep0 maxpacket: 32 [ 124.601419][ T5721] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 124.751324][ T5721] usb 3-1: Invalid ep0 maxpacket: 32 [ 124.751619][ T5721] usb usb3-port1: attempt power cycle [ 125.003336][ T6499] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 125.046080][ T6499] device-mapper: ioctl: populate_table: target parameters not NUL-terminated [ 125.064641][ T6502] profile_transition: unconfined exec no attachment [ 125.101647][ T5721] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 125.129074][ T5721] usb 3-1: Invalid ep0 maxpacket: 32 [ 125.187942][ T6507] syzkaller1: entered promiscuous mode [ 125.187968][ T6507] syzkaller1: entered allmulticast mode [ 125.220322][ T6509] loop0: detected capacity change from 0 to 2049 [ 125.247578][ T6509] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 125.247606][ T6509] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 125.247618][ T6509] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 125.247665][ T6509] loop0: [ 125.269128][ T5721] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 125.292449][ T5721] usb 3-1: Invalid ep0 maxpacket: 32 [ 125.294184][ T5721] usb usb3-port1: unable to enumerate USB device [ 125.325570][ T4984] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 125.325596][ T4984] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 125.325626][ T4984] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 125.325689][ T4984] loop0: [ 125.420016][ T6511] loop0: detected capacity change from 0 to 2049 [ 125.449595][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.238'. [ 125.450587][ T6511] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 125.450614][ T6511] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 125.450629][ T6511] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 125.450685][ T6511] loop0: [ 125.574729][ T6517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.575291][ T6517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.811337][ T5721] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 125.971974][ T6526] FAULT_INJECTION: forcing a failure. [ 125.971974][ T6526] name failslab, interval 1, probability 0, space 0, times 0 [ 125.972025][ T6526] CPU: 0 UID: 0 PID: 6526 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT(full) [ 125.972051][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 125.972065][ T6526] Call Trace: [ 125.972074][ T6526] [ 125.972084][ T6526] dump_stack_lvl+0xe8/0x150 [ 125.972130][ T6526] should_fail_ex+0x3eb/0x540 [ 125.972161][ T6526] should_failslab+0xa8/0x100 [ 125.972188][ T6526] __kmalloc_noprof+0xf9/0x710 [ 125.972221][ T6526] ? group_cpus_evenly+0xcf/0x5e0 [ 125.972254][ T6526] ? group_cpus_evenly+0xcf/0x5e0 [ 125.972293][ T6526] group_cpus_evenly+0xcf/0x5e0 [ 125.972330][ T6526] ? __pfx_group_cpus_evenly+0x10/0x10 [ 125.972378][ T6526] blk_mq_map_queues+0xb1/0x490 [ 125.972403][ T6526] ? trace_kmalloc+0x2a/0xf0 [ 125.972438][ T6526] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 125.972461][ T6526] ? __kmalloc_node_noprof+0x2eb/0x720 [ 125.972491][ T6526] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 125.972517][ T6526] ? blk_mq_update_queue_map+0x383/0x450 [ 125.972550][ T6526] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 125.972599][ T6526] loop_add+0x436/0xb40 [ 125.972632][ T6526] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 125.972658][ T6526] ? __pfx_loop_add+0x10/0x10 [ 125.972721][ T6526] loop_control_ioctl+0x12b/0x5a0 [ 125.972754][ T6526] ? __fget_files+0x2a/0x420 [ 125.972782][ T6526] ? __pfx_loop_control_ioctl+0x10/0x10 [ 125.972801][ T5721] usb 1-1: not running at top speed; connect to a high speed hub [ 125.972812][ T6526] ? __fget_files+0x2a/0x420 [ 125.972834][ T5721] usb 1-1: New USB device found, idVendor=05d8, idProduct=8108, bcdDevice=44.eb [ 125.972843][ T6526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 125.972870][ T6526] ? __pfx_loop_control_ioctl+0x10/0x10 [ 125.972906][ T6526] __se_sys_ioctl+0xfc/0x170 [ 125.972943][ T6526] do_syscall_64+0x166/0x520 [ 125.972964][ T6526] ? trace_irq_disable+0x3b/0x140 [ 125.972996][ T6526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.973019][ T6526] ? clear_bhb_loop+0x70/0xc0 [ 125.973047][ T6526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.973070][ T6526] RIP: 0033:0x7f26ac99e159 [ 125.973091][ T6526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.973109][ T6526] RSP: 002b:00007f26ad897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.973134][ T6526] RAX: ffffffffffffffda RBX: 00007f26acc25fa0 RCX: 00007f26ac99e159 [ 125.973151][ T6526] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 125.973176][ T6526] RBP: 00007f26aca3506b R08: 0000000000000000 R09: 0000000000000000 [ 125.973189][ T6526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.973201][ T6526] R13: 00007f26acc26038 R14: 00007f26acc25fa0 R15: 00007ffee6eacb38 [ 125.973250][ T6526] [ 125.973855][ T5721] usb 1-1: config 65 has an invalid interface number: 105 but max is 0 [ 125.973879][ T5721] usb 1-1: config 65 has no interface number 0 [ 125.973906][ T5721] usb 1-1: config 65 interface 105 has no altsetting 0 [ 125.977820][ T5721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.977845][ T5721] usb 1-1: Product: syz [ 125.977861][ T5721] usb 1-1: Manufacturer: syz [ 125.977877][ T5721] usb 1-1: SerialNumber: syz [ 126.328339][ T5721] dvb-usb: found a 'Artec T1 USB1.1 TVBOX with AN2235' in warm state. [ 126.328390][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 126.360045][ T5721] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 126.374598][ T5721] dvbdev: DVB: registering new adapter (Artec T1 USB1.1 TVBOX with AN2235) [ 126.374669][ T5721] usb 1-1: media controller created [ 126.385672][ T5721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 126.437163][ T5721] dvb-usb: bulk message failed: -22 (6/0) [ 126.437306][ T5721] dvb-usb: no frontend was attached by 'Artec T1 USB1.1 TVBOX with AN2235' [ 126.461999][ T5721] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 126.500154][ T5721] dvb-usb: schedule remote query interval to 150 msecs. [ 126.500313][ T5721] dvb-usb: bulk message failed: -22 (3/0) [ 126.521412][ T5721] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully initialized and connected. [ 126.525374][ T5721] usb 1-1: USB disconnect, device number 9 [ 126.625886][ T5721] dvb-usb: Artec T1 USB1.1 TVBOX with AN2235 successfully deinitialized and disconnected. [ 126.745419][ T6538] syzkaller1: entered promiscuous mode [ 126.745444][ T6538] syzkaller1: entered allmulticast mode [ 126.913261][ T6542] profile_transition: unconfined exec no attachment [ 127.078284][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'. [ 127.183139][ T6548] openvswitch: netlink: IP tunnel dst address not specified [ 127.309002][ T6551] loop0: detected capacity change from 0 to 2049 [ 127.355777][ T6551] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 127.355806][ T6551] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 