last executing test programs: 2.599422522s ago: executing program 1 (id=732): r0 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x847}], 0x1}, 0x84) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x8, &(0x7f0000000d40)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x12060) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.420820668s ago: executing program 1 (id=737): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x9, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) read$FUSE(r1, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 1.943261531s ago: executing program 0 (id=746): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.850118804s ago: executing program 0 (id=748): timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x1, &(0x7f0000000740)={{}, {0x0, 0x989680}}, 0x0) timer_create(0x3, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_delete(r1) 1.672687542s ago: executing program 0 (id=751): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x3, 0xd}, {0xe}, {0x3, 0x3ccbcb8134f8dbd9}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) recvmmsg(r2, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0}, 0xb529}], 0x1, 0x40000022, 0x0) 1.579135841s ago: executing program 0 (id=752): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000040), 0x40000000008d, 0x20001) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) 1.574338552s ago: executing program 4 (id=753): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000007, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6000000010000100000000000040000000000000", @ANYBLOB], 0x60}}, 0x40000040) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000480)={{r1, &(0x7f0000000240)='\x00', 0x202c00, &(0x7f0000000280)={@_ha_fsid={[0x60000000, 0x81]}, {0x0, 0x1, 0x5, 0x40}}, 0x1, &(0x7f00000002c0), &(0x7f0000000300)=0x2}, {[0x1, 0x2, 0x5]}, 0x4c74, 0xa7, &(0x7f0000000340)=""/167}) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000400)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r8, &(0x7f00000000c0)=ANY=[], 0xffffff6a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r7, 0x58, &(0x7f0000000140)}, 0x10) splice(r7, 0x0, r5, 0x0, 0xfffd, 0x0) 1.551550852s ago: executing program 2 (id=754): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='fd\x00') fchdir(r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) 1.486974662s ago: executing program 0 (id=755): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x50480240, 0x0, 0x61c6, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x101000, 0x80) syz_fuse_handle_req(r0, &(0x7f0000004200)="0aca6c6a1bafd2989666a6014bd5e9e63945bda64c1239d970f0d349110c18fe029ac3e29dc9ff9ead2ed3cef0fe77ef8348a82d3da186ce2140d53dfeb34dc1e128dca5a5225db8052bd348c2d1a3de224233032fff8b85c85885c90e9d0c205001db3dfc55d17a7dab1761c1733c465113c056d3bcbaf6a52dbda820a1db5e7d777f6c716e5f60b04cc1c6a362d891cb08fa109c5a00e427f8636059d934f255021cf13d2bc9cff93f049018b8e48f6480d324f08eb83655d3eb5a379ec18c861f596db17bcc23ada65f26a02c4c0c9e3167cc582e93661cdd0dc7581ac1958d9cd08104af251d87d8b5d82150b8cc4ca6d23475f259a8b7d69839cf728a6c478eec56135bdfc6428a318cf2b838d16984d0498d33ac41fe67361bdf5752db6a5ae32979463b60ad6b99527affdcb2b4a0f23b2f140c981b00c99cd25d563ff6c3308b048371eb2e599880a2b67ef9a2282947dbb23a3f1944193a801187f206587a52ee7a33032a842b31fcc0db079c554c97a09e3812aea45702099ab648888d08ae48a187a5acee7b9a2edbc320c64514554e540286053dd2acb9f9ec83435f43193b45b324c8406cdf976bc7607cf9385e99bf5f5205110d0c27abcac49e7ec7deef560f953d2c64bfd014ddcb1b2cbccbe401a312436799235807f4fdf52a9f894656fcbe1e971163e8d743450c49875379522df77d5e8910df837701d135f4589d4d15355e1638eff568a18a0d6217a11acf8fdf0fed0216635215d248aff37d85b62edbc989bc6d4757e6347ec971ae2b1e0d194e6c11dd8f7c108219569e157eceb7c14a288aad98a24de9a81f9ba1dd5271c17adfdf41f3393789c30f9345f6ad4ad1a6bf46640f69f7c038c4fec6652853a3f4fece3c3d15bfdea15f37e961a03de54181724801808a3a9030ba4650ce6fa9e6822c794d7b9da548a2eab977ab0c08b2d985957d5cd70ec677637219c6ca7c7c4d0a7a7ca38c1862583735b46b3addfd1c72cf7f63f11bd85ed59b9ba94db5c2fbd48461ab735b439a992e3a4462545e042e3c863199c006ef3a3be4473b24b782f86a3c1dca9848283bc47f4322273681efa1c8c413dc81a459e4e755846a094971708eb7f428aa67d0c81ce7f33d856e13a342b05eb403af7b4cab191c4ab9d650158808ec74d04f4b765e513b94f10345322e48485d29eb8b1408d7776f98e3625a20220e94789476affdbd19b44bac6bd2fa2b0ba10e93582178a3ef4938dcda25bc6245621b1ced780ca089010e8e51493c1ac7747e949b67fe6e3858e60a1e45a657c080fdc0bcbfcac2ba9d027f02ce30cc7440ce71eac66bb2eb264dcb1306a6054fde6640ca51ec4ccaf500a87f073b58ab286daeefd8d3ec7ee882551f7b6a36ab79a8e10d1d3c234ffaa33e95026025cc39a057efe7823dcb689131b1e83572b4dd1f49097580976c046424618fd6047d46928087d483df952738448d164c9288b15a4982493bf7ebc1976d0942846c8310556732b4cabff937a51e926caa37ae54dea339c2a2a8d73be2ca3a39edcb4ef8bd58a3c4c98c48b9f37a1424b6a54919921d4429611d0dd585d1d357c3c1ad1cf68f36907f8d9c28a14ec2cf2510fe54510111ddd7a67fb8d2f449227da397c32b8dca19971ab9d76e1f6ce0c54c9de1cb1daa1936b62f838170b8b6e7f34168a099619a113c83347ce2c0f6086855385062b6e074b68391e59430236f9ec687a265072f7a40efbef3cfe5bc1cfb364d87a597507811d2bf6af59e20fcf4703caa63285decabcc367ccfb8e27efecb14db8b1167938f457d4117c62f440d807b5482bb223b4b14e9526f9ede33631cdf9fcab53b3fbebc9344ab130d793dad610f2fe41ef388acaebd6cf26aedf7c7c6aaee956cf92c14583bd45b189d43f7b44419df1e0adecc8fbedb357656b7649721f81c2207ebb37e3ae21bdce8c982cbbdec012c7fe587161ff741610fb8ea5883c758527873ca2197b5f1058083c40203cc4dbdf7f4f1388f2309d22a6a1767137703296ad3aeabdbb3529a290da9c6cc5631b2f1ad25c766e3cbd8d9f588bafd17495f572bf1cfe1e8b5bb22130963cca8832f846300bb6dc0baec85b500e1a48fdd14cf0442fe4d441821d7e46fb5e2220c96bfb16ab8ca883a4477bc756dfc6622f320a648cfb57f9de9aef33f9986c6517d1a7eb59348541d6d3494ebe7bc1ed4a86f06411491d176da36de8c8a8d8ea28928bda63fe863277e4325b756421d4d2042428250ed526e538fb930671e9ad517aac494a58aecbc908b512016fe4d8f60b576e230b3206a0c7bd4fef717a8cda0029d13ecc3c8f8686f717adc1440353c236aa71f842839c5ce92c83fbfb57b221271aa6f4029219c3c2ed7a3a53d8ff065ce30d403c95cf69e7963d5bfb63bccb5b28ca125f0d7094072273ce3108093d0ff83ab98393b8e9a87117f4933a8c8ecf353931da3b8dacb20685a65dd865bd6031cd2b0b7e237901c782c6e6ea8742e89dbb01eb925dd6e74c53bd28d3c424cee35eb29823f2138b92516075e00342fa4dbc5b27675a651032c8ffb3da6c5349d0f9b2779778d0cfa1c8d4cc34d4fe95fc435e4768e93d56d2c142f25df1b9afa7d103486842372b36261b96b7b3acc0e78ff20a535ed515ace0cf3300168a7ef42d6bd511c019d0ccd7599ba70cbabc95f34a052fe9d6f97b49dc1cde40d5ebf305797d7d572a61cd38a0cf85f28c5d018648b769327bd9559722d5422754f26c9e5439b42bedf34e31bbc845b99ce315eeeb0383fb3ae021084cedcd843b86831c78441ccc0d2c23de528e53cff785816a3a3d99b4a4684df9546a285203bb615eb480fa8385e90226b27b39a7d50c83babf5ba890da1a8848ba372971347dc34b76370544feb183b9292043f2ef072b69bcff45b1917c073222d50bd585f2173bdae673198b95b67f8387f6d2b2934597c5ce165fd420ddcc01d29d71d532b5d127afc98657845230e363cbb9ecc05b247996ecbfce0e8215ec7dc5e9be115de2e7ebe8fe3e191f455d244ad1ce75c828a2adbbe509589f389936e62dfd1ecdef105162d357cfb22412b64570dcb04fe18bbbe5518985d7316a75a19a16a482105b7fac923e1eefd780d036ccc39e3cc53d2002ccd10004be1694be4110fb062110e1a44ba88acfa282d9c7cdae0cb55f48f7caa3c324d9f52265d21606a20779accdc9f69dd0fc49e4bc2c49891e526561569abe5673533c8a9b6a3004c809d3f7452b02787047d4442df3f4cc5d47e5aa73b7994c113541ea312970f2e741d4fd50a83f5a0293fbd56d619aa4bb3b491606642fcb922b5ccd6bedb442e450609343e18f61abb3a4b2fc69e06a72edc7bcba0da06da3e80f59b737f088d01f0dbcad89003b505fe29bdc8118e3fbcdb90a4f464e0e70d20f093790ae1b9f6f8a904a268cb4bb116404de1bd4c3f9522c36893a902a3a90f52670b7ff2074815329f3fe2c8ccfabe2d812394e6b0e34741abece71b7db0fbf0a80e6c13bc7bba89a4ee01cad9dd76e49cd91690db6fe402640db8b3523c49bcf611a9da991123edcb64ef505906d8ab4b8586e631828402105f045cff3681f2f36e3713be5bcb6af157278b194a51f04d04507231aa6f4d77b4065f2a97894c201b23f7b5f79b029c74fc4c57fff87c03e01210674417c1297155ca7a7fbe855fdcf65561619ffca0099fa08ddc8ddd7f713b2b0c6af0fcc4bd4cba9e9f47debdc6d9e6e2dce63fec20efc51e15d013fadba2707a449dbfd025f1a7c329282c797b2071afb37a89f8d58c1e3b4f06586f00a433161373548b699fabd92771346a25ff10789ca89cbf00f92248c6b8468f22aa4cf7ba90aea16a3cc2b1ee598609dfbe75fb8e11c5003ad0c9ac7205cd35552a53703f06e465633f9653cd670952feb9e77db960ea18914235af757e75204d1f74de9829dfac217d87aecc1c80066426f12e52883bfcd982e54bfdae8ef55f3b70f78bae9e6a1e24388c642cba3b3215602294bb7d68bb6f8e0b24c0b6e99df504c30beb2a7f47b02f9af6511eda25407c30dfdee39ec8db32d93e1e09472474883a87b7b4664bef06d5c0a43793237187acaaa9654f74e5d3bf1ce389befc139fba61378e7b66b4b0d87334732592ebd0e4989373ca541b92d003e67e0292256c256344dbf03ad24540f11cdc174b45d3781c1da793a460ba671373a0fa082ba63f5418733c9907d360c9bc54ba0e2b374de7965a87316df1c7af17164e1b6dfe32d71fb5ba641bb8d6cd6299473f37e44a69e90a87cd2f8a486a0db4eb104bf87d9f7cc87dc294e6debec7e5819f3f26bdf4cac91f8ee94a826df99da39a4bd6d476943428e3f5009546ee569d6273f7ecb115538c6ce8fe150249c89452c2f0cf0796208a216fc2cb55e1b6c892778f15e7f8b78e6e97093572a29ca3600c72feb4e1ef42a225da695b3111777f3833e306f2a90b8ed6095127b0f13be495a3321bf8201955d40f6b486904a4e1f4c9965563d30277b30cb0d1ef375338a25314fc5abce41f1e95118e89455af9e786cdc460e4e48fda5f21cece9b4e5276523d6919e165df5efe59aff13067d3ef0e82259305942b5f25e831dcb72f5c7fa67ceba7678078d8311aefdc91916f8c1db2ac61188b46825707dd26d29aec734df8bebd7474277908b2ba9e77daea20c395253b3cc876e5dcac960556072bec36e14da26c335b509a38dbf3037d620f4765e63b946ef8ada1729b1323acc8b5e436f3967ab7cc033ccb7d0c9cc74d3a3faa2ff2afb1cd571e3749cb0203e70756273fc6a4d80cf646d551f3a801ca513ac587f0ddc8c58870d817ea2671b2ef30be91a45dc730c6636e7de2ec235044b837ed9861dc89e4df342cff52a29ae6b8d5817fe31bb3a74d0202efca5d94b4d232f3dff885bf52f8d43097d069ce81220e8578c630d496b01fc60562bfbfda22fce6ce68564ab31d1a3d38af2d7b73a970b9b30f6c48dc38991da402491b2d643e0f5e71bb9c0aa834006ddf24b7dbb180f68751535d8cc34823ba3d1ddfbfeb6a15655118d4e1e11b255b998006906017ad9978d6cf4a45a669eabf653363391e77a82a9da14d184a50f1421eeb61411e859cf6f98ab0846ed5345b63e3ad004d1ffd1e48e6574ba7d832f7ad1345b8df27f7707245b335ddff2e4ca1430ec44af208e633c25678b3cfee96424ca026b159bb18c1bdc51db6c66e8788e5aadce1d3e531c9b02edc65b846763ee64113c0cd0d23824c4baf3516e2c8e5192afb9fcd390e51b3bcdcc0a49f932a6907b38713e2229aaa9abc5305420f50a2016429012e835407dee7d8d0b8404655620c3df407e7be2a5a1e668341dd91224509ffd48db6861f558d098954f83aeb6e426099cc4291da311c37bd46c8d80c3ea975e0db6ce12dbdae9116bf08909431fd5483f7cb3076d33a900d56c26d6f151386abb32ea335f5337683201a1ce5d9df25c5df29a375d2680827e182b1aa0813ee7f9d273d7ce1b86194a8cf48d630a5be0b947245c1ee0a0645500ce2ced6dade1b63c0e7572260cce25636778d79ef11ed5e3c42835c8e53a6d26cf85293050cedee2a116e5f38b9cae91a503ec9e0cf784d9cfdccedf95971540ec37926eb43b27cbff1d96b83f80018e6afec70523b6672111a47f9922db34da15d7ca3cc3a77f1abe7221b72d43d2cb4c23fd2bff6cd5ef6b31b6a4c65babcdc918b0d99fad656e471a20a8f4b66d6e37877da1a8b7fb7a8692d6d578ff953b18deebea1353f915102e4d2064dcf8eb0965a2f4c2eeda70b4177dedd7597797ec76bb72ee422ec4d16e494ed77c9bd843ee01885cc3aba1f77806e8f501b856935494918ef83379ac5ae1e06697606053a8c5c880975d1f085c93f2adb1bd2c6ae07c29bbb245cac4726a20a2f61ded013722eee8878933a90319cc8cab7a2bc69dbc79767ba18fcdd8f9ba7de44e9f0575994b28aa9e3e7b4c1f2ce0eee264dfefe3e1600cd969683551894d28b690122093105133b22ee04a50f4883274cb929beb1bb45444ca5d470c0ac611c4990eefea25526f590b269ad40d23842c5b5996c1cb393dbff28a7e2f7cf04ac30fbc2d29ece6708fad830bc523fa52d2ebbfda27379e8c48d085b260a2dfc2e8d7e1a94a245b518612bfc9ca0260c8fdede5298bf584e5d71fc131f5eb6ad2dd7bfd42a77f523eb0aaa787003fb71b9a64fa783e918595af0413fcc0d7818a514c055a48ba9b1bbc6c974f7cb55c3af3edf117835d169e5e2b31e4278d0419b23625ae004171eb2ef8c231a61331886234b402886b4993ca6376f8664134cead1bea142bbed5d46e3bb71b0f8a4cec0c79a9b5f6c823128d02063967a5363b6bd6e242fa3fd21953fdb57725f1eda22984bcff8e40f2076fc0a462706dc2bd95dc447a2aec2a8a4808f2930ff1353348942e28204af42141fa120c8e5fa9c225d16f3624deb2ce178fdf594db504159bbf475e8bee281e3c8ebb29b404b3fbd13dea76df5aee05ad6a85054b838e149d0ebfabe61dcbda6c3494e170e75633843a01e2458b526ac5424177d6bc4706a09694be1c372cc79cf7c4d82ff4e62489d1fc7819d749710035a6fac239d716b57a1af1346c1e8420dc8ae46fd18245160d43a40c564bf11f0232bfd1fed67ba1aebce120ee93a0a000570b808d9fcd60b622c59ad53ef535c1db7de15b52ed2540708eb5baa7195e1a86990b6611ad5c50127f7e876f8031856e9a2c0566f357d6c75e6ca5f217d428602fa7c8f7fb9f3abbefee76d88b3b08c3be2f0d093ce96c6a00f3a157dc0a05e1fc5d8de583c25e09c77348f5825fcd4631396f3e8c26f5c1432784eb8c377fb520d28aedcaa5addfda6eed11da4d2cc91c2e3c3728c763c9d58283af32d00aa1910011a552adabee99d1387d14e582cf68fea46b729eddd0d3ad8eb9125d5fb060f4d6f70a166cc3ce9b02a7bc65200399fc2a47b90039ac23afb853925195e8079da20cbffea72365158fbd94a6e0a654f6c09a8032fb26df99913c2300e03428ab3cd1b3f7aee15460732d445b4797673b47a93a325b2e5157106ade0959be9c4562d5a4292a9ac94940c66375e559f34e57a1158b5d77a5dc9515bdab63799627301f19398d84c7afde812100a65a1642e9515a30434d344b380a92eeb2013a0f63cba648c37095bfd985c607b120f1769a79f1fd7c03f09f966b72945606ade67f9aaa631948bb82f9ae3f89ecf6db12c02d174f62ad6e1b60f4819ae19f4979e0f9dcf51bedf4b1bd1de73bc2adb1923544ede6dbd40ed4c559cf1f079f5dc8986691540e13f5a2505cc0923ca8fe2608ec92b95dbb5facc320e43b2049b79eb02618f6fab08b7e9dbe00fcd69b338b1bb6a9beae531972e16a19d94bd2273c4d042eca34dd7c5aebfbf16552681ad4e243824a9c5d0d8b8d3aba4c102fb76c216c230c2ec34838a0817b03a04480c61c899b2e442bcf2567d4e73000d9c9d4d0acb712df0183fc288634cfde234b94fdbbc0b7e66ea5b6437f312167b1ea93e2a6b2105308d8198a2d4054ba2ff2855250e0e6c952364056e2d3d09e5a2c578837d6521ffb82780f169d07f2f032b34d62f2712a77a56175017257ea1caea41acbbc520b429bd4e3ec3f9a6eafce46731dd3396f1ce1a6198927fd2dbefb3f77c9173be0934747ca47b98c6548c8cd07249d9715414b8a8ddc8430575d8b8903d3923089282a3ccead6e11044c67f3d5d8ed8cc0c0331f2dc09e1bae77ab55307e6445ad382451eff64faca8a4c0cba7cfa2fc9b087afb040e594115c35ce1dbec69ef1e5af8003339afda5faa1be1a3da7c5cb84273009c32d300fba7d222d2dc783241a9414ee30c8bd7e655c09a7f50dfb249ae9b15284b971503f6ce8866a1b36f993acf28d387da88c8defd323d1cd91d4eb46ff87458269a134675556b067a1b71829b7706ba58c93a919884089dc333c9b5d8279dbcc20071991762d2569c8ff5f21783e2961228b2006f8805750c0f9f4f9dc3df86dae1ab98af22122966a6ba04ccbb2bdf90e91e1f2595b979b6934fe132eda34cec0f83132f3867a197a6dfd0d43528bd56613732704bb62b12f4ede7439b2150384fa04db658fda2ddf97ab571f02d150c50c95009d0aa2e553019ac1cf9bbaf15474bf66d69224913b11080badb47d4a085fa13e965de6e95b7aa6e07bb212774d0240738cc07ccc1670d33c100cead3fb99c3f32fdd97c9b16956b1c22a90cd5c7aa0d920dae9e2b149fb5f9870129a0e97d1edba0dbf8fc4fcca6c65c639dd3eaa8803b1e9e601907e086ed1079ff6bc6de941c91df0634ce3730b8035bfdfa699304666920bfb092354da1f0bdd28c9023bd2e152e931e82eeabb86b0323c789daac94422eb7855f18775917e12feb85019e2e017303002ff8e04513ae0fb03f334a76addd8fcbd69ed25931f44044eeffb5d66cab5a22b21e85324946ab15408dd5d68b17727d2e4779bc378750eaa6ef6e943966c0dc4d066c6b8b8945023a0fc49f81a9c15a35d350e3d741652b8a8014b3649dcfd028f25c0b38b7cc14f7e375acfd3960af2eefc49ac6589f38791c9c0b0ea4e55992274052eed15cb8de213794636c4db2385eb9bcfc28f8a97e7c7ac949cd519ab62d1ab10d855a7ac6acda00b78d35d80a9ab4b7099603782384c461dee90abcc14a539779435cf0677eb0b6ff7e47488667788f9b0fd7d5e0cf53aee5ca0071fa30c062da3c44e79096e24594c6e202b7cdbdc49be2ddac8058c7ded15f07d4c413886fdd7017b9fedb86e39917fd1e81b294675bde06c8fac0dbce7f4b90b3859c66f9f6fec640c6781728a8b347da28b4360924ef68c3c740ed5ddbf013720c6de54d9bce5232864f9e80a652cd778641c327876b2a3e1049355a58fb5054aa17064e97142d64be9daf5d1b162566a009c69133f60e3d4c2a53c153185c659d16236fcc1690eed8c6c2e4f8b172eec457a9407003ddad723e3b183e81b17ddbe46ba368ab3e3ff574d9e3fb82e102ab46d7f608e235d064ea963fdf1622ed7278a27fd8210ad39c3acd9069abba71ca051b64561683068ca6a1be906c196ddde1839b3897d5af8fee51614d73e51511b03a5763f3ed3e64bf7293118dc321cf5e940a2829c6b8550083d66d31680fb55af098d9ccebde9882f818c29f4cbb55c26a97c359d8606bff3744ff3efc22e8d34e67b7c97b567483963c574bd1dac8c46c911c48b6e29e73e52f8c9385729a73b70d2ebba9e744247d9003a962fd607686e6c5972b59616acfe327d8b736f38c703832d7690c6474641bf87538e785353c1fd7df1b5ecb1200eed8c5857abd16c26ae72d0147de475b0c4bc98dbff530b334c9c50607bd46ddbcb1ffebf7513cc842e4cdd6c8c00a284e81cb531a04f75210add4f73db3da9783694fc541cd470368c8776973f02835dc355ef54ca90a580a45a2df6137c43b151ade1e51bc879e7fb43141541bfab79b3eaf0eab323c7147ecce6eb3eb3eb02a204755cdcc7405ad903b91fa4d297262cf77fe395a18e269ec36bd534d4939e78719d7c312ce5205979b2fb92fbf9e1d1effb0f663b9361893fcb11bfd66c92af3394e899876990883e9f5374b5642c68e8468498612e3848d367598c2cb0806b7f0c7f4b004dde2b4cc50161a4d293f2ec89c4cd35a767736f9282f848b9d1cdf405f61abcb3e50ff4092d2afb86fdceeec4791d892546e29495f97876cd8015f193113f1b8584a9ff3f32650e29126b81254961e677b6f67023295567f574364b7320313db988616ac123368179beaabb5a56257f0b6df8f6956324ac31d3e8db83dc994425ad80e235051af62ec79a6dc4bfa36283af72af26136c8f5eeb32e1fa1b9e21a228a2a12aed39e717e8f404334d8367ef3edceab1f3e250ab9dc1e89f9b84e658d38806f4d4a09ff07ca539077a5a496699a9d7d4aafa78120eb90f404c2a6ae00aa1c813b25cb6ff9dab8b66b1dd83c80c1225aa24a47df3cbff7f6842d9486bbcd4179150e1bcad3caa604ac1db71aac913c9d3cbc154182187e2aeb852011b22e40b25f9cb31ab7f458a11b1836085c4a99a633215684e7fc70646ee2158faf8329c320a3bc050cdbbac216a18a88af2dd1bb4d648110c5c90f7f5948128eafbe36c01ea709ca8b5fb8ad9eb7384feb7055220aed45690664b0312052792a5b9dfc90a1248995cf68f80b7822fa577724ad143b1d987d2fae7992d3ad270e6b1fc4f1bb3130f134607e8129a6b1442ac05f114062be3604d7cf1595022f49e7cc55282f0f666ad6ff3b03d692c2a66fc2eb5fd0751e4514229861e2343d43162dcbdec156aa5f2c5f9aafaf470f17e5ed688b3516647b9a1a220e843791ddda20fcc444ef63ba31fc27e62fee4676f097f3fecc625755b26ad48dc7ceec1920443c6c466c7bb36e91082f115f4e563a562af1ce5cf37c45bb2da72ab39ecf00e0349eed7e87994b6670e8bde4f4f9142cb99f6bf36eb41bb4dc72b6c6a6686b63fa21c167b1ba5ff481abcc2ca29905d6b75eff932296d75a90080f3a727690eab0e804aa95b545f55107d308f4cd9884d75c28388151a72e82291f79eb52921718903a8bf029a3e7c0ce28f204926dc221f78711a08834a917a0843d8249ca317c7154b88a5a10a09d7477fcf2d6296725bb6a69c2739964a768cd6ae51d7e7de63bb17fe7fabebb0ee46c285c683a41203d059a5c89024a7f3c59915121921000075ed397d30ada6d56e6caa685cb98cc0bf279fa2d96408611ae7e43c3bf70f73148c6615f20060b5c337c6555a3bdb1870bededac9eff951cf1c7fd4f0046d7661789bcfd56fe6198b502e01f90333ad6e9354db449435d0506526bb0c65595dead87be428eb1b988906de152f9a7f126ede6b933c2de1f7d20ec3e64c7468906fba2bdea8b300bab203542dec13a90e4195b3f7da1b669bfe9e8989440b24807ffd44d9e3d61e098caaa029a7063d25604cbacc5f2b3671a163b80a440948230ae90dc3bd7fd46b667cc7d6dba2f53775e9a2180ced0e1cdc6e1275e741607d6dfe40f91ec81602f9bc7c26c322b82114949fd17a9284dd2918326b7880f42db6e468b80f980db98e31ad57be1f131407a0d099cbad9eff25916048e4210c0eb0b68d4d11cc1545cb46114b3969ad0d7a6570b7571c877ed8060cf8b736f8c82ddb64d19fc29af3453f0efe33c68c21c7c8c054707790cf5c056d0ba408d077fb65cef8fb071398ce35cc95c48ba546230f4dd60ad633f81478c87019736044783599a17d4dafd30cc6f4278cae2384763ff2ef395b8e7265ebf0453cef5c98e62a0e48ad422af17a4eee1acc10a51a3fb6e98594309e4976f71027dfe7a9593cdb6860cba745f2346c8d4868b07f381d3c137b396780545e0ea331e586b176821e45f67761fd8b4c6cbbecfd34b72201f6145a6b06eaa8fa9872a54734acbccad497390ff69f676c496258479aa06d9fd1ecec02a01216fd66554afbd5e728608f4572a4d485e57ff5bfc3df", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffff28, 