last executing test programs: 4.377032779s ago: executing program 3 (id=189): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x448d, "b546baa5cc198c3033de259c3d96817b070000000000000008000000ffafde25"}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x402) 4.203165618s ago: executing program 3 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe0242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, 0x15, 0xa, 0x801, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4048830) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) 4.005288111s ago: executing program 3 (id=196): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) 3.846388477s ago: executing program 3 (id=197): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f00000001c0)={0x6, [[0xfff, 0xa, 0x101, 0x6, 0x3, 0x5, 0x2, 0x1], [0x0, 0x8c1b, 0x0, 0x6, 0x0, 0x100, 0x9, 0x2], [0x10001, 0x200, 0x6, 0x1ff, 0x80000000, 0xa, 0x4, 0x6]], '\x00', [{0xa, 0x3, 0x0, 0x1}, {0x84, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6}, {0x2, 0x5, 0x0, 0x1, 0x1}, {0x6, 0xc}, {0x4, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x45580895, 0x0, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3ff, 0x1, 0x1}, {0x80000001, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x4}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getdents(r2, &(0x7f0000000600)=""/54, 0x36) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="b2bbe960a9d1d97c5997d91ba81066b248a23fcf92a77dab75cb718e844ee2feabfa5fd40ffb4e410c821f6ca3a2db4961a2a7acfe8b769782553982abceb947a725d75def", 0x45, r1}, 0x68) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x6e, 0x458440) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r1], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 2.512300985s ago: executing program 1 (id=211): setuid(0xee01) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e9}]}, &(0x7f0000000180)=0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000040)="240000001e005f61004000000000000001000000010000000000080008000100000303ff", 0x24) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) r3 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) rt_tgsigqueueinfo(r3, r3, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000}) setuid(0xee01) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e9}]}, &(0x7f0000000180)=0x10) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f000000cffc), 0xb, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000048000)=0x1, 0x0) (async) socket(0x10, 0x2, 0x0) (async) write(r2, &(0x7f0000000040)="240000001e005f61004000000000000001000000010000000000080008000100000303ff", 0x24) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) rt_tgsigqueueinfo(r3, r3, 0x9, &(0x7f0000000600)={0x31, 0x3, 0x80000000}) (async) 2.492423805s ago: executing program 0 (id=212): r0 = socket(0x2, 0x80805, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x30, 0x2, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x30}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setns(0xc9, 0x0) r1 = socket(0x8, 0x2, 0x0) setsockopt(r1, 0x108, 0x42020054, &(0x7f0000000000)="010000000000000000000000000000000005000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000", 0x54) 2.314520189s ago: executing program 0 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 2.145878938s ago: executing program 0 (id=215): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140081006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.902664431s ago: executing program 0 (id=216): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000060000000000000000000000050000000000000004008f4c0008000056b800"], 0x30) 1.902334406s ago: executing program 0 (id=217): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64090101, @remote}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8, 0x80, 0x1000, 0x80002e4, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x64, 0x0, 0x10, 0x29, 0x0, @rand_addr=0x64090101, @remote}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) dup(r3) (async) r8 = dup(r3) syz_ublk_setup_queues(r8, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7d}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x20, 0x1000002, 0x343}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x359, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e8, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x20d}}], 0x30}], 0x1, 0x84) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = syz_usb_connect(0x0, 0x4c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040d804820000010000000109023a00020100c0320904000001020201000524001001052406000107058103ffff0a09040100020a00000007050202ffff0007058202ff"], 0x0) syz_usb_control_io$uac2(r9, 0x0, 0x0) 1.595609264s ago: executing program 3 (id=219): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in=@rand_addr=0x64010102, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2, 0x1, 0x1, 0x5, 0x2, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400002f6000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.502731656s ago: executing program 1 (id=220): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x402) 1.421920929s ago: executing program 1 (id=222): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}}, 0x0) 1.217818846s ago: executing program 2 (id=224): r0 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000500)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000300)="450000280000400040063ccd7f0000027f00000130390015000000010000000a5010100071780000", 0x28, 0x200000000000000, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10) 1.217459657s ago: executing program 2 (id=225): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r3, &(0x7f0000000140)='n', 0x1) write(r0, &(0x7f0000000080)='4', 0x1) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0x0, 0x368c, 0xc98d, 0x3d78e91c}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100"], 0x58}}, 0x20008000) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0xd}, 0x1c) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) (async) socket$inet6(0x10, 0x2, 0x4) (async) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) (async) write(r3, &(0x7f0000000140)='n', 0x1) (async) write(r0, &(0x7f0000000080)='4', 0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x0, @meta={0x54505356, 0x0, 0x368c, 0xc98d, 0x3d78e91c}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000180)) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0100"], 0x58}}, 0x20008000) (async) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="88020000", @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.182472836s ago: executing program 1 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (fail_nth: 7) 1.143634336s ago: executing program 3 (id=227): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc25c4111, &(0x7f00000001c0)={0x6, [[0xfff, 0xa, 0x101, 0x6, 0x3, 0x5, 0x2, 0x1], [0x0, 0x8c1b, 0x0, 0x6, 0x0, 0x100, 0x9, 0x2], [0x10001, 0x200, 0x6, 0x1ff, 0x80000000, 0xa, 0x4, 0x6]], '\x00', [{0xa, 0x3, 0x0, 0x1}, {0x84, 0x2, 0x0, 0x1, 0x1, 0x1}, {0x1, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x0, 0x6}, {0x2, 0x5, 0x0, 0x1, 0x1}, {0x6, 0xc}, {0x4, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x80000000, 0x0, 0x1, 0x0, 0x1}, {0x9, 0x45580895, 0x0, 0x1, 0x0, 0x1}, {0xfffffff9, 0x3ff, 0x1, 0x1}, {0x80000001, 0x1, 0x1, 0x0, 0x0, 0x1}], '\x00', 0x4}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010028bd700bfbdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) getdents(r2, &(0x7f0000000600)=""/54, 0x36) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000000c0)="b2bbe960a9d1d97c5997d91ba81066b248a23fcf92a77dab75cb718e844ee2feabfa5fd40ffb4e410c821f6ca3a2db4961a2a7acfe8b769782553982abceb947a725d75def", 0x45, r1}, 0x68) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x6e, 0x458440) syz_usb_control_io$hid(r0, &(0x7f0000004500)={0x24, 0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r4, @ANYRES8=r2, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES64=r1], 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000312000000"], 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) 998.677857ms ago: executing program 0 (id=228): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)={0x0, 0x3, 0x3, "0000f9"}, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 311.476152ms ago: executing program 2 (id=229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) waitid(0x2, 0x0, 0x0, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000005e00019eb17738540600000000000000", @ANYRES32=0x0, @ANYRES8=r1], 0x1c}], 0x1, 0x0, 0x0, 0x810}, 0x0) recvfrom(r1, &(0x7f0000000140)=""/213, 0xd5, 0x200, 0x0, 0x0) 284.46553ms ago: executing program 1 (id=230): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x402) 197.78095ms ago: executing program 1 (id=231): syz_usb_connect$uac1(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000010d118042d40000102030109026f00030107900a0904000000010100000a240102000a00020102090401000001020000090401010101020000090501091000050704072501000c83000904020000010200000904020101010200000724010606030008240201090308b00905820940000710000725"], 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 129.719726ms ago: executing program 2 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000007001c0001000600060008000000100007007f0000017f000001910040001400020010000c00090005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 2.732995ms ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800500, 0x0) 0s ago: executing program 2 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900ff00000028001a000a01010200000000000000000076d0f8b62ac1e2d5ed0e43e58c3f6d65e808c7eb5ab6"], 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x54, 0x62, 0x37, 0x30, 0x37, 0x38, 0x35, 0x66, 0x69, 0x34, 0x38, 0x62, 0x34, 0x30, 0x61, 0xe32987de1adc0bd]}, &(0x7f0000000080)={0x0, "8e851e717d6332dc4bbb2d529869bf550732bae393c6ffa1a812a8eb2a2931ad8bba971114ac4cf11c3dcad842c4670b4a203ecd0ed693d1b653e3958d683a50", 0x17}, 0x48, 0xfffffffffffffffe) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r3], 0x58}, 0x1, 0x0, 0x0, 0x4014}, 0x0) keyctl$unlink(0x9, r1, r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)={0x60, r5, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0xfffffffffffffc83, 0x1, @enabled}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x8}}}, {0x0, 0x1, @mcast_rejoin_interval={{}, {}, {0x0, 0x4, 0x40}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cc, &(0x7f0000000080)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. [ 71.833389][ T5605] cgroup: Unknown subsys name 'net' [ 71.936517][ T5605] cgroup: Unknown subsys name 'cpuset' [ 71.939150][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.332000][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.540970][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.543947][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.553603][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.554246][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.555756][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.557624][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.557892][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.558018][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.558629][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.559189][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.559958][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.561758][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.562277][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.562532][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.564746][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.565117][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.567775][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.568285][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.595471][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.610013][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.834965][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.835885][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.836422][ T5614] bridge_slave_0: entered allmulticast mode [ 76.838539][ T5614] bridge_slave_0: entered promiscuous mode [ 76.894760][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.894923][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.895159][ T5614] bridge_slave_1: entered allmulticast mode [ 76.896154][ T5614] bridge_slave_1: entered promiscuous mode [ 76.982587][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.014567][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.121890][ T5614] team0: Port device team_slave_0 added [ 77.122101][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.122187][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.122345][ T5617] bridge_slave_0: entered allmulticast mode [ 77.124366][ T5617] bridge_slave_0: entered promiscuous mode [ 77.126987][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.127145][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.127498][ T5617] bridge_slave_1: entered allmulticast mode [ 77.129119][ T5617] bridge_slave_1: entered promiscuous mode [ 77.173110][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.173215][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.174733][ T5615] bridge_slave_0: entered allmulticast mode [ 77.176502][ T5615] bridge_slave_0: entered promiscuous mode [ 77.182013][ T5614] team0: Port device team_slave_1 added [ 