127.355820][ T6551] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 127.355877][ T6551] loop0: [ 127.524698][ T6557] FAULT_INJECTION: forcing a failure. [ 127.524698][ T6557] name failslab, interval 1, probability 0, space 0, times 0 [ 127.524732][ T6557] CPU: 1 UID: 0 PID: 6557 Comm: syz.1.255 Not tainted syzkaller #0 PREEMPT(full) [ 127.524759][ T6557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.524773][ T6557] Call Trace: [ 127.524782][ T6557] [ 127.524793][ T6557] dump_stack_lvl+0xe8/0x150 [ 127.524831][ T6557] should_fail_ex+0x3eb/0x540 [ 127.524864][ T6557] should_failslab+0xa8/0x100 [ 127.524892][ T6557] __kmalloc_noprof+0xf9/0x710 [ 127.524927][ T6557] ? sk_prot_alloc+0xe7/0x210 [ 127.524950][ T6557] ? sk_prot_alloc+0xe7/0x210 [ 127.524992][ T6557] sk_prot_alloc+0xe7/0x210 [ 127.525013][ T6557] ? sk_alloc+0x27/0x390 [ 127.525039][ T6557] sk_alloc+0x3a/0x390 [ 127.525065][ T6557] __netlink_create+0x62/0x260 [ 127.525093][ T6557] ? __pfx_genl_release+0x10/0x10 [ 127.525128][ T6557] netlink_create+0x3ca/0x590 [ 127.525159][ T6557] ? __pfx_genl_unbind+0x10/0x10 [ 127.525190][ T6557] ? __pfx_genl_bind+0x10/0x10 [ 127.525226][ T6557] __sock_create+0x4b5/0xac0 [ 127.525266][ T6557] __sys_socket+0xd6/0x1b0 [ 127.525302][ T6557] __x64_sys_socket+0x7a/0x90 [ 127.525335][ T6557] do_syscall_64+0x166/0x520 [ 127.525361][ T6557] ? trace_irq_disable+0x3b/0x140 [ 127.525394][ T6557] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.525417][ T6557] ? clear_bhb_loop+0x70/0xc0 [ 127.525453][ T6557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.525476][ T6557] RIP: 0033:0x7f26ac99e159 [ 127.525497][ T6557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.525516][ T6557] RSP: 002b:00007f26ad897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.525541][ T6557] RAX: ffffffffffffffda RBX: 00007f26acc25fa0 RCX: 00007f26ac99e159 [ 127.525558][ T6557] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 127.525571][ T6557] RBP: 00007f26aca3506b R08: 0000000000000000 R09: 0000000000000000 [ 127.525586][ T6557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.525599][ T6557] R13: 00007f26acc26038 R14: 00007f26acc25fa0 R15: 00007ffee6eacb38 [ 127.525633][ T6557] [ 127.781076][ T6557] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(15) [ 127.781104][ T6557] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 127.808286][ T6557] vhci_hcd vhci_hcd.0: Device attached [ 127.901527][ T6561] vhci_hcd: connection closed [ 127.906210][ T59] vhci_hcd vhci_hcd.1: stop threads [ 127.906963][ T59] vhci_hcd vhci_hcd.1: release socket [ 127.906997][ T59] vhci_hcd vhci_hcd.1: disconnect device [ 127.935308][ T6565] syzkaller1: entered promiscuous mode [ 127.935331][ T6565] syzkaller1: entered allmulticast mode [ 128.060824][ T6570] profile_transition: unconfined exec no attachment [ 128.320015][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.262'. [ 129.090354][ T6605] syzkaller1: entered promiscuous mode [ 129.090380][ T6605] syzkaller1: entered allmulticast mode [ 129.226122][ T6611] profile_transition: unconfined exec no attachment [ 129.307053][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.275'. [ 129.353048][ T5721] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 129.504513][ T5721] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.505168][ T5721] usb 4-1: not running at top speed; connect to a high speed hub [ 129.505203][ T5721] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice= 3.31 [ 129.506261][ T5721] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 129.506287][ T5721] usb 4-1: config 0 has no interface number 0 [ 129.506328][ T5721] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 129.506358][ T5721] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 129.506383][ T5721] usb 4-1: config 0 interface 88 has no altsetting 0 [ 129.508184][ T5721] usb 4-1: New USB device strings: Mfr=0, Product=84, SerialNumber=3 [ 129.508210][ T5721] usb 4-1: Product: syz [ 129.508226][ T5721] usb 4-1: SerialNumber: syz [ 129.522500][ T5721] usb 4-1: config 0 descriptor?? [ 129.800899][ T5721] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input7 [ 129.870332][ T5721] usb 4-1: USB disconnect, device number 9 [ 130.199128][ T6637] syzkaller1: entered promiscuous mode [ 130.199145][ T6637] syzkaller1: entered allmulticast mode [ 130.405813][ T6645] profile_transition: unconfined exec no attachment [ 131.352828][ T30] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 131.512683][ T30] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 131.513736][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.513768][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.513808][ T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.533640][ T30] usb 2-1: config 0 descriptor?? [ 131.875481][ T6679] profile_transition: unconfined exec no attachment [ 132.213422][ T30] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 132.258234][ T6696] profile_transition: unconfined exec no attachment [ 132.390704][ T30] cp2112 0003:10C4:EA90.0002: error requesting version [ 132.436282][ T30] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 132.490140][ T30] usb 2-1: USB disconnect, device number 16 [ 132.848354][ T6709] netlink: 52 bytes leftover after parsing attributes in process `syz.3.310'. [ 132.863054][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.863136][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.964192][ T6712] loop0: detected capacity change from 0 to 2049 [ 133.011956][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 133.017636][ T6712] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.017663][ T6712] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 133.017677][ T6712] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.017735][ T6712] loop0: [ 133.074528][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop3, 10) failed: No such file or directory [ 133.090578][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 133.106914][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 133.111035][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop1, 10) failed: No such file or directory [ 133.158474][ T6718] profile_transition: unconfined exec no attachment [ 133.683721][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 133.712601][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 133.771394][ T5721] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 133.868504][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'. [ 133.869820][ T6740] Zero length message leads to an empty skb [ 133.916871][ T6742] loop0: detected capacity change from 0 to 2049 [ 133.921023][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 133.943647][ T6742] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 133.943655][ T5721] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 133.943679][ T6742] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 133.943692][ T6742] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 