last executing test programs: 4m57.657578982s ago: executing program 3 (id=4): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b0001000000000904", @ANYRES16=r0], 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x22000) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 4m55.91678809s ago: executing program 3 (id=30): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xd) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)='*', 0x1}], 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m55.860106302s ago: executing program 3 (id=31): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\xd7\x8fL\xa2o\x0f\t\'-\xaf\x006y\xc9 a;\x04\xca\xb2\x9f/5\xb1\xb6i\xff\a\x00\x00\x19\xff\xda\xc3\x8a\x99q\x1e\xd3\xad@\x9f#Mw&\xdf\xab\xfd\xf8\xee\xa0\xff2|\x14\x89\x8a\xf0&Of\xc3\x1d5F\xf6N!\"\xd4|\xa4\xe0\x81\x88\xa3b\xcbZ}O\x84\xaf\xf9\xad\x9e\xaa\r\x85\x9fF\xbbs\x1b\x8e*T\x86\xca'}, {0x20, '.\\'}, {0x20, '%^\\\x93\xca\xe9[\x04\fu\xd3\x10.\xee\\Q$e\xa9=B\x19I\xd2Le\x14P\x86\xd3\xe5b\x93y\xdf\xfb\x17B7\a\x9c\xb5?\x0f\xc8\x9b\x9aol)\x87Z\xcc\xa5\xc2\xffb\xb8\x00\xbb\n\xcb\xb1\xdaa\x18\xacG\t\x8e\x00*\xf8R\xa9\x8e\xaaUw\xc0!\x1fa\xf5\xecf\x14B\xd4\xd4\r\x143Y=\xa6!\x94P\xdb\x81vr\x8c\xfd/6\x16\xd8&\x96\xb0o\xae'}, {0x20, '/w\f.\x0el\x85op#\x00O\xaa\x8f)\xa82\x8bl\xd4p\xe9\xdaw\x9f\xc8'}, {0x20, '&/&'}], 0xa, "521299a432289bea0aa53f5db534de379d0418026c1f265a707f7b5008ab99f2c9a997ad079ea398ccfcdc48da03fd070a2913b99836792d5dd5992db64276c3aebed24145776c2f03ce2c7c32dcc548e812"}, 0x160) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000180)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x0, 0x3]}}) 4m55.769317956s ago: executing program 3 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00') 4m55.702768829s ago: executing program 3 (id=33): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x713, 0xb) inotify_init1(0x80000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 4m55.337866477s ago: executing program 3 (id=35): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001040)=0xffffffffffffffff, 0x4) 4m55.096945172s ago: executing program 32 (id=35): chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000001040)=0xffffffffffffffff, 0x4) 2m36.556409135s ago: executing program 1 (id=1247): write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="6f11591d663cb753ec6a0faeb502177e4294bb719d1ea9", 0x17) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 2m36.449976436s ago: executing program 1 (id=1249): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMKID={0x14, 0x55, "c5db6d8b6ec822ff46f876846f30481c"}]}, 0x44}}, 0x20008010) 2m36.215751476s ago: executing program 1 (id=1261): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@generic={0xb, 0x6, "e5faf0", 0x0, 0x33, 0xff, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x36) 2m35.921747014s ago: executing program 1 (id=1254): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x84) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@local, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3, 0x4e1f, 0x0, 0x2}, {0x5, 0xb, 0x4, 0x400, 0x8001, 0x4, 0x0, 0xd3d}, {0x0, 0x137, 0x0, 0x3}, 0x7fffffff, 0x6e6bb9, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x36}, 0x4d6, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3502, 0x1, 0x0, 0x0, 0xfffffffe, 0x2c19, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 2m35.816866703s ago: executing program 1 (id=1255): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000500)={0x28, 0x2, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) 2m35.677017579s ago: executing program 1 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) read(r0, &(0x7f0000000700)=""/256, 0x100) 2m20.153562282s ago: executing program 33 (id=1256): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='tcp 2049\n', 0x9) read(r0, &(0x7f0000000700)=""/256, 0x100) 17.349522305s ago: executing program 4 (id=2368): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40000) fchdir(r1) sendmmsg$unix(r0, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 17.122864864s ago: executing program 4 (id=2370): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 16.474430143s ago: executing program 4 (id=2377): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r1 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x7, 0x0, 0xf0000000}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) write(r0, &(0x7f0000000080)='4', 0x1) 15.022236243s ago: executing program 4 (id=2384): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000080)=0x8) 14.900261555s ago: executing program 4 (id=2385): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) recvmmsg(r0, &(0x7f0000000f00), 0x274, 0x10000, &(0x7f0000001000)={0x77359400}) 14.745855507s ago: executing program 4 (id=2387): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/kcore\x00', 0x0, 0x0) readv(r0, &(0x7f0000000240)=[{0x0, 0x7002}, {&(0x7f0000000140)=""/222, 0xde}], 0x2) 3.924364514s ago: executing program 0 (id=2457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) 3.684864353s ago: executing program 0 (id=2458): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000080)="120000001200e7ef00341618a585107b462e", 0x12, 0x20000010, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000000b00033264756d6d793000000800400004020000180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x72}], 0x1, 0x0, 0x0) 3.418453429s ago: executing program 0 (id=2460): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) 3.163522043s ago: executing program 0 (id=2463): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, 0x0) 2.953141376s ago: executing program 5 (id=2464): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082", 0x2, 0xfffffffffffffffe) 2.729106767s ago: executing program 2 (id=2466): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f00000002c0)="e5786a0d000000000000003b", 0xc, 0x400c0c1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, 0x82004}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x803, 0x4) recvfrom$l2tp(r0, 0x0, 0x0, 0x100a2, 0x0, 0x56) 2.570009171s ago: executing program 5 (id=2467): clock_adjtime(0x0, &(0x7f0000000000)={0x5, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0x1, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x1000, 0x5, 0x2, 0x3, 0x2, 0x1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 2.379274392s ago: executing program 2 (id=2468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000027c0), 0x4924924924924c6, 0x4) 2.297631574s ago: executing program 5 (id=2469): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) 2.110226765s ago: executing program 2 (id=2470): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000740)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r0, &(0x7f0000000200)) 2.072164298s ago: executing program 5 (id=2471): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/module/damon_reclaim/parameters/commit_inputs\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='Y\n', 0x2) close(r0) 1.812822242s ago: executing program 5 (id=2472): socket$inet_mptcp(0x2, 0x1, 0x106) pipe(&(0x7f0000000140)) r0 = syz_usb_connect(0x2, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cc1769190001010203010902450001010080320904000002ffffff0007058102400000070501024000000904000104ffffff000705810240000007050102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x14, &(0x7f0000000080)=ANY=[@ANYRES32=r0]) 1.173189744s ago: executing program 2 (id=2473): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r2}, &(0x7f00000002c0)=0x8) 1.019609096s ago: executing program 0 (id=2474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x1802}]) 754.945275ms ago: executing program 0 (id=2475): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f00000026c0)=[{}]) 180.397671ms ago: executing program 2 (id=2476): r0 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[], 0x2b) sendfile(r2, r0, 0x0, 0x4000000053d2) 75.045389ms ago: executing program 5 (id=2477): unshare(0x4a000200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/net/ipv6/conf/all/disable_ipv6\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1', 0x1) 0s ago: executing program 2 (id=2478): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x202, 0xc, 0x0, {0xa, 0x4e26, 0x9, @mcast1, 0x9b}}}, 0x80, 0x0}, 0x2400bf64) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="030000000018"}) kernel console output (not intermixed with test programs): et; falling back to MIDI 1.0 [ 295.039652][T10451] FAULT_INJECTION: forcing a failure. [ 295.039652][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 295.039681][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.2.1872 Not tainted syzkaller #0 PREEMPT(full) [ 295.039704][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.039716][T10451] Call Trace: [ 295.039725][T10451] [ 295.039733][T10451] dump_stack_lvl+0xe8/0x150 [ 295.039764][T10451] should_fail_ex+0x3eb/0x540 [ 295.039791][T10451] should_failslab+0xa8/0x100 [ 295.039815][T10451] __kmalloc_cache_noprof+0x9e/0x600 [ 295.039845][T10451] ? __kasan_kmalloc+0x93/0xb0 [ 295.039864][T10451] ? fuse_init_fs_context+0x55/0x210 [ 295.039888][T10451] ? fuse_init_fs_context+0x55/0x210 [ 295.039917][T10451] fuse_init_fs_context+0x55/0x210 [ 295.039945][T10451] alloc_fs_context+0x99e/0xd00 [ 295.039984][T10451] __se_sys_fsopen+0xa5/0x2c0 [ 295.040006][T10451] do_syscall_64+0x166/0x520 [ 295.040025][T10451] ? trace_irq_disable+0x3b/0x140 [ 295.040052][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.040073][T10451] ? clear_bhb_loop+0x70/0xc0 [ 295.040097][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.040116][T10451] RIP: 0033:0x7f7b9c79e159 [ 295.040135][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.040152][T10451] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 295.040174][T10451] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 295.040190][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 295.040203][T10451] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 295.040216][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.040228][T10451] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 295.040259][T10451] [ 295.496311][ T3108] usb 5-1: USB disconnect, device number 38 [ 295.645708][ T5619] Bluetooth: hci6: command 0x1003 tx timeout [ 295.645785][ T4931] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 297.346033][ T3108] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 297.508760][ T3108] usb 3-1: Using ep0 maxpacket: 8 [ 297.509495][ T3108] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 297.512337][ T3108] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 297.512362][ T3108] usb 3-1: config 0 has no interface number 0 [ 297.512399][ T3108] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 297.512420][ T3108] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 297.512446][ T3108] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 297.512469][ T3108] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 297.512494][ T3108] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 297.518963][ T3108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.518986][ T3108] usb 3-1: Product: syz [ 297.519000][ T3108] usb 3-1: Manufacturer: syz [ 297.519013][ T3108] usb 3-1: SerialNumber: syz [ 297.524668][ T3108] usb 3-1: config 0 descriptor?? [ 297.743027][ T3108] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 297.973626][ T5698] usb 3-1: USB disconnect, device number 36 [ 297.997505][T10508] 9pnet: p9_errstr2errno: server reported unknown error  [ 298.013405][T10510] FAULT_INJECTION: forcing a failure. [ 298.013405][T10510] name failslab, interval 1, probability 0, space 0, times 0 [ 298.013433][T10510] CPU: 1 UID: 0 PID: 10510 Comm: syz.4.1896 Not tainted syzkaller #0 PREEMPT(full) [ 298.013457][T10510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.013469][T10510] Call Trace: [ 298.013477][T10510] [ 298.013486][T10510] dump_stack_lvl+0xe8/0x150 [ 298.013518][T10510] should_fail_ex+0x3eb/0x540 [ 298.013544][T10510] should_failslab+0xa8/0x100 [ 298.013568][T10510] __kmalloc_noprof+0xf9/0x710 [ 298.013597][T10510] ? __register_sysctl_table+0x6f/0x1370 [ 298.013627][T10510] ? __register_sysctl_table+0x6f/0x1370 [ 298.013662][T10510] __register_sysctl_table+0x6f/0x1370 [ 298.013694][T10510] ? register_net_sysctl_sz+0x2ba/0x3f0 [ 298.013724][T10510] ipv6_sysctl_net_init+0x3cc/0x4b0 [ 298.013758][T10510] ops_init+0x35d/0x5d0 [ 298.013784][T10510] setup_net+0x118/0x350 [ 298.013814][T10510] ? __pfx_setup_net+0x10/0x10 [ 298.013843][T10510] ? down_read_killable+0x1b6/0x3b0 [ 298.013866][T10510] ? __ns_common_init+0x38a/0x590 [ 298.013893][T10510] copy_net_ns+0x536/0x770 [ 298.013925][T10510] create_new_namespaces+0x3f0/0x6b0 [ 298.013949][T10510] ? security_capable+0x7e/0x2c0 [ 298.013977][T10510] unshare_nsproxy_namespaces+0x144/0x190 [ 298.014003][T10510] ksys_unshare+0x5a7/0x950 [ 298.014032][T10510] ? __pfx_ksys_unshare+0x10/0x10 [ 298.014057][T10510] ? rcu_is_watching+0x16/0xb0 [ 298.014087][T10510] __x64_sys_unshare+0x38/0x50 [ 298.014111][T10510] do_syscall_64+0x166/0x520 [ 298.014128][T10510] ? trace_irq_disable+0x3b/0x140 [ 298.014155][T10510] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.014175][T10510] ? clear_bhb_loop+0x70/0xc0 [ 298.014199][T10510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.014217][T10510] RIP: 0033:0x7f125c79e159 [ 298.014235][T10510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.014252][T10510] RSP: 002b:00007f125d754028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.014273][T10510] RAX: ffffffffffffffda RBX: 00007f125ca25fa0 RCX: 00007f125c79e159 [ 298.014295][T10510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 298.014308][T10510] RBP: 00007f125c83506b R08: 0000000000000000 R09: 0000000000000000 [ 298.014320][T10510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.014332][T10510] R13: 00007f125ca26038 R14: 00007f125ca25fa0 R15: 00007ffcc05a7978 [ 298.014363][T10510] [ 298.395743][ T3108] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 298.546770][ T3108] usb 6-1: Using ep0 maxpacket: 8 [ 298.547455][ T3108] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.548499][ T3108] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 298.548548][ T3108] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.548571][ T3108] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.548595][ T3108] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.548617][ T3108] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.548657][ T3108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.779399][ T3108] usb 6-1: usb_control_msg returned -32 [ 298.779428][ T3108] usbtmc 6-1:16.0: can't read capabilities [ 298.823616][ T4931] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 298.987756][ T5711] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 299.135926][ T5711] usb 3-1: Using ep0 maxpacket: 32 [ 299.139602][ T5711] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 299.141000][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.141029][ T5711] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.141051][ T5711] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 299.141090][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.144894][ T5711] usb 3-1: config 0 descriptor?? [ 299.380550][ T10] usb 6-1: USB disconnect, device number 12 [ 299.647546][ T5711] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.003F/input/input61 [ 299.789143][ T5711] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.003F/input/input62 [ 299.842467][ T5711] kye 0003:0458:5011.003F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 299.861786][ T5711] usb 3-1: USB disconnect, device number 37 [ 300.070659][T10549] fido_id[10549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 300.267252][T10556] syzkaller1: entered promiscuous mode [ 300.267276][T10556] syzkaller1: entered allmulticast mode [ 300.598964][T10566] RDS: rds_bind could not find a transport for fe80::28, load rds_tcp or rds_rdma? [ 300.915636][ T5612] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 301.067311][ T5612] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 301.071045][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.071075][ T5612] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.071111][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.088123][ T5612] usb 3-1: config 0 descriptor?? [ 301.186963][ T3108] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 301.338978][ T3108] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 301.341830][ T3108] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.341852][ T3108] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 301.341895][ T3108] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.341944][ T3108] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 301.341987][ T3108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.387726][ T3108] usb 6-1: interface 1 not found [ 301.533084][ T5612] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 301.533202][ T5612] cm6533_jd 0003:0D8C:0022.0040: unknown main item tag 0x0 [ 301.553228][ T5612] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0040/input/input63 [ 301.576804][ T10] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 301.593808][ T5612] cm6533_jd 0003:0D8C:0022.