0x3, 0x0, 0x0, 0x0, 0x100000, 0xc000, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.486099454s ago: executing program 1 (id=757): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) socket$inet(0x2, 0x3, 0x2) syz_emit_ethernet(0x7e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x70, 0x65, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x1f, {0x15, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0x2, 0xe5c, @loopback=0xac14140a, @remote, {[@timestamp={0x44, 0xc, 0x37, 0x0, 0x2, [0x7ff, 0x7]}, @timestamp_addr={0x44, 0x34, 0x87, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x329}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.347208156s ago: executing program 2 (id=758): r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2003, @empty, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x393b, 0x4) sendfile(r0, r1, 0x0, 0xffffffff) 1.346944388s ago: executing program 1 (id=759): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) semctl$GETZCNT(r0, 0x2, 0xf, 0x0) 1.255064504s ago: executing program 2 (id=761): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x8480, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000840)={0x28, 0x3, r1, 0x0, &(0x7f0000007000/0x3000)=nil, 0x3000, 0x7ffffffffffffff7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000, 0xfffffffffffffffa}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r1, r1, 0x1002, 0x3, 0x8000000000000001}) 1.17194277s ago: executing program 4 (id=763): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f00000023c0)=ANY=[@ANYBLOB="00040800ed0619000d004a"], 0xfea) 1.111565515s ago: executing program 2 (id=764): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000000, 0x180862) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000080)={0x0, 0x20, 0x6, 0x0, 0x0, 0x6}) ioctl$LOOP_GET_STATUS(r0, 0x40081271, 0xfffffffffffffffe) 1.060895312s ago: executing program 2 (id=766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0xfff2}, {0xfff1, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@gettfilter={0x24, 0x28, 0x6ce324a938346939, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x3}, {0x0, 0xffff}}}, 0x24}}, 0x0) 931.018729ms ago: executing program 2 (id=767): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') writev(r3, &(0x7f0000003740)=[{&(0x7f00000001c0)='deny', 0x4}], 0x1) 922.882375ms ago: executing program 4 (id=769): epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f000000a4c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000140)) 842.857901ms ago: executing program 3 (id=770): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0x79, 0x0, 0x0, 0x9c8}, @initr0, @exit, @printk={@x={0x18, 0x0}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x9e}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) 747.430611ms ago: executing program 3 (id=771): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe20, 0x0, @mcast2, 0x7}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x4e20, 0x100000, @mcast2, 0x3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r11, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4) bind$inet6(r11, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @dev={0xfe, 0x80, '\x00', 0x2f}, 0xa}, 0x1c) 729.129462ms ago: executing program 3 (id=772): r0 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffb000/0x3000)=nil) mount$fuse(0x0, 0x0, 0x0, 0x80, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRESHEX, @ANYBLOB=',rootmote=0000000000000000', @ANYRESDEC=r0]) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') fchdir(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x27) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) 652.409421ms ago: executing program 3 (id=773): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x4c) 575.620115ms ago: executing program 4 (id=774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = getpid() setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) sendto$inet(r0, &(0x7f00000004c0)='<', 0x1, 0x801, 0x0, 0x0) 569.345781ms ago: executing program 0 (id=775): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0xffff}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r0, 0x1) 560.151588ms ago: executing program 3 (id=776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 518.213143ms ago: executing program 4 (id=777): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) fcntl$notify(r0, 0x402, 0x80000030) r1 = getpid() r2 = syz_open_procfs(r1, &(0x7f0000000000)='ns\x00') getdents64(r2, &(0x7f00000002c0)=""/141, 0x8d) 391.113512ms ago: executing program 4 (id=778): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_freeze_timeout', 0x0, 0xed) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 376.038608ms ago: executing program 1 (id=779): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000500)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0x8, {0x0, r1, 0x3}}, 0x18) 54.116732ms ago: executing program 1 (id=780): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) 0s ago: executing program 3 (id=781): r0 = socket$packet(0x11, 0x3, 0x300) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_2={0x8, 0xfe, {0xb}}, 0x100bf) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000390429bd7000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="0198000000000000380012800b000100697036746e6c000028000280140003"], 0x58}, 0x1, 0x0, 0x0, 0x2400c007}, 0x4048004) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x5c, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r3}, 0x14) kernel console output (not intermixed with test programs): 125.369775][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 125.379690][ T9] usb 5-1: USB disconnect, device number 15 [ 125.611349][ T6672] netlink: 'syz.1.226': attribute type 6 has an invalid length. [ 125.742554][ T6689] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 125.749999][ T6689] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 125.885562][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.232'. [ 125.963539][ T796] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 125.977771][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.995725][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.024000][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 126.038080][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 126.081784][ T24] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 126.114541][ T24] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 126.135443][ T5827] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.165456][ T24] usb 2-1: USB disconnect, device number 15 [ 126.292448][ T5827] usb 1-1: Using ep0 maxpacket: 8 [ 126.317950][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.356372][ T5827] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 126.381561][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.395567][ T5827] usb 1-1: config 0 descriptor?? [ 126.407272][ T5827] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 126.504741][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.686826][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 126.698518][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.709869][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.721816][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 126.903483][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.931415][ T24] usb 5-1: config 0 descriptor?? [ 127.251115][ T24] hub 5-1:0.0: USB hub found [ 127.320334][ T5827] usb 3-1: USB disconnect, device number 18 [ 127.496919][ T24] hub 5-1:0.0: 1 port detected [ 128.185226][ T24] hub 5-1:0.0: activate --> -90 [ 128.439283][ T6726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.455112][ T6726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.547475][ T6730] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 128.606422][ T6728] netlink: 180 bytes leftover after parsing attributes in process `syz.1.243'. [ 128.808436][ T6736] loop5: detected capacity change from 0 to 7 [ 128.818633][ T6736] Dev loop5: unable to read RDB block 7 [ 128.837258][ T6736] loop5: unable to read partition table [ 128.849518][ T6736] loop5: partition table beyond EOD, truncated [ 128.858281][ T10] usb 5-1: USB disconnect, device number 16 [ 128.883995][ T6736] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 128.931504][ T47] usb 1-1: USB disconnect, device number 5 [ 129.240227][ T6742] syzkaller0: entered promiscuous mode [ 129.253742][ T6742] syzkaller0: entered allmulticast mode [ 129.530841][ T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.583870][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 129.872360][ T24] usb 2-1: device descriptor read/64, error -71 [ 129.898279][ T47] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 129.909764][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.918184][ T47] usb 1-1: Product: syz [ 129.922416][ T47] usb 1-1: Manufacturer: syz [ 129.927014][ T47] usb 1-1: SerialNumber: syz [ 130.142422][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.302405][ T24] usb 2-1: device descriptor read/64, error -71 [ 130.359558][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 130.373357][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 130.412870][ T24] usb usb2-port1: attempt power cycle [ 130.452409][ T5827] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 130.452409][ T10] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 130.591467][ T6744] netlink: 'syz.0.248': attribute type 6 has an invalid length. [ 130.622368][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 130.623948][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.634013][ T5827] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.640549][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 130.658266][ T5827] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 130.669719][ T10] usb 3-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 130.679318][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.690385][ T10] usb 3-1: config 0 descriptor?? [ 130.774260][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.785424][ T5827] usb 5-1: config 0 descriptor?? [ 130.794366][ T5827] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 130.842635][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 130.863044][ T24] usb 2-1: device descriptor read/8, error -71 [ 130.978558][ T6759] pim6reg: entered allmulticast mode [ 130.984660][ T6759] pim6reg: left allmulticast mode [ 130.989887][ T6759] FAULT_INJECTION: forcing a failure. [ 130.989887][ T6759] name failslab, interval 1, probability 0, space 0, times 0 [ 131.004778][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.2.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.004805][ T6759] Tainted: [L]=SOFTLOCKUP [ 131.004811][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 131.004819][ T6759] Call Trace: [ 131.004826][ T6759] [ 131.004832][ T6759] dump_stack_lvl+0xe8/0x150 [ 131.004859][ T6759] should_fail_ex+0x412/0x560 [ 131.004885][ T6759] should_failslab+0xa8/0x100 [ 131.004906][ T6759] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 131.004924][ T6759] ? __alloc_skb+0x1d0/0x7d0 [ 131.004938][ T6759] ? __local_bh_enable_ip+0xd0/0x130 [ 131.004961][ T6759] __alloc_skb+0x1d0/0x7d0 [ 131.004981][ T6759] rtmsg_ifinfo_build_skb+0x84/0x260 [ 131.005005][ T6759] rtmsg_ifinfo+0x8c/0x1a0 [ 131.005029][ T6759] netif_close_many+0x284/0x420 [ 131.005054][ T6759] ? __pfx_netif_close_many+0x10/0x10 [ 131.005073][ T6759] ? do_ipv6_setsockopt+0x38c/0x31c0 [ 131.005088][ T6759] ? ipv6_setsockopt+0x59/0x170 [ 131.005101][ T6759] ? rawv6_setsockopt+0x276/0x5f0 [ 131.005116][ T6759] ? do_sock_setsockopt+0x17c/0x1b0 [ 131.005131][ T6759] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 131.005146][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005166][ T6759] unregister_netdevice_many_notify+0xb47/0x2370 [ 131.005187][ T6759] ? nlmsg_notify+0xf0/0x1a0 [ 131.005205][ T6759] ? nlmsg_notify+0x14a/0x1a0 [ 131.005231][ T6759] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 131.005252][ T6759] ? __pfx_mif6_delete+0x10/0x10 [ 131.005276][ T6759] ? rcu_is_watching+0x15/0xb0 [ 131.005308][ T6759] mroute_clean_tables+0x3bb/0x18e0 [ 131.005335][ T6759] ? __lock_acquire+0x6b5/0x2cf0 [ 131.005362][ T6759] ? __pfx___mutex_lock+0x10/0x10 [ 131.005380][ T6759] ? __pfx_mroute_clean_tables+0x10/0x10 [ 131.005408][ T6759] ? _copy_from_user+0x94/0xb0 [ 131.005426][ T6759] ip6_mroute_setsockopt+0xa83/0xf90 [ 131.005453][ T6759] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 131.005472][ T6759] ? trace_sched_exit_tp+0x3a/0x150 [ 131.005511][ T6759] do_ipv6_setsockopt+0x38c/0x31c0 [ 131.005536][ T6759] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 131.005562][ T6759] ? aa_label_sk_perm+0x532/0x6e0 [ 131.005579][ T6759] ? irqentry_exit+0x59e/0x620 [ 131.005598][ T6759] ? rcu_is_watching+0x15/0xb0 [ 131.005620][ T6759] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 131.005655][ T6759] ? __lock_acquire+0x6b5/0x2cf0 [ 131.005685][ T6759] ? aa_sk_perm+0x6d5/0x900 [ 131.005706][ T6759] ipv6_setsockopt+0x59/0x170 [ 131.005726][ T6759] rawv6_setsockopt+0x276/0x5f0 [ 131.005745][ T6759] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 131.005760][ T6759] ? aa_sock_opt_perm+0xff/0x1a0 [ 131.005782][ T6759] ? sock_common_setsockopt+0x36/0xc0 [ 131.005802][ T6759] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 131.005823][ T6759] do_sock_setsockopt+0x17c/0x1b0 [ 131.005844][ T6759] __x64_sys_setsockopt+0x13d/0x1b0 [ 131.005865][ T6759] do_syscall_64+0x14d/0xf80 [ 131.005881][ T6759] ? trace_irq_disable+0x3b/0x150 [ 131.005901][ T6759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005916][ T6759] ? clear_bhb_loop+0x40/0x90 [ 131.005934][ T6759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.005949][ T6759] RIP: 0033:0x7fc29059c799 [ 131.005965][ T6759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.005976][ T6759] RSP: 002b:00007fc29149b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 131.005993][ T6759] RAX: ffffffffffffffda RBX: 00007fc290815fa0 RCX: 00007fc29059c799 [ 131.006004][ T6759] RDX: 00000000000000d4 RSI: 0000000000000029 RDI: 0000000000000004 [ 131.006013][ T6759] RBP: 00007fc29149b090 R08: 0000000000000004 R09: 0000000000000000 [ 131.006022][ T6759] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 131.006031][ T6759] R13: 00007fc290816038 R14: 00007fc290815fa0 R15: 00007fc29093fa48 [ 131.006055][ T6759] [ 131.006217][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 131.400225][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 131.410151][ T47] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 131.422434][ T47] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 131.450751][ T47] usb 1-1: USB disconnect, device number 6 [ 131.460428][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 131.461168][ T10] usb 3-1: USB disconnect, device number 19 [ 131.484659][ T24] usb 2-1: device descriptor read/8, error -71 [ 131.593114][ T24] usb usb2-port1: unable to enumerate USB device [ 131.664156][ T5827] gspca_vc032x: reg_w err -71 [ 131.668921][ T5827] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 131.678184][ T5827] usb 5-1: USB disconnect, device number 17 [ 132.024177][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.204569][ T6768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.238523][ T6768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.288940][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 132.297940][ T10] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 132.320730][ T10] usb 1-1: can't read configurations, error -71 [ 132.603071][ T47] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 132.662440][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 132.739926][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747838][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.772369][ T47] usb 5-1: Using ep0 maxpacket: 32 [ 132.779654][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.790892][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.802240][ T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 132.811487][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.832589][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 132.840584][ T47] usb 5-1: config 0 descriptor?? [ 132.868550][ T47] hub 5-1:0.0: USB hub found [ 132.868882][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.892153][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.918399][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 132.932122][ T9] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 132.942183][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.971375][ T9] usb 2-1: config 0 descriptor?? [ 133.073748][ T47] hub 5-1:0.0: 1 port detected [ 