133.943772][ T6742] loop0: [ 133.949530][ T5721] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 133.949558][ T5721] usb 4-1: config 0 has no interface number 0 [ 133.949600][ T5721] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.962250][ T5721] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.962323][ T5721] usb 4-1: Product: syz [ 133.962365][ T5721] usb 4-1: Manufacturer: syz [ 133.962427][ T5721] usb 4-1: SerialNumber: syz [ 134.003949][ T5721] usb 4-1: config 0 descriptor?? [ 134.041148][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 134.066949][ T5721] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 134.131303][ T5699] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 134.220285][ T6748] profile_transition: unconfined exec no attachment [ 134.223656][ T5721] usb 4-1: USB disconnect, device number 10 [ 134.230624][ T5721] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 134.284688][ T5699] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 134.289049][ T5699] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.289099][ T5699] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 134.289122][ T5699] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 134.289148][ T5699] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.289190][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.223335][ T6784] profile_transition: unconfined exec no attachment [ 135.336399][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 135.336435][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.341'. [ 135.452560][ T5699] [drm] Initialized gud 1.0.0 for 1-1:1.0 on minor 1 [ 135.583160][ T6740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.590099][ T6740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.214695][ T6814] profile_transition: unconfined exec no attachment [ 136.948436][ T6835] profile_transition: unconfined exec no attachment [ 137.177862][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.365'. [ 137.671316][ T5721] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 137.801315][ T5721] usb 3-1: device descriptor read/64, error -71 [ 137.997130][ T6861] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.011257][ T6863] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 138.041351][ T5721] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 138.154281][ T6867] syzkaller1: entered promiscuous mode [ 138.154318][ T6867] syzkaller1: entered allmulticast mode [ 138.181473][ T5721] usb 3-1: device descriptor read/64, error -71 [ 138.291734][ T5721] usb usb3-port1: attempt power cycle [ 138.320119][ T6870] profile_transition: unconfined exec no attachment [ 138.647585][ T5721] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 138.667872][ T5721] usb 3-1: device descriptor read/8, error -71 [ 138.901340][ T5721] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 138.924081][ T5721] usb 3-1: device descriptor read/8, error -71 [ 139.032356][ T5721] usb usb3-port1: unable to enumerate USB device [ 139.411344][ T5764] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 139.467449][ T6897] syzkaller1: entered promiscuous mode [ 139.467472][ T6897] syzkaller1: entered allmulticast mode [ 139.571303][ T5764] usb 2-1: Using ep0 maxpacket: 8 [ 139.573356][ T5764] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 139.575101][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 139.575136][ T5764] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.575186][ T5764] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 139.575211][ T5764] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 173 [ 139.575251][ T5764] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.579535][ T5764] usb 2-1: config 0 descriptor?? [ 139.582179][ T6894] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 139.690187][ T6900] profile_transition: unconfined exec no attachment [ 139.783650][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 139.784102][ T6902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.386'. [ 139.785321][ T6902] netlink: 500 bytes leftover after parsing attributes in process `syz.3.386'. [ 139.853500][ T6894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 139.972046][ T6908] FAULT_INJECTION: forcing a failure. [ 139.972046][ T6908] name failslab, interval 1, probability 0, space 0, times 0 [ 139.972071][ T6908] CPU: 0 UID: 0 PID: 6908 Comm: syz.3.388 Not tainted syzkaller #0 PREEMPT(full) [ 139.972090][ T6908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 139.972100][ T6908] Call Trace: [ 139.972106][ T6908] [ 139.972113][ T6908] dump_stack_lvl+0xe8/0x150 [ 139.972137][ T6908] should_fail_ex+0x3eb/0x540 [ 139.972159][ T6908] should_failslab+0xa8/0x100 [ 139.972175][ T6908] ? do_getname+0x2e/0x250 [ 139.972192][ T6908] kmem_cache_alloc_noprof+0x9c/0x600 [ 139.972214][ T6908] ? make_kuid+0x1e5/0x670 [ 139.972236][ T6908] ? do_getname+0x2e/0x250 [ 139.972257][ T6908] do_getname+0x2e/0x250 [ 139.972272][ T6908] ? getname_uflags+0x11/0x30 [ 139.972291][ T6908] do_faccessat+0x553/0xd70 [ 139.972313][ T6908] ? ksys_write+0x242/0x270 [ 139.972333][ T6908] ? __pfx_do_faccessat+0x10/0x10 [ 139.972353][ T6908] ? __pfx_ksys_write+0x10/0x10 [ 139.972379][ T6908] __x64_sys_faccessat2+0x9a/0xb0 [ 139.972405][ T6908] do_syscall_64+0x166/0x520 [ 139.972419][ T6908] ? trace_irq_disable+0x3b/0x140 [ 139.972442][ T6908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.972458][ T6908] ? clear_bhb_loop+0x70/0xc0 [ 139.972477][ T6908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.972492][ T6908] RIP: 0033:0x7f74c339e159 [ 139.972506][ T6908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.972519][ T6908] RSP: 002b:00007f74c42a4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b7 [ 139.972542][ T6908] RAX: ffffffffffffffda RBX: 00007f74c3625fa0 RCX: 00007f74c339e159 [ 139.972553][ T6908] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 139.972563][ T6908] RBP: 00007f74c343506b R08: 0000000000000000 R09: 0000000000000000 [ 139.972572][ T6908] R10: 0000000000001100 R11: 0000000000000246 R12: 0000000000000000 [ 139.972582][ T6908] R13: 00007f74c3626038 R14: 00007f74c3625fa0 R15: 00007ffd7c551898 [ 139.972605][ T6908] [ 140.196711][ T10] usb 2-1: USB disconnect, device number 17 [ 140.197848][ T5629] Bluetooth: hci4: Opcode 0x0c03 failed: -19 [ 140.233697][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop35, 10) failed: No such file or directory [ 140.298909][ T6910] FAULT_INJECTION: forcing a failure. [ 140.298909][ T6910] name failslab, interval 1, probability 0, space 0, times 0 [ 140.298933][ T6910] CPU: 0 UID: 0 PID: 6910 Comm: syz.3.389 Not tainted syzkaller #0 PREEMPT(full) [ 140.298950][ T6910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.298960][ T6910] Call Trace: [ 140.298966][ T6910] [ 140.298972][ T6910] dump_stack_lvl+0xe8/0x150 [ 140.299006][ T6910] should_fail_ex+0x3eb/0x540 [ 140.299027][ T6910] should_failslab+0xa8/0x100 [ 140.299045][ T6910] ? security_file_alloc+0x34/0x310 [ 140.299070][ T6910] kmem_cache_alloc_noprof+0x9c/0x600 [ 140.299092][ T6910] ? rcu_is_watching+0x16/0xb0 [ 140.299108][ T6910] ? security_file_alloc+0x34/0x310 [ 140.299137][ T6910] security_file_alloc+0x34/0x310 [ 140.299186][ T6910] init_file+0x90/0x2b0 [ 140.299214][ T6910] alloc_empty_file+0x74/0x1d0 [ 140.299240][ T6910] path_openat+0x9d/0x1e40 [ 140.299277][ T6910] ? __lock_acquire+0x747/0x2de0 [ 140.299308][ T6910] do_file_open+0x23e/0x4a0 [ 140.299334][ T6910] ? __pfx_do_file_open+0x10/0x10 [ 140.299373][ T6910] ? _raw_spin_unlock+0x28/0x50 [ 140.299394][ T6910] ? alloc_fd+0x651/0x6c0 [ 140.299420][ T6910] do_sys_openat2+0x115/0x200 [ 140.299440][ T6910] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.299463][ T6910] ? do_user_addr_fault+0xd3f/0x1480 [ 140.299488][ T6910] __x64_sys_openat+0x138/0x170 [ 140.299512][ T6910] do_syscall_64+0x166/0x520 [ 140.299526][ T6910] ? trace_irq_disable+0x3b/0x140 [ 140.299549][ T6910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.299565][ T6910] ? clear_bhb_loop+0x70/0xc0 [ 140.299584][ T6910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.299600][ T6910] RIP: 0033:0x7f74c335e98e [ 140.299614][ T6910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 140.299627][ T6910] RSP: 002b:00007f74c42a1ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.299644][ T6910] RAX: ffffffffffffffda RBX: 00007f74c42a46c0 RCX: 00007f74c335e98e [ 140.299655][ T6910] RDX: 0000000000000002 RSI: 00007f74c343440a RDI: ffffffffffffff9c [ 140.299665][ T6910] RBP: 00007f74c343506b R08: 0000000000000000 R09: 0000000000000000 [ 140.299675][ T6910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000036 [ 140.299684][ T6910] R13: 0000200000000000 R14: 0000000000000004 R15: 00007ffd7c551898 [ 140.299707][ T6910] [ 140.563173][ T5764] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 140.675873][ T5699] Console: switching to colour frame buffer device 128x48 [ 140.690694][ T5699] gud 1-1:1.0: [drm] fb0: guddrmfb frame buffer device [ 140.713839][ T5764] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 140.715764][ T5764] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.715818][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 140.715845][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 140.715873][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 140.715902][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 140.715929][ T5764] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 140.715955][ T5764] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 140.723478][ T5764] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.723550][ T5764] usb 4-1: Product: syz [ 140.723592][ T5764] usb 4-1: Manufacturer: syz [ 140.723634][ T5764] usb 4-1: SerialNumber: syz [ 140.804290][ T5764] usb 4-1: config 0 descriptor?? [ 140.809617][ T6910] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.810009][ T6910] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 140.815132][ T5699] usb 1-1: USB disconnect, device number 10 [ 140.916923][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 140.942964][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 140.970601][ T5699] Console: switching to colour VGA+ 80x25 [ 141.109851][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.110303][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.716274][ T6932] syzkaller1: entered promiscuous mode [ 141.716295][ T6932] syzkaller1: entered allmulticast mode [ 141.726786][ T6933] profile_transition: unconfined exec no attachment [ 141.821152][ T6939] profile_transition: unconfined exec no attachment [ 141.830294][ T6940] profile_transition: unconfined exec no attachment [ 141.834006][ T6935] sg_write: process 230 (syz.0.398) changed security contexts after opening file descriptor, this is not allowed. [ 141.909384][ T6941] profile_transition: unconfined exec no attachment [ 142.023215][ T5764] rc_core: IR keymap rc-snapstream-firefly not found [ 142.023237][ T5764] Registered IR keymap rc-empty [ 142.086147][ T5764] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 142.106293][ T5764] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 142.148088][ T6949] loop0: detected capacity change from 0 to 2049 [ 142.187050][ T5764] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 142.188497][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 142.644018][ T6949] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 142.644049][ T6949] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 142.644347][ T6949] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 142.644691][ T6949] loop0: [ 142.727862][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 143.188564][ T5764] usb 4-1: USB disconnect, device number 11 [ 143.188690][ C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 143.490457][ T6959] svc: failed to register lockdv1 RPC service (errno 111). [ 143.490721][ T6959] lockd_up: makesock failed, error=-111 [ 144.189650][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 144.228457][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 144.397477][ T6960] pim6reg: entered allmulticast mode [ 144.397963][ T6961] pim6reg: left allmulticast mode [ 144.475826][ T6971] syzkaller1: entered promiscuous mode [ 144.475851][ T6971] syzkaller1: entered allmulticast mode [ 144.812597][ T6983] profile_transition: unconfined exec no attachment [ 144.925765][ T6951] syz.1.401 (6951) used greatest stack depth: 18528 bytes left [ 145.159033][ T6959] svc: failed to register nfsdv3 RPC service (errno 111). [ 145.162363][ T6959] svc: failed to register nfsaclv3 RPC service (errno 111). [ 145.162442][ T6959] failed to unregister tcp with rpcbind [ 145.190757][ T6959] svc: failed to register nfsdv3 RPC service (errno 97). [ 145.190788][ T6959] svc: failed to register nfsaclv3 RPC service (errno 97). [ 145.190807][ T6959] failed to unregister tcp with rpcbind [ 145.759473][ T7000] loop0: detected capacity change from 0 to 2049 [ 145.773776][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.774737][ T7000] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 145.774761][ T7000] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 145.774774][ T7000] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 145.774829][ T7000] loop0: [ 145.809655][ T30] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 145.830846][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.872979][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.878050][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 145.981444][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 145.982138][ T30] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 145.984805][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.997985][ T30] usb 3-1: config 0 descriptor?? [ 146.041873][ T30] as10x_usb: device has been detected [ 146.042761][ T30] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 146.073896][ T30] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 146.156699][ T7008] overlayfs: failed to resolve './file1/file0': -2 [ 146.164219][ T7012] syzkaller1: entered promiscuous mode [ 146.164300][ T7012] syzkaller1: entered allmulticast mode [ 146.203997][ T30] as10x_usb: error during firmware upload part1 [ 146.204632][ T30] Registered device nBox DVB-T Dongle [ 146.286472][ T5764] usb 3-1: USB disconnect, device number 20 [ 146.412811][ T7020] profile_transition: unconfined exec no attachment [ 146.514061][ T5764] Unregistered device nBox DVB-T Dongle [ 146.519352][ T5764] as10x_usb: device has been disconnected [ 146.652441][ T5699] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 146.659842][ T7027] FAULT_INJECTION: forcing a failure. [ 146.659842][ T7027] name failslab, interval 1, probability 0, space 0, times 0 [ 146.659865][ T7027] CPU: 0 UID: 0 PID: 7027 Comm: syz.0.428 Not tainted syzkaller #0 PREEMPT(full) [ 146.659883][ T7027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.659892][ T7027] Call Trace: [ 146.659898][ T7027] [ 146.659905][ T7027] dump_stack_lvl+0xe8/0x150 [ 146.659931][ T7027] should_fail_ex+0x3eb/0x540 [ 146.659972][ T7027] should_failslab+0xa8/0x100 [ 146.659990][ T7027] __kvmalloc_node_noprof+0x171/0x820 [ 146.660017][ T7027] ? sbitmap_init_node+0x2bc/0x630 [ 146.660039][ T7027] ? sbitmap_init_node+0x2bc/0x630 [ 146.660082][ T7027] sbitmap_init_node+0x2bc/0x630 [ 146.660109][ T7027] sbitmap_queue_init_node+0x3e/0x4d0 [ 146.660135][ T7027] blk_mq_init_tags+0x15c/0x2d0 [ 146.660161][ T7027] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 146.660179][ T7027] ? kfree+0x1c5/0x650 [ 146.660197][ T7027] ? blk_mq_map_queues+0x3ea/0x490 [ 146.660218][ T7027] ? blk_mq_map_queues+0x3ea/0x490 [ 146.660237][ T7027] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 146.660272][ T7027] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 146.660300][ T7027] loop_add+0x436/0xb40 [ 146.660323][ T7027] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 146.660340][ T7027] ? __pfx_loop_add+0x10/0x10 [ 146.660383][ T7027] loop_control_ioctl+0x12b/0x5a0 [ 146.660406][ T7027] ? __fget_files+0x2a/0x420 [ 146.660425][ T7027] ? __pfx_loop_control_ioctl+0x10/0x10 [ 146.660447][ T7027] ? __fget_files+0x2a/0x420 [ 146.660468][ T7027] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.660488][ T7027] ? __pfx_loop_control_ioctl+0x10/0x10 [ 146.660510][ T7027] __se_sys_ioctl+0xfc/0x170 [ 146.660535][ T7027] do_syscall_64+0x166/0x520 [ 146.660550][ T7027] ? trace_irq_disable+0x3b/0x140 [ 146.660572][ T7027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.660587][ T7027] ? clear_bhb_loop+0x70/0xc0 [ 146.660606][ T7027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.660621][ T7027] RIP: 0033:0x7fbbe6d9e159 [ 146.660636][ T7027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.660648][ T7027] RSP: 002b:00007fbbe7c70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.660665][ T7027] RAX: ffffffffffffffda RBX: 00007fbbe7025fa0 RCX: 00007fbbe6d9e159 [ 146.660676][ T7027] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000006 [ 146.660685][ T7027] RBP: 00007fbbe6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 146.660694][ T7027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.660703][ T7027] R13: 00007fbbe7026038 R14: 00007fbbe7025fa0 R15: 00007ffdd0cd0ad8 [ 146.660726][ T7027] [ 146.660839][ T7027] blk-mq: reduced tag depth (128 -> 64) [ 146.818192][ T5699] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 146.857436][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.857517][ T5699] usb 4-1: Product: syz [ 146.857552][ T5699] usb 4-1: Manufacturer: syz [ 146.857593][ T5699] usb 4-1: SerialNumber: syz [ 146.979654][ T5699] usb 4-1: config 0 descriptor?? [ 146.995190][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop36, 10) failed: No such file or directory [ 147.009048][ T5699] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 147.047782][ T7029] FAULT_INJECTION: forcing a failure. [ 147.047782][ T7029] name failslab, interval 1, probability 0, space 0, times 0 [ 147.047814][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT(full) [ 147.047841][ T7029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.047855][ T7029] Call Trace: [ 147.047865][ T7029] [ 147.047874][ T7029] dump_stack_lvl+0xe8/0x150 [ 147.047910][ T7029] should_fail_ex+0x3eb/0x540 [ 147.047942][ T7029] should_failslab+0xa8/0x100 [ 147.047970][ T7029] __kmalloc_noprof+0xf9/0x710 [ 147.048004][ T7029] ? group_cpus_evenly+0xcf/0x5e0 [ 147.048038][ T7029] ? group_cpus_evenly+0xcf/0x5e0 [ 147.048081][ T7029] group_cpus_evenly+0xcf/0x5e0 [ 147.048121][ T7029] ? __pfx_group_cpus_evenly+0x10/0x10 [ 147.048171][ T7029] blk_mq_map_queues+0xb1/0x490 [ 147.048197][ T7029] ? trace_kmalloc+0x2a/0xf0 [ 147.048243][ T7029] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 147.048268][ T7029] ? __kmalloc_node_noprof+0x2eb/0x720 [ 147.048299][ T7029] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 147.048326][ T7029] ? blk_mq_update_queue_map+0x383/0x450 [ 147.048362][ T7029] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 147.048405][ T7029] loop_add+0x436/0xb40 [ 147.048438][ T7029] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.048463][ T7029] ? __pfx_loop_add+0x10/0x10 [ 147.048528][ T7029] loop_control_ioctl+0x12b/0x5a0 [ 147.048563][ T7029] ? __fget_files+0x2a/0x420 [ 147.048592][ T7029] ? __pfx_loop_control_ioctl+0x10/0x10 [ 147.048623][ T7029] ? __fget_files+0x2a/0x420 [ 147.048656][ T7029] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.048698][ T7029] ? __pfx_loop_control_ioctl+0x10/0x10 [ 147.048730][ T7029] __se_sys_ioctl+0xfc/0x170 [ 147.048769][ T7029] do_syscall_64+0x166/0x520 [ 147.048790][ T7029] ? trace_irq_disable+0x3b/0x140 [ 147.048823][ T7029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.048846][ T7029] ? clear_bhb_loop+0x70/0xc0 [ 147.048873][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.048896][ T7029] RIP: 0033:0x7f26ac99e159 [ 147.048916][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.048935][ T7029] RSP: 002b:00007f26ad897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.048959][ T7029] RAX: ffffffffffffffda RBX: 00007f26acc25fa0 RCX: 00007f26ac99e159 [ 147.048975][ T7029] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000006 [ 147.048989][ T7029] RBP: 00007f26aca3506b R08: 0000000000000000 R09: 0000000000000000 [ 147.049003][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.049015][ T7029] R13: 00007f26acc26038 R14: 00007f26acc25fa0 R15: 00007ffee6eacb38 [ 147.049049][ T7029] [ 147.366647][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop37, 10) failed: No such file or directory [ 147.417903][ T7033] FAULT_INJECTION: forcing a failure. [ 147.417903][ T7033] name failslab, interval 1, probability 0, space 0, times 0 [ 147.417935][ T7033] CPU: 1 UID: 0 PID: 7033 Comm: syz.2.431 Not tainted syzkaller #0 PREEMPT(full) [ 147.417961][ T7033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.417974][ T7033] Call Trace: [ 147.417984][ T7033] [ 147.417994][ T7033] dump_stack_lvl+0xe8/0x150 [ 147.418030][ T7033] should_fail_ex+0x3eb/0x540 [ 147.418062][ T7033] should_failslab+0xa8/0x100 [ 147.418088][ T7033] __kmalloc_cache_node_noprof+0xa5/0x620 [ 147.418128][ T7033] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 147.418162][ T7033] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 147.418216][ T7033] sbitmap_queue_init_node+0x1dc/0x4d0 [ 147.418256][ T7033] blk_mq_init_tags+0x15c/0x2d0 [ 147.418294][ T7033] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 147.418319][ T7033] ? kfree+0x1c5/0x650 [ 147.418346][ T7033] ? blk_mq_map_queues+0x3ea/0x490 [ 147.418375][ T7033] ? blk_mq_map_queues+0x3ea/0x490 [ 147.418408][ T7033] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 147.418452][ T7033] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 147.418494][ T7033] loop_add+0x436/0xb40 [ 147.418526][ T7033] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.418552][ T7033] ? __pfx_loop_add+0x10/0x10 [ 147.418615][ T7033] loop_control_ioctl+0x12b/0x5a0 [ 147.418649][ T7033] ? __fget_files+0x2a/0x420 [ 147.418689][ T7033] ? __pfx_loop_control_ioctl+0x10/0x10 [ 147.418720][ T7033] ? __fget_files+0x2a/0x420 [ 147.418760][ T7033] ? bpf_lsm_file_ioctl+0x9/0x20 [ 147.418786][ T7033] ? __pfx_loop_control_ioctl+0x10/0x10 [ 147.418815][ T7033] __se_sys_ioctl+0xfc/0x170 [ 147.418868][ T7033] do_syscall_64+0x166/0x520 [ 147.418889][ T7033] ? trace_irq_disable+0x3b/0x140 [ 147.418918][ T7033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.418939][ T7033] ? clear_bhb_loop+0x70/0xc0 [ 147.418965][ T7033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.418980][ T7033] RIP: 0033:0x7f5df5f9e159 [ 147.418993][ T7033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.419020][ T7033] RSP: 002b:00007f5df41f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 147.419044][ T7033] RAX: ffffffffffffffda RBX: 00007f5df6225fa0 RCX: 00007f5df5f9e159 [ 147.419058][ T7033] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000006 [ 147.419071][ T7033] RBP: 00007f5df603506b R08: 0000000000000000 R09: 0000000000000000 [ 147.419083][ T7033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.419095][ T7033] R13: 00007f5df6226038 R14: 00007f5df6225fa0 R15: 00007ffdecef6258 [ 147.419123][ T7033] [ 147.547948][ T7033] blk-mq: reduced tag depth (128 -> 64) [ 147.762006][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop38, 10) failed: No such file or directory [ 148.212693][ T7048] loop0: detected capacity change from 0 to 2049 [ 148.233894][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 148.262109][ T7048] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 148.262139][ T7048] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 148.262153][ T7048] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 148.262235][ T7048] loop0: [ 148.270519][ T5620] udevd[5620]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 148.409796][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 148.721141][ T7058] profile_transition: unconfined exec no attachment [ 148.750406][ T7060] FAULT_INJECTION: forcing a failure. [ 148.750406][ T7060] name failslab, interval 1, probability 0, space 0, times 0 [ 148.750442][ T7060] CPU: 0 UID: 0 PID: 7060 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(full) [ 148.750467][ T7060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.750484][ T7060] Call Trace: [ 148.750492][ T7060] [ 148.750503][ T7060] dump_stack_lvl+0xe8/0x150 [ 148.750545][ T7060] should_fail_ex+0x3eb/0x540 [ 148.750577][ T7060] should_failslab+0xa8/0x100 [ 148.750605][ T7060] __kmalloc_cache_node_noprof+0xa5/0x620 [ 148.750641][ T7060] ? blk_mq_init_tags+0x83/0x2d0 [ 148.750672][ T7060] ? blk_mq_init_tags+0x83/0x2d0 [ 148.750708][ T7060] blk_mq_init_tags+0x83/0x2d0 [ 148.750744][ T7060] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 148.750770][ T7060] ? kfree+0x1c5/0x650 [ 148.750797][ T7060] ? blk_mq_map_queues+0x3ea/0x490 [ 148.750826][ T7060] ? blk_mq_map_queues+0x3ea/0x490 [ 148.750853][ T7060] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 148.750892][ T7060] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 148.750930][ T7060] loop_add+0x436/0xb40 [ 148.750962][ T7060] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 148.750986][ T7060] ? __pfx_loop_add+0x10/0x10 [ 148.751045][ T7060] loop_control_ioctl+0x12b/0x5a0 [ 148.751077][ T7060] ? __fget_files+0x2a/0x420 [ 148.751103][ T7060] ? __pfx_loop_control_ioctl+0x10/0x10 [ 148.751131][ T7060] ? __fget_files+0x2a/0x420 [ 148.751161][ T7060] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.751189][ T7060] ? __pfx_loop_control_ioctl+0x10/0x10 [ 148.751222][ T7060] __se_sys_ioctl+0xfc/0x170 [ 148.751258][ T7060] do_syscall_64+0x166/0x520 [ 148.751279][ T7060] ? trace_irq_disable+0x3b/0x140 [ 148.751312][ T7060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.751335][ T7060] ? clear_bhb_loop+0x70/0xc0 [ 148.751363][ T7060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.751385][ T7060] RIP: 0033:0x7f26ac99e159 [ 148.751406][ T7060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.751425][ T7060] RSP: 002b:00007f26ad897028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.751450][ T7060] RAX: ffffffffffffffda RBX: 00007f26acc25fa0 RCX: 00007f26ac99e159 [ 148.751467][ T7060] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000006 [ 148.751481][ T7060] RBP: 00007f26aca3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.751495][ T7060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.751508][ T7060] R13: 00007f26acc26038 R14: 00007f26acc25fa0 R15: 00007ffee6eacb38 [ 148.751549][ T7060] [ 148.759147][ T7060] blk-mq: reduced tag depth (128 -> 64) [ 148.849333][ T7059] syzkaller1: entered promiscuous mode [ 148.849394][ T7059] syzkaller1: entered allmulticast mode [ 149.361309][ T30] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 149.512124][ T30] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 149.513316][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.513378][ T30] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.513407][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.927723][ T30] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 149.927739][ T30] dvb_ttusb_budget: ttusb_init_controller: error [ 149.927747][ T30] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 149.967859][ T7064] profile_transition: unconfined exec no attachment [ 150.000309][ T30] DVB: Unable to find symbol stv0299_attach() [ 150.001326][ T7065] profile_transition: unconfined exec no attachment [ 150.046966][ T30] DVB: Unable to find symbol tda8083_attach() [ 150.046985][ T30] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 150.374362][ T5699] gspca_stk1135: reg_w 0x352 err -71 [ 150.375429][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375445][ T5699] gspca_stk1135: Sensor write failed [ 150.375480][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375490][ T5699] gspca_stk1135: Sensor write failed [ 