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 301.661548][ T5612] usb 6-1: USB disconnect, device number 13 [ 301.742236][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.742287][ T10] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 301.745470][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.745493][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 301.745613][ T10] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 301.745648][ T10] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 301.745684][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 301.745709][ T10] usb 5-1: config 1 interface 1 has no altsetting 0 [ 301.828136][ T10] usb 5-1: string descriptor 0 read error: -22 [ 301.828272][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.838244][ T3108] usb 3-1: USB disconnect, device number 38 [ 301.866272][T10605] fido_id[10605]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 301.996298][T10609] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 302.265593][ T10] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 302.265625][ T10] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 302.265644][ T10] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 302.435661][ T2241] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 302.586441][ T2241] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.587901][ T2241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.587945][ T2241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.591272][ T2241] usb 1-1: config 0 descriptor?? [ 302.782836][ T10] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 302.840012][ T2241] usbhid 1-1:0.0: can't add hid device: -71 [ 302.840117][ T2241] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 302.862005][ T2241] usb 1-1: USB disconnect, device number 41 [ 302.880922][ T10] usb 5-1: USB disconnect, device number 39 [ 303.243253][T10630] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.358914][ T2241] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 303.506787][ T2241] usb 1-1: Using ep0 maxpacket: 16 [ 303.507481][ T2241] usb 1-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40 [ 303.508471][ T2241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.508515][ T2241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.513245][ T2241] usb 1-1: config 0 descriptor?? [ 303.669266][T10642] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1955'. [ 303.720397][ T2241] powermate: Expected payload of 3--6 bytes, found 8 bytes! [ 303.723803][ T2241] input: Griffin PowerMate as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 304.116441][ T2241] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 304.149030][ C0] powermate: config urb returned -71 [ 304.150588][ C0] powermate: config urb returned -71 [ 304.150785][ C0] powermate: config urb returned -71 [ 304.150975][ C0] powermate: config urb returned -71 [ 304.151660][ T5752] usb 1-1: USB disconnect, device number 42 [ 304.151696][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 304.268587][ T2241] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 304.270008][ T2241] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.270033][ T2241] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 304.272092][ T2241] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.272115][ T2241] usb 6-1: Product: syz [ 304.272129][ T2241] usb 6-1: Manufacturer: syz [ 304.272144][ T2241] usb 6-1: SerialNumber: syz [ 304.569348][ T2241] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 304.624043][T10669] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.765574][ C0] usblp0: nonzero read bulk status received: -71 [ 304.766805][ T5711] usb 6-1: USB disconnect, device number 14 [ 304.819140][T10669] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.910846][T10669] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.983660][T10651] usblp0: removed [ 305.036062][T10669] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.150434][ T7743] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.194641][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.196480][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.215691][ T174] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.195658][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 306.348018][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 306.351147][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.351170][ T10] usb 3-1: Product: syz [ 306.351185][ T10] usb 3-1: Manufacturer: syz [ 306.351200][ T10] usb 3-1: SerialNumber: syz [ 306.354253][ T10] usb 3-1: config 0 descriptor?? [ 306.433824][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1986'. [ 306.515615][ T5698] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 306.671948][ T5698] usb 6-1: Using ep0 maxpacket: 32 [ 306.672815][ T5698] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 306.675615][ T5698] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 306.675642][ T5698] usb 6-1: config 0 has no interface number 0 [ 306.707425][ T5698] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.707452][ T5698] usb 6-1: Product: syz [ 306.707467][ T5698] usb 6-1: Manufacturer: syz [ 306.707481][ T5698] usb 6-1: SerialNumber: syz [ 306.732827][ T5698] usb 6-1: config 0 descriptor?? [ 306.741074][ T5698] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 306.840221][ T2241] libceph: connect (1)127.0.0.1:6789 error -101 [ 306.840351][ T2241] libceph: mon0 (1)127.0.0.1:6789 connect error [ 306.953650][ T5698] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 306.972518][ T5698] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 306.975661][ T5612] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 307.095870][ T5698] libceph: connect (1)127.0.0.1:6789 error -101 [ 307.096061][ T5698] libceph: mon0 (1)127.0.0.1:6789 connect error [ 307.127412][ T5612] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 307.128381][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 307.128435][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.128458][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 307.128482][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 307.132824][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.132846][ T5612] usb 1-1: Product: syz [ 307.132860][ T5612] usb 1-1: Manufacturer: syz [ 307.132873][ T5612] usb 1-1: SerialNumber: syz [ 307.139031][ T5612] usb 1-1: config 0 descriptor?? [ 307.220408][ T10] usb 3-1: Firmware version (0.0) predates our first public release. [ 307.220433][ T10] usb 3-1: Please update to version 0.2 or newer [ 307.281189][ T10] usb 3-1: USB disconnect, device number 39 [ 307.403451][ T5612] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 307.418056][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 307.422579][ T5612] usb 6-1: USB disconnect, device number 15 [ 307.461799][ T5612] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 307.469243][ T5612] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 307.469903][ T5612] quatech2 6-1:0.51: device disconnected [ 307.595017][T10712] ceph: No mds server is up or the cluster is laggy [ 307.608458][ T10] libceph: connect (1)127.0.0.1:6789 error -101 [ 307.608621][ T10] libceph: mon0 (1)127.0.0.1:6789 connect error [ 307.617558][ T3108] usb 1-1: USB disconnect, device number 43 [ 307.866258][T10711] adutux: No device or device unplugged -19 [ 308.105652][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 308.256459][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.258372][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.258402][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 308.258427][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 308.258456][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.258496][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.263041][ T9] usb 3-1: config 0 descriptor?? [ 308.698647][T10739] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2000'. [ 308.750513][ T9] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 309.001379][ T5752] usb 3-1: USB disconnect, device number 40 [ 309.036667][T10744] FAULT_INJECTION: forcing a failure. [ 309.036667][T10744] name failslab, interval 1, probability 0, space 0, times 0 [ 309.036698][T10744] CPU: 0 UID: 0 PID: 10744 Comm: syz.5.2002 Not tainted syzkaller #0 PREEMPT(full) [ 309.036721][T10744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.036733][T10744] Call Trace: [ 309.036741][T10744] [ 309.036750][T10744] dump_stack_lvl+0xe8/0x150 [ 309.036782][T10744] should_fail_ex+0x3eb/0x540 [ 309.036816][T10744] should_failslab+0xa8/0x100 [ 309.036841][T10744] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 309.036872][T10744] ? __lock_acquire+0x747/0x2de0 [ 309.036902][T10744] ? __kernfs_new_node+0xa9/0x980 [ 309.036930][T10744] ? __kernfs_new_node+0xa9/0x980 [ 309.036962][T10744] kstrdup+0x42/0x100 [ 309.036992][T10744] __kernfs_new_node+0xa9/0x980 [ 309.037036][T10744] ? __pfx___kernfs_new_node+0x10/0x10 [ 309.037065][T10744] ? kernfs_root+0x1c/0x230 [ 309.037097][T10744] ? kernfs_root+0x1c/0x230 [ 309.037124][T10744] ? kernfs_root+0x1c/0x230 [ 309.037158][T10744] kernfs_new_node+0xea/0x140 [ 309.037194][T10744] kernfs_create_link+0xa7/0x200 [ 309.037222][T10744] sysfs_do_create_link_sd+0x83/0x110 [ 309.037258][T10744] device_add_class_symlinks+0x1cf/0x240 [ 309.037295][T10744] device_add+0x467/0xb80 [ 309.037321][T10744] add_one_compat_dev+0x416/0x640 [ 309.037354][T10744] rdma_dev_init_net+0x23e/0x2f0 [ 309.037383][T10744] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 309.037413][T10744] ? __kmalloc_noprof+0x1a6/0x710 [ 309.037439][T10744] ? ops_init+0x7b/0x5d0 [ 309.037466][T10744] ops_init+0x35d/0x5d0 [ 309.037495][T10744] setup_net+0x118/0x350 [ 309.037527][T10744] ? __pfx_setup_net+0x10/0x10 [ 309.037557][T10744] ? down_read_killable+0x1b6/0x3b0 [ 309.037581][T10744] ? __ns_common_init+0x38a/0x590 [ 309.037609][T10744] copy_net_ns+0x536/0x770 [ 309.037643][T10744] create_new_namespaces+0x3f0/0x6b0 [ 309.037669][T10744] ? security_capable+0x7e/0x2c0 [ 309.037699][T10744] unshare_nsproxy_namespaces+0x144/0x190 [ 309.037727][T10744] ksys_unshare+0x5a7/0x950 [ 309.037759][T10744] ? __pfx_ksys_unshare+0x10/0x10 [ 309.037788][T10744] ? rcu_is_watching+0x16/0xb0 [ 309.037823][T10744] __x64_sys_unshare+0x38/0x50 [ 309.037848][T10744] do_syscall_64+0x166/0x520 [ 309.037871][T10744] ? trace_irq_disable+0x3b/0x140 [ 309.037899][T10744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.037921][T10744] ? clear_bhb_loop+0x70/0xc0 [ 309.037946][T10744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.037967][T10744] RIP: 0033:0x7fdb5299e159 [ 309.037986][T10744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.038005][T10744] RSP: 002b:00007fdb50bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 309.038028][T10744] RAX: ffffffffffffffda RBX: 00007fdb52c25fa0 RCX: 00007fdb5299e159 [ 309.038044][T10744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 309.038058][T10744] RBP: 00007fdb52a3506b R08: 0000000000000000 R09: 0000000000000000 [ 309.038071][T10744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.038084][T10744] R13: 00007fdb52c26038 R14: 00007fdb52c25fa0 R15: 00007ffefc869b78 [ 309.038117][T10744] [ 309.215634][ T3108] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 309.379031][ T3108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 309.380034][ T3108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.380063][ T3108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.380083][ T3108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 309.380121][ T3108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.402929][ T3108] usb 1-1: config 0 descriptor?? [ 309.688084][ T5698] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 309.835877][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 309.837905][ T5698] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 309.839094][ T5698] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 309.839132][ T5698] usb 5-1: config 179 has no interface number 0 [ 309.839172][ T5698] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 309.839198][ T5698] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 309.839244][ T5698] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 309.839270][ T5698] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 309.839296][ T5698] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 309.839337][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.852207][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852240][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852265][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852290][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852315][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852340][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852366][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852390][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852416][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.852440][ T3108] plantronics 0003:047F:FFFF.0042: unknown main item tag 0x0 [ 309.861151][ T3108] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 309.986656][T10752] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 310.166270][ T5612] usb 1-1: USB disconnect, device number 44 [ 310.334676][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input66 [ 310.495713][ T5698] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 310.518326][ T5612] usb 5-1: USB disconnect, device number 40 [ 310.518369][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 310.518410][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 310.645584][ T5698] usb 3-1: Using ep0 maxpacket: 16 [ 310.646363][ T5698] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 310.647506][ T5698] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.647536][ T5698] usb 3-1: config 0 interface 0 has no altsetting 0 [ 310.651052][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.651075][ T5698] usb 3-1: Product: syz [ 310.651088][ T5698] usb 3-1: Manufacturer: syz [ 310.651102][ T5698] usb 3-1: SerialNumber: syz [ 310.655354][ T5698] usb 3-1: config 0 descriptor?? [ 310.970008][ T5698] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input67 [ 311.103222][T10779] syzkaller0 speed is unknown, defaulting to 1000 [ 311.135830][T10779] FAULT_INJECTION: forcing a failure. [ 311.135830][T10779] name failslab, interval 1, probability 0, space 0, times 0 [ 311.135863][T10779] CPU: 0 UID: 0 PID: 10779 Comm: syz.0.2017 Not tainted syzkaller #0 PREEMPT(full) [ 311.135887][T10779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 311.135901][T10779] Call Trace: [ 311.135909][T10779] [ 311.135918][T10779] dump_stack_lvl+0xe8/0x150 [ 311.135951][T10779] should_fail_ex+0x3eb/0x540 [ 311.135979][T10779] should_failslab+0xa8/0x100 [ 311.136004][T10779] __kmalloc_noprof+0xf9/0x710 [ 311.136034][T10779] ? __register_sysctl_table+0xc02/0x1370 [ 311.136064][T10779] ? __register_sysctl_table+0xc02/0x1370 [ 311.136101][T10779] __register_sysctl_table+0xc02/0x1370 [ 311.136151][T10779] __devinet_sysctl_register+0x36d/0x470 [ 311.136186][T10779] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 311.136211][T10779] ? copy_net_ns+0x536/0x770 [ 311.136236][T10779] ? create_new_namespaces+0x3f0/0x6b0 [ 311.136256][T10779] ? unshare_nsproxy_namespaces+0x144/0x190 [ 311.136277][T10779] ? ksys_unshare+0x5a7/0x950 [ 311.136302][T10779] ? do_syscall_64+0x166/0x520 [ 311.136319][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.136338][T10779] ? lockdep_hardirqs_on+0x7b/0x110 [ 311.136368][T10779] ? neigh_parms_alloc+0x404/0x500 [ 311.136400][T10779] devinet_sysctl_register+0x187/0x200 [ 311.136426][T10779] inetdev_init+0x29e/0x4d0 [ 311.136451][T10779] inetdev_event+0x307/0x15e0 [ 311.136473][T10779] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 311.136498][T10779] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 311.136530][T10779] ? __pfx_inetdev_event+0x10/0x10 [ 311.136577][T10779] notifier_call_chain+0x1a5/0x3d0 [ 311.136615][T10779] register_netdevice+0x189f/0x1eb0 [ 311.136655][T10779] ? __pfx_register_netdevice+0x10/0x10 [ 311.136678][T10779] ? alloc_netdev_mqs+0xd44/0x12a0 [ 311.136711][T10779] ? alloc_netdev_mqs+0xef9/0x12a0 [ 311.136736][T10779] ? __ip_tunnel_create+0x3bb/0x550 [ 311.136768][T10779] __ip_tunnel_create+0x3e8/0x550 [ 311.136798][T10779] ? __pfx___ip_tunnel_create+0x10/0x10 [ 311.136827][T10779] ? net_generic+0x1e/0x240 [ 311.136858][T10779] ip_tunnel_init_net+0x2e5/0x820 [ 311.136891][T10779] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 311.136924][T10779] ? __kmalloc_noprof+0x1a6/0x710 [ 311.136951][T10779] ? ops_init+0x7b/0x5d0 [ 311.136977][T10779] ops_init+0x35d/0x5d0 [ 311.137006][T10779] setup_net+0x118/0x350 [ 311.137038][T10779] ? __pfx_setup_net+0x10/0x10 [ 311.137067][T10779] ? down_read_killable+0x1b6/0x3b0 [ 311.137090][T10779] ? __ns_common_init+0x38a/0x590 [ 311.137125][T10779] copy_net_ns+0x536/0x770 [ 311.137158][T10779] create_new_namespaces+0x3f0/0x6b0 [ 311.137184][T10779] ? security_capable+0x7e/0x2c0 [ 311.137214][T10779] unshare_nsproxy_namespaces+0x144/0x190 [ 311.137240][T10779] ksys_unshare+0x5a7/0x950 [ 311.137272][T10779] ? __pfx_ksys_unshare+0x10/0x10 [ 311.137295][T10779] ? rcu_is_watching+0x16/0xb0 [ 311.137326][T10779] __x64_sys_unshare+0x38/0x50 [ 311.137351][T10779] do_syscall_64+0x166/0x520 [ 311.137371][T10779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.137392][T10779] ? clear_bhb_loop+0x70/0xc0 [ 311.137417][T10779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.137437][T10779] RIP: 0033:0x7f835199e159 [ 311.137457][T10779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 311.137474][T10779] RSP: 002b:00007f834fbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 311.137496][T10779] RAX: ffffffffffffffda RBX: 00007f8351c25fa0 RCX: 00007f835199e159 [ 311.137512][T10779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 311.137524][T10779] RBP: 00007f8351a3506b R08: 0000000000000000 R09: 0000000000000000 [ 311.137537][T10779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.137549][T10779] R13: 00007f8351c26038 R14: 00007f8351c25fa0 R15: 00007ffdda6c6ba8 [ 311.137582][T10779] [ 311.137684][T10779] sysctl could not get directory: /net/ipv4/conf/gretap0 -12 [ 311.389001][ T5698] rc_core: IR keymap rc-imon-pad not found [ 311.389020][ T5698] Registered IR keymap rc-empty [ 311.389128][ T5698] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 311.389145][ T5698] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 311.601864][ T5698] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 311.604587][ T5698] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input68 [ 311.642750][ T5698] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:41> initialized [ 311.843905][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 311.854887][ T5698] usb 3-1: USB disconnect, device number 41 [ 311.936023][ T5792] udevd[5792]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 311.936132][ T5792] udevd[5792]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 312.034161][T10792] FAULT_INJECTION: forcing a failure. [ 312.034161][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 312.034191][T10792] CPU: 1 UID: 0 PID: 10792 Comm: syz.0.2022 Not tainted syzkaller #0 PREEMPT(full) [ 312.034216][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.034229][T10792] Call Trace: [ 312.034237][T10792] [ 312.034246][T10792] dump_stack_lvl+0xe8/0x150 [ 312.034277][T10792] should_fail_ex+0x3eb/0x540 [ 312.034304][T10792] should_failslab+0xa8/0x100 [ 312.034326][T10792] ? prepare_creds+0x30/0x820 [ 312.034361][T10792] kmem_cache_alloc_noprof+0x9c/0x600 [ 312.034391][T10792] ? prepare_creds+0x30/0x820 [ 312.034426][T10792] prepare_creds+0x30/0x820 [ 312.034460][T10792] cap_task_prctl+0x221/0xa40 [ 312.034484][T10792] security_task_prctl+0xf6/0x190 [ 312.034514][T10792] __se_sys_prctl+0xbf/0x1910 [ 312.034558][T10792] ? __pfx___se_sys_prctl+0x10/0x10 [ 312.034594][T10792] ? __x64_sys_prctl+0x20/0xc0 [ 312.034626][T10792] do_syscall_64+0x166/0x520 [ 312.034644][T10792] ? trace_irq_disable+0x3b/0x140 [ 312.034672][T10792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.034693][T10792] ? clear_bhb_loop+0x70/0xc0 [ 312.034718][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.034737][T10792] RIP: 0033:0x7f835199e159 [ 312.034756][T10792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.034774][T10792] RSP: 002b:00007f834fbf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 312.034794][T10792] RAX: ffffffffffffffda RBX: 00007f8351c25fa0 RCX: 00007f835199e159 [ 312.034810][T10792] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000018 [ 312.034822][T10792] RBP: 00007f8351a3506b R08: 0000000000000000 R09: 0000000000000000 [ 312.034835][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.034848][T10792] R13: 00007f8351c26038 R14: 00007f8351c25fa0 R15: 00007ffdda6c6ba8 [ 312.034878][T10792] [ 312.738694][T10807] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare [ 312.779944][T10807] CIFS: VFS: Error connecting to socket. Aborting operation. [ 312.779992][T10807] CIFS: VFS: cifs_mount failed w/return code = -111 [ 314.727033][T10837] synth uevent: /devices/platform/pcspkr: unknown uevent action string [ 314.727104][T10837] platform pcspkr: uevent: failed to send synthetic uevent: -22 [ 314.766103][ T4931] Bluetooth: hci1: command 0x0c1a tx timeout [ 314.766209][T10804] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 315.583740][T10804] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 315.584115][T10804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.584337][T10804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.585173][T10804] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.102036][T10862] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 316.190900][T10864] jffs2: notice: (10864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 316.627680][ T5698] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 316.775595][ T5698] usb 3-1: Using ep0 maxpacket: 8 [ 316.779002][ T5698] usb 3-1: unable to get BOS descriptor or descriptor too short [ 316.779048][ T5698] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 316.779973][ T5698] usb 3-1: config 100 has an invalid interface number: 173 but max is 0 [ 316.779995][ T5698] usb 3-1: config 100 has no interface number 0 [ 316.780035][ T5698] usb 3-1: config 100 interface 173 altsetting 142 bulk endpoint 0xE has invalid maxpacket 64 [ 316.780060][ T5698] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 316.780086][ T5698] usb 3-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 316.780116][ T5698] usb 3-1: config 100 interface 173 has no altsetting 0 [ 316.783447][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.783470][ T5698] usb 3-1: Product: syz [ 316.783484][ T5698] usb 3-1: Manufacturer: syz [ 316.783498][ T5698] usb 3-1: SerialNumber: syz [ 316.809352][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 316.849835][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 316.909210][T10873] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 316.955909][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 316.958357][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 316.958406][ T9] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 316.959610][ T9] usb 6-1: config 4 interface 0 has no altsetting 0 [ 316.963139][ T9] usb 6-1: string descriptor 0 read error: -22 [ 316.964690][ T9] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 317.028261][ T9] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 317.047588][ T9] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 317.048030][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 317.048124][ T9] usb 6-1: media controller created [ 317.091955][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.092022][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.109262][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.177591][ T5698] metro_usb 3-1:100.173: interrupt-out endpoint missing [ 317.210504][ T5698] usb 3-1: USB disconnect, device number 42 [ 317.645883][ T4931] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.645921][ T4931] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.645947][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.218529][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 318.221016][T10878] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 318.337765][ T9] usb 6-1: USB disconnect, device number 16 [ 318.511686][T10919] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2074'. [ 318.584500][T10923] overlayfs: upper fs does not support tmpfile. [ 318.846984][T10931] FAULT_INJECTION: forcing a failure. [ 318.846984][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 318.847016][T10931] CPU: 0 UID: 0 PID: 10931 Comm: syz.2.2080 Not tainted syzkaller #0 PREEMPT(full) [ 318.847040][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.847053][T10931] Call Trace: [ 318.847062][T10931] [ 318.847070][T10931] dump_stack_lvl+0xe8/0x150 [ 318.847103][T10931] should_fail_ex+0x3eb/0x540 [ 318.847130][T10931] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 318.847157][T10931] should_failslab+0xa8/0x100 [ 318.847181][T10931] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 318.847206][T10931] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 318.847237][T10931] ? shmem_alloc_inode+0x28/0x40 [ 318.847262][T10931] ? shmem_alloc_inode+0x28/0x40 [ 318.847293][T10931] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 318.847319][T10931] shmem_alloc_inode+0x28/0x40 [ 318.847345][T10931] alloc_inode+0x6a/0x1b0 [ 318.847370][T10931] new_inode+0x1f/0x170 [ 318.847393][T10931] ? shmem_get_inode+0x29a/0x1030 [ 318.847421][T10931] shmem_get_inode+0x3a4/0x1030 [ 318.847456][T10931] ? __pfx_shmem_get_inode+0x10/0x10 [ 318.847487][T10931] ? __vm_enough_memory+0x11a/0x380 [ 318.847512][T10931] __shmem_file_setup+0x20b/0x370 [ 318.847537][T10931] ? __pfx___shmem_file_setup+0x10/0x10 [ 318.847558][T10931] ? __kmalloc_cache_noprof+0x148/0x600 [ 318.847585][T10931] ? newseg+0x287/0xc70 [ 318.847605][T10931] ? newseg+0x287/0xc70 [ 318.847632][T10931] newseg+0x4c1/0xc70 [ 318.847663][T10931] ? __pfx_newseg+0x10/0x10 [ 318.847694][T10931] ipcget+0x1db/0xf20 [ 318.847717][T10931] ? do_futex+0x458/0x4e0 [ 318.847745][T10931] ? __pfx_do_futex+0x10/0x10 [ 318.847767][T10931] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.847789][T10931] ? __pfx_ipcget+0x10/0x10 [ 318.847815][T10931] ? __se_sys_futex+0x3a8/0x450 [ 318.847841][T10931] __x64_sys_shmget+0x140/0x190 [ 318.847867][T10931] ? __pfx___x64_sys_shmget+0x10/0x10 [ 318.847902][T10931] do_syscall_64+0x166/0x520 [ 318.847927][T10931] ? trace_irq_disable+0x3b/0x140 [ 318.847958][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.847979][T10931] ? clear_bhb_loop+0x70/0xc0 [ 318.848004][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.848024][T10931] RIP: 0033:0x7f7b9c79e159 [ 318.848045][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.848062][T10931] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 318.848085][T10931] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 318.848101][T10931] RDX: 0000000000000400 RSI: 0000000000004000 RDI: 0000000000000000 [ 318.848114][T10931] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 318.848127][T10931] R10: 0000200000002000 R11: 0000000000000246 R12: 0000000000000000 [ 318.848140][T10931] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 318.848172][T10931] [ 319.076544][T10933] input: syz0 as /devices/virtual/input/input69 [ 319.586324][T10949] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2087'. [ 319.627171][ T5698] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 319.886857][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 320.213310][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 320.213343][T10966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2093'. [ 320.325343][T10970] netlink: 'syz.0.2095': attribute type 12 has an invalid length. [ 320.337454][T10970] netlink: 'syz.0.2095': attribute type 4 has an invalid length. [ 320.396418][ T5698] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 320.687763][T10951] ceph: No mds server is up or the cluster is laggy [ 320.843317][T10980] netlink: 408 bytes leftover after parsing attributes in process `syz.5.2100'. [ 321.357787][ T5698] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 321.508575][ T5698] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 321.511215][ T5698] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.546291][ T5698] usb 1-1: config 0 descriptor?? [ 321.766625][ T5698] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 322.009552][ T5698] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 322.009577][ T5698] [drm] Initialized udl on minor 1 [ 323.135973][ T9] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 323.285971][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 323.286832][ T9] usb 5-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 323.289725][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 323.289754][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 323.289811][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.343448][ T9] usb 5-1: config 0 descriptor?? [ 323.569948][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 