133.189020][ T6781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.206893][ T6781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.382485][ T5827] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 133.461596][ T9] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max [ 133.495959][ T9] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0 [ 133.519991][ T9] microsoft 0003:045E:07DA.0007: implement() called with n (152) > 32! (kworker/0:0) [ 133.553993][ T5827] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.615336][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 133.634923][ T6781] tc_dump_action: action bad kind [ 133.638591][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.648252][ T5827] usb 3-1: Product: syz [ 133.652451][ T9] microsoft 0003:045E:07DA.0007: unsupported Resolution Multiplier 0 [ 133.652739][ T5827] usb 3-1: Manufacturer: syz [ 133.665436][ T5827] usb 3-1: SerialNumber: syz [ 133.671042][ T9] microsoft 0003:045E:07DA.0007: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 133.678419][ T47] hub 5-1:0.0: activate --> -90 [ 133.693337][ T9] microsoft 0003:045E:07DA.0007: no inputs found [ 133.715143][ T5827] cdc_ncm 3-1:1.0: skipping garbage [ 133.715983][ T9] microsoft 0003:045E:07DA.0007: could not initialize ff, continuing anyway [ 133.816135][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.872371][ T796] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.906992][ T5910] usb 2-1: USB disconnect, device number 20 [ 133.939305][ T6802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.962958][ T6802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.985584][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 133.994711][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.002791][ T10] usb 1-1: Product: syz [ 134.008633][ T10] usb 1-1: Manufacturer: syz [ 134.019084][ T10] usb 1-1: SerialNumber: syz [ 134.032823][ T796] usb 4-1: Using ep0 maxpacket: 32 [ 134.039509][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.050679][ T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.060693][ T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 134.069900][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.081061][ T796] usb 4-1: config 0 descriptor?? [ 134.089283][ T796] hub 4-1:0.0: USB hub found [ 134.115083][ T5827] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 134.121313][ T5827] cdc_ncm 3-1:1.0: bind() failure [ 134.132479][ T5827] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 134.139318][ T5827] cdc_ncm 3-1:1.1: bind() failure [ 134.176533][ T5827] usb 5-1: USB disconnect, device number 18 [ 134.245064][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 134.258099][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 134.272343][ T10] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.289274][ T10] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 134.307607][ T9] usb 3-1: USB disconnect, device number 20 [ 134.337386][ T796] hub 4-1:0.0: 1 port detected [ 134.616472][ T6811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.267'. [ 135.051848][ T796] hub 4-1:0.0: activate --> -90 [ 135.072224][ T6811] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 135.109257][ T29] audit: type=1326 audit(1773569537.398:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6809 comm="syz.1.268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x0 [ 135.177125][ T6816] netlink: 'syz.0.266': attribute type 6 has an invalid length. [ 135.256510][ T6820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.269'. [ 135.276513][ T6820] netlink: 40 bytes leftover after parsing attributes in process `syz.4.269'. [ 135.518690][ T6822] syzkaller1: entered promiscuous mode [ 135.525484][ T6822] syzkaller1: entered allmulticast mode [ 135.546737][ T47] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 135.655572][ T47] usb 4-1: USB disconnect, device number 14 [ 135.655763][ T796] usb 4-1-port1: cannot disable (err = -71) [ 135.811071][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.272'. [ 136.113143][ T796] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 136.242412][ T796] usb 3-1: device descriptor read/64, error -71 [ 136.325070][ T6838] loop5: detected capacity change from 0 to 7 [ 136.353423][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 136.363014][ T6838] Dev loop5: unable to read RDB block 7 [ 136.368701][ T6838] loop5: unable to read partition table [ 136.379306][ T6838] loop5: partition table beyond EOD, truncated [ 136.394608][ T6838] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 136.482573][ T796] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 136.526874][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 136.537618][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.554555][ T24] usb 5-1: Product: syz [ 136.560949][ T24] usb 5-1: Manufacturer: syz [ 136.569907][ T24] usb 5-1: SerialNumber: syz [ 136.591579][ T5192] usb 1-1: USB disconnect, device number 9 [ 136.612407][ T796] usb 3-1: device descriptor read/64, error -71 [ 136.724028][ T796] usb usb3-port1: attempt power cycle [ 136.983193][ T5192] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 137.082419][ T796] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 137.095494][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 137.112682][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 137.113023][ T796] usb 3-1: device descriptor read/8, error -71 [ 137.173089][ T5192] usb 1-1: Using ep0 maxpacket: 32 [ 137.186327][ T5192] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 137.198664][ T5192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.218623][ T5192] usb 1-1: config 0 descriptor?? [ 137.302816][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 137.399553][ T796] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 137.423005][ T796] usb 3-1: device descriptor read/8, error -71 [ 137.463053][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 137.479814][ T5192] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 137.505731][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.521312][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.530794][ T6834] binder: BINDER_SET_CONTEXT_MGR already set [ 137.538718][ T5192] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.542609][ T6834] binder: 6833:6834 ioctl 4018620d 200000000040 returned -16 [ 137.549522][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 137.595516][ T5192] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 137.603509][ T5192] usb 1-1: media controller created [ 137.610549][ T6834] binder: 6833:6834 unknown command 1 [ 137.611045][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.624387][ T6834] binder: 6833:6834 ioctl c0306201 200000000180 returned -22 [ 137.624806][ T796] usb usb3-port1: unable to enumerate USB device [ 137.647979][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 137.666371][ T5192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.774072][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 137.800265][ T9] usb 2-1: config 0 descriptor?? [ 137.811253][ T9] hub 2-1:0.0: USB hub found [ 137.823000][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 137.839760][ T5192] az6027: usb out operation failed. (-71) [ 137.849399][ T5192] az6027: usb out operation failed. (-71) [ 137.880785][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 137.888830][ T5192] stb0899_attach: Driver disabled by Kconfig [ 137.904652][ T5192] az6027: no front-end attached [ 137.904652][ T5192] [ 137.915203][ T5192] az6027: usb out operation failed. (-71) [ 137.916484][ T24] usb 5-1: USB disconnect, device number 19 [ 137.920993][ T5192] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 137.957933][ T5192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 137.989210][ T5192] dvb-usb: schedule remote query interval to 400 msecs. [ 138.006787][ T5192] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 138.036805][ T9] hub 2-1:0.0: 1 port detected [ 138.048273][ T5192] usb 1-1: USB disconnect, device number 10 [ 138.201257][ T5192] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 138.538234][ T6853] syzkaller1: entered promiscuous mode [ 138.544249][ T6853] syzkaller1: entered allmulticast mode [ 138.646579][ T9] hub 2-1:0.0: activate --> -90 [ 138.812459][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 138.842427][ T796] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 138.908453][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.965456][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.982407][ T5192] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 138.993860][ T24] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.004370][ T796] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 139.012378][ T24] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.022504][ T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.050730][ T796] usb 4-1: config 0 descriptor?? [ 139.063157][ T24] usb 5-1: config 220 has no interface number 2 [ 139.090601][ T24] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.112778][ T24] usb 5-1: config 220 interface 0 has no altsetting 0 [ 139.120442][ T24] usb 5-1: config 220 interface 76 has no altsetting 0 [ 139.129188][ T24] usb 5-1: config 220 interface 1 has no altsetting 0 [ 139.134566][ T5192] usb 1-1: Using ep0 maxpacket: 32 [ 139.145080][ T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.155587][ T5192] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 139.172859][ T5192] usb 1-1: config 0 has no interface number 0 [ 139.172973][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.189108][ T24] usb 5-1: Product: syz [ 139.191388][ T5192] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 139.193867][ T24] usb 5-1: Manufacturer: syz [ 139.207291][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.207839][ T24] usb 5-1: SerialNumber: syz [ 139.222985][ T10] usb 2-1: USB disconnect, device number 21 [ 139.253260][ T5192] usb 1-1: Product: syz [ 139.257509][ T5192] usb 1-1: Manufacturer: syz [ 139.262150][ T5192] usb 1-1: SerialNumber: syz [ 139.277113][ T5192] usb 1-1: config 0 descriptor?? [ 139.612717][ T5910] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 139.748332][ T5192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 139.763711][ T5192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 139.866780][ T5910] usb 3-1: Using ep0 maxpacket: 32 [ 139.878107][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.892172][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.905593][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 139.921933][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.946173][ T5910] usb 3-1: config 0 descriptor?? [ 139.968740][ T5910] hub 3-1:0.0: USB hub found [ 140.223388][ T5910] hub 3-1:0.0: 1 port detected [ 140.655428][ T5192] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 140.670758][ T5192] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 140.870151][ T5910] hub 3-1:0.0: activate --> -90 [ 141.152554][ T5192] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 141.306079][ T5192] usb 2-1: unable to get BOS descriptor or descriptor too short [ 141.321700][ T5192] usb 2-1: config 0 has no interfaces? [ 141.328246][ T5192] usb 2-1: language id specifier not provided by device, defaulting to English [ 141.339559][ T5192] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 141.363482][ T5192] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.385533][ T5192] usb 2-1: Product: syz [ 141.390033][ T5192] usb 2-1: Manufacturer: 󄢷 [ 141.394792][ T5192] usb 2-1: SerialNumber: syz [ 141.409529][ T5192] usb 2-1: config 0 descriptor?? [ 141.543030][ T24] usb 5-1: selecting invalid altsetting 0 [ 141.566945][ T24] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 141.577123][ T24] uvcvideo 5-1:220.0: No valid video chain found. [ 141.593956][ T24] usb 5-1: selecting invalid altsetting 0 [ 141.599829][ T24] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 141.614156][ T24] usb 5-1: USB disconnect, device number 20 [ 141.689489][ T47] usb 2-1: USB disconnect, device number 22 [ 141.720303][ T6883] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 141.797045][ T796] usb 4-1: Cannot read MAC address [ 141.822597][ T796] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 141.860512][ T796] usb 4-1: USB disconnect, device number 15 [ 141.954569][ T6889] netlink: 'syz.3.291': attribute type 21 has an invalid length. [ 141.963379][ T6889] IPv6: NLM_F_CREATE should be specified when creating new route [ 141.978141][ T6889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.985554][ T6889] IPv6: NLM_F_CREATE should be set when creating new route [ 141.992921][ T6889] IPv6: NLM_F_CREATE should be set when creating new route [ 142.000139][ T6889] IPv6: NLM_F_CREATE should be set when creating new route [ 142.094406][ T5910] usb 3-1-port1: cannot disable (err = -32) [ 142.104015][ T47] usb 1-1: USB disconnect, device number 11 [ 142.123257][ T5910] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 142.137491][ T6891] gretap0: entered promiscuous mode [ 142.153575][ T6891] vlan2: entered promiscuous mode [ 142.562679][ T47] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.594290][ T24] usb 3-1: reset high-speed USB device number 25 using dummy_hcd [ 142.615849][ T24] usb 3-1: device reset changed ep0 maxpacket size! [ 142.626056][ T24] usb 3-1: USB disconnect, device number 25 [ 142.722350][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 142.729286][ T47] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 142.738925][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.749722][ T47] usb 1-1: config 0 descriptor?? [ 142.792904][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 142.942366][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 142.950052][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.961565][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.962878][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 142.979873][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.991572][ T47] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 143.000673][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.027782][ T9] usb 5-1: config 0 descriptor?? [ 143.040498][ T9] hub 5-1:0.0: USB hub found [ 143.058829][ T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.111501][ T47] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 143.129984][ T47] usb 1-1: media controller created [ 143.142948][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 143.152086][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 143.161507][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.170627][ T24] usb 3-1: Product: syz [ 143.312699][ T9] hub 5-1:0.0: 1 port detected [ 143.321217][ T24] usb 3-1: Manufacturer: syz [ 143.340446][ T24] usb 3-1: SerialNumber: syz [ 143.346413][ T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.362121][ T24] usb 3-1: config 0 descriptor?? [ 143.385918][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 143.419569][ T47] az6027: usb out operation failed. (-71) [ 143.433086][ T47] az6027: usb out operation failed. (-71) [ 143.442420][ T47] stb0899_attach: Driver disabled by Kconfig [ 143.453497][ T47] az6027: no front-end attached [ 143.453497][ T47] [ 143.465101][ T47] az6027: usb out operation failed. (-71) [ 143.474791][ T47] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 143.514356][ T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 143.556230][ T47] dvb-usb: schedule remote query interval to 400 msecs. [ 143.576099][ T47] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 143.613203][ T47] usb 1-1: USB disconnect, device number 12 [ 143.755606][ T47] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 143.925307][ T9] hub 5-1:0.0: activate --> -90 [ 144.201082][ T6919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.238868][ T6919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.477607][ T5911] usb 5-1: USB disconnect, device number 21 [ 144.522546][ T5192] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 144.593122][ T47] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 144.651427][ T6902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.687554][ T5192] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 144.696764][ T5192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.743415][ T5192] usb 2-1: config 0 descriptor?? [ 144.761462][ T6902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.788777][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.802178][ T47] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.822533][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.297'. [ 144.826014][ T47] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 144.850859][ T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.865118][ T47] usb 1-1: Product: syz [ 144.869496][ T47] usb 1-1: Manufacturer: syz [ 144.875850][ T47] usb 1-1: SerialNumber: syz [ 144.889279][ T47] usb 1-1: config 0 descriptor?? [ 144.936372][ T24] gspca_sonixj: reg_w1 err -71 [ 144.973989][ T6926] FAULT_INJECTION: forcing a failure. [ 144.973989][ T6926] name failslab, interval 1, probability 0, space 0, times 0 [ 144.987077][ T6926] CPU: 0 UID: 0 PID: 6926 Comm: syz.3.303 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.987107][ T6926] Tainted: [L]=SOFTLOCKUP [ 144.987113][ T6926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 144.987123][ T6926] Call Trace: [ 144.987131][ T6926] [ 144.987139][ T6926] dump_stack_lvl+0xe8/0x150 [ 144.987166][ T6926] should_fail_ex+0x412/0x560 [ 144.987188][ T6926] should_failslab+0xa8/0x100 [ 144.987201][ T6926] __kmalloc_cache_noprof+0x88/0x660 [ 144.987218][ T6926] ? __d_alloc+0x37/0x6f0 [ 144.987233][ T6926] ? fuse_dentry_init+0x51/0xe0 [ 144.987251][ T6926] ? kmem_cache_alloc_lru_noprof+0x303/0x640 [ 144.987271][ T6926] fuse_dentry_init+0x51/0xe0 [ 144.987292][ T6926] __d_alloc+0x47b/0x6f0 [ 144.987309][ T6926] d_alloc_parallel+0xe6/0x1610 [ 144.987320][ T6926] ? __follow_mount_rcu+0x1d8/0x560 [ 144.987330][ T6926] ? __pfx_fuse_permission+0x10/0x10 [ 144.987342][ T6926] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 144.987356][ T6926] ? look_up_lock_class+0x57/0x110 [ 144.987371][ T6926] ? register_lock_class+0x31/0x2e0 [ 144.987394][ T6926] ? __lock_acquire+0x6b5/0x2cf0 [ 144.987412][ T6926] ? __pfx_d_alloc_parallel+0x10/0x10 [ 144.987431][ T6926] ? __raw_spin_lock_init+0x45/0x100 [ 144.987449][ T6926] ? __init_waitqueue_head+0xa9/0x150 [ 144.987470][ T6926] __lookup_slow+0x137/0x410 [ 144.987494][ T6926] ? __pfx___lookup_slow+0x10/0x10 [ 144.987516][ T6926] ? down_read+0x272/0x2e0 [ 144.987534][ T6926] lookup_slow+0x53/0x70 [ 144.987551][ T6926] path_lookupat+0x3f5/0x8c0 [ 144.987586][ T6926] filename_lookup+0x256/0x5d0 [ 144.987612][ T6926] ? __pfx_filename_lookup+0x10/0x10 [ 144.987643][ T6926] vfs_statx+0xfc/0x200 [ 144.987657][ T6926] ? __pfx_vfs_statx+0x10/0x10 [ 144.987675][ T6926] __se_sys_statx+0x1e9/0x2a0 [ 144.987702][ T6926] ? __pfx___se_sys_statx+0x10/0x10 [ 144.987749][ T6926] ? __pfx_ksys_write+0x10/0x10 [ 144.987767][ T6926] ? __x64_sys_statx+0x20/0xc0 [ 144.987782][ T6926] do_syscall_64+0x14d/0xf80 [ 144.987792][ T6926] ? trace_irq_disable+0x3b/0x150 [ 144.987805][ T6926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.987814][ T6926] ? clear_bhb_loop+0x40/0x90 [ 144.987830][ T6926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.987846][ T6926] RIP: 0033:0x7f616ad9c799 [ 144.987862][ T6926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.987875][ T6926] RSP: 002b:00007f616bc9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 144.987892][ T6926] RAX: ffffffffffffffda RBX: 00007f616b015fa0 RCX: 00007f616ad9c799 [ 144.987903][ T6926] RDX: 0000000000002900 RSI: 00002000000021c0 RDI: ffffffffffffff9c [ 144.987913][ T6926] RBP: 00007f616bc9d090 R08: 0000000000000000 R09: 0000000000000000 [ 144.987919][ T6926] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 144.987924][ T6926] R13: 00007f616b016038 R14: 00007f616b015fa0 R15: 00007f616b13fa48 [ 144.987939][ T6926] [ 145.312489][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 145.325174][ T47] usb 1-1: USB disconnect, device number 13 [ 145.336761][ T24] usb 3-1: USB disconnect, device number 26 [ 145.996131][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 146.174121][ T24] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 146.183261][ T24] usb 5-1: config 0 has no interface number 0 [ 146.189635][ T24] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 146.205797][ T24] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 146.234505][ T24] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 146.277472][ T24] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 146.347410][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 146.356898][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3 [ 146.365538][ T24] usb 5-1: Product: syz [ 146.370030][ T24] usb 5-1: Manufacturer: syz [ 146.404591][ T24] usb 5-1: SerialNumber: syz [ 146.418855][ T24] usb 5-1: config 0 descriptor?? [ 146.447288][ T24] xpad 5-1:0.237: probe with driver xpad failed with error -5 [ 146.648125][ T24] usb 5-1: USB disconnect, device number 22 [ 147.034085][ T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 147.194784][ T24] usb 1-1: device descriptor read/64, error -71 [ 147.241093][ T6973] usb usb8: usbfs: process 6973 (syz.2.317) did not claim interface 0 before use [ 147.261312][ T6975] vcan0: tx address claim with dlc 0 [ 147.501365][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 147.633303][ T24] usb 1-1: device descriptor read/64, error -71 [ 147.652144][ T6985] fuse: Unknown parameter 'g00000000000000000000' [ 147.662699][ T5911] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 147.782719][ T24] usb usb1-port1: attempt power cycle [ 147.832340][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 147.839944][ T5911] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 147.848661][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 147.865356][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 147.906548][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 147.948470][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 147.960376][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.032361][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.210017][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.234410][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 148.294529][ T24] usb 1-1: device descriptor read/8, error -71 [ 148.445710][ T5192] usb 2-1: Cannot read MAC address [ 148.453410][ T5192] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 148.519161][ T5192] usb 2-1: USB disconnect, device number 23 [ 148.552671][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 148.573267][ T24] usb 1-1: device descriptor read/8, error -71 [ 148.581190][ T5911] usb 4-1: usb_control_msg returned -32 [ 148.586930][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 148.733214][ T24] usb usb1-port1: unable to enumerate USB device [ 148.959058][ T5192] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 149.100320][ T7003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 149.109840][ T7003] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 149.122479][ T5192] usb 2-1: Using ep0 maxpacket: 32 [ 149.155948][ T5192] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 149.166717][ T5192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.400823][ T5192] usb 2-1: config 0 descriptor?? [ 149.421191][ T5192] as10x_usb: device has been detected [ 149.432206][ T5192] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 149.474082][ T5192] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 149.639537][ T5192] as10x_usb: error during firmware upload part1 [ 149.656607][ T5192] Registered device nBox DVB-T Dongle [ 149.697473][ T5192] usb 2-1: USB disconnect, device number 24 [ 149.804314][ T5192] Unregistered device nBox DVB-T Dongle [ 149.808731][ T5192] as10x_usb: device has been disconnected [ 150.265269][ T7021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.290865][ T10] usb 4-1: USB disconnect, device number 16 [ 150.402669][ T5911] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 150.520413][ T7030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.628668][ T5911] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 150.639024][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.649957][ T5911] usb 5-1: config 0 descriptor?? [ 150.684373][ T5911] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 150.882392][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 150.902414][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 151.076371][ T7043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.090103][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.098384][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 151.114460][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 151.125159][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 151.125314][ T10] usb 1-1: config 127 has an invalid interface number: 230 but max is 0 [ 151.143428][ T10] usb 1-1: config 127 has no interface number 0 [ 151.145330][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 151.149835][ T10] usb 1-1: config 127 interface 230 altsetting 13 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 151.230262][ T10] usb 1-1: config 127 interface 230 has no altsetting 0 [ 151.230287][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 151.255848][ T7043] netlink: 40 bytes leftover after parsing attributes in process `syz.1.341'. [ 151.323629][ T5911] usb 5-1: USB disconnect, device number 23 [ 151.328392][ T10] usb 1-1: New USB device found, idVendor=2001, idProduct=3a02, bcdDevice=7e.d7 [ 151.341706][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.360043][ T10] usb 1-1: Product: syz [ 151.364814][ T10] usb 1-1: Manufacturer: syz [ 151.369470][ T10] usb 1-1: SerialNumber: syz [ 151.381067][ T24] usb 3-1: SerialNumber: syz [ 151.574473][ T7046] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 151.586604][ T7035] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 151.706142][ T7046] bond1 (unregistering): Released all slaves [ 151.832093][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 151.874805][ T7035] bond0: entered promiscuous mode [ 151.879921][ T7035] bond_slave_0: entered promiscuous mode [ 151.900554][ T7035] bond_slave_1: entered promiscuous mode [ 151.964546][ T7035] bond0: left promiscuous mode [ 151.969385][ T7035] bond_slave_0: left promiscuous mode [ 152.002213][ T7050] FAULT_INJECTION: forcing a failure. [ 152.002213][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 152.069538][ T7035] bond_slave_1: left promiscuous mode [ 152.082445][ T7050] CPU: 1 UID: 0 PID: 7050 Comm: syz.4.343 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.082475][ T7050] Tainted: [L]=SOFTLOCKUP [ 152.082481][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 152.082490][ T7050] Call Trace: [ 152.082497][ T7050] [ 152.082504][ T7050] dump_stack_lvl+0xe8/0x150 [ 152.082529][ T7050] should_fail_ex+0x412/0x560 [ 152.082554][ T7050] should_failslab+0xa8/0x100 [ 152.082576][ T7050] __kmalloc_cache_noprof+0x88/0x660 [ 152.082596][ T7050] ? fuse_lookup_name+0x1d0/0x8b0 [ 152.082621][ T7050] fuse_lookup_name+0x1d0/0x8b0 [ 152.082646][ T7050] ? rcu_is_watching+0x15/0xb0 [ 152.082670][ T7050] ? __pfx_fuse_lookup_name+0x10/0x10 [ 152.082687][ T7050] ? __kasan_kmalloc+0x93/0xb0 [ 152.082704][ T7050] ? fuse_lock_inode+0xd3/0x120 [ 152.082739][ T7050] ? d_alloc_parallel+0x366/0x1610 [ 152.082767][ T7050] fuse_lookup+0x213/0x4e0 [ 152.082794][ T7050] ? __pfx_fuse_lookup+0x10/0x10 [ 152.082827][ T7050] ? __raw_spin_lock_init+0x45/0x100 [ 152.082847][ T7050] ? __init_waitqueue_head+0xa9/0x150 [ 152.082869][ T7050] __lookup_slow+0x2b7/0x410 [ 152.082894][ T7050] ? __pfx___lookup_slow+0x10/0x10 [ 152.082929][ T7050] ? down_read+0x272/0x2e0 [ 152.082951][ T7050] lookup_slow+0x53/0x70 [ 152.082967][ T7050] path_lookupat+0x3f5/0x8c0 [ 152.083004][ T7050] filename_lookup+0x256/0x5d0 [ 152.083030][ T7050] ? __pfx_filename_lookup+0x10/0x10 [ 152.083089][ T7050] vfs_statx+0xfc/0x200 [ 152.083111][ T7050] ? __pfx_vfs_statx+0x10/0x10 [ 152.083140][ T7050] __se_sys_statx+0x1e9/0x2a0 [ 152.083167][ T7050] ? __pfx___se_sys_statx+0x10/0x10 [ 152.083213][ T7050] ? __pfx_ksys_write+0x10/0x10 [ 152.083236][ T7050] ? __x64_sys_statx+0x20/0xc0 [ 152.083260][ T7050] do_syscall_64+0x14d/0xf80 [ 152.083277][ T7050] ? trace_irq_disable+0x3b/0x150 [ 152.083297][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.083314][ T7050] ? clear_bhb_loop+0x40/0x90 [ 152.083334][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.083350][ T7050] RIP: 0033:0x7fce8799c799 [ 152.083366][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.083380][ T7050] RSP: 002b:00007fce887e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 152.083398][ T7050] RAX: ffffffffffffffda RBX: 00007fce87c15fa0 RCX: 00007fce8799c799 [ 152.083410][ T7050] RDX: 0000000000002900 RSI: 00002000000021c0 RDI: ffffffffffffff9c [ 152.083420][ T7050] RBP: 00007fce887e1090 R08: 0000000000000000 R09: 0000000000000000 [ 152.083430][ T7050] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 152.083440][ T7050] R13: 00007fce87c16038 R14: 00007fce87c15fa0 R15: 00007fce87d3fa48 [ 152.083468][ T7050] [ 152.591211][ T10] usb 1-1: Could not find all expected endpoints [ 152.603710][ T10] usb 1-1: bad CDC descriptors [ 152.638980][ T10] usb 1-1: USB disconnect, device number 18 [ 152.717169][ T24] usb 3-1: 0:2 : does not exist [ 152.760401][ T24] usb 3-1: USB disconnect, device number 27 [ 152.781960][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 152.952362][ T5192] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 153.104233][ T5192] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 153.115049][ T5192] usb 2-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 153.122390][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 153.124538][ T5192] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 153.141504][ T5192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.315812][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 153.327581][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 153.336512][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 153.346919][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.348'. [ 153.355834][ T7067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 153.429431][ T7060] pim6reg: entered allmulticast mode [ 153.436348][ T7060] pim6reg: left allmulticast mode [ 153.443957][ T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 153.461874][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.515344][ T5192] usb 2-1: USB disconnect, device number 25 [ 153.577913][ T24] usb 5-1: config 0 descriptor?? [ 153.750001][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.350'. [ 153.759081][ T7073] netlink: 20 bytes leftover after parsing attributes in process `syz.3.350'. [ 153.795144][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 153.868701][ T3481] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.899627][ T3481] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.919822][ T3481] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.930440][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.942542][ T5192] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 153.952157][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 153.960512][ T24] usb 5-1: media controller created [ 153.994507][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 154.022226][ T3481] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.089654][ T24] az6027: usb out operation failed. (-71) [ 154.211376][ T24] az6027: usb out operation failed. (-71) [ 154.276528][ T5192] usb 3-1: Using ep0 maxpacket: 32 [ 154.297863][ T24] stb0899_attach: Driver disabled by Kconfig [ 154.310112][ T5192] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.310980][ T24] az6027: no front-end attached [ 154.310980][ T24] [ 154.329753][ T24] az6027: usb out operation failed. (-71) [ 154.339072][ T5192] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.349871][ T5192] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.361037][ T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 154.388344][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 154.419378][ T7080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.351'. [ 154.428370][ T7080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 154.459568][ T3481] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.744759][ T5192] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.762448][ T3481] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.783463][ T3481] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.798116][ T5192] usb 3-1: config 0 descriptor?? [ 154.812537][ T3481] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.920184][ T24] dvb-usb: schedule remote query interval to 400 msecs. [ 154.966777][ T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 155.014129][ T24] usb 5-1: USB disconnect, device number 24 [ 155.290409][ T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 155.302562][ T5192] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 155.493317][ T5192] usb 1-1: Using ep0 maxpacket: 8 [ 155.513415][ T5192] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.540998][ T5192] usb 1-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 155.564936][ T5192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.637217][ T5192] usb 1-1: config 0 descriptor?? [ 155.682380][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 155.692432][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 155.720821][ T5192] uvcvideo 1-1:0.0: probe with driver uvcvideo failed with error -22 [ 155.851580][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 155.888986][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 156.263897][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.275379][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.285479][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.287541][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.315834][ T24] usb 5-1: Product: syz [ 156.315893][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 156.320183][ T24] usb 5-1: Manufacturer: syz [ 156.334783][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.342961][ T24] usb 5-1: SerialNumber: syz [ 156.345414][ T9] usb 4-1: config 0 descriptor?? [ 156.776125][ T7104] input: syz0 as /devices/virtual/input/input9 [ 156.797856][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 156.798008][ T7104] FAULT_INJECTION: forcing a failure. [ 156.798008][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 156.823856][ T9] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 156.831245][ T9] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 156.846912][ T9] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 156.850953][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 156.854517][ T9] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 156.874332][ T7104] CPU: 0 UID: 0 PID: 7104 Comm: syz.1.