150.375526][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375536][ T5699] gspca_stk1135: Sensor read failed [ 150.375569][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375578][ T5699] gspca_stk1135: Sensor read failed [ 150.375585][ T5699] gspca_stk1135: Detected sensor type unknown (0x0) [ 150.375630][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375640][ T5699] gspca_stk1135: Sensor read failed [ 150.375673][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375682][ T5699] gspca_stk1135: Sensor read failed [ 150.375717][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375727][ T5699] gspca_stk1135: Sensor write failed [ 150.375760][ T5699] gspca_stk1135: serial bus timeout: status=0x00 [ 150.375770][ T5699] gspca_stk1135: Sensor write failed [ 150.375858][ T5699] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 150.392676][ T5699] usb 4-1: USB disconnect, device number 12 [ 150.974695][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop40, 10) failed: No such file or directory [ 151.056011][ T7073] FAULT_INJECTION: forcing a failure. [ 151.056011][ T7073] name failslab, interval 1, probability 0, space 0, times 0 [ 151.056049][ T7073] CPU: 0 UID: 0 PID: 7073 Comm: syz.3.442 Not tainted syzkaller #0 PREEMPT(full) [ 151.056076][ T7073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.056091][ T7073] Call Trace: [ 151.056100][ T7073] [ 151.056110][ T7073] dump_stack_lvl+0xe8/0x150 [ 151.056148][ T7073] should_fail_ex+0x3eb/0x540 [ 151.056180][ T7073] should_failslab+0xa8/0x100 [ 151.056208][ T7073] __kmalloc_noprof+0xf9/0x710 [ 151.056242][ T7073] ? group_cpus_evenly+0xcf/0x5e0 [ 151.056279][ T7073] ? group_cpus_evenly+0xcf/0x5e0 [ 151.056322][ T7073] group_cpus_evenly+0xcf/0x5e0 [ 151.056361][ T7073] ? __pfx_group_cpus_evenly+0x10/0x10 [ 151.056412][ T7073] blk_mq_map_queues+0xb1/0x490 [ 151.056439][ T7073] ? trace_kmalloc+0x2a/0xf0 [ 151.056474][ T7073] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 151.056499][ T7073] ? __kmalloc_node_noprof+0x2eb/0x720 [ 151.056531][ T7073] ? blk_mq_alloc_tag_set+0x5f8/0x1000 [ 151.056558][ T7073] ? blk_mq_update_queue_map+0x383/0x450 [ 151.056593][ T7073] blk_mq_alloc_tag_set+0x8dd/0x1000 [ 151.056635][ T7073] loop_add+0x436/0xb40 [ 151.056668][ T7073] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 151.056694][ T7073] ? __pfx_loop_add+0x10/0x10 [ 151.056759][ T7073] loop_control_ioctl+0x12b/0x5a0 [ 151.056802][ T7073] ? __fget_files+0x2a/0x420 [ 151.056831][ T7073] ? __pfx_loop_control_ioctl+0x10/0x10 [ 151.056863][ T7073] ? __fget_files+0x2a/0x420 [ 151.056896][ T7073] ? bpf_lsm_file_ioctl+0x9/0x20 [ 151.056926][ T7073] ? __pfx_loop_control_ioctl+0x10/0x10 [ 151.056960][ T7073] __se_sys_ioctl+0xfc/0x170 [ 151.056999][ T7073] do_syscall_64+0x166/0x520 [ 151.057032][ T7073] ? trace_irq_disable+0x3b/0x140 [ 151.057064][ T7073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.057087][ T7073] ? clear_bhb_loop+0x70/0xc0 [ 151.057115][ T7073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.057137][ T7073] RIP: 0033:0x7f74c339e159 [ 151.057159][ T7073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.057178][ T7073] RSP: 002b:00007f74c42a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.057202][ T7073] RAX: ffffffffffffffda RBX: 00007f74c3625fa0 RCX: 00007f74c339e159 [ 151.057218][ T7073] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000006 [ 151.057233][ T7073] RBP: 00007f74c343506b R08: 0000000000000000 R09: 0000000000000000 [ 151.057247][ T7073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.057260][ T7073] R13: 00007f74c3626038 R14: 00007f74c3625fa0 R15: 00007ffd7c551898 [ 151.057294][ T7073] [ 151.367821][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop41, 10) failed: No such file or directory [ 151.885945][ T7091] overlayfs: failed to resolve './file0/file1': -2 [ 151.910653][ T7095] loop0: detected capacity change from 0 to 2049 [ 151.931120][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 151.962533][ T7095] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 151.962560][ T7095] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 151.962573][ T7095] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 151.962627][ T7095] loop0: [ 151.968880][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 152.062920][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop42, 10) failed: No such file or directory [ 152.129232][ T30] usb 1-1: USB disconnect, device number 11 [ 152.267997][ T7113] profile_transition: unconfined exec no attachment [ 152.306401][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 152.343054][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 152.475790][ T7117] loop7: detected capacity change from 0 to 16384 [ 152.503343][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 152.507278][ T7116] syzkaller1: entered promiscuous mode [ 152.507338][ T7116] syzkaller1: entered allmulticast mode [ 153.159714][ T5615] udevd[5615]: inotify_add_watch(7, /dev/loop43, 10) failed: No such file or directory [ 153.500214][ T7144] loop0: detected capacity change from 0 to 2049 [ 153.514933][ T5799] udevd[5799]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 153.565669][ T7144] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 153.565699][ T7144] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 153.565713][ T7144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 153.565768][ T7144] loop0: [ 153.685200][ T7152] profile_transition: unconfined exec no attachment [ 153.905424][ T7162] profile_transition: unconfined exec no attachment [ 153.949482][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 154.101416][ T5764] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 154.143937][ T7168] [ 154.146333][ T7168] ====================================================== [ 154.153423][ T7168] WARNING: possible circular locking dependency detected [ 154.160475][ T7168] syzkaller #0 Not tainted [ 154.164912][ T7168] ------------------------------------------------------ [ 154.171955][ T7168] syz.0.480/7168 is trying to acquire lock: [ 154.177887][ T7168] ffffffff8fe29f28 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.189164][ T7168] [ 154.189164][ T7168] but task is already holding lock: [ 154.196554][ T7168] ffff888079a89dc0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 154.207063][ T7168] [ 154.207063][ T7168] which lock already depends on the new lock. [ 154.207063][ T7168] [ 154.217495][ T7168] [ 154.217495][ T7168] the existing dependency chain (in reverse order) is: [ 154.226560][ T7168] [ 154.226560][ T7168] -> #3 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 154.235287][ T7168] down_write+0x91/0x200 [ 154.240077][ T7168] configfs_depend_item_unlocked+0x153/0x420 [ 154.246606][ T7168] usbg_make_tpg+0x1e0/0x550 [ 154.251746][ T7168] target_fabric_make_tpg+0xa8/0x6d0 [ 154.257576][ T7168] configfs_mkdir+0x4f6/0x9e0 [ 154.262797][ T7168] vfs_mkdir+0x398/0x710 [ 154.267585][ T7168] filename_mkdirat+0x285/0x510 [ 154.272974][ T7168] __se_sys_mkdirat+0x35/0x150 [ 154.278276][ T7168] do_syscall_64+0x166/0x520 [ 154.283421][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.289853][ T7168] [ 154.289853][ T7168] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 154.297781][ T7168] __mutex_lock+0x197/0x15a0 [ 154.302910][ T7168] tcm_alloc_inst+0x65/0x1a0 [ 154.308045][ T7168] usb_get_function_instance+0xe3/0x2f0 [ 154.314132][ T7168] function_make+0x127/0x360 [ 154.319270][ T7168] configfs_mkdir+0x4f6/0x9e0 [ 154.324493][ T7168] vfs_mkdir+0x398/0x710 [ 154.329277][ T7168] filename_mkdirat+0x285/0x510 [ 154.334667][ T7168] __se_sys_mkdirat+0x35/0x150 [ 154.339985][ T7168] do_syscall_64+0x166/0x520 [ 154.345122][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.351580][ T7168] [ 154.351580][ T7168] -> #1 (func_lock){+.