323.570076][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 323.590263][ T9] usb 5-1: USB disconnect, device number 41 [ 323.752837][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2121'. [ 323.981541][T11034] FAULT_INJECTION: forcing a failure. [ 323.981541][T11034] name failslab, interval 1, probability 0, space 0, times 0 [ 323.981572][T11034] CPU: 1 UID: 0 PID: 11034 Comm: syz.5.2125 Not tainted syzkaller #0 PREEMPT(full) [ 323.981596][T11034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.981608][T11034] Call Trace: [ 323.981616][T11034] [ 323.981624][T11034] dump_stack_lvl+0xe8/0x150 [ 323.981656][T11034] should_fail_ex+0x3eb/0x540 [ 323.981682][T11034] should_failslab+0xa8/0x100 [ 323.981707][T11034] __kmalloc_cache_noprof+0x9e/0x600 [ 323.981739][T11034] ? __se_sys_mincore+0x10a/0x660 [ 323.981767][T11034] ? __se_sys_mincore+0x10a/0x660 [ 323.981802][T11034] __se_sys_mincore+0x10a/0x660 [ 323.981839][T11034] do_syscall_64+0x166/0x520 [ 323.981858][T11034] ? trace_irq_disable+0x3b/0x140 [ 323.981889][T11034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.981910][T11034] ? clear_bhb_loop+0x70/0xc0 [ 323.981934][T11034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.981954][T11034] RIP: 0033:0x7fdb5299e159 [ 323.981972][T11034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.981991][T11034] RSP: 002b:00007fdb50bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 323.982013][T11034] RAX: ffffffffffffffda RBX: 00007fdb52c25fa0 RCX: 00007fdb5299e159 [ 323.982029][T11034] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000000ef000 [ 323.982043][T11034] RBP: 00007fdb52a3506b R08: 0000000000000000 R09: 0000000000000000 [ 323.982056][T11034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.982068][T11034] R13: 00007fdb52c26038 R14: 00007fdb52c25fa0 R15: 00007ffefc869b78 [ 323.982099][T11034] [ 324.595445][ T3108] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 324.748362][ T3108] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 324.751657][ T3108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.756172][ T3108] usb 6-1: config 0 descriptor?? [ 324.783531][ T3108] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 324.930724][T11056] syzkaller1: entered promiscuous mode [ 324.930745][T11056] syzkaller1: entered allmulticast mode [ 325.191743][ T3108] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 325.421695][T11061] FAULT_INJECTION: forcing a failure. [ 325.421695][T11061] name failslab, interval 1, probability 0, space 0, times 0 [ 325.421750][T11061] CPU: 1 UID: 0 PID: 11061 Comm: syz.2.2137 Not tainted syzkaller #0 PREEMPT(full) [ 325.421775][T11061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.421787][T11061] Call Trace: [ 325.421796][T11061] [ 325.421804][T11061] dump_stack_lvl+0xe8/0x150 [ 325.421843][T11061] should_fail_ex+0x3eb/0x540 [ 325.421873][T11061] should_failslab+0xa8/0x100 [ 325.421896][T11061] ? alloc_empty_file+0x5b/0x1d0 [ 325.421919][T11061] kmem_cache_alloc_noprof+0x9c/0x600 [ 325.421949][T11061] ? alloc_empty_file+0x5b/0x1d0 [ 325.421977][T11061] alloc_empty_file+0x5b/0x1d0 [ 325.422000][T11061] dentry_open+0x44/0xa0 [ 325.422022][T11061] open_detached_copy+0x3ee/0x530 [ 325.422058][T11061] vfs_open_tree+0x34f/0x3c0 [ 325.422091][T11061] ? __pfx_vfs_open_tree+0x10/0x10 [ 325.422129][T11061] __x64_sys_open_tree+0x96/0x110 [ 325.422154][T11061] do_syscall_64+0x166/0x520 [ 325.422172][T11061] ? trace_irq_disable+0x3b/0x140 [ 325.422200][T11061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.422221][T11061] ? clear_bhb_loop+0x70/0xc0 [ 325.422246][T11061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.422267][T11061] RIP: 0033:0x7f7b9c79e159 [ 325.422287][T11061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.422304][T11061] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 325.422326][T11061] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 325.422341][T11061] RDX: 0000000000089901 RSI: 0000200000000100 RDI: 0000000000000003 [ 325.422355][T11061] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 325.422368][T11061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.422380][T11061] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 325.422412][T11061] [ 325.599825][ T3108] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 325.818568][ T3108] usb 6-1: USB disconnect, device number 17 [ 326.190941][T11075] loop3: detected capacity change from 0 to 7 [ 326.201899][T11075] Dev loop3: unable to read RDB block 7 [ 326.201941][T11075] loop3: unable to read partition table [ 326.202123][T11075] loop3: partition table beyond EOD, truncated [ 326.203710][T11075] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 326.411927][T11078] FAULT_INJECTION: forcing a failure. [ 326.411927][T11078] name failslab, interval 1, probability 0, space 0, times 0 [ 326.411957][T11078] CPU: 1 UID: 0 PID: 11078 Comm: syz.2.2146 Not tainted syzkaller #0 PREEMPT(full) [ 326.411981][T11078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.411993][T11078] Call Trace: [ 326.412001][T11078] [ 326.412009][T11078] dump_stack_lvl+0xe8/0x150 [ 326.412041][T11078] should_fail_ex+0x3eb/0x540 [ 326.412068][T11078] should_failslab+0xa8/0x100 [ 326.412091][T11078] __kmalloc_cache_noprof+0x9e/0x600 [ 326.412123][T11078] ? proc_thread_self_get_link+0xfc/0x190 [ 326.412150][T11078] ? proc_thread_self_get_link+0xfc/0x190 [ 326.412181][T11078] ? __task_pid_nr_ns+0x399/0x470 [ 326.412213][T11078] proc_thread_self_get_link+0xfc/0x190 [ 326.412242][T11078] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 326.412272][T11078] pick_link+0x72a/0xfd0 [ 326.412305][T11078] step_into_slowpath+0x58a/0x820 [ 326.412333][T11078] ? __pfx_step_into_slowpath+0x10/0x10 [ 326.412367][T11078] link_path_walk+0xd5e/0x1910 [ 326.412410][T11078] path_openat+0x1c4/0x1e40 [ 326.412455][T11078] do_file_open+0x23e/0x4a0 [ 326.412489][T11078] ? __pfx_do_file_open+0x10/0x10 [ 326.412536][T11078] ? _raw_spin_unlock+0x28/0x50 [ 326.412561][T11078] ? alloc_fd+0x651/0x6c0 [ 326.412597][T11078] do_sys_openat2+0x115/0x200 [ 326.412620][T11078] ? __se_sys_futex+0x3a8/0x450 [ 326.412640][T11078] ? __pfx_do_sys_openat2+0x10/0x10 [ 326.412666][T11078] ? rcu_is_watching+0x16/0xb0 [ 326.412692][T11078] __x64_sys_open+0x11e/0x150 [ 326.412717][T11078] do_syscall_64+0x166/0x520 [ 326.412735][T11078] ? trace_irq_disable+0x3b/0x140 [ 326.412772][T11078] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.412792][T11078] ? clear_bhb_loop+0x70/0xc0 [ 326.412817][T11078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.412836][T11078] RIP: 0033:0x7f7b9c79e159 [ 326.412855][T11078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.412873][T11078] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 326.412895][T11078] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 326.412910][T11078] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000200000000180 [ 326.412923][T11078] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 326.412936][T11078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.412949][T11078] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 326.412979][T11078] [ 326.938375][T11093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2153'. [ 327.088872][ T5698] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 327.089300][ T5698] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.113530][ T5711] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.126265][ T5698] usb 1-1: USB disconnect, device number 45 [ 327.141203][ T5711] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.141389][ T5711] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.171107][T11096] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 327.781564][T11117] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2164'. [ 327.815717][ T5612] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 327.976582][ T5612] usb 6-1: Using ep0 maxpacket: 8 [ 327.978219][ T5612] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 327.981702][ T5612] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 327.981725][ T5612] usb 6-1: config 0 has no interface number 0 [ 327.981760][ T5612] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 327.981782][ T5612] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 327.981805][ T5612] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 327.981829][ T5612] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 327.981868][ T5612] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.991651][ T5612] usb 6-1: config 0 descriptor?? [ 328.054097][ T5612] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 328.151275][T11122] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2166: No space for directory leaf checksum. Please run e2fsck -D. [ 328.151319][T11122] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2166: checksumming directory block 0 [ 328.151917][T11122] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 328.152044][T11122] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2166: No space for directory leaf checksum. Please run e2fsck -D. [ 328.152069][T11122] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2166: checksumming directory block 0 [ 328.152264][T11122] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 328.153059][T11122] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2166: No space for directory leaf checksum. Please run e2fsck -D. [ 328.153087][T11122] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2166: checksumming directory block 0 [ 328.153944][T11122] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 328.154073][T11122] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.4.2166: No space for directory leaf checksum. Please run e2fsck -D. [ 328.154098][T11122] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.4.2166: checksumming directory block 0 [ 328.154277][T11122] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 328.154308][T11122] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 328.154324][T11122] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 328.326496][ T5612] usb 6-1: USB disconnect, device number 18 [ 328.343770][ T5612] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 329.315594][ T30] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 329.465595][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 329.467365][ T30] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 329.468336][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 329.468380][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.476032][ T30] usb 6-1: config 0 descriptor?? [ 329.709475][ T30] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 329.763867][T11160] bond0: option arp_interval: invalid value () [ 329.763891][T11160] bond0: option arp_interval: allowed values 0 - 2147483647 [ 329.936046][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 329.936082][ T30] usb 6-1: USB disconnect, device number 19 [ 329.984740][ T5619] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 330.035317][T11168] Set syz1 is full, maxelem 1029 reached [ 330.073470][T11162] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 330.073689][T11162] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 330.073846][T11162] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 330.125657][T11162] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.125898][T11162] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.555712][ T5698] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 330.706901][ T5698] usb 5-1: Using ep0 maxpacket: 8 [ 330.708455][ T5698] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 330.710673][ T5698] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 330.710717][ T5698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 330.710742][ T5698] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 330.710763][ T5698] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 330.710799][ T5698] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.011750][ T5698] usb 5-1: GET_CAPABILITIES returned 0 [ 331.011798][ T5698] usbtmc 5-1:16.0: can't read capabilities [ 331.055666][ T30] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 331.208627][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 331.213662][ T30] usb 1-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 331.214812][ T30] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 331.214843][ T30] usb 1-1: config 0 interface 0 has no altsetting 0 [ 331.214874][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.240044][ T30] usb 1-1: config 0 descriptor?? [ 331.243056][ T3108] usb 5-1: USB disconnect, device number 42 [ 331.501499][T11197] syzkaller0 speed is unknown, defaulting to 1000 [ 331.537828][ T31] audit: type=1400 audit(1789788669.436:10): apparmor="STATUS" operation="profile_load" info="not privileged for target profile" error=-13 profile="unconfined" pid=11200 comm="syz.5.2201" [ 331.682013][ T30] hid_parser_main: 5 callbacks suppressed [ 331.682037][ T30] lenovo 0003:17EF:6009.0043: unknown main item tag 0x2 [ 331.682068][ T30] lenovo 0003:17EF:6009.0043: unknown main item tag 0x6 [ 331.682142][ T30] lenovo 0003:17EF:6009.0043: ignoring exceeding usage max [ 331.703677][ T30] lenovo 0003:17EF:6009.0043: hidraw0: USB HID v40.81 Device [HID 17ef:6009] on usb-dummy_hcd.0-1/input0 [ 331.961886][ T30] usb 1-1: USB disconnect, device number 46 [ 331.965634][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout [ 332.127410][ T4931] Bluetooth: hci2: command 0x0c1a tx timeout [ 332.127448][ T4931] Bluetooth: hci0: command 0x0c1a tx timeout [ 332.127503][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout [ 332.205952][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 332.338518][T11218] FAULT_INJECTION: forcing a failure. [ 332.338518][T11218] name failslab, interval 1, probability 0, space 0, times 0 [ 332.338549][T11218] CPU: 0 UID: 0 PID: 11218 Comm: syz.5.2208 Not tainted syzkaller #0 PREEMPT(full) [ 332.338573][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.338585][T11218] Call Trace: [ 332.338594][T11218] [ 332.338602][T11218] dump_stack_lvl+0xe8/0x150 [ 332.338635][T11218] should_fail_ex+0x3eb/0x540 [ 332.338662][T11218] ? dup_task_struct+0x52/0xa00 [ 332.338686][T11218] should_failslab+0xa8/0x100 [ 332.338708][T11218] ? dup_task_struct+0x52/0xa00 [ 332.338729][T11218] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 332.338764][T11218] ? cgroup1_freezing+0x20/0x350 [ 332.338788][T11218] ? cgroup1_freezing+0x20/0x350 [ 332.338810][T11218] ? cgroup1_freezing+0x20/0x350 [ 332.338831][T11218] ? dup_task_struct+0x52/0xa00 [ 332.338859][T11218] dup_task_struct+0x52/0xa00 [ 332.338883][T11218] ? _raw_spin_unlock_irq+0x23/0x50 [ 332.338915][T11218] copy_process+0x81b/0x43e0 [ 332.338945][T11218] ? __pfx___futex_wait+0x10/0x10 [ 332.338983][T11218] ? try_to_wake_up+0x8c5/0x14d0 [ 332.339006][T11218] ? __pfx_copy_process+0x10/0x10 [ 332.339041][T11218] kernel_clone+0x2d7/0x940 [ 332.339070][T11218] ? __pfx_kernel_clone+0x10/0x10 [ 332.339104][T11218] ? do_futex+0x3e7/0x4e0 [ 332.339131][T11218] __x64_sys_clone+0x1b6/0x230 [ 332.339159][T11218] ? __pfx___x64_sys_clone+0x10/0x10 [ 332.339198][T11218] ? rcu_is_watching+0x16/0xb0 [ 332.339229][T11218] do_syscall_64+0x166/0x520 [ 332.339247][T11218] ? trace_irq_disable+0x3b/0x140 [ 332.339274][T11218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.339295][T11218] ? clear_bhb_loop+0x70/0xc0 [ 332.339319][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.339339][T11218] RIP: 0033:0x7fdb5299e159 [ 332.339358][T11218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.339375][T11218] RSP: 