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 156.874357][ T7104] Tainted: [L]=SOFTLOCKUP [ 156.874362][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 156.874371][ T7104] Call Trace: [ 156.874377][ T7104] [ 156.874384][ T7104] dump_stack_lvl+0xe8/0x150 [ 156.874409][ T7104] should_fail_ex+0x412/0x560 [ 156.874435][ T7104] should_failslab+0xa8/0x100 [ 156.874455][ T7104] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 156.874472][ T7104] ? __lock_acquire+0x6b5/0x2cf0 [ 156.874492][ T7104] ? __kernfs_new_node+0xa9/0x8e0 [ 156.874519][ T7104] kstrdup+0x42/0x100 [ 156.874539][ T7104] __kernfs_new_node+0xa9/0x8e0 [ 156.874559][ T7104] ? arch_stack_walk+0xfb/0x150 [ 156.874583][ T7104] ? __pfx___kernfs_new_node+0x10/0x10 [ 156.874605][ T7104] ? kernfs_root+0x1c/0x230 [ 156.874621][ T7104] ? kernfs_root+0x1c/0x230 [ 156.874633][ T7104] ? kernfs_root+0x1c/0x230 [ 156.874644][ T7104] ? kernfs_root+0x1c/0x230 [ 156.874660][ T7104] kernfs_new_node+0x102/0x210 [ 156.874676][ T7104] kernfs_create_dir_ns+0x44/0x130 [ 156.874687][ T7104] sysfs_create_dir_ns+0x12f/0x2a0 [ 156.874707][ T7104] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 156.874728][ T7104] ? do_raw_spin_unlock+0xf5/0x210 [ 156.874746][ T7104] kobject_add_internal+0x62b/0xd00 [ 156.874771][ T7104] kobject_add+0x163/0x240 [ 156.874792][ T7104] ? __pfx_kobject_add+0x10/0x10 [ 156.874809][ T7104] ? _raw_spin_unlock+0x28/0x50 [ 156.874832][ T7104] ? get_device_parent+0x366/0x3a0 [ 156.874853][ T7104] device_add+0x408/0xb70 [ 156.874873][ T7104] cdev_device_add+0x1d6/0x390 [ 156.874896][ T7104] evdev_connect+0x34f/0x3f0 [ 156.874922][ T7104] input_register_device+0xd00/0x1160 [ 156.874948][ T7104] uinput_create_device+0x422/0x670 [ 156.874973][ T7104] uinput_ioctl_handler+0x417/0x14a0 [ 156.874997][ T7104] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 156.875024][ T7104] ? __fget_files+0x2a/0x420 [ 156.875044][ T7104] ? __fget_files+0x3a0/0x420 [ 156.875069][ T7104] ? bpf_lsm_file_ioctl+0x9/0x20 [ 156.875089][ T7104] ? __pfx_uinput_ioctl+0x10/0x10 [ 156.875105][ T7104] __se_sys_ioctl+0xfc/0x170 [ 156.875125][ T7104] do_syscall_64+0x14d/0xf80 [ 156.875141][ T7104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.875157][ T7104] ? clear_bhb_loop+0x40/0x90 [ 156.875176][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.875191][ T7104] RIP: 0033:0x7f1b7f59c799 [ 156.875214][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.875223][ T7104] RSP: 002b:00007f1b803f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 156.875234][ T7104] RAX: ffffffffffffffda RBX: 00007f1b7f815fa0 RCX: 00007f1b7f59c799 [ 156.875241][ T7104] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 156.875247][ T7104] RBP: 00007f1b803f0090 R08: 0000000000000000 R09: 0000000000000000 [ 156.875252][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 156.875258][ T7104] R13: 00007f1b7f816038 R14: 00007f1b7f815fa0 R15: 00007f1b7f93fa48 [ 156.875273][ T7104] [ 156.875288][ T7104] kobject: kobject_add_internal failed for event4 (error: -12 parent: input9) [ 157.194522][ T9] hid-picolcd 0003:04D8:F002.0008: unknown main item tag 0x0 [ 157.212426][ T7104] input: failed to attach handler evdev to device input9, error: -12 [ 157.262478][ T9] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf3 found [ 157.270161][ T9] hid-picolcd 0003:04D8:F002.0008: No report with id 0xf4 found [ 157.289448][ T9] usb 4-1: USB disconnect, device number 17 [ 157.409344][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 157.421541][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 157.434231][ T24] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.445521][ T24] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 157.462683][ T24] usb 5-1: USB disconnect, device number 25 [ 157.527390][ T9] usb 3-1: USB disconnect, device number 28 [ 157.663314][ T24] usb 1-1: USB disconnect, device number 19 [ 157.755262][ T7117] loop5: detected capacity change from 0 to 7 [ 157.770621][ T7117] Dev loop5: unable to read RDB block 7 [ 157.776402][ T7117] loop5: unable to read partition table [ 157.782573][ T7117] loop5: partition table beyond EOD, truncated [ 157.788809][ T7117] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 158.232356][ T5910] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 158.334029][ T7131] __nla_validate_parse: 5 callbacks suppressed [ 158.334047][ T7131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 158.373087][ T7126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.424873][ T7126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.462144][ T7131] vlan2: entered promiscuous mode [ 158.502713][ T5910] usb 4-1: Using ep0 maxpacket: 32 [ 158.513641][ T5910] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 158.692323][ T5911] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 158.752243][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.366'. [ 158.758590][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.781885][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.366'. [ 158.861804][ T5910] usb 4-1: config 0 descriptor?? [ 158.912517][ T5911] usb 1-1: Using ep0 maxpacket: 32 [ 158.930825][ T5911] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 158.939569][ T5911] usb 1-1: config 0 has no interface number 0 [ 158.950142][ T5911] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 158.959930][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.968359][ T5911] usb 1-1: Product: syz [ 158.972946][ T5911] usb 1-1: Manufacturer: syz [ 158.978664][ T5911] usb 1-1: SerialNumber: syz [ 159.013532][ T5911] usb 1-1: config 0 descriptor?? [ 159.046516][ T5911] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 159.084386][ T5910] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 159.105449][ T5910] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.155584][ T5910] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 159.190120][ T5910] usb 4-1: media controller created [ 159.210830][ T5910] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.252646][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 159.267257][ T7141] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 159.280609][ T5911] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 159.293770][ T5910] az6027: usb out operation failed. (-71) [ 159.306691][ T5910] az6027: usb out operation failed. (-71) [ 159.315555][ T5910] stb0899_attach: Driver disabled by Kconfig [ 159.328520][ T5910] az6027: no front-end attached [ 159.328520][ T5910] [ 159.336310][ T5910] az6027: usb out operation failed. (-71) [ 159.345779][ T5910] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 159.411287][ T5910] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 159.556971][ T7129] usb usb7: usbfs: process 7129 (syz.0.365) did not claim interface 0 before use [ 159.572954][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 159.574331][ T7126] usb usb7: usbfs: process 7126 (syz.0.365) did not claim interface 0 before use [ 159.590714][ T5910] dvb-usb: schedule remote query interval to 400 msecs. [ 159.629526][ T5910] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 159.649607][ T7141] bond1 (unregistering): Released all slaves [ 159.672808][ T5910] usb 4-1: USB disconnect, device number 18 [ 159.801041][ T7126] fuse: Bad value for 'fd' [ 159.980500][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 160.005174][ T5911] usb 1-1: USB disconnect, device number 20 [ 160.092065][ T5910] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 160.118707][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 160.209114][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 160.242958][ T5911] quatech2 1-1:0.51: device disconnected [ 160.382640][ T7148] FAULT_INJECTION: forcing a failure. [ 160.382640][ T7148] name failslab, interval 1, probability 0, space 0, times 0 [ 160.402388][ T7148] CPU: 1 UID: 0 PID: 7148 Comm: syz.2.372 Tainted: G L syzkaller #0 PREEMPT(full) [ 160.402415][ T7148] Tainted: [L]=SOFTLOCKUP [ 160.402421][ T7148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 160.402430][ T7148] Call Trace: [ 160.402436][ T7148] [ 160.402443][ T7148] dump_stack_lvl+0xe8/0x150 [ 160.402470][ T7148] should_fail_ex+0x412/0x560 [ 160.402497][ T7148] should_failslab+0xa8/0x100 [ 160.402517][ T7148] ? fuse_get_req+0x7da/0x10d0 [ 160.402534][ T7148] kmem_cache_alloc_noprof+0x87/0x650 [ 160.402557][ T7148] fuse_get_req+0x7da/0x10d0 [ 160.402582][ T7148] ? __pfx_fuse_get_req+0x10/0x10 [ 160.402597][ T7148] ? __kasan_kmalloc+0x93/0xb0 [ 160.402614][ T7148] ? __pfx_autoremove_wake_function+0x10/0x10 [ 160.402631][ T7148] ? path_lookupat+0x3f5/0x8c0 [ 160.402652][ T7148] ? filename_lookup+0x256/0x5d0 [ 160.402670][ T7148] ? vfs_statx+0xfc/0x200 [ 160.402686][ T7148] ? __se_sys_statx+0x1e9/0x2a0 [ 160.402703][ T7148] ? do_syscall_64+0x14d/0xf80 [ 160.402719][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.402741][ T7148] __fuse_simple_request+0x2cc/0x1c60 [ 160.402762][ T7148] ? __pfx___fuse_simple_request+0x10/0x10 [ 160.402783][ T7148] ? __kasan_kmalloc+0x93/0xb0 [ 160.402794][ T7148] ? __kmalloc_cache_noprof+0x31c/0x660 [ 160.402808][ T7148] fuse_lookup_name+0x35e/0x8b0 [ 160.402826][ T7148] ? __pfx_fuse_lookup_name+0x10/0x10 [ 160.402837][ T7148] ? __kasan_kmalloc+0x93/0xb0 [ 160.402847][ T7148] ? fuse_lock_inode+0xd3/0x120 [ 160.402867][ T7148] ? d_alloc_parallel+0x366/0x1610 [ 160.402882][ T7148] fuse_lookup+0x213/0x4e0 [ 160.402898][ T7148] ? __pfx_fuse_lookup+0x10/0x10 [ 160.402917][ T7148] ? __raw_spin_lock_init+0x45/0x100 [ 160.402928][ T7148] ? __init_waitqueue_head+0xa9/0x150 [ 160.402940][ T7148] __lookup_slow+0x2b7/0x410 [ 160.402955][ T7148] ? __pfx___lookup_slow+0x10/0x10 [ 160.402975][ T7148] ? down_read+0x272/0x2e0 [ 160.402988][ T7148] lookup_slow+0x53/0x70 [ 160.402997][ T7148] path_lookupat+0x3f5/0x8c0 [ 160.403018][ T7148] filename_lookup+0x256/0x5d0 [ 160.403034][ T7148] ? __pfx_filename_lookup+0x10/0x10 [ 160.403065][ T7148] vfs_statx+0xfc/0x200 [ 160.403078][ T7148] ? __pfx_vfs_statx+0x10/0x10 [ 160.403095][ T7148] __se_sys_statx+0x1e9/0x2a0 [ 160.403111][ T7148] ? __pfx___se_sys_statx+0x10/0x10 [ 160.403133][ T7148] ? __pfx_ksys_write+0x10/0x10 [ 160.403147][ T7148] ? __x64_sys_statx+0x20/0xc0 [ 160.403161][ T7148] do_syscall_64+0x14d/0xf80 [ 160.403171][ T7148] ? trace_irq_disable+0x3b/0x150 [ 160.403184][ T7148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.403193][ T7148] ? clear_bhb_loop+0x40/0x90 [ 160.403204][ T7148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.403214][ T7148] RIP: 0033:0x7fc29059c799 [ 160.403224][ T7148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.403232][ T7148] RSP: 002b:00007fc29149b028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 160.403243][ T7148] RAX: ffffffffffffffda RBX: 00007fc290815fa0 RCX: 00007fc29059c799 [ 160.403250][ T7148] RDX: 0000000000002900 RSI: 00002000000021c0 RDI: ffffffffffffff9c [ 160.403256][ T7148] RBP: 00007fc29149b090 R08: 0000000000000000 R09: 0000000000000000 [ 160.403268][ T7148] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 160.403274][ T7148] R13: 00007fc290816038 R14: 00007fc290815fa0 R15: 00007fc29093fa48 [ 160.403289][ T7148] [ 161.397453][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 161.518578][ T7162] pimreg: tun_chr_ioctl cmd 1074025677 [ 161.524235][ T7162] pimreg: linktype set to 10000 [ 161.712387][ T5911] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 162.012410][ T5827] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 162.097507][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 162.112259][ T5911] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 162.127586][ T5911] usb 5-1: can't read configurations, error -71 [ 162.152890][ T5192] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 162.185440][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.195635][ T5827] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.213974][ T5827] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 162.231666][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.252366][ T5827] usb 4-1: Product: syz [ 162.256566][ T5827] usb 4-1: Manufacturer: syz [ 162.261170][ T5827] usb 4-1: SerialNumber: syz [ 162.288578][ T5827] usb 4-1: config 0 descriptor?? [ 162.304223][ T5192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.322689][ T5192] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.338187][ T5192] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 162.351793][ T5192] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 162.361270][ T5192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.381408][ T5192] usb 2-1: config 0 descriptor?? [ 162.516171][ T5827] usb 4-1: USB disconnect, device number 19 [ 162.572421][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 162.732419][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 162.762364][ T24] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 162.808132][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 162.820556][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.837729][ T5192] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 162.861903][ T9] usb 3-1: config 0 descriptor?? [ 162.964828][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 162.982731][ T24] usb 1-1: not running at top speed; connect to a high speed hub [ 162.996029][ T24] usb 1-1: config 2 has an invalid interface number: 222 but max is 0 [ 163.009556][ T24] usb 1-1: config 2 has no interface number 0 [ 163.028463][ T24] usb 1-1: config 2 interface 222 has no altsetting 0 [ 163.049045][ T24] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 163.071639][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 163.095424][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.109912][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 163.142136][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 163.156094][ T9] usb 3-1: media controller created [ 163.171069][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 163.179457][ T24] usb 1-1: Product: syz [ 163.179477][ T24] usb 1-1: Manufacturer: syz [ 163.179489][ T24] usb 1-1: SerialNumber: syz [ 163.272233][ T9] az6027: usb out operation failed. (-71) [ 163.278439][ T9] az6027: usb out operation failed. (-71) [ 163.333820][ T9] stb0899_attach: Driver disabled by Kconfig [ 163.346388][ T9] az6027: no front-end attached [ 163.346388][ T9] [ 163.359816][ T9] az6027: usb out operation failed. (-71) [ 163.370664][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 163.392235][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 163.439051][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 163.465898][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.482364][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 163.518630][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.528549][ T9] usb 3-1: USB disconnect, device number 29 [ 163.564322][ T7191] trusted_key: encrypted_key: insufficient parameters specified [ 163.617470][ T29] audit: type=1326 audit(1773569565.888:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7186 comm="syz.3.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f616ad9c799 code=0x0 [ 163.677518][ T24] usb-storage 1-1:2.222: USB Mass Storage device detected [ 163.699620][ T24] usb-storage 1-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 163.723525][ T24] usb-storage 1-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 163.723525][ T24] Please send a copy of this message to and [ 163.761472][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 163.799444][ T24] usb 1-1: USB disconnect, device number 21 [ 164.270339][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 164.306310][ T7205] netlink: 288 bytes leftover after parsing attributes in process `syz.0.389'. [ 164.412369][ T24] usb 3-1: device descriptor read/64, error -71 [ 164.516104][ T7205] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 164.648120][ T5910] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 164.782407][ T24] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 164.790237][ T5910] usb 2-1: device descriptor read/64, error -32 [ 164.932618][ T24] usb 3-1: device descriptor read/64, error -71 [ 164.946753][ T29] audit: type=1326 audit(1773569567.238:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7213 comm="syz.3.392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f616ad9c799 code=0x0 [ 165.052573][ T5910] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 165.060534][ T24] usb usb3-port1: attempt power cycle [ 165.152380][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 165.202480][ T5910] usb 2-1: device descriptor read/64, error -32 [ 165.324854][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 165.331867][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.344047][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.354574][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 165.363660][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.373574][ T9] usb 1-1: config 0 descriptor?? [ 165.381439][ T9] hub 1-1:0.0: USB hub found [ 165.402397][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 165.426123][ T24] usb 3-1: device descriptor read/8, error -71 [ 165.447181][ T5910] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 165.553549][ T5827] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 165.581065][ T9] hub 1-1:0.0: 1 port detected [ 165.662353][ T5910] usb 2-1: device not accepting address 26, error -71 [ 165.682371][ T5827] usb 5-1: device descriptor read/64, error -71 [ 165.692444][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 165.712956][ T24] usb 3-1: device descriptor read/8, error -71 [ 165.822638][ T24] usb usb3-port1: unable to enumerate USB device [ 165.922400][ T5827] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 166.002550][ T5910] usb 2-1: reset high-speed USB device number 26 using dummy_hcd [ 166.032799][ T5910] usb 2-1: device reset changed ep0 maxpacket size! [ 166.041699][ T5911] usb 2-1: USB disconnect, device number 26 [ 166.062440][ T5827] usb 5-1: device descriptor read/64, error -71 [ 166.172612][ T5827] usb usb5-port1: attempt power cycle [ 166.182397][ T5911] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 166.186246][ T9] hub 1-1:0.0: activate --> -90 [ 166.333284][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 166.342197][ T5911] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 