+.}-{4:4}: [ 154.358727][ T7168] __mutex_lock+0x197/0x15a0 [ 154.363867][ T7168] usb_get_function_instance+0x2e/0x2f0 [ 154.369961][ T7168] function_make+0x127/0x360 [ 154.375108][ T7168] configfs_mkdir+0x4f6/0x9e0 [ 154.380345][ T7168] vfs_mkdir+0x398/0x710 [ 154.385131][ T7168] filename_mkdirat+0x285/0x510 [ 154.390520][ T7168] __se_sys_mkdirat+0x35/0x150 [ 154.395823][ T7168] do_syscall_64+0x166/0x520 [ 154.400947][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.407374][ T7168] [ 154.407374][ T7168] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 154.415656][ T7168] __lock_acquire+0x164c/0x2de0 [ 154.421051][ T7168] lock_acquire+0x115/0x350 [ 154.426094][ T7168] __mutex_lock+0x197/0x15a0 [ 154.431236][ T7168] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.437961][ T7168] configfs_symlink+0x74e/0x11d0 [ 154.443449][ T7168] vfs_symlink+0x18b/0x330 [ 154.448421][ T7168] filename_symlinkat+0x1cd/0x410 [ 154.453978][ T7168] __se_sys_symlinkat+0x4e/0x2b0 [ 154.459473][ T7168] do_syscall_64+0x166/0x520 [ 154.464611][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.471063][ T7168] [ 154.471063][ T7168] other info that might help us debug this: [ 154.471063][ T7168] [ 154.481305][ T7168] Chain exists of: [ 154.481305][ T7168] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#28 [ 154.481305][ T7168] [ 154.496285][ T7168] Possible unsafe locking scenario: [ 154.496285][ T7168] [ 154.503746][ T7168] CPU0 CPU1 [ 154.509115][ T7168] ---- ---- [ 154.514485][ T7168] lock(&sb->s_type->i_mutex_key#28); [ 154.519969][ T7168] lock(tpg_instances_lock); [ 154.527183][ T7168] lock(&sb->s_type->i_mutex_key#28); [ 154.535174][ T7168] lock(gadget_subsys.su_mutex); [ 154.540223][ T7168] [ 154.540223][ T7168] *** DEADLOCK *** [ 154.540223][ T7168] [ 154.548369][ T7168] locks held by syz.0.480/7168: 2, last CPU#0: [ 154.554533][ T7168] #0: ffff88801db02460 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 154.563880][ T7168] #1: ffff888079a89dc0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 154.574869][ T7168] [ 154.574869][ T7168] stack backtrace: [ 154.580765][ T7168] CPU: 0 UID: 0 PID: 7168 Comm: syz.0.480 Not tainted syzkaller #0 PREEMPT(full) [ 154.589973][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 154.600046][ T7168] Call Trace: [ 154.603336][ T7168] [ 154.606274][ T7168] dump_stack_lvl+0xe8/0x150 [ 154.610913][ T7168] print_circular_bug+0x2e2/0x300 [ 154.615959][ T7168] check_noncircular+0x12f/0x150 [ 154.620921][ T7168] __lock_acquire+0x164c/0x2de0 [ 154.625810][ T7168] ? __bfs+0x153/0x290 [ 154.629908][ T7168] ? __pfx_hlock_conflict+0x10/0x10 [ 154.635127][ T7168] ? check_path+0x21/0x40 [ 154.639478][ T7168] lock_acquire+0x115/0x350 [ 154.644007][ T7168] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.650397][ T7168] __mutex_lock+0x197/0x15a0 [ 154.655001][ T7168] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.661354][ T7168] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.667709][ T7168] ? __pfx___mutex_lock+0x10/0x10 [ 154.672770][ T7168] ? make_vfsuid+0x49/0xa0 [ 154.677213][ T7168] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 154.683398][ T7168] ? inode_permission+0x2bc/0x5f0 [ 154.688450][ T7168] configfs_symlink+0x74e/0x11d0 [ 154.693429][ T7168] ? lookup_one_qstr_excl+0x1d4/0x360 [ 154.698820][ T7168] ? make_vfsuid+0x49/0xa0 [ 154.703253][ T7168] ? generic_permission+0x2ba/0x660 [ 154.708467][ T7168] ? __pfx_configfs_symlink+0x10/0x10 [ 154.713858][ T7168] ? bpf_lsm_inode_symlink+0x9/0x20 [ 154.719076][ T7168] vfs_symlink+0x18b/0x330 [ 154.723505][ T7168] ? security_path_symlink+0xfd/0x360 [ 154.728897][ T7168] filename_symlinkat+0x1cd/0x410 [ 154.733959][ T7168] ? __might_fault+0xaf/0x130 [ 154.738665][ T7168] ? __pfx_filename_symlinkat+0x10/0x10 [ 154.744228][ T7168] ? do_getname+0x151/0x250 [ 154.748773][ T7168] __se_sys_symlinkat+0x4e/0x2b0 [ 154.753726][ T7168] do_syscall_64+0x166/0x520 [ 154.758331][ T7168] ? trace_irq_disable+0x3b/0x140 [ 154.763407][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.769497][ T7168] ? clear_bhb_loop+0x70/0xc0 [ 154.774199][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.780119][ T7168] RIP: 0033:0x7fbbe6d9e159 [ 154.784562][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.804183][ T7168] RSP: 002b:00007fbbe7c70028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 154.812610][ T7168] RAX: ffffffffffffffda RBX: 00007fbbe7025fa0 RCX: 00007fbbe6d9e159 [ 154.820592][ T7168] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 154.828581][ T7168] RBP: 00007fbbe6e3506b R08: 0000000000000000 R09: 0000000000000000 [ 154.836563][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.844570][ T7168] R13: 00007fbbe7026038 R14: 00007fbbe7025fa0 R15: 00007ffdd0cd0ad8 [ 154.852595][ T7168] [ 154.964954][ T5764] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 154.965776][ T5764] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 154.967364][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.967381][ T5764] usb 3-1: Product: syz [ 154.967391][ T5764] usb 3-1: Manufacturer: syz [ 154.967401][ T5764] usb 3-1: SerialNumber: syz [ 154.968816][ T5764] usb 3-1: config 0 descriptor?? [ 155.016040][ T5764] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 155.016086][ T5764] usb 3-1: setting power ON [ 155.016102][ T5764] dvb-usb: bulk message failed: -22 (2/0) [ 155.018109][ T5764] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 155.019769][ T5764] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 155.020188][ T5764] dvb_usb_cxusb 3-1:0.0: probe with driver dvb_usb_cxusb failed with error -22 [ 155.141301][ T10] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 155.182682][ T5764] usb 3-1: USB disconnect, device number 21 [ 155.293436][ T10] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 155.294397][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.294421][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 155.296338][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.296362][ T10] usb 1-1: Product: syz [ 155.296377][ T10] usb 1-1: Manufacturer: syz [ 155.296391][ T10] usb 1-1: SerialNumber: syz [ 155.505607][ T30] usb 1-1: USB disconnect, device number 12