002b:00007fdb50bf5fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 332.339398][T11218] RAX: ffffffffffffffda RBX: 00007fdb52c25fa0 RCX: 00007fdb5299e159 [ 332.339413][T11218] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 332.339426][T11218] RBP: 00007fdb52a3506b R08: 0000000000000000 R09: 0000000000000000 [ 332.339439][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 332.339451][T11218] R13: 00007fdb52c26038 R14: 00007fdb52c25fa0 R15: 00007ffefc869b78 [ 332.339482][T11218] [ 332.935626][ T30] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 333.121287][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 333.125660][ T30] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 333.132605][ T30] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 333.132661][ T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 333.132685][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 333.132710][ T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 333.164372][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.164397][ T30] usb 3-1: Product: syz [ 333.164411][ T30] usb 3-1: Manufacturer: syz [ 333.164424][ T30] usb 3-1: SerialNumber: syz [ 333.167308][ T30] usb 3-1: config 0 descriptor?? [ 333.179875][T11225] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 333.405056][ T30] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 333.471247][ T30] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input70 [ 333.525628][ T5698] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 333.644925][ C1] powermate: config urb returned -71 [ 333.645128][ C1] powermate: config urb returned -71 [ 333.645320][ C1] powermate: config urb returned -71 [ 333.645442][ T9] usb 3-1: USB disconnect, device number 43 [ 333.645560][ C1] powermate: config urb returned -71 [ 333.645597][ C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 333.679465][ T5698] usb 5-1: Using ep0 maxpacket: 32 [ 333.688775][ T5698] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 333.694869][ T5698] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 333.694891][ T5698] usb 5-1: config 0 has no interface number 0 [ 333.721055][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.721081][ T5698] usb 5-1: Product: syz [ 333.721095][ T5698] usb 5-1: Manufacturer: syz [ 333.721110][ T5698] usb 5-1: SerialNumber: syz [ 333.752749][ T5698] usb 5-1: config 0 descriptor?? [ 333.915741][ T30] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 334.045608][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 334.066276][ T30] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 334.067194][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.067247][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.067284][ T30] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 334.067304][ T30] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 334.069184][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.069208][ T30] usb 1-1: Product: syz [ 334.069223][ T30] usb 1-1: Manufacturer: syz [ 334.069236][ T30] usb 1-1: SerialNumber: syz [ 334.229888][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 334.229939][ T10] usb 6-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 334.231117][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.231139][ T10] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 334.231181][ T10] usb 6-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 334.231239][ T10] usb 6-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 334.231277][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 334.231302][ T10] usb 6-1: config 1 interface 1 has no altsetting 0 [ 334.234995][ T10] usb 6-1: string descriptor 0 read error: -22 [ 334.235142][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.759225][ T10] usb 6-1: 2:0: cannot get min/max values for control 2 (id 2) [ 334.759258][ T10] usb 6-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 334.759275][ T10] usb 6-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 334.794783][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 334.794812][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 334.819947][ T5698] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 334.820211][ T5698] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 334.847082][ T5698] usb 5-1: USB disconnect, device number 43 [ 335.126603][ T30] cdc_ncm 1-1:1.0: bind() failure [ 335.146534][ T30] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 335.148592][ T30] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 335.150185][ T30] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 335.183859][ T30] usb 1-1: USB disconnect, device number 47 [ 335.363786][ T10] usb 6-1: USB disconnect, device number 20 [ 335.784269][T11261] input: syz0 as /devices/virtual/input/input71 [ 336.048658][T11271] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 336.083462][ T31] audit: type=1400 audit(1789788673.986:11): apparmor="STATUS" info="invalid profile format" error=-93 profile="unconfined" pid=11272 comm="syz.0.2234" [ 336.423105][T11283] mmap: syz.5.2239 (11283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 337.022558][T11301] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 337.267151][ T30] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 337.315593][ T5612] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 337.323620][ T5698] hid-generic 0000:0000:0000.0044: unknown main item tag 0x0 [ 337.350453][ T5698] hid-generic 0000:0000:0000.0044: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.427349][ T30] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 337.429289][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 337.429315][ T30] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 337.436623][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.436645][ T30] usb 6-1: Product: syz [ 337.436659][ T30] usb 6-1: Manufacturer: syz [ 337.436672][ T30] usb 6-1: SerialNumber: syz [ 337.487297][ T5612] usb 3-1: Using ep0 maxpacket: 32 [ 337.488142][ T5612] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 337.489606][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.495983][ T5612] usb 3-1: config 0 descriptor?? [ 337.514448][ T5612] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 337.724910][ T30] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 338.162288][ T5752] usb 6-1: USB disconnect, device number 21 [ 338.183540][ T5752] usblp0: removed [ 338.534025][ T5612] gspca_vc032x: reg_w err -71 [ 338.534054][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534065][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534073][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534081][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534088][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534096][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534103][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534110][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534117][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534125][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534134][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534142][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534151][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534159][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534167][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534174][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534181][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534188][ T5612] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.534196][ T5612] gspca_vc032x: Unknown sensor... [ 338.534259][ T5612] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 338.545080][ T5612] usb 3-1: USB disconnect, device number 44 [ 338.725610][ T5752] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 338.885881][ T5752] usb 1-1: Using ep0 maxpacket: 16 [ 338.886664][ T5752] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 338.887722][ T5752] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 338.887744][ T5752] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.887763][ T5752] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 338.889680][ T5752] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.889693][ T5752] usb 1-1: Product: syz [ 338.889701][ T5752] usb 1-1: Manufacturer: syz [ 338.889708][ T5752] usb 1-1: SerialNumber: syz [ 338.907015][ T5752] usb 1-1: 0:2 : does not exist [ 339.437884][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 339.585569][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 339.587721][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.587767][ T10] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 339.588919][ T10] usb 5-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config [ 339.588942][ T10] usb 5-1: config 140 has 1 interface, different from the descriptor's value: 2 [ 339.591302][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.591325][ T10] usb 5-1: Product: syz [ 339.591339][ T10] usb 5-1: Manufacturer: syz [ 339.591353][ T10] usb 5-1: SerialNumber: syz [ 339.665682][ T9] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 339.715641][ T5698] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 339.817027][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 339.818166][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.818209][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 339.818232][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 339.820441][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.820464][ T9] usb 6-1: Product: syz [ 339.820479][ T9] usb 6-1: Manufacturer: syz [ 339.820496][ T9] usb 6-1: SerialNumber: syz [ 339.824569][ T9] usb 6-1: config 0 descriptor?? [ 339.869455][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 339.878462][ T5698] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 339.919833][ T5698] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 339.919860][ T5698] usb 3-1: config 0 has no interface number 0 [ 339.939318][ T5752] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 339.949586][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.949609][ T5698] usb 3-1: Product: syz [ 339.949624][ T5698] usb 3-1: Manufacturer: syz [ 339.949637][ T5698] usb 3-1: SerialNumber: syz [ 339.955098][ T5698] usb 3-1: config 0 descriptor?? [ 339.993515][ T5698] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 340.062200][ T5752] usb 1-1: USB disconnect, device number 48 [ 340.184458][ T5698] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 340.202546][ T5698] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 340.242647][ T9] usb 6-1: USB disconnect, device number 22 [ 340.396513][ T10] usb 5-1: reset high-speed USB device number 44 using dummy_hcd [ 340.431262][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.588073][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 340.589144][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.589160][ T5752] usb 3-1: USB disconnect, device number 45 [ 340.625121][ T10] usb 5-1: device firmware changed [ 340.634763][ T10] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 340.635114][ T10] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 340.635701][ T5711] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:7: No space for directory leaf checksum. Please run e2fsck -D. [ 340.635728][ T5711] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:7: checksumming directory block 0 [ 340.636432][ T5711] usb 5-1: loading /lib/firmware/updates/syzkaller/ueagle-atm/eagleI.fw failed with error -74 [ 340.636546][ T5711] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:7: No space for directory leaf checksum. Please run e2fsck -D. [ 340.636572][ T5711] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:7: checksumming directory block 0 [ 340.707353][ T5711] usb 5-1: loading /lib/firmware/updates/ueagle-atm/eagleI.fw failed with error -74 [ 340.707468][ T5711] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:7: No space for directory leaf checksum. Please run e2fsck -D. [ 340.707492][ T5711] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:7: checksumming directory block 0 [ 340.707654][ T5711] usb 5-1: loading /lib/firmware/syzkaller/ueagle-atm/eagleI.fw failed with error -74 [ 340.707747][ T5711] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:7: No space for directory leaf checksum. Please run e2fsck -D. [ 340.707772][ T5711] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:7: checksumming directory block 0 [ 340.707984][ T5711] usb 5-1: loading /lib/firmware/ueagle-atm/eagleI.fw failed with error -74 [ 340.708014][ T5711] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -74 [ 340.708033][ T5711] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 340.847898][ T5752] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 340.876187][ T10] usb 5-1: USB disconnect, device number 44 [ 340.897314][ T5752] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 340.902689][ T5752] quatech2 3-1:0.51: device disconnected [ 341.306545][ T3108] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 341.362779][T11357] FAULT_INJECTION: forcing a failure. [ 341.362779][T11357] name failslab, interval 1, probability 0, space 0, times 0 [ 341.362824][T11357] CPU: 1 UID: 0 PID: 11357 Comm: syz.2.2273 Not tainted syzkaller #0 PREEMPT(full) [ 341.362848][T11357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.362861][T11357] Call Trace: [ 341.362869][T11357] [ 341.362878][T11357] dump_stack_lvl+0xe8/0x150 [ 341.362911][T11357] should_fail_ex+0x3eb/0x540 [ 341.362938][T11357] should_failslab+0xa8/0x100 [ 341.362961][T11357] ? do_fcntl_add_lease+0xa1/0x470 [ 341.362992][T11357] kmem_cache_alloc_noprof+0x9c/0x600 [ 341.363022][T11357] ? do_fcntl_add_lease+0xa1/0x470 [ 341.363057][T11357] do_fcntl_add_lease+0xa1/0x470 [ 341.363089][T11357] ? __pfx_do_fcntl_add_lease+0x10/0x10 [ 341.363119][T11357] ? futex_wait+0x2a2/0x390 [ 341.363155][T11357] fcntl_setlease+0x24e/0x3b0 [ 341.363185][T11357] ? __pfx_fcntl_setlease+0x10/0x10 [ 341.363222][T11357] do_fcntl+0x8ae/0x1a20 [ 341.363255][T11357] ? lock_acquire+0x115/0x350 [ 341.363283][T11357] ? __pfx_do_fcntl+0x10/0x10 [ 341.363317][T11357] ? __fget_files+0x2a/0x420 [ 341.363344][T11357] ? __fget_files+0x2a/0x420 [ 341.363375][T11357] ? bpf_lsm_file_fcntl+0x9/0x20 [ 341.363403][T11357] __se_sys_fcntl+0xc8/0x150 [ 341.363441][T11357] do_syscall_64+0x166/0x520 [ 341.363461][T11357] ? trace_irq_disable+0x3b/0x140 [ 341.363490][T11357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.363510][T11357] ? clear_bhb_loop+0x70/0xc0 [ 341.363534][T11357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.363554][T11357] RIP: 0033:0x7f7b9c79e159 [ 341.363574][T11357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.363591][T11357] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 341.363613][T11357] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 341.363628][T11357] RDX: 0000000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 341.363641][T11357] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 341.363654][T11357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.363669][T11357] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 341.363699][T11357] [ 341.521111][ T3108] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 341.535722][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 341.562721][ T3108] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 341.562747][ T3108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.562765][ T3108] usb 1-1: config 0 has no interface number 0 [ 341.562792][ T3108] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 341.562825][ T3108] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 341.562851][ T3108] usb 1-1: config 0 interface 255 has no altsetting 0 [ 341.641195][ T3108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.641222][ T3108] usb 1-1: Product: syz [ 341.641237][ T3108] usb 1-1: Manufacturer: syz [ 341.641251][ T3108] usb 1-1: SerialNumber: syz [ 341.686443][ T9] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 341.687776][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.709185][ T9] usb 6-1: config 0 descriptor?? [ 341.725258][ T3108] usb 1-1: config 0 descriptor?? [ 341.739082][ T3108] streamzap 1-1:0.255: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 341.833000][T11361] FAULT_INJECTION: forcing a failure. [ 341.833000][T11361] name failslab, interval 1, probability 0, space 0, times 0 [ 341.833030][T11361] CPU: 1 UID: 0 PID: 11361 Comm: syz.2.2275 Not tainted syzkaller #0 PREEMPT(full) [ 341.833053][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 341.833066][T11361] Call Trace: [ 341.833075][T11361] [ 341.833083][T11361] dump_stack_lvl+0xe8/0x150 [ 341.833116][T11361] should_fail_ex+0x3eb/0x540 [ 341.833143][T11361] should_failslab+0xa8/0x100 [ 341.833167][T11361] __kmalloc_noprof+0xf9/0x710 [ 341.833196][T11361] ? kstrdup_quotable+0x1a4/0x560 [ 341.833223][T11361] ? kstrdup_quotable+0x1a4/0x560 [ 341.833258][T11361] kstrdup_quotable+0x1a4/0x560 [ 341.833291][T11361] ? __pfx_kstrdup_quotable+0x10/0x10 [ 341.833318][T11361] ? mmput+0x61/0x70 [ 341.833338][T11361] ? get_cmdline+0x2b0/0x320 [ 341.833363][T11361] kstrdup_quotable_cmdline+0x342/0x3c0 [ 341.833407][T11361] __report_access+0x76/0x320 [ 341.833439][T11361] task_work_run+0x1d9/0x260 [ 341.833471][T11361] ? __pfx_task_work_run+0x10/0x10 [ 341.833498][T11361] ? __se_sys_ptrace+0x340/0x3a0 [ 341.833532][T11361] exit_to_user_mode_loop+0x204/0x770 [ 341.833561][T11361] ? rcu_is_watching+0x16/0xb0 [ 341.833584][T11361] do_syscall_64+0x328/0x520 [ 341.833604][T11361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.833624][T11361] ? clear_bhb_loop+0x70/0xc0 [ 341.833648][T11361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.833667][T11361] RIP: 0033:0x7f7b9c79e159 [ 341.833686][T11361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 341.833703][T11361] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 341.833726][T11361] RAX: ffffffffffffffff RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 341.833741][T11361] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000010 [ 341.833754][T11361] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 341.833767][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 341.833779][T11361] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 341.833810][T11361] [ 341.834035][T11361] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[5610] was attempted by "(null)"[11361] [ 341.941224][ T9] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 341.983511][ T5698] usb 1-1: USB disconnect, device number 49 [ 342.147540][T11363] FAULT_INJECTION: forcing a failure. [ 342.147540][T11363] name failslab, interval 1, probability 0, space 0, times 0 [ 342.147568][T11363] CPU: 1 UID: 0 PID: 11363 Comm: syz.2.2276 Not tainted syzkaller #0 PREEMPT(full) [ 342.147591][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 342.147603][T11363] Call Trace: [ 342.147611][T11363] [ 342.147620][T11363] dump_stack_lvl+0xe8/0x150 [ 342.147651][T11363] should_fail_ex+0x3eb/0x540 [ 342.147680][T11363] should_failslab+0xa8/0x100 [ 342.147704][T11363] __kmalloc_cache_noprof+0x9e/0x600 [ 342.147734][T11363] ? cgroup_init_fs_context+0x57/0x860 [ 342.147762][T11363] ? cgroup_init_fs_context+0x57/0x860 [ 342.147793][T11363] cgroup_init_fs_context+0x57/0x860 [ 342.147821][T11363] ? mutex_init_lockdep+0xdf/0x110 [ 342.147844][T11363] alloc_fs_context+0x99e/0xd00 [ 342.147881][T11363] __se_sys_fsopen+0xa5/0x2c0 [ 342.147903][T11363] do_syscall_64+0x166/0x520 [ 342.147922][T11363] ? trace_irq_disable+0x3b/0x140 [ 342.147949][T11363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.147969][T11363] ? clear_bhb_loop+0x70/0xc0 [ 342.147993][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.148013][T11363] RIP: 0033:0x7f7b9c79e159 [ 342.148031][T11363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.148048][T11363] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 342.148069][T11363] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 342.148084][T11363] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 342.148095][T11363] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 342.148108][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.148119][T11363] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 342.148149][T11363] [ 342.184002][ T9] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 1 [ 342.184024][ T9] [drm] Initialized udl on minor 1 [ 342.841752][T11372] gadgetfs: bound to dummy_udc driver [ 343.465623][ T5698] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 343.617627][ T5698] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 343.619095][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.624651][ T5698] usb 3-1: config 0 descriptor?? [ 343.632150][ T5698] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 344.243496][ T5698] gp8psk: usb out operation failed. [ 344.243516][ T5698] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 344.243554][ T5698] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 344.247948][ T5698] usb 3-1: USB disconnect, device number 46 [ 344.613299][T11398] FAULT_INJECTION: forcing a failure. [ 344.613299][T11398] name failslab, interval 1, probability 0, space 0, times 0 [ 344.613331][T11398] CPU: 1 UID: 0 PID: 11398 Comm: syz.0.2289 Not tainted syzkaller #0 PREEMPT(full) [ 344.613355][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 344.613368][T11398] Call Trace: [ 344.613377][T11398] [ 344.613385][T11398] dump_stack_lvl+0xe8/0x150 [ 344.613417][T11398] should_fail_ex+0x3eb/0x540 [ 344.613445][T11398] should_failslab+0xa8/0x100 [ 344.613469][T11398] __kmalloc_noprof+0xf9/0x710 [ 344.613498][T11398] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 344.613529][T11398] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 344.613565][T11398] __memcg_list_lru_alloc+0x1d9/0x760 [ 344.613594][T11398] ? xa_load+0x60/0x210 [ 344.613622][T11398] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 344.613651][T11398] ? xa_load+0x60/0x210 [ 344.613686][T11398] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 344.613719][T11398] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 344.613761][T11398] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 344.613789][T11398] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 344.613815][T11398] ? __d_alloc+0x37/0x6f0 [ 344.613839][T11398] ? __d_alloc+0x37/0x6f0 [ 344.613872][T11398] __d_alloc+0x37/0x6f0 [ 344.613903][T11398] d_alloc_pseudo+0x21/0xc0 [ 344.613932][T11398] alloc_path_pseudo+0x107/0x220 [ 344.613958][T11398] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 344.613989][T11398] alloc_file_pseudo+0xa8/0x1e0 [ 344.614011][T11398] ? __kasan_kmalloc+0x93/0xb0 [ 344.614032][T11398] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 344.614055][T11398] ? __se_sys_memfd_secret+0x14a/0x580 [ 344.614078][T11398] ? __se_sys_memfd_secret+0x14a/0x580 [ 344.614105][T11398] __se_sys_memfd_secret+0x24f/0x580 [ 344.614138][T11398] do_syscall_64+0x166/0x520 [ 344.614157][T11398] ? trace_irq_disable+0x3b/0x140 [ 344.614186][T11398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.614207][T11398] ? clear_bhb_loop+0x70/0xc0 [ 344.614231][T11398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.614251][T11398] RIP: 0033:0x7f835199e159 [ 344.614271][T11398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.614289][T11398] RSP: 002b:00007f834fbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 344.614312][T11398] RAX: ffffffffffffffda RBX: 00007f8351c25fa0 RCX: 00007f835199e159 [ 344.614328][T11398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 344.614341][T11398] RBP: 00007f8351a3506b R08: 0000000000000000 R09: 0000000000000000 [ 344.614355][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.614367][T11398] R13: 00007f8351c26038 R14: 00007f8351c25fa0 R15: 00007ffdda6c6ba8 [ 344.614397][T11398] [ 345.316421][ T3108] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 345.467879][ T3108] usb 3-1: Using ep0 maxpacket: 32 [ 345.469915][ T3108] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 345.473351][ T3108] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 345.473377][ T3108] usb 3-1: config 0 has no interface number 0 [ 345.475343][ T3108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.475365][ T3108] usb 3-1: Product: syz [ 345.475381][ T3108] usb 3-1: Manufacturer: syz [ 345.475395][ T3108] usb 3-1: SerialNumber: syz [ 345.531746][ T3108] usb 3-1: config 0 descriptor?? [ 345.954241][ T3108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 345.954271][ T3108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 346.357843][ T3108] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 346.358095][ T3108] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 346.393240][ T3108] usb 3-1: USB disconnect, device number 47 [ 347.248190][ T9] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 347.254402][ T9] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 347.284776][ T5698] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.285258][ T9] usb 6-1: USB disconnect, device number 23 [ 347.288671][ T5698] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 347.288869][ T5698] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 348.275767][ T5752] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 348.426308][ T5752] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 348.427294][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.431358][ T5752] usb 3-1: config 0 descriptor?? [ 348.644056][ T5752] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 348.885761][ T5752] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 348.885788][ T5752] [drm] Initialized udl on minor 1 [ 348.949606][ T31] audit: type=1807 audit(1789788686.856:12): action=measure func=FILE_CHECK res=1 [ 348.952832][T11479] ima: policy update completed [ 348.953077][ T31] audit: type=1802 audit(1789788686.856:13): pid=11479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.0.2327" res=1 errno=0 [ 349.032084][ T31] audit: type=1800 audit(1789788686.936:14): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 349.065195][ T5752] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 349.077204][ T5752] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 349.080613][ T5752] usb 3-1: USB disconnect, device number 48 [ 349.089930][ T31] audit: type=1800 audit(1789788686.996:15): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 349.115346][ T3108] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 349.122959][ T31] audit: type=1800 audit(1789788687.026:16): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31331 res=0 errno=0 [ 349.152200][ T31] audit: type=1800 audit(1789788687.056:17): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 349.195014][T11481] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.249610][ T31] audit: type=1800 audit(1789788687.156:18): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 349.277796][ T31] audit: type=1800 audit(1789788687.186:19): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31354 res=0 errno=0 [ 349.318843][ T31] audit: type=1800 audit(1789788687.216:20): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 349.402709][ T31] audit: type=1800 audit(1789788687.306:21): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=173915 res=0 errno=0 [ 350.606236][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 350.772232][ T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 350.773518][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.777367][ T9] usb 3-1: config 0 descriptor?? [ 350.993266][ T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 351.270538][ T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 351.270564][ T9] [drm] Initialized udl on minor 1 [ 351.573869][T11538] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.672837][T11541] netlink: 'syz.4.2356': attribute type 4 has an invalid length. [ 352.144772][T11556] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 352.144819][T11556] CPU: 0 UID: 0 PID: 11556 Comm: syz.0.2361 Not tainted syzkaller #0 PREEMPT(full) [ 352.144842][T11556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 352.144854][T11556] Call Trace: [ 352.144861][T11556] [ 352.144870][T11556] dump_stack_lvl+0xe8/0x150 [ 352.144900][T11556] sysfs_create_dir_ns+0x271/0x2a0 [ 352.144932][T11556] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 352.144973][T11556] ? do_raw_spin_unlock+0xf5/0x200 [ 352.145002][T11556] kobject_add_internal+0x622/0xcd0 [ 352.145032][T11556] kobject_add+0x163/0x240 [ 352.145054][T11556] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.145077][T11556] ? __pfx_kobject_add+0x10/0x10 [ 352.145105][T11556] ? get_device_parent+0x366/0x3a0 [ 352.145134][T11556] device_add+0x3fa/0xb80 [ 352.145158][T11556] tty_register_device_attr+0x425/0x990 [ 352.145189][T11556] ? __pfx_tty_register_device_attr+0x10/0x10 [ 352.145218][T11556] ? tty_port_init+0x136/0x1a0 [ 352.145241][T11556] ? gsm_dlci_alloc+0x330/0x640 [ 352.145266][T11556] gsm_activate_mux+0x110/0x2a0 [ 352.145292][T11556] gsmld_ioctl+0x12d3/0x1930 [ 352.145321][T11556] ? __pfx_gsmld_ioctl+0x10/0x10 [ 352.145350][T11556] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 352.145385][T11556] ? ldsem_down_read+0x12/0x40 [ 352.145415][T11556] ? __pfx_gsmld_ioctl+0x10/0x10 [ 352.145435][T11556] tty_ioctl+0x9bd/0xdd0 [ 352.145454][T11556] ? __pfx_tty_ioctl+0x10/0x10 [ 352.145474][T11556] __se_sys_ioctl+0xfc/0x170 [ 352.145505][T11556] do_syscall_64+0x166/0x520 [ 352.145522][T11556] ? trace_irq_disable+0x3b/0x140 [ 352.145550][T11556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.145571][T11556] ? clear_bhb_loop+0x70/0xc0 [ 352.145596][T11556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.145616][T11556] RIP: 0033:0x7f835199e159 [ 352.145635][T11556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.145652][T11556] RSP: 002b:00007f834fbd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.145673][T11556] RAX: ffffffffffffffda RBX: 00007f8351c26090 RCX: 00007f835199e159 [ 352.145688][T11556] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 352.145702][T11556] RBP: 00007f8351a3506b R08: 0000000000000000 R09: 0000000000000000 [ 352.145715][T11556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.145728][T11556] R13: 00007f8351c26128 R14: 00007f8351c26090 R15: 00007ffdda6c6ba8 [ 352.145760][T11556] [ 352.151594][T11556] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 353.970696][ T31] kauditd_printk_skb: 101 callbacks suppressed [ 353.970715][ T31] audit: type=1800 audit(1789788691.876:123): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 353.983208][T11579] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.001616][ T31] audit: type=1800 audit(1789788691.906:124): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175071 res=0 errno=0 [ 354.044278][ T31] audit: type=1800 audit(1789788691.946:125): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31231 res=0 errno=0 [ 354.066034][ T31] audit: type=1800 