166.351359][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.361598][ T5911] usb 2-1: config 0 descriptor?? [ 166.512389][ T5827] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 166.533224][ T5827] usb 5-1: device descriptor read/8, error -71 [ 166.571659][ T5911] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 166.582605][ T5911] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 166.591664][ T5911] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 166.772363][ T5827] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 166.792950][ T5827] usb 5-1: device descriptor read/8, error -71 [ 166.904606][ T5827] usb usb5-port1: unable to enumerate USB device [ 166.922968][ T5192] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 167.020323][ T7232] FAULT_INJECTION: forcing a failure. [ 167.020323][ T7232] name failslab, interval 1, probability 0, space 0, times 0 [ 167.034425][ T7232] CPU: 1 UID: 0 PID: 7232 Comm: syz.2.399 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.034452][ T7232] Tainted: [L]=SOFTLOCKUP [ 167.034458][ T7232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 167.034467][ T7232] Call Trace: [ 167.034473][ T7232] [ 167.034480][ T7232] dump_stack_lvl+0xe8/0x150 [ 167.034506][ T7232] should_fail_ex+0x412/0x560 [ 167.034532][ T7232] should_failslab+0xa8/0x100 [ 167.034551][ T7232] ? skb_clone+0x212/0x3a0 [ 167.034569][ T7232] kmem_cache_alloc_noprof+0x87/0x650 [ 167.034592][ T7232] skb_clone+0x212/0x3a0 [ 167.034613][ T7232] __netlink_deliver_tap+0x404/0x850 [ 167.034647][ T7232] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.034670][ T7232] netlink_deliver_tap+0x19c/0x1b0 [ 167.034692][ T7232] __netlink_sendskb+0x47/0x90 [ 167.034716][ T7232] netlink_dump+0xa6f/0xe80 [ 167.034748][ T7232] ? __pfx_netlink_dump+0x10/0x10 [ 167.034784][ T7232] ? genl_start+0x581/0x6c0 [ 167.034808][ T7232] __netlink_dump_start+0x5cb/0x7e0 [ 167.034836][ T7232] genl_family_rcv_msg_dumpit+0x213/0x310 [ 167.034858][ T7232] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 167.034874][ T7232] ? genl_get_cmd+0x691/0x930 [ 167.034896][ T7232] ? __pfx_genl_start+0x10/0x10 [ 167.034912][ T7232] ? __pfx_genl_dumpit+0x10/0x10 [ 167.034927][ T7232] ? __pfx_genl_done+0x10/0x10 [ 167.034958][ T7232] genl_rcv_msg+0x5e8/0x7a0 [ 167.034982][ T7232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.034998][ T7232] ? __pfx_ethnl_tunnel_info_start+0x10/0x10 [ 167.035013][ T7232] ? __pfx_ethnl_tunnel_info_dumpit+0x10/0x10 [ 167.035030][ T7232] ? __lock_acquire+0x6b5/0x2cf0 [ 167.035060][ T7232] netlink_rcv_skb+0x232/0x4b0 [ 167.035090][ T7232] ? __pfx_genl_rcv_msg+0x10/0x10 [ 167.035109][ T7232] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.035146][ T7232] ? down_read+0x272/0x2e0 [ 167.035162][ T7232] ? genl_rcv+0xd/0x40 [ 167.035179][ T7232] genl_rcv+0x28/0x40 [ 167.035192][ T7232] netlink_unicast+0x80f/0x9b0 [ 167.035217][ T7232] ? __pfx_netlink_unicast+0x10/0x10 [ 167.035238][ T7232] ? netlink_sendmsg+0x650/0xb40 [ 167.035256][ T7232] ? skb_put+0x11b/0x210 [ 167.035275][ T7232] netlink_sendmsg+0x813/0xb40 [ 167.035306][ T7232] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.035330][ T7232] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.035351][ T7232] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 167.035365][ T7232] ____sys_sendmsg+0x972/0x9f0 [ 167.035381][ T7232] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.035396][ T7232] ? import_iovec+0x73/0xa0 [ 167.035412][ T7232] ___sys_sendmsg+0x2a5/0x360 [ 167.035434][ T7232] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.035486][ T7232] ? __fget_files+0x2a/0x420 [ 167.035506][ T7232] ? __fget_files+0x3a0/0x420 [ 167.035524][ T7232] __x64_sys_sendmsg+0x1bd/0x2a0 [ 167.035536][ T7232] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.035551][ T7232] ? __pfx_ksys_write+0x10/0x10 [ 167.035572][ T7232] do_syscall_64+0x14d/0xf80 [ 167.035589][ T7232] ? trace_irq_disable+0x3b/0x150 [ 167.035610][ T7232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.035627][ T7232] ? clear_bhb_loop+0x40/0x90 [ 167.035646][ T7232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.035659][ T7232] RIP: 0033:0x7fc29059c799 [ 167.035670][ T7232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.035679][ T7232] RSP: 002b:00007fc29149b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.035691][ T7232] RAX: ffffffffffffffda RBX: 00007fc290815fa0 RCX: 00007fc29059c799 [ 167.035697][ T7232] RDX: 0000000000040006 RSI: 0000200000000700 RDI: 0000000000000003 [ 167.035703][ T7232] RBP: 00007fc29149b090 R08: 0000000000000000 R09: 0000000000000000 [ 167.035709][ T7232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 167.035715][ T7232] R13: 00007fc290816038 R14: 00007fc290815fa0 R15: 00007fc29093fa48 [ 167.035741][ T7232] [ 167.074460][ T5192] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.356764][ T7237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.373369][ T5192] usb 4-1: not running at top speed; connect to a high speed hub [ 167.459134][ T5192] usb 4-1: config 2 has an invalid interface number: 222 but max is 0 [ 167.467426][ T5192] usb 4-1: config 2 has no interface number 0 [ 167.469800][ T7237] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 167.469800][ T7237] program syz.1.401 not setting count and/or reply_len properly [ 167.474128][ T5192] usb 4-1: config 2 interface 222 has no altsetting 0 [ 167.493583][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 167.503723][ T9] usb 1-1-port1: cannot disable (err = -32) [ 167.513762][ T9] hub 1-1:0.0: hub_ext_port_status failed (err = -32) [ 167.521996][ T5192] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 167.531181][ T5192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.539341][ T5192] usb 4-1: Product: syz [ 167.543633][ T5192] usb 4-1: Manufacturer: syz [ 167.548270][ T5192] usb 4-1: SerialNumber: syz [ 167.663192][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.670153][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 167.678452][ T24] usb 3-1: config 0 has no interface number 0 [ 167.686582][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 167.696613][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.704676][ T24] usb 3-1: Product: syz [ 167.708916][ T24] usb 3-1: Manufacturer: syz [ 167.713571][ T24] usb 3-1: SerialNumber: syz [ 167.720753][ T24] usb 3-1: config 0 descriptor?? [ 167.729350][ T24] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 167.738231][ T24] usb 3-1: selecting invalid altsetting 1 [ 167.744109][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 167.754755][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 167.766030][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 167.775849][ T24] usb 3-1: media controller created [ 167.794570][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 167.808894][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.820049][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.837062][ T5192] usb-storage 4-1:2.222: USB Mass Storage device detected [ 167.850442][ T5192] usb-storage 4-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 167.859897][ T5192] usb-storage 4-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 167.859897][ T5192] Please send a copy of this message to and [ 167.929958][ T5192] usb 4-1: USB disconnect, device number 20 [ 167.995723][ T5910] usb 1-1: USB disconnect, device number 22 [ 168.037588][ T24] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 168.044645][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 168.056666][ T24] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 168.094661][ T24] usb 3-1: USB disconnect, device number 34 [ 168.117256][ T7247] FAULT_INJECTION: forcing a failure. [ 168.117256][ T7247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.160217][ T7247] CPU: 0 UID: 0 PID: 7247 Comm: syz.0.403 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.160246][ T7247] Tainted: [L]=SOFTLOCKUP [ 168.160252][ T7247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 168.160261][ T7247] Call Trace: [ 168.160268][ T7247] [ 168.160275][ T7247] dump_stack_lvl+0xe8/0x150 [ 168.160302][ T7247] should_fail_ex+0x412/0x560 [ 168.160329][ T7247] copy_fpstate_to_sigframe+0xb4a/0xd90 [ 168.160353][ T7247] ? copy_fpstate_to_sigframe+0x196/0xd90 [ 168.160377][ T7247] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 168.160399][ T7247] ? trace_sched_exit_tp+0x3a/0x150 [ 168.160419][ T7247] ? __schedule+0x15f3/0x52d0 [ 168.160435][ T7247] ? ktime_get+0x45/0x200 [ 168.160459][ T7247] ? fpu__alloc_mathframe+0xac/0x130 [ 168.160487][ T7247] get_sigframe+0x5f7/0x820 [ 168.160512][ T7247] ? __pfx_get_sigframe+0x10/0x10 [ 168.160528][ T7247] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.160545][ T7247] ? irqentry_exit+0x59e/0x620 [ 168.160571][ T7247] x64_setup_rt_frame+0x160/0xcb0 [ 168.160588][ T7247] ? preempt_schedule_common+0x82/0xd0 [ 168.160612][ T7247] ? _raw_spin_unlock_irq+0x45/0x50 [ 168.160627][ T7247] ? get_signal+0x114f/0x1330 [ 168.160652][ T7247] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 168.160678][ T7247] arch_do_signal_or_restart+0x424/0x830 [ 168.160699][ T7247] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 168.160724][ T7247] ? do_writev+0x2b1/0x2e0 [ 168.160752][ T7247] exit_to_user_mode_loop+0x86/0x480 [ 168.160770][ T7247] ? rcu_is_watching+0x15/0xb0 [ 168.160793][ T7247] do_syscall_64+0x32d/0xf80 [ 168.160809][ T7247] ? trace_irq_disable+0x3b/0x150 [ 168.160831][ T7247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.160846][ T7247] ? clear_bhb_loop+0x40/0x90 [ 168.160866][ T7247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.160881][ T7247] RIP: 0033:0x7f783959c799 [ 168.160897][ T7247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.160911][ T7247] RSP: 002b:00007f783a4da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 168.160929][ T7247] RAX: 0000000000001000 RBX: 00007f7839816090 RCX: 00007f783959c799 [ 168.160940][ T7247] RDX: 0000000000000002 RSI: 0000200000002b40 RDI: 0000000000000003 [ 168.160949][ T7247] RBP: 00007f783a4da090 R08: 0000000000000000 R09: 0000000000000000 [ 168.160959][ T7247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.160968][ T7247] R13: 00007f7839816128 R14: 00007f7839816090 R15: 00007f783993fa48 [ 168.160993][ T7247] [ 168.165917][ T29] audit: type=1326 audit(1773569570.428:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.450302][ T29] audit: type=1326 audit(1773569570.428:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.473413][ T29] audit: type=1326 audit(1773569570.428:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.562652][ T29] audit: type=1326 audit(1773569570.428:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.629533][ T7258] binder: 7257:7258 ioctl c018937e 2000000016c0 returned -22 [ 168.637878][ T29] audit: type=1326 audit(1773569570.428:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.667862][ T29] audit: type=1326 audit(1773569570.428:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.742854][ T29] audit: type=1326 audit(1773569570.428:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.742898][ T29] audit: type=1326 audit(1773569570.428:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.742934][ T29] audit: type=1326 audit(1773569570.428:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.742968][ T29] audit: type=1326 audit(1773569570.428:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.743001][ T29] audit: type=1326 audit(1773569570.428:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.743035][ T29] audit: type=1326 audit(1773569570.428:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.743069][ T29] audit: type=1326 audit(1773569570.428:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 168.743104][ T29] audit: type=1326 audit(1773569570.428:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.401" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b7f59c799 code=0x7fc00000 [ 169.018167][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 169.018201][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 169.018820][ T7276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 169.018841][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 169.093959][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 169.312757][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 169.316612][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.410'. [ 169.328179][ T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.328205][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.339434][ T9] usb 3-1: config 0 descriptor?? [ 169.554341][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 169.652747][ T7284] netlink: 105 bytes leftover after parsing attributes in process `syz.0.413'. [ 169.943957][ T7290] syzkaller0: entered promiscuous mode [ 169.950443][ T7290] syzkaller0: entered allmulticast mode [ 170.302570][ T5946] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 170.502511][ T5946] usb 1-1: device descriptor read/64, error -71 [ 170.511716][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 170.521895][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 170.536484][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 170.536536][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.3.419'. [ 170.752406][ T5946] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 170.882413][ T5946] usb 1-1: device descriptor read/64, error -71 [ 170.992790][ T5946] usb usb1-port1: attempt power cycle [ 171.218403][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.423'. [ 171.352568][ T5946] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 171.382621][ T5946] usb 1-1: device descriptor read/8, error -71 [ 171.489501][ T7323] syzkaller0: entered promiscuous mode [ 171.497126][ T7323] syzkaller0: entered allmulticast mode [ 171.655972][ T5946] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 171.705505][ T5946] usb 1-1: device descriptor read/8, error -71 [ 171.796403][ T7337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.427'. [ 171.839154][ T7338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.429'. [ 172.026306][ T5946] usb usb1-port1: unable to enumerate USB device [ 172.053971][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 172.309063][ T5946] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 172.585250][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 172.612811][ T5946] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.632397][ T5946] usb 5-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 172.662044][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.689467][ T5946] usb 5-1: config 0 descriptor?? [ 172.718889][ T5946] uvcvideo 5-1:0.0: probe with driver uvcvideo failed with error -22 [ 174.327868][ T7376] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 174.327868][ T7376] program syz.3.444 not setting count and/or reply_len properly [ 174.632751][ T5946] usb 5-1: USB disconnect, device number 32 [ 174.855000][ T7370] binder: 7367:7370 ioctl c0306201 200000000540 returned -22 [ 174.992377][ T5946] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 175.072448][ T5192] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 175.146993][ T5884] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.162404][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 175.188703][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.218678][ T5946] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 175.230309][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.243840][ T5192] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.264428][ T5192] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.275465][ T5946] usb 5-1: config 0 descriptor?? [ 175.285685][ T5192] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 175.308239][ T5884] usb 4-1: Using ep0 maxpacket: 32 [ 175.329855][ T5192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.340559][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.352787][ T5192] usb 1-1: Product: syz [ 175.356997][ T5192] usb 1-1: Manufacturer: syz [ 175.365653][ T5884] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.383895][ T5192] usb 1-1: SerialNumber: syz [ 175.392358][ T5884] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.403069][ T5192] usb 1-1: config 0 descriptor?? [ 175.434935][ T5884] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.449950][ T5884] usb 4-1: config 0 descriptor?? [ 175.463293][ T5884] hub 4-1:0.0: USB hub found [ 175.521102][ T5946] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 175.659935][ T7387] bond_slave_0: entered promiscuous mode [ 175.665827][ T7387] bond_slave_1: entered promiscuous mode [ 175.672146][ T7387] vlan3: entered promiscuous mode [ 175.677578][ T7387] bond0: entered promiscuous mode [ 175.708880][ T5884] hub 4-1:0.0: 1 port detected [ 175.734210][ T5192] usb 1-1: USB disconnect, device number 27 [ 176.364369][ T5884] hub 4-1:0.0: activate --> -90 [ 176.618227][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.652199][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.874163][ T5946] usb 4-1: USB disconnect, device number 21 [ 176.966152][ T5910] usb 5-1: USB disconnect, device number 33 [ 186.973596][ T7422] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4261517534 (8523035068 ns) > initial count (7554138186 ns). Using initial count to start timer. [ 187.083451][ T7434] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 187.083451][ T7434] program syz.2.461 not setting count and/or reply_len properly [ 187.374672][ T7434] FAULT_INJECTION: forcing a failure. [ 187.374672][ T7434] name failslab, interval 1, probability 0, space 0, times 0 [ 187.422504][ T7434] CPU: 0 UID: 0 PID: 7434 Comm: syz.2.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.422545][ T7434] Tainted: [L]=SOFTLOCKUP [ 187.422551][ T7434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 187.422560][ T7434] Call Trace: [ 187.422566][ T7434] [ 187.422573][ T7434] dump_stack_lvl+0xe8/0x150 [ 187.422600][ T7434] should_fail_ex+0x412/0x560 [ 187.422626][ T7434] should_failslab+0xa8/0x100 [ 187.422647][ T7434] __kmalloc_noprof+0xe8/0x760 [ 187.422665][ T7434] ? blk_rq_map_user_iov+0x314/0x1810 [ 187.422689][ T7434] blk_rq_map_user_iov+0x314/0x1810 [ 187.422711][ T7434] ? stack_depot_save_flags+0x33/0x810 [ 187.422739][ T7434] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 187.422755][ T7434] ? ksys_write+0x150/0x270 [ 187.422771][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.422800][ T7434] ? import_ubuf+0xfb/0x1d0 [ 187.422818][ T7434] blk_rq_map_user_io+0x2ae/0x440 [ 187.422840][ T7434] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 187.422865][ T7434] ? sg_common_write+0xba7/0x13e0 [ 187.422889][ T7434] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 187.422913][ T7434] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.422931][ T7434] ? sg_build_indirect+0x5fa/0x850 [ 187.422960][ T7434] sg_common_write+0xcff/0x13e0 [ 187.422994][ T7434] ? __pfx_sg_common_write+0x10/0x10 [ 187.423015][ T7434] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 187.423037][ T7434] ? ___ratelimit+0x58c/0x8d0 [ 187.423057][ T7434] sg_write+0xaf2/0xf00 [ 187.423083][ T7434] ? __pfx_sg_write+0x10/0x10 [ 187.423105][ T7434] ? __pfx_aa_file_perm+0x10/0x10 [ 187.423151][ T7434] ? bpf_lsm_file_permission+0x9/0x20 [ 187.423170][ T7434] ? security_file_permission+0x75/0x260 [ 187.423190][ T7434] ? rw_verify_area+0x255/0x4d0 [ 187.423206][ T7434] ? __pfx_sg_write+0x10/0x10 [ 187.423226][ T7434] vfs_write+0x29a/0xb90 [ 187.423256][ T7434] ? __pfx_vfs_write+0x10/0x10 [ 187.423275][ T7434] ? __fget_files+0x2a/0x420 [ 187.423298][ T7434] ? __fget_files+0x2a/0x420 [ 187.423317][ T7434] ? __fget_files+0x3a0/0x420 [ 187.423337][ T7434] ? __fget_files+0x2a/0x420 [ 187.423364][ T7434] ksys_write+0x150/0x270 [ 187.423383][ T7434] ? __pfx_ksys_write+0x10/0x10 [ 187.423408][ T7434] do_syscall_64+0x14d/0xf80 [ 187.423424][ T7434] ? trace_irq_disable+0x3b/0x150 [ 187.423444][ T7434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423459][ T7434] ? clear_bhb_loop+0x40/0x90 [ 187.423479][ T7434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.423497][ T7434] RIP: 0033:0x7fc29059c799 [ 187.423512][ T7434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.423525][ T7434] RSP: 002b:00007fc29149b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 187.423542][ T7434] RAX: ffffffffffffffda RBX: 00007fc290815fa0 RCX: 00007fc29059c799 [ 187.423553][ T7434] RDX: 00000000000000cc RSI: 0000200000000440 RDI: 0000000000000004 [ 187.423563][ T7434] RBP: 00007fc29149b090 R08: 0000000000000000 R09: 0000000000000000 [ 187.423573][ T7434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 187.423582][ T7434] R13: 00007fc290816038 R14: 00007fc290815fa0 R15: 00007fc29093fa48 [ 187.423607][ T7434] [ 188.769324][ T7456] loop5: detected capacity change from 0 to 7 [ 188.781809][ T7456] Dev loop5: unable to read RDB block 7 [ 188.873011][ T7456] loop5: unable to read partition table [ 188.916009][ T7456] loop5: partition table beyond EOD, truncated [ 188.935742][ T7456] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 189.133670][ T5827] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 189.233419][ T7465] netlink: 44 bytes leftover after parsing attributes in process `syz.1.468'. [ 189.314664][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 189.324359][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.335553][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.435551][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.646156][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.670451][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.4.470'. [ 189.717373][ T5827] usb 1-1: config 0 descriptor?? [ 189.756173][ T5827] hub 1-1:0.0: USB hub found [ 190.058924][ T5827] hub 1-1:0.0: 1 port detected [ 190.069523][ T7481] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.078963][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.474'. [ 190.423464][ T7491] vcan0: tx address claim with dlc 0 [ 190.564225][ T7494] syzkaller1: entered promiscuous mode [ 190.569746][ T7494] syzkaller1: entered allmulticast mode [ 190.650884][ T5827] hub 1-1:0.0: activate --> -90 [ 190.986773][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.025421][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.079809][ T5910] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 191.136058][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 191.142157][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 191.153536][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 191.159668][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 191.166652][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 191.238761][ T5910] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.252709][ T5910] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.312855][ T5910] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.322055][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.334145][ T7498] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 191.344359][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 191.420124][ T796] usb 1-1: USB disconnect, device number 28 [ 191.588073][ T7498] 8021q: VLANs not supported on nlmon0 [ 191.618369][ T5910] usb 5-1: USB disconnect, device number 34 [ 191.786888][ T7517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.486'. [ 191.813067][ T5192] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 191.966969][ T5192] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.001475][ T5192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.021035][ T5192] usb 4-1: config 0 descriptor?? [ 192.098856][ T7525] program syz.1.490 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.121117][ T7525] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 192.130652][ T7525] loop2: detected capacity change from 0 to 7 [ 192.141195][ T7525] Dev loop2: unable to read RDB block 7 [ 192.147661][ T7525] loop2: AHDI p1 p2 p3 [ 192.162132][ T7525] loop2: partition table partially beyond EOD, truncated [ 192.182248][ T7525] loop2: p1 start 1601398130 is beyond EOD, truncated [ 192.202883][ T7525] loop2: p2 start 1702059890 is beyond EOD, truncated [ 192.652731][ T5884] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 192.822448][ T5884] usb 5-1: Using ep0 maxpacket: 8 [ 192.834610][ T5884] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.856095][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 192.896442][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.916719][ T7549] vcan0: tx address claim with dlc 0 [ 192.931526][ T5884] usb 5-1: config 0 descriptor?? [ 192.984281][ T5884] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 194.052711][ T5884] gspca_vc032x: reg_r err -110 [ 194.057582][ T5884] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 194.186468][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.192849][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.453344][ T5884] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 194.604703][ T5884] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.615157][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 194.628099][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 194.639454][ T5884] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 194.649254][ T5884] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.664288][ T5884] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 194.673526][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 194.681677][ T5884] usb 1-1: Product: syz [ 194.685910][ T5884] usb 1-1: Manufacturer: syz [ 194.690525][ T5884] usb 1-1: SerialNumber: syz [ 194.697531][ T5884] usb 1-1: config 0 descriptor?? [ 194.906427][ T5884] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 194.915423][ T5884] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 195.110361][ T5192] usb 4-1: Cannot read MAC address [ 195.117550][ T5192] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 195.143112][ T5192] usb 4-1: USB disconnect, device number 22 [ 195.210111][ T24] usb 5-1: USB disconnect, device number 35 [ 195.340317][ T7566] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 195.353901][ T7566] bond1 (unregistering): Released all slaves [ 195.707627][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 195.717321][ T7576] netlink: 24 bytes leftover after parsing attributes in process `syz.3.503'. [ 195.951771][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 195.964388][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.505'. [ 197.202527][ T5910] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 197.204867][ T5884] usb 1-1: USB disconnect, device number 29 [ 197.281207][ T7604] syzkaller1: entered promiscuous mode [ 197.315070][ T7604] syzkaller1: entered allmulticast mode [ 197.395507][ T5910] usb 4-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 197.412401][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.420476][ T5910] usb 4-1: Product: syz [ 197.432411][ T5910] usb 4-1: Manufacturer: syz [ 197.437049][ T5910] usb 4-1: SerialNumber: syz [ 197.702438][ T5827] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 197.741504][ T5910] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 197.756389][ T5910] usb 4-1: MIDIStreaming interface descriptor not found [ 197.830805][ T5910] usb 4-1: USB disconnect, device number 23 [ 197.873332][ T5827] usb 1-1: Using ep0 maxpacket: 32 [ 197.880601][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.893863][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.907479][ T5827] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.927788][ T7510] udevd[7510]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 197.946085][ T5827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.981833][ T5827] usb 1-1: config 0 descriptor?? [ 197.998994][ T5827] hub 1-1:0.0: USB hub found [ 198.196640][ T5827] hub 1-1:0.0: 1 port detected [ 198.593024][ T7630] FAULT_INJECTION: forcing a failure. [ 198.593024][ T7630] name failslab, interval 1, probability 0, space 0, times 0 [ 198.612239][ T7630] CPU: 1 UID: 0 PID: 7630 Comm: syz.4.522 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.612268][ T7630] Tainted: [L]=SOFTLOCKUP [ 198.612276][ T7630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 198.612285][ T7630] Call Trace: [ 198.612292][ T7630] [ 198.612299][ T7630] dump_stack_lvl+0xe8/0x150 [ 198.612324][ T7630] should_fail_ex+0x412/0x560 [ 198.612348][ T7630] ? alloc_inode+0x6a/0x1b0 [ 198.612370][ T7630] should_failslab+0xa8/0x100 [ 198.612391][ T7630] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 198.612410][ T7630] ? __pfx_simple_start_creating+0x10/0x10 [ 198.612434][ T7630] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 198.612451][ T7630] alloc_inode+0x6a/0x1b0 [ 198.612473][ T7630] new_inode+0x22/0x170 [ 198.612499][ T7630] debugfs_create_dir+0x68/0x350 [ 198.612519][ T7630] bdi_register_va+0x258/0x770 [ 198.612546][ T7630] super_setup_bdi_name+0xf8/0x210 [ 198.612570][ T7630] ? __pfx_super_setup_bdi_name+0x10/0x10 [ 198.612592][ T7630] ? do_raw_spin_unlock+0xf5/0x210 [ 198.612614][ T7630] fuse_fill_super_common+0x680/0x1270 [ 198.612644][ T7630] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 198.612667][ T7630] ? __init_swait_queue_head+0xa9/0x150 [ 198.612686][ T7630] ? shrinker_register+0x16b/0x230 [ 198.612710][ T7630] ? sget_fc+0x962/0xa40 [ 198.612727][ T7630] fuse_fill_super+0x176/0x1f0 [ 198.612748][ T7630] ? __pfx_fuse_fill_super+0x10/0x10 [ 198.612770][ T7630] get_tree_nodev+0xbb/0x150 [ 198.612790][ T7630] fuse_get_tree+0x2fb/0x4f0 [ 198.612816][ T7630] vfs_get_tree+0x92/0x2a0 [ 198.612836][ T7630] do_new_mount+0x341/0xd30 [ 198.612856][ T7630] ? apparmor_capable+0x126/0x170 [ 198.612878][ T7630] ? __pfx_do_new_mount+0x10/0x10 [ 198.612899][ T7630] ? ns_capable+0x89/0xe0 [ 198.612920][ T7630] ? path_mount+0x690/0x10e0 [ 198.612947][ T7630] ? user_path_at+0xd4/0x160 [ 198.612965][ T7630] __se_sys_mount+0x31d/0x420 [ 198.612990][ T7630] ? __pfx___se_sys_mount+0x10/0x10 [ 198.613016][ T7630] ? __x64_sys_mount+0x20/0xc0 [ 198.613040][ T7630] do_syscall_64+0x14d/0xf80 [ 198.613057][ T7630] ? trace_irq_disable+0x3b/0x150 [ 198.613077][ T7630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.613100][ T7630] ? clear_bhb_loop+0x40/0x90 [ 198.613121][ T7630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.613137][ T7630] RIP: 0033:0x7fce8799c799 [ 198.613153][ T7630] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.613167][ T7630] RSP: 002b:00007fce887e1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 198.613184][ T7630] RAX: ffffffffffffffda RBX: 00007fce87c15fa0 RCX: 00007fce8799c799 [ 198.613196][ T7630] RDX: 0000200000002100 RSI: 0000200000000000 RDI: 0000000000000000 [ 198.613206][ T7630] RBP: 00007fce887e1090 R08: 00002000000000c0 R09: 0000000000000000 [ 198.613217][ T7630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.613227][ T7630] R13: 00007fce87c16038 R14: 00007fce87c15fa0 R15: 00007fce87d3fa48 [ 198.613254][ T7630] [ 199.042689][ T7630] debugfs: out of free dentries, can not create directory '0:60' [ 199.144026][ T5827] hub 1-1:0.0: activate --> -90 [ 199.202613][ T7635] vlan2: entered promiscuous mode [ 199.406905][ T7631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.415955][ T7631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.723175][ T47] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 199.753445][ T24] usb 1-1: USB disconnect, device number 30 [ 199.892361][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 199.901171][ T47] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 199.922417][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.947812][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.975553][ T47] usb 4-1: config 0 descriptor?? [ 199.988931][ T47] hub 4-1:0.0: bad descriptor, ignoring hub [ 199.997636][ T47] hub 4-1:0.0: probe with driver hub failed with error -5 [ 200.011513][ T47] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 200.607171][ T7665] input: syz0 as /devices/virtual/input/input13 [ 200.632100][ T7665] FAULT_INJECTION: forcing a failure. [ 200.632100][ T7665] name failslab, interval 1, probability 0, space 0, times 0 [ 200.667308][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.2.533 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.667334][ T7665] Tainted: [L]=SOFTLOCKUP [ 200.667339][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 200.667347][ T7665] Call Trace: [ 200.667353][ T7665] [ 200.667358][ T7665] dump_stack_lvl+0xe8/0x150 [ 200.667388][ T7665] should_fail_ex+0x412/0x560 [ 200.667415][ T7665] should_failslab+0xa8/0x100 [ 200.667444][ T7665] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 200.667464][ T7665] ? __kernfs_new_node+0xa9/0x8e0 [ 200.667492][ T7665] kstrdup+0x42/0x100 [ 200.667517][ T7665] __kernfs_new_node+0xa9/0x8e0 [ 200.667544][ T7665] ? __pfx___kernfs_new_node+0x10/0x10 [ 200.667564][ T7665] ? kernfs_root+0x1c/0x230 [ 200.667590][ T7665] ? kernfs_root+0x1c/0x230 [ 200.667614][ T7665] ? kernfs_root+0x1c/0x230 [ 200.667639][ T7665] kernfs_new_node+0x102/0x210 [ 200.667665][ T7665] kernfs_create_link+0xa7/0x200 [ 200.667685][ T7665] sysfs_do_create_link_sd+0x83/0x110 [ 200.667708][ T7665] device_add_class_symlinks+0x1cf/0x240 [ 200.667731][ T7665] device_add+0x475/0xb70 [ 200.667754][ T7665] cdev_device_add+0x1d6/0x390 [ 200.667777][ T7665] evdev_connect+0x34f/0x3f0 [ 200.667805][ T7665] input_register_device+0xd00/0x1160 [ 200.667833][ T7665] uinput_create_device+0x422/0x670 [ 200.667858][ T7665] uinput_ioctl_handler+0x417/0x14a0 [ 200.667879][ T7665] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 200.667902][ T7665] ? __fget_files+0x2a/0x420 [ 200.667919][ T7665] ? __fget_files+0x3a0/0x420 [ 200.667943][ T7665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 200.667963][ T7665] ? __pfx_uinput_ioctl+0x10/0x10 [ 200.667979][ T7665] __se_sys_ioctl+0xfc/0x170 [ 200.668000][ T7665] do_syscall_64+0x14d/0xf80 [ 200.668016][ T7665] ? trace_irq_disable+0x3b/0x150 [ 200.668036][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.668052][ T7665] ? clear_bhb_loop+0x40/0x90 [ 200.668071][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.668090][ T7665] RIP: 0033:0x7fc29059c799 [ 200.668106][ T7665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.668117][ T7665] RSP: 002b:00007fc29149b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 200.668134][ T7665] RAX: ffffffffffffffda RBX: 00007fc290815fa0 RCX: 00007fc29059c799 [ 200.668146][ T7665] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 200.668155][ T7665] RBP: 00007fc29149b090 R08: 0000000000000000 R09: 0000000000000000 [ 200.668165][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 200.668174][ T7665] R13: 00007fc290816038 R14: 00007fc290815fa0 R15: 00007fc29093fa48 [ 200.668200][ T7665] [ 200.941865][ T7665] input: failed to attach handler evdev to device input13, error: -12 [ 201.264909][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.275423][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.421620][ T7686] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 201.421620][ T7686] program syz.2.538 not setting count and/or reply_len properly [ 202.421537][ T7701] syzkaller1: entered promiscuous mode [ 202.428968][ T7701] syzkaller1: entered allmulticast mode [ 202.593851][ T5192] usb 4-1: USB disconnect, device number 24 [ 202.797633][ T7715] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.894924][ T7713] netlink: 44 bytes leftover after parsing attributes in process `syz.3.545'. [ 202.920087][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 204.164581][ T47] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 204.362418][ T47] usb 1-1: device descriptor read/64, error -71 [ 204.579513][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.551'. [ 204.602395][ T47] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 204.726403][ T7728] netlink: 104 bytes leftover after parsing attributes in process `syz.1.551'. [ 204.804238][ T7728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.551'. [ 204.924903][ T47] usb 1-1: device descriptor read/64, error -71 [ 205.193090][ T47] usb usb1-port1: attempt power cycle [ 205.673881][ T47] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 205.725729][ T47] usb 1-1: device descriptor read/8, error -71 [ 205.732376][ T796] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 205.984301][ T796] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.997387][ T796] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.010839][ T796] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 206.022546][ T47] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 206.023327][ T796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.040540][ T796] usb 4-1: Product: syz [ 206.045000][ T796] usb 4-1: Manufacturer: syz [ 206.050511][ T796] usb 4-1: SerialNumber: syz [ 206.053179][ T47] usb 1-1: device descriptor read/8, error -71 [ 206.057753][ T796] usb 4-1: config 0 descriptor?? [ 206.162815][ T47] usb usb1-port1: unable to enumerate USB device [ 206.310515][ T7747] bridge0: entered promiscuous mode [ 206.322180][ T7747] vlan2: entered promiscuous mode [ 206.636718][ T796] usb 4-1: USB disconnect, device number 25 [ 206.747587][ T7769] syzkaller0: entered promiscuous mode [ 206.753704][ T7769] syzkaller0: entered allmulticast mode [ 206.823061][ T24] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 206.932390][ T5884] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 206.962946][ T24] usb 1-1: device descriptor read/64, error -71 [ 207.092397][ T5884] usb 5-1: Using ep0 maxpacket: 32 [ 207.105533][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.132386][ T5884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.142174][ T5884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 207.212855][ T5884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.232431][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 207.262638][ T5884] usb 5-1: config 0 descriptor?? [ 207.290078][ T5884] hub 5-1:0.0: USB hub found [ 207.382433][ T24] usb 1-1: device descriptor read/64, error -71 [ 207.487400][ T5884] hub 5-1:0.0: 1 port detected [ 207.552640][ T24] usb usb1-port1: attempt power cycle [ 207.935734][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 207.990326][ T24] usb 1-1: device descriptor read/8, error -71 [ 208.090840][ T5884] hub 5-1:0.0: activate --> -90 [ 208.232412][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 208.284466][ T24] usb 1-1: device descriptor read/8, error -71 [ 208.402748][ T24] usb usb1-port1: unable to enumerate USB device [ 208.986770][ T7799] loop5: detected capacity change from 0 to 7 [ 209.024006][ T7799] Dev loop5: unable to read RDB block 7 [ 209.032971][ T7799] loop5: unable to read partition table [ 209.048178][ T7799] loop5: partition table beyond EOD, truncated [ 209.094752][ T7799] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 209.373672][ T5884] usb 5-1-port1: cannot disable (err = -32) [ 209.382212][ T5884] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 209.734344][ T5884] usb 5-1: USB disconnect, device number 36 [ 210.044006][ T7811] syzkaller0: entered promiscuous mode [ 210.062522][ T7811] syzkaller0: entered allmulticast mode [ 210.069204][ T24] IPVS: starting estimator thread 0... [ 210.182400][ T7814] IPVS: using max 57 ests per chain, 136800 per kthread [ 210.831024][ T7830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.757444][ T7904] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.765221][ T7904] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.329290][ T7941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.345774][ T7941] rtc_cmos 00:00: Alarms can be up to one day in the future [ 213.384724][ T3481] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.485835][ T3481] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.507370][ T3481] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.533347][ T3481] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.078651][ T7975] netlink: 'syz.0.634': attribute type 1 has an invalid length. [ 214.175774][ T7975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.321015][ T7982] bond1: (slave dummy0): making interface the new active one [ 214.344046][ T7982] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 215.171298][ T8035] syzkaller0: entered promiscuous mode [ 215.180415][ T8035] syzkaller0: entered allmulticast mode [ 215.231303][ T8045] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 215.231303][ T8045] The task syz.4.660 (8045) triggered the difference, watch for misbehavior. [ 215.244062][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 215.244081][ T29] audit: type=1804 audit(1773569617.518:68): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.662" name="bus" dev="ramfs" ino=19408 res=1 errno=0 [ 216.332736][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 217.221656][ T8093] syzkaller0: entered promiscuous mode [ 217.240729][ T8093] syzkaller0: entered allmulticast mode [ 217.439605][ T8099] netlink: 76 bytes leftover after parsing attributes in process `syz.4.683'. [ 218.445487][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 218.487966][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 218.533641][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'. [ 218.660483][ T8154] xt_connbytes: Forcing CT accounting to be enabled [ 220.604900][ T8263] bridge1: entered promiscuous mode [ 220.610154][ T8263] bridge1: entered allmulticast mode [ 220.668171][ T8270] mmap: syz.4.753 (8270) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 220.713174][ T8263] team0: Port device bridge1 added [ 220.737686][ T8263] netlink: 64 bytes leftover after parsing attributes in process `syz.4.753'. [ 220.967497][ T8287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.761120][ T8322] loop7: detected capacity change from 0 to 7 [ 221.832637][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.842481][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.860290][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.869990][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.880662][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.890332][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.911033][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.920731][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.939302][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.949061][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.958624][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.968258][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.978963][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 221.988627][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 221.996635][ T7426] ldm_validate_partition_table(): Disk read failed. [ 222.006147][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.015825][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.032430][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.042077][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.053003][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 222.062621][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 222.070783][ T7426] Dev loop7: unable to read RDB block 0 [ 222.123046][ T8326] [ 222.125410][ T8326] ====================================================== [ 222.132429][ T8326] WARNING: possible circular locking dependency detected [ 222.139462][ T8326] syzkaller #0 Tainted: G L [ 222.145436][ T8326] ------------------------------------------------------ [ 222.152453][ T8326] syz.4.778/8326 is trying to acquire lock: [ 222.158334][ T8326] ffff88801b6dda20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 222.168593][ T8326] [ 222.168593][ T8326] but task is already holding lock: [ 222.175938][ T8326] ffff888025fd72c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 222.185681][ T8326] [ 222.185681][ T8326] which lock already depends on the new lock. [ 222.185681][ T8326] [ 222.196067][ T8326] [ 222.196067][ T8326] the existing dependency chain (in reverse order) is: [ 222.205063][ T8326] [ 222.205063][ T8326] -> #2 (&q->q_usage_counter(io)#24){++++}-{0:0}: [ 222.213656][ T8326] blk_alloc_queue+0x546/0x680 [ 222.218935][ T8326] __blk_mq_alloc_disk+0x197/0x390 [ 222.224558][ T8326] loop_add+0x482/0xb40 [ 222.229219][ T8326] loop_init+0xd9/0x170 [ 222.233878][ T8326] do_one_initcall+0x250/0x8d0 [ 222.239149][ T8326] do_initcall_level+0x104/0x190 [ 222.244589][ T8326] do_initcalls+0x59/0xa0 [ 222.249423][ T8326] kernel_init_freeable+0x2a6/0x3e0 [ 222.255123][ T8326] kernel_init+0x1d/0x1d0 [ 222.259960][ T8326] ret_from_fork+0x51e/0xb90 [ 222.265054][ T8326] ret_from_fork_asm+0x1a/0x30 [ 222.270329][ T8326] [ 222.270329][ T8326] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 222.277529][ T8326] fs_reclaim_acquire+0x71/0x100 [ 222.282977][ T8326] kmem_cache_alloc_noprof+0x40/0x650 [ 222.288856][ T8326] __kernfs_iattrs+0xdf/0x340 [ 222.294040][ T8326] kernfs_iop_setattr+0xea/0x3f0 [ 222.299485][ T8326] notify_change+0xc1a/0xf40 [ 222.304577][ T8326] do_truncate+0x1c2/0x250 [ 222.309501][ T8326] path_openat+0x2f89/0x3860 [ 222.314595][ T8326] do_file_open+0x23e/0x4a0 [ 222.319603][ T8326] do_sys_openat2+0x113/0x200 [ 222.324791][ T8326] __x64_sys_openat+0x138/0x170 [ 222.330148][ T8326] do_syscall_64+0x14d/0xf80 [ 222.335272][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.341672][ T8326] [ 222.341672][ T8326] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 222.350173][ T8326] __lock_acquire+0x15a5/0x2cf0 [ 222.355539][ T8326] lock_acquire+0xf0/0x2e0 [ 222.360459][ T8326] down_read+0x47/0x2e0 [ 222.365121][ T8326] kernfs_iop_getattr+0x9e/0x450 [ 222.370567][ T8326] vfs_getattr_nosec+0x2e1/0x430 [ 222.376014][ T8326] loop_assign_backing_file+0x27a/0x4b0 [ 222.382069][ T8326] lo_ioctl+0x1acb/0x1fb0 [ 222.386910][ T8326] blkdev_ioctl+0x5e3/0x740 [ 222.391927][ T8326] __se_sys_ioctl+0xfc/0x170 [ 222.397039][ T8326] do_syscall_64+0x14d/0xf80 [ 222.402154][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.408562][ T8326] [ 222.408562][ T8326] other info that might help us debug this: [ 222.408562][ T8326] [ 222.418780][ T8326] Chain exists of: [ 222.418780][ T8326] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#24 [ 222.418780][ T8326] [ 222.433202][ T8326] Possible unsafe locking scenario: [ 222.433202][ T8326] [ 222.440635][ T8326] CPU0 CPU1 [ 222.446023][ T8326] ---- ---- [ 222.451375][ T8326] lock(&q->q_usage_counter(io)#24); [ 222.456739][ T8326] lock(fs_reclaim); [ 222.463257][ T8326] lock(&q->q_usage_counter(io)#24); [ 222.471136][ T8326] rlock(&root->kernfs_iattr_rwsem); [ 222.476494][ T8326] [ 222.476494][ T8326] *** DEADLOCK *** [ 222.476494][ T8326] [ 222.484624][ T8326] 3 locks held by syz.4.778/8326: [ 222.489632][ T8326] #0: ffff8880262db448 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x14c7/0x1fb0 [ 222.498672][ T8326] #1: ffff888025fd72c0 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 222.508880][ T8326] #2: ffff888025fd72f8 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1a51/0x1fb0 [ 222.519316][ T8326] [ 222.519316][ T8326] stack backtrace: [ 222.525191][ T8326] CPU: 1 UID: 0 PID: 8326 Comm: syz.4.778 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.525210][ T8326] Tainted: [L]=SOFTLOCKUP [ 222.525215][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 222.525223][ T8326] Call Trace: [ 222.525230][ T8326] [ 222.525237][ T8326] dump_stack_lvl+0xe8/0x150 [ 222.525256][ T8326] print_circular_bug+0x2e1/0x300 [ 222.525276][ T8326] check_noncircular+0x12e/0x150 [ 222.525294][ T8326] __lock_acquire+0x15a5/0x2cf0 [ 222.525315][ T8326] lock_acquire+0xf0/0x2e0 [ 222.525328][ T8326] ? kernfs_iop_getattr+0x9e/0x450 [ 222.525347][ T8326] down_read+0x47/0x2e0 [ 222.525362][ T8326] ? kernfs_iop_getattr+0x9e/0x450 [ 222.525378][ T8326] kernfs_iop_getattr+0x9e/0x450 [ 222.525395][ T8326] vfs_getattr_nosec+0x2e1/0x430 [ 222.525412][ T8326] loop_assign_backing_file+0x27a/0x4b0 [ 222.525430][ T8326] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 222.525455][ T8326] lo_ioctl+0x1acb/0x1fb0 [ 222.525473][ T8326] ? __pfx_lo_ioctl+0x10/0x10 [ 222.525487][ T8326] ? is_bpf_text_address+0x292/0x2b0 [ 222.525500][ T8326] ? is_bpf_text_address+0x26/0x2b0 [ 222.525512][ T8326] ? kernel_text_address+0xa5/0xe0 [ 222.525525][ T8326] ? __kernel_text_address+0xd/0x30 [ 222.525537][ T8326] ? unwind_get_return_address+0x4d/0x90 [ 222.525556][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525571][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525586][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525601][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525616][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525630][ T8326] ? __lock_acquire+0x6b5/0x2cf0 [ 222.525646][ T8326] ? unwind_next_frame+0xa5/0x23c0 [ 222.525667][ T8326] ? is_bpf_text_address+0x26/0x2b0 [ 222.525680][ T8326] ? is_bpf_text_address+0x292/0x2b0 [ 222.525691][ T8326] ? is_bpf_text_address+0x26/0x2b0 [ 222.525703][ T8326] ? kernel_text_address+0xa5/0xe0 [ 222.525716][ T8326] ? __kernel_text_address+0xd/0x30 [ 222.525727][ T8326] ? unwind_get_return_address+0x4d/0x90 [ 222.525743][ T8326] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.525756][ T8326] ? arch_stack_walk+0xfb/0x150 [ 222.525775][ T8326] ? stack_trace_save+0xa9/0x100 [ 222.525786][ T8326] ? __pfx_stack_trace_save+0x10/0x10 [ 222.525797][ T8326] ? kasan_save_free_info+0x46/0x50 [ 222.525815][ T8326] ? stack_depot_save_flags+0x33/0x810 [ 222.525831][ T8326] ? format_decode+0xd0/0xe10 [ 222.525847][ T8326] ? kasan_save_track+0x4f/0x80 [ 222.525864][ T8326] ? kasan_save_track+0x3e/0x80 [ 222.525875][ T8326] ? kasan_save_free_info+0x46/0x50 [ 222.525890][ T8326] ? __kasan_slab_free+0x5c/0x80 [ 222.525902][ T8326] ? kfree+0x1c1/0x630 [ 222.525912][ T8326] ? tomoyo_path_number_perm+0x501/0x630 [ 222.525927][ T8326] ? security_file_ioctl+0xc3/0x2a0 [ 222.525940][ T8326] ? __se_sys_ioctl+0x47/0x170 [ 222.525952][ T8326] ? do_syscall_64+0x14d/0xf80 [ 222.525964][ T8326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.525979][ T8326] ? __asan_memset+0x22/0x50 [ 222.525990][ T8326] ? blk_get_meta_cap+0x16d/0x7a0 [ 222.526005][ T8326] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 222.526019][ T8326] ? blkdev_common_ioctl+0x14b7/0x3250 [ 222.526037][ T8326] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 222.526051][ T8326] ? kasan_quarantine_put+0xbb/0x1f0 [ 222.526066][ T8326] ? tomoyo_path_number_perm+0x219/0x630 [ 222.526080][ T8326] ? tomoyo_path_number_perm+0x219/0x630 [ 222.526095][ T8326] ? do_vfs_ioctl+0x1166/0x1530 [ 222.526109][ T8326] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 222.526130][ T8326] ? __pfx_lo_ioctl+0x10/0x10 [ 222.526145][ T8326] blkdev_ioctl+0x5e3/0x740 [ 222.526160][ T8326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 222.526173][ T8326] ? __fget_files+0x2a/0x420 [ 222.526190][ T8326] ? bpf_lsm_file_ioctl+0x9/0x20 [ 222.526206][ T8326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 222.526220][ T8326] __se_sys_ioctl+0xfc/0x170 [ 222.526234][ T8326] do_syscall_64+0x14d/0xf80 [ 222.526246][ T8326] ? trace_irq_disable+0x3b/0x150 [ 222.526262][ T8326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.526274][ T8326] ? clear_bhb_loop+0x40/0x90 [ 222.526287][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.526299][ T8326] RIP: 0033:0x7fce8799c799 [ 222.526312][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.526323][ T8326] RSP: 002b:00007fce887c0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.526336][ T8326] RAX: ffffffffffffffda RBX: 00007fce87c16090 RCX: 00007fce8799c799 [ 222.526345][ T8326] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 222.526354][ T8326] RBP: 00007fce87a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 222.526361][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.526369][ T8326] R13: 00007fce87c16128 R14: 00007fce87c16090 R15: 00007fce87d3fa48 [ 222.526382][ T8326] [ 223.005127][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.781'. [ 223.075821][ T7426] loop7: unable to read partition table [ 223.081647][ T7426] loop7: partition table beyond EOD, truncated [ 223.098528][ T7426] ldm_validate_partition_table(): Disk read failed. [ 223.110502][ T7426] Dev loop7: unable to read RDB block 0 [ 223.117006][ T7426] loop7: unable to read partition table [ 223.126754][ T7426] loop7: partition table beyond EOD, truncated [ 223.134051][ T8322] ldm_validate_partition_table(): Disk read failed. [ 223.141130][ T8322] Dev loop7: unable to read RDB block 0 [ 223.147083][ T8322] loop7: unable to read partition table [ 223.152978][ T8322] loop7: partition table beyond EOD, truncated [ 223.159146][ T8322] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 223.173997][ T8326] ldm_validate_partition_table(): Disk read failed. [ 223.181023][ T8326] Dev loop7: unable to read RDB block 0 [ 223.187163][ T8326] loop7: unable to read partition table [ 223.192917][ T8326] loop7: partition table beyond EOD, truncated [ 223.199340][ T8326] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 230.022420][ T9] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 230.028377][ T5911] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 230.053717][ T5911] dvb_usb_az6027 2-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 230.066407][ T9] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 230.067331][ T5911] usb 2-1: USB disconnect, device number 27 [ 230.090797][ T9] usb 3-1: USB disconnect, device number 35