audit(1789788691.956:126): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31254 res=0 errno=0 [ 354.152150][ T31] audit: type=1800 audit(1789788692.056:127): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 354.275621][ T5612] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 354.353767][ T31] audit: type=1800 audit(1789788692.256:128): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 354.425665][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 354.426390][ T5612] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 354.427500][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.427530][ T5612] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 354.427554][ T5612] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 354.427594][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.430462][ T5612] usb 1-1: config 0 descriptor?? [ 354.440747][ T31] audit: type=1800 audit(1789788692.346:129): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=175098 res=0 errno=0 [ 354.461955][ T31] audit: type=1800 audit(1789788692.346:130): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=175127 res=0 errno=0 [ 354.462001][ T31] audit: type=1800 audit(1789788692.356:131): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=175105 res=0 errno=0 [ 354.462193][ T31] audit: type=1800 audit(1789788692.366:132): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=175106 res=0 errno=0 [ 354.924609][ T5612] nintendo 0003:057E:2019.0045: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.0-1/input0 [ 355.128958][T11598] netlink: 428 bytes leftover after parsing attributes in process `syz.5.2381'. [ 355.128994][T11598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2381'. [ 355.274959][ T5612] nintendo 0003:057E:2019.0045: Failed to get joycon info; ret=-71 [ 355.274985][ T5612] nintendo 0003:057E:2019.0045: Failed to retrieve controller info; ret=-71 [ 355.275003][ T5612] nintendo 0003:057E:2019.0045: Failed to initialize controller; ret=-71 [ 355.321385][ T5612] nintendo 0003:057E:2019.0045: probe - fail = -71 [ 355.321617][ T5612] nintendo 0003:057E:2019.0045: probe with driver nintendo failed with error -71 [ 355.351118][ T5612] usb 1-1: USB disconnect, device number 50 [ 356.287781][ T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 356.288200][ T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 356.299573][ T2241] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 356.318186][ T9] usb 3-1: USB disconnect, device number 49 [ 356.320073][ T2241] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 356.320243][ T2241] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 356.438352][T11619] FAULT_INJECTION: forcing a failure. [ 356.438352][T11619] name failslab, interval 1, probability 0, space 0, times 0 [ 356.438381][T11619] CPU: 1 UID: 0 PID: 11619 Comm: syz.2.2391 Not tainted syzkaller #0 PREEMPT(full) [ 356.438406][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 356.438419][T11619] Call Trace: [ 356.438426][T11619] [ 356.438434][T11619] dump_stack_lvl+0xe8/0x150 [ 356.438464][T11619] should_fail_ex+0x3eb/0x540 [ 356.438491][T11619] should_failslab+0xa8/0x100 [ 356.438515][T11619] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 356.438544][T11619] ? __d_alloc+0x37/0x6f0 [ 356.438569][T11619] ? __d_alloc+0x37/0x6f0 [ 356.438601][T11619] __d_alloc+0x37/0x6f0 [ 356.438633][T11619] d_alloc_pseudo+0x21/0xc0 [ 356.438662][T11619] alloc_path_pseudo+0x107/0x220 [ 356.438687][T11619] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 356.438712][T11619] ? inode_set_ctime_current+0x287/0xb60 [ 356.438748][T11619] alloc_file_pseudo+0xa8/0x1e0 [ 356.438773][T11619] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 356.438794][T11619] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 356.438822][T11619] create_pipe_files+0x306/0x7a0 [ 356.438846][T11619] __do_pipe_flags+0x46/0x1f0 [ 356.438868][T11619] do_pipe2+0xaa/0x190 [ 356.438890][T11619] ? __pfx_do_pipe2+0x10/0x10 [ 356.438913][T11619] ? rcu_is_watching+0x16/0xb0 [ 356.438942][T11619] __x64_sys_pipe2+0x5a/0x70 [ 356.438962][T11619] do_syscall_64+0x166/0x520 [ 356.438981][T11619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.439001][T11619] ? clear_bhb_loop+0x70/0xc0 [ 356.439025][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.439045][T11619] RIP: 0033:0x7f7b9c79e159 [ 356.439063][T11619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.439081][T11619] RSP: 002b:00007f7b9d5b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 356.439112][T11619] RAX: ffffffffffffffda RBX: 00007f7b9ca25fa0 RCX: 00007f7b9c79e159 [ 356.439127][T11619] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 356.439140][T11619] RBP: 00007f7b9c83506b R08: 0000000000000000 R09: 0000000000000000 [ 356.439153][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.439165][T11619] R13: 00007f7b9ca26038 R14: 00007f7b9ca25fa0 R15: 00007fffa23de738 [ 356.439196][T11619] [ 356.981493][T11628] syzkaller0 speed is unknown, defaulting to 1000 [ 357.005980][ T5612] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 357.168639][ T5612] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 357.174192][ T5612] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 357.174217][ T5612] usb 3-1: config 127 has no interface number 0 [ 357.174257][ T5612] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 357.218647][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.218672][ T5612] usb 3-1: Product: syz [ 357.218686][ T5612] usb 3-1: Manufacturer: syz [ 357.218700][ T5612] usb 3-1: SerialNumber: syz [ 357.254233][T11624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.473675][T11628] netlink: 'syz.0.2393': attribute type 12 has an invalid length. [ 357.680130][T11624] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.301870][ T5612] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 358.301902][ T5612] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 358.455997][ T5612] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 358.456028][ T5612] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 358.639829][ T5612] asix 3-1:127.57 eth5: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, 68:98:fb:e4:7f:02 [ 358.659921][ T5612] usb 3-1: USB disconnect, device number 50 [ 358.664276][ T5612] asix 3-1:127.57 eth5: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 358.994371][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 358.994391][ T31] audit: type=1800 audit(1789788696.896:172): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 359.154780][ T31] audit: type=1800 audit(1789788697.056:173): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 359.195576][ T5612] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 359.283131][ T31] audit: type=1800 audit(1789788697.186:174): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 359.345797][ T5612] usb 3-1: Using ep0 maxpacket: 8 [ 359.347894][ T5612] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.348915][ T5612] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 359.348942][ T5612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 359.348965][ T5612] usb 3-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 359.348990][ T5612] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 359.349016][ T5612] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 359.349039][ T5612] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.349078][ T5612] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.357696][ T31] audit: type=1800 audit(1789788697.266:175): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176318 res=0 errno=0 [ 359.367380][ T31] audit: type=1800 audit(1789788697.276:176): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=176347 res=0 errno=0 [ 359.370706][ T31] audit: type=1800 audit(1789788697.276:177): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=176325 res=0 errno=0 [ 359.381524][ T31] audit: type=1800 audit(1789788697.286:178): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=176326 res=0 errno=0 [ 359.381566][ T31] audit: type=1800 audit(1789788697.286:179): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=176327 res=0 errno=0 [ 359.465052][ T31] audit: type=1800 audit(1789788697.366:180): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 359.567947][ T5612] usb 3-1: usb_control_msg returned -32 [ 359.567991][ T5612] usbtmc 3-1:16.0: can't read capabilities [ 359.575410][ T31] audit: type=1800 audit(1789788697.476:181): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=176367 res=0 errno=0 [ 359.654348][ T5612] usb 3-1: USB disconnect, device number 51 [ 359.845635][ T5697] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 359.999317][ T5697] usb 6-1: unable to get BOS descriptor or descriptor too short [ 359.999366][ T5697] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 360.000390][ T5697] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 360.003300][ T5697] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.003324][ T5697] usb 6-1: Product: syz [ 360.003338][ T5697] usb 6-1: Manufacturer: syz [ 360.003352][ T5697] usb 6-1: SerialNumber: syz [ 360.281099][ T5697] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 361.090108][ T5697] usb 6-1: failed to enable PITCH for EP 0x82 [ 361.094507][ T5697] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 361.094539][ T5697] usb 6-1: clock source 0 is not valid, cannot use [ 361.094984][ T5697] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 361.124555][ T5697] usb 6-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 361.271393][ T5697] usb 6-1: USB disconnect, device number 24 [ 361.501260][ T5616] udevd[5616]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.815636][ T5752] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 362.945123][T11716] syzkaller1: entered promiscuous mode [ 362.945148][T11716] syzkaller1: entered allmulticast mode [ 363.036373][ T5752] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.040024][ T5752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.040053][ T5752] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.040076][ T5752] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.040115][ T5752] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.042804][ T5752] usb 6-1: config 0 descriptor?? [ 363.431362][ T5697] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 363.472608][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.472643][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.472670][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.472696][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.472722][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.472748][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.480467][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.480499][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.480525][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.480551][ T5752] plantronics 0003:047F:FFFF.0046: unknown main item tag 0x0 [ 363.523841][ T5752] plantronics 0003:047F:FFFF.0046: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 363.599996][ T5697] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.600980][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.601009][ T5697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.601031][ T5697] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.601071][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.657279][ T5697] usb 3-1: config 0 descriptor?? [ 363.859920][T11729] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2438'. [ 364.090955][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 364.090974][ T31] audit: type=1800 audit(1789788701.996:238): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177098 res=0 errno=0 [ 364.133867][ T31] audit: type=1800 audit(1789788702.036:239): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177120 res=0 errno=0 [ 364.162190][ T31] audit: type=1800 audit(1789788702.066:240): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177134 res=0 errno=0 [ 364.162258][ T5697] plantronics 0003:047F:FFFF.0047: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 364.253592][ T31] audit: type=1800 audit(1789788702.156:241): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=177100 res=0 errno=0 [ 364.373025][ T31] audit: type=1800 audit(1789788702.276:242): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 364.487911][ T31] audit: type=1800 audit(1789788702.396:243): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177182 res=0 errno=0 [ 364.660192][ T31] audit: type=1800 audit(1789788702.566:244): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 364.800206][ T3108] usb 3-1: USB disconnect, device number 52 [ 364.928530][ T31] audit: type=1800 audit(1789788702.836:245): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 365.101914][ T31] audit: type=1800 audit(1789788703.006:246): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 365.418310][ T31] audit: type=1800 audit(1789788703.326:247): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15585 res=0 errno=0 [ 365.601822][ T5752] usb 6-1: USB disconnect, device number 25 [ 367.168669][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2458'. [ 367.381135][T11785] FAULT_INJECTION: forcing a failure. [ 367.381135][T11785] name fail_futex, interval 1, probability 0, space 0, times 0 [ 367.381178][T11785] CPU: 0 UID: 0 PID: 11785 Comm: syz.0.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.381207][T11785] Tainted: [L]=SOFTLOCKUP [ 367.381214][T11785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.381230][T11785] Call Trace: [ 367.381242][T11785] [ 367.381251][T11785] dump_stack_lvl+0xe8/0x150 [ 367.381283][T11785] should_fail_ex+0x3eb/0x540 [ 367.381311][T11785] get_futex_key+0x8e2/0x1580 [ 367.381354][T11785] ? __pfx_get_futex_key+0x10/0x10 [ 367.381396][T11785] futex_wait_requeue_pi+0x2a3/0x9c0 [ 367.381429][T11785] ? __pfx_futex_wait_requeue_pi+0x10/0x10 [ 367.381465][T11785] ? preempt_schedule_thunk+0x16/0x40 [ 367.381512][T11785] ? futex_private_hash_put+0x132/0x160 [ 367.381546][T11785] ? __pfx_futex_wake_mark+0x10/0x10 [ 367.381591][T11785] do_futex+0x184/0x4e0 [ 367.381617][T11785] ? __pfx_do_futex+0x10/0x10 [ 367.381639][T11785] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 367.381669][T11785] __se_sys_futex+0x3a8/0x450 [ 367.381698][T11785] ? __pfx___se_sys_futex+0x10/0x10 [ 367.381719][T11785] ? rcu_is_watching+0x16/0xb0 [ 367.381745][T11785] ? __x64_sys_futex+0x21/0xf0 [ 367.381770][T11785] do_syscall_64+0x166/0x520 [ 367.381790][T11785] ? trace_irq_disable+0x3b/0x140 [ 367.381817][T11785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.381838][T11785] ? clear_bhb_loop+0x70/0xc0 [ 367.381862][T11785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.381882][T11785] RIP: 0033:0x7f835199e159 [ 367.381901][T11785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.381918][T11785] RSP: 002b:00007f834fbf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.381940][T11785] RAX: ffffffffffffffda RBX: 00007f8351c25fa0 RCX: 00007f835199e159 [ 367.381955][T11785] RDX: 0000000000000000 RSI: 000080000000000b RDI: 0000000000000000 [ 367.381969][T11785] RBP: 00007f8351a3506b R08: 0000200000048000 R09: 0000000000000000 [ 367.381982][T11785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 367.381995][T11785] R13: 00007f8351c26038 R14: 00007f8351c25fa0 R15: 00007ffdda6c6ba8 [ 367.382025][T11785] [ 367.389826][T11786] rust_binder: 11784:11786 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch [ 367.391726][ T5752] rust_binder: 11784: undelivered death notification, 000000000000001f [ 367.424664][T11786] syz.5.2461 (11786) used greatest stack depth: 19248 bytes left [ 367.895598][ T5697] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 367.921085][T11792] FAULT_INJECTION: forcing a failure. [ 367.921085][T11792] name failslab, interval 1, probability 0, space 0, times 0 [ 367.921120][T11792] CPU: 0 UID: 0 PID: 11792 Comm: syz.5.2464 Tainted: G L syzkaller #0 PREEMPT(full) [ 367.921149][T11792] Tainted: [L]=SOFTLOCKUP [ 367.921157][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.921169][T11792] Call Trace: [ 367.921177][T11792] [ 367.921185][T11792] dump_stack_lvl+0xe8/0x150 [ 367.921217][T11792] should_fail_ex+0x3eb/0x540 [ 367.921245][T11792] should_failslab+0xa8/0x100 [ 367.921269][T11792] __kmalloc_noprof+0xf9/0x710 [ 367.921297][T11792] ? prepare_creds+0x30/0x820 [ 367.921327][T11792] ? security_prepare_creds+0x52/0x360 [ 367.921347][T11792] ? security_prepare_creds+0x52/0x360 [ 367.921368][T11792] ? kmem_cache_alloc_noprof+0x151/0x600 [ 367.921399][T11792] security_prepare_creds+0x52/0x360 [ 367.921423][T11792] prepare_creds+0x57d/0x820 [ 367.921458][T11792] lookup_user_key+0x26e/0x1360 [ 367.921488][T11792] ? __pfx_lookup_user_key+0x10/0x10 [ 367.921512][T11792] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 367.921540][T11792] ? __might_fault+0xaf/0x130 [ 367.921572][T11792] __se_sys_add_key+0x315/0x420 [ 367.921602][T11792] ? __pfx___se_sys_add_key+0x10/0x10 [ 367.921638][T11792] ? __x64_sys_add_key+0x20/0xc0 [ 367.921668][T11792] do_syscall_64+0x166/0x520 [ 367.921686][T11792] ? trace_irq_disable+0x3b/0x140 [ 367.921713][T11792] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.921734][T11792] ? clear_bhb_loop+0x70/0xc0 [ 367.921758][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.921778][T11792] RIP: 0033:0x7fdb5299e159 [ 367.921795][T11792] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.921813][T11792] RSP: 002b:00007fdb50bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 367.921835][T11792] RAX: ffffffffffffffda RBX: 00007fdb52c25fa0 RCX: 00007fdb5299e159 [ 367.921850][T11792] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 367.921864][T11792] RBP: 00007fdb52a3506b R08: fffffffffffffffe R09: 0000000000000000 [ 367.921877][T11792] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 367.921889][T11792] R13: 00007fdb52c26038 R14: 00007fdb52c25fa0 R15: 00007ffefc869b78 [ 367.921919][T11792] [ 368.066492][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 368.078441][ T5697] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 368.131243][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.131275][ T5697] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.131314][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.214204][ T5697] usb 1-1: config 0 descriptor?? [ 368.469955][T11800] trusted_key: syz.2.2468 sent an empty control message without MSG_MORE. [ 368.661636][ T5697] savu 0003:1E7D:2D5A.0048: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 368.913743][ T5697] usb 1-1: USB disconnect, device number 51 [ 369.235619][ T5612] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 369.397386][ T5612] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 369.399453][ T5612] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.399510][ T5612] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 369.399532][ T5612] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 369.406399][ T5612] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.406428][ T5612] usb 6-1: Product: syz [ 369.406442][ T5612] usb 6-1: Manufacturer: syz [ 369.406455][ T5612] usb 6-1: SerialNumber: syz [ 369.425246][ T31] kauditd_printk_skb: 40 callbacks suppressed [ 369.425261][ T31] audit: type=1800 audit(1789788707.316:288): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=177519 res=0 errno=0 [ 369.435189][ T31] audit: type=1800 audit(1789788707.336:289): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=177551 res=0 errno=0 [ 369.450087][ T31] audit: type=1800 audit(1789788707.346:290): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=177526 res=0 errno=0 [ 369.450136][ T31] audit: type=1800 audit(1789788707.346:291): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=177527 res=0 errno=0 [ 369.558709][ T31] audit: type=1800 audit(1789788707.456:292): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15216 res=0 errno=0 [ 369.643618][ T31] audit: type=1800 audit(1789788707.546:293): pid=4981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14970 res=0 errno=0 [ 369.850175][ C1] usb 6-1: received EP1 urb->status = -2 [ 369.850234][ T5612] usb 6-1: unable to init card! (ret=-110) [ 369.853613][ T5612] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 369.861299][ T31] audit: type=1800 audit(1789788707.766:294): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=177548 res=0 errno=0 [ 369.861347][ T31] audit: type=1800 audit(1789788707.766:295): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=177549 res=0 errno=0 [ 369.867260][ T31] audit: type=1800 audit(1789788707.766:296): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=177528 res=0 errno=0 [ 369.867308][ T31] audit: type=1800 audit(1789788707.766:297): pid=5792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=177550 res=0 errno=0 [ 370.050438][ T5697] usb 6-1: USB disconnect, device number 26 [ 370.774878][T11823] syzkaller0 speed is unknown, defaulting to 1000 [ 370.846573][ T32] INFO: task syz.1.1256:9015 blocked for more than 143 seconds. [ 370.846599][ T32] Tainted: G L syzkaller #0 [ 370.846611][ ** replaying previous printk message ** [ 370.846611][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 370.846620][ T32] task:syz.1.1256 state:D stack:28808 pid:9015 tgid:9008 ppid:5609 task_flags:0x400040 flags:0x00080002 [ 370.846684][ T32] Call Trace: [ 370.846691][ T32] [ 370.846704][ T32] __schedule+0x17dd/0x5940 [ 370.846764][ T32] ? __pfx___schedule+0x10/0x10 [ 370.846799][ T32] ? schedule+0x90/0x2b0 [ 370.846831][ T32] schedule+0x164/0x2b0 [ 370.846860][ T32] schedule_preempt_disabled+0x13/0x30 [ 370.846888][ T32] __mutex_lock+0x7c4/0x15a0 [ 370.846912][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 370.846935][ T32] ? fdget_pos+0x246/0x320 [ 370.846963][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 370.846987][ T32] ? __fget_files+0x2a/0x420 [ 370.847015][ T32] ? __fget_files+0x3a2/0x420 [ 370.847039][ T32] ? __fget_files+0x2a/0x420 [ 370.847067][ T32] fdget_pos+0x246/0x320 [ 370.847095][ T32] ksys_read+0x79/0x270 [ 370.847122][ T32] ? __pfx_ksys_read+0x10/0x10 [ 370.847146][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 370.847182][ T32] do_syscall_64+0x166/0x520 [ 370.847201][ T32] ? trace_irq_disable+0x3b/0x140 [ 370.847227][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.847247][ T32] ? clear_bhb_loop+0x70/0xc0 [ 370.847277][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.847305][ T32] RIP: 0033:0x7f055bd9e159 [ 370.847323][ T32] RSP: 002b:00007f055cc01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.847344][ T32] RAX: ffffffffffffffda RBX: 00007f055c026090 RCX: 00007f055bd9e159 [ 370.847359][ T32] RDX: 0000000000000100 RSI: 0000200000000700 RDI: 0000000000000003 [ 370.847373][ T32] RBP: 00007f055be3506b R08: 0000000000000000 R09: 0000000000000000 [ 370.847385][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.847397][ T32] R13: 00007f055c026128 R14: 00007f055c026090 R15: 00007fffd567af38 [ 370.847429][ T32] [ 370.847461][ T32] [ 370.847461][ T32] Showing all locks held in the system: [ 370.847471][ T32] locks held by kworker/0:1/10: 5, on CPU#0: [ 370.847485][ T32] #0: ffff8880232ad940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.847538][ T32] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.847588][ T32] #2: ffff888029d421d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 370.847634][ T32] #3: ffff888020fb71d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 370.847686][ T32] #4: ffff888029d0b1a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 370.847741][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 370.847755][ T32] #0: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 370.847825][ T32] locks held by kworker/0:7/5711: 3, on CPU#0: [ 370.847839][ T32] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.854927][ T32] #1: ffffc900044dfc40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 370.854979][ T32] #2: ffffffff8edf7d88 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0x10b/0x220 [ 370.855033][ T32] locks held by udevd/6653: 4, on CPU#0: [ 370.855047][ T32] #0: ffff88802bf3d998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 370.855094][ T32] #1: ffff888033f8cc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 370.855148][ T32] #2: ffff8880568c7b48 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 370.855202][ T32] #3: ffff888020fb71d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 370.855260][ T32] locks held by syz.1.1256/9009: 3, on CPU#0: [ 370.855273][ T32] #0: ffff88807a9100f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 370.855331][ T32] #1: ffff88807afb8460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 370.855388][ T32] #2: ffffffff8f2a0020 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 370.855440][ T32] locks held by syz.1.1256/9015: 1, on CPU#0: [ 370.855454][ T32] #0: ffff88807a9100f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 370.858889][ T32] locks held by syz.4.2387/11613: 1, last CPU#0: [ 370.858905][ T32] #0: ffff88804dd34ab0 (&ima_iint_mutex_key[depth]#3){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 370.858965][ T32] locks held by syz.0.2475/11819: 1, last CPU#1: [ 370.858978][ T32] #0: ffff88813ff6c378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 370.859029][ T32] locks held by syz.5.2477/11823: 2, last CPU#1: [ 370.859043][ T32] #0: ffffffff9045c4e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x51f/0x770 [ 370.859096][ T32] #1: ffffffff9046ad40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 370.859147][ T32] locks held by syz.5.2477/11824: 3, last CPU#1: [ 370.859160][ T32] #0: ffff88807a911970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 370.859209][ T32] #1: ffff88807b02c460 (sb_writers#3){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 370.859263][ T32] #2: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 370.859315][ T32] locks held by syz.2.2478/11826: 2, last CPU#1: [ 370.859328][ T32] #0: ffff88801b7c1d38 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 370.859377][ T32] #1: ffffffff8ef5c7a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 370.859426][ T32] [ 370.859431][ T32] ============================================= [ 370.859431][ T32] [ 370.859448][ T32] NMI backtrace for cpu 1 [ 370.859463][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 370.859488][ T32] Tainted: [L]=SOFTLOCKUP [ 370.859495][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.859506][ T32] Call Trace: [ 370.859513][ T32] [ 370.859520][ T32] dump_stack_lvl+0xe8/0x150 [ 370.859547][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 370.859574][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 370.859605][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 370.859633][ T32] sys_info+0x135/0x170 [ 370.859654][ T32] watchdog+0x1058/0x10d0 [ 370.859687][ T32] ? watchdog+0x209/0x10d0 [ 370.859719][ T32] kthread+0x38b/0x480 [ 370.859746][ T32] ? __pfx_watchdog+0x10/0x10 [ 370.859770][ T32] ? __pfx_kthread+0x10/0x10 [ 370.859796][ T32] ret_from_fork+0x514/0xb70 [ 370.859825][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 370.859851][ T32] ? __switch_to+0xc89/0x1420 [ 370.859876][ T32] ? __pfx_kthread+0x10/0x10 [ 370.859903][ T32] ret_from_fork_asm+0x1a/0x30 [ 370.859942][ T32] [ 370.859977][ T32] Sending NMI from CPU 1 to CPUs 0: [ 370.860010][ C0] NMI backtrace for cpu 0 [ 370.860025][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 370.860049][ C0] Tainted: [L]=SOFTLOCKUP [ 370.860055][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.860066][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 370.860089][ C0] Code: e8 1e a3 4a fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 1f cc ba fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a ff 7b 06 cc 44 89 f9 80 e1 07 [ 370.860104][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 370.860120][ C0] RAX: 1ffffffff35f6000 RBX: 00000000000003fd RCX: 0000000000000000 [ 370.860132][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 370.860144][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 370.860156][ C0] R10: dffffc0000000000 R11: ffffffff857d6180 R12: dffffc0000000000 [ 370.860170][ C0] R13: 0000000000000000 R14: ffffffff9afb0560 R15: 0000000000000000 [ 370.860182][ C0] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 370.860197][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 370.860210][ C0] CR2: 0000001b3351eff8 CR3: 000000004b71c000 CR4: 00000000003526f0 [ 370.860226][ C0] Call Trace: [ 370.860232][ C0] [ 370.860241][ C0] wait_for_lsr+0x184/0x2f0 [ 370.860263][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 370.860291][ C0] serial8250_console_write+0xaa1/0x1200 [ 370.860316][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 370.860336][ C0] ? rcu_is_watching+0x16/0xb0 [ 370.860359][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 370.860392][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 370.860420][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 370.860453][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 370.860478][ C0] nbcon_kthread_func+0x6d9/0x8d0 [ 370.860506][ C0] ? nbcon_kthread_func+0x163/0x8d0 [ 370.860530][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 370.860558][ C0] ? __kthread_parkme+0x71/0x1f0 [ 370.860580][ C0] ? __kthread_parkme+0x199/0x1f0 [ 370.860603][ C0] kthread+0x38b/0x480 [ 370.860627][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 370.860650][ C0] ? __pfx_kthread+0x10/0x10 [ 370.860673][ C0] ret_from_fork+0x514/0xb70 [ 370.860698][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 370.860720][ C0] ? __switch_to+0xc89/0x1420 [ 370.860742][ C0] ? __pfx_kthread+0x10/0x10 [ 370.860765][ C0] ret_from_fork_asm+0x1a/0x30 [ 370.860816][ C0] [ 370.870862][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 371.760139][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 371.770799][ T32] Tainted: [L]=SOFTLOCKUP [ 371.775104][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 371.785141][ T32] Call Trace: [ 371.788409][ T32] [ 371.791328][ T32] vpanic+0x56d/0xa70 [ 371.795307][ T32] ? __pfx___schedule+0x10/0x10 [ 371.800154][ T32] ? __pfx_vpanic+0x10/0x10 [ 371.804684][ T32] panic+0xc5/0xd0 [ 371.808398][ T32] ? __pfx_panic+0x10/0x10 [ 371.812830][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 371.818282][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 371.823649][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 371.829795][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 371.835944][ T32] watchdog+0x10cc/0x10d0 [ 371.840271][ T32] ? watchdog+0x209/0x10d0 [ 371.844683][ T32] kthread+0x38b/0x480 [ 371.848746][ T32] ? __pfx_watchdog+0x10/0x10 [ 371.853416][ T32] ? __pfx_kthread+0x10/0x10 [ 371.857998][ T32] ret_from_fork+0x514/0xb70 [ 371.862586][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 371.867688][ T32] ? __switch_to+0xc89/0x1420 [ 371.872356][ T32] ? __pfx_kthread+0x10/0x10 [ 371.876958][ T32] ret_from_fork_asm+0x1a/0x30 [ 371.881727][ T32] [ 371.884996][ T32] Kernel Offset: disabled [ 371.889309][ T32] Rebooting in 86400 seconds..