77.222247][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.235640][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.235734][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.235842][ T5615] bridge_slave_1: entered allmulticast mode [ 77.237303][ T5615] bridge_slave_1: entered promiscuous mode [ 77.239533][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.239547][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.239560][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.242437][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.332050][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.332067][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.332090][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.374089][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.405136][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.406766][ T5617] team0: Port device team_slave_0 added [ 77.409652][ T5617] team0: Port device team_slave_1 added [ 77.458138][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.458304][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.458423][ T5616] bridge_slave_0: entered allmulticast mode [ 77.460175][ T5616] bridge_slave_0: entered promiscuous mode [ 77.482362][ T5615] team0: Port device team_slave_0 added [ 77.496880][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.497033][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.497153][ T5616] bridge_slave_1: entered allmulticast mode [ 77.498413][ T5616] bridge_slave_1: entered promiscuous mode [ 77.501220][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.501235][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.501259][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.506251][ T5615] team0: Port device team_slave_1 added [ 77.544607][ T5614] hsr_slave_0: entered promiscuous mode [ 77.545857][ T5614] hsr_slave_1: entered promiscuous mode [ 77.588335][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.588351][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.588374][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.634528][ T52] Bluetooth: hci3: command tx timeout [ 77.634717][ T52] Bluetooth: hci0: command tx timeout [ 77.634916][ T5624] Bluetooth: hci2: command tx timeout [ 77.671273][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.672331][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.672347][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.672366][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.706940][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.708442][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.708457][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.708481][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.713587][ T5624] Bluetooth: hci1: command tx timeout [ 77.784517][ T5617] hsr_slave_0: entered promiscuous mode [ 77.785594][ T5617] hsr_slave_1: entered promiscuous mode [ 77.786764][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 77.786856][ T5617] Cannot create hsr debugfs directory [ 77.816948][ T5616] team0: Port device team_slave_0 added [ 77.838736][ T5616] team0: Port device team_slave_1 added [ 77.882399][ T5615] hsr_slave_0: entered promiscuous mode [ 77.883028][ T5615] hsr_slave_1: entered promiscuous mode [ 77.884232][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 77.884251][ T5615] Cannot create hsr debugfs directory [ 77.948983][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.948999][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.949022][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.992935][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992952][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.992984][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.147781][ T5616] hsr_slave_0: entered promiscuous mode [ 78.148379][ T5616] hsr_slave_1: entered promiscuous mode [ 78.148770][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 78.148787][ T5616] Cannot create hsr debugfs directory [ 78.277668][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.290204][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.299562][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.307251][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.331959][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.338206][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.339073][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.344575][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.452382][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.462655][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.475460][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.478111][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.492191][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.507005][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.509324][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.512122][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.591721][ T5615] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.597704][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.600086][ T5615] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.608152][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.612528][ T5615] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.624697][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.643887][ T5615] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.647552][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.737750][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.751794][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.759042][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.772860][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.782796][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.793365][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.796441][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.798625][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.801400][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.840790][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.860616][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.860732][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.884382][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.884488][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.962747][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.020443][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.045306][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.051385][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.051907][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.090569][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.090629][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.165480][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.193337][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.193433][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.241178][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.241277][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.248837][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.358315][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.392009][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.392105][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.418297][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.418397][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.715516][ T5625] Bluetooth: hci0: command tx timeout [ 79.715550][ T5625] Bluetooth: hci3: command tx timeout [ 79.715661][ T5624] Bluetooth: hci2: command tx timeout [ 79.796478][ T5624] Bluetooth: hci1: command tx timeout [ 80.019762][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.151666][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.227264][ T5617] veth0_vlan: entered promiscuous mode [ 80.260827][ T5617] veth1_vlan: entered promiscuous mode [ 80.388961][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.390460][ T5614] veth0_vlan: entered promiscuous mode [ 80.410512][ T5617] veth0_macvtap: entered promiscuous mode [ 80.438787][ T5617] veth1_macvtap: entered promiscuous mode [ 80.445749][ T5614] veth1_vlan: entered promiscuous mode [ 80.468439][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.491110][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.521134][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.537118][ T5614] veth0_macvtap: entered promiscuous mode [ 80.541351][ T5614] veth1_macvtap: entered promiscuous mode [ 80.604143][ T1176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.611134][ T5616] veth0_vlan: entered promiscuous mode [ 80.642770][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.644489][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.644661][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.644823][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.696739][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.724545][ T5615] veth0_vlan: entered promiscuous mode [ 80.749360][ T5616] veth1_vlan: entered promiscuous mode [ 80.791410][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.791437][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.795215][ T3811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795260][ T3811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795294][ T3811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795328][ T3811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.852132][ T5615] veth1_vlan: entered promiscuous mode [ 80.914809][ T3811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.914830][ T3811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.947463][ T5616] veth0_macvtap: entered promiscuous mode [ 80.978470][ T5616] veth1_macvtap: entered promiscuous mode [ 80.981534][ T3811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.981552][ T3811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.018224][ T5615] veth0_macvtap: entered promiscuous mode [ 81.060368][ T5617] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.060706][ T5615] veth1_macvtap: entered promiscuous mode [ 81.063895][ T1176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.063914][ T1176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.073234][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.115288][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.139439][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.182537][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.213784][ T3811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213832][ T3811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213866][ T3811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.394687][ T5773] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.415360][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.416895][ T1176] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.416938][ T1176] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.416971][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.456065][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.456090][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.508105][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.508159][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.559031][ T5773] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3'. [ 81.584040][ T5773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.606076][ T5773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.614268][ T5773] bond0 (unregistering): Released all slaves [ 81.710583][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.710603][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.773241][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.773319][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.784897][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.793664][ T52] Bluetooth: hci3: command tx timeout [ 81.793695][ T52] Bluetooth: hci0: command tx timeout [ 81.793805][ T5624] Bluetooth: hci2: command tx timeout [ 81.875215][ T5624] Bluetooth: hci1: command tx timeout [ 82.316365][ T5787] jffs2: notice: (5787) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.560158][ T5787] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.864660][ T5795] jffs2: notice: (5795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.960311][ T5793] netlink: Failed to add helper -22 [ 82.960380][ T5793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 83.070449][ T5800] FAULT_INJECTION: forcing a failure. [ 83.070449][ T5800] name failslab, interval 1, probability 0, space 0, times 1 [ 83.070494][ T5800] CPU: 1 UID: 0 PID: 5800 Comm: syz.3.11 Tainted: G L syzkaller #0 PREEMPT(full) [ 83.070520][ T5800] Tainted: [L]=SOFTLOCKUP [ 83.070527][ T5800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.070546][ T5800] Call Trace: [ 83.070557][ T5800] [ 83.070565][ T5800] dump_stack_lvl+0xe8/0x150 [ 83.070609][ T5800] should_fail_ex+0x3eb/0x540 [ 83.070634][ T5800] should_failslab+0xa8/0x100 [ 83.070656][ T5800] __kmalloc_cache_noprof+0x9e/0x600 [ 83.070683][ T5800] ? jffs2_init_fs_context+0x4f/0xc0 [ 83.070705][ T5800] ? jffs2_init_fs_context+0x4f/0xc0 [ 83.070727][ T5800] jffs2_init_fs_context+0x4f/0xc0 [ 83.070747][ T5800] alloc_fs_context+0x99e/0xd00 [ 83.070784][ T5800] do_new_mount+0x17f/0xdc0 [ 83.070812][ T5800] ? __pfx_do_new_mount+0x10/0x10 [ 83.070840][ T5800] ? ns_capable+0x84/0xe0 [ 83.070864][ T5800] ? path_mount+0x647/0x1050 [ 83.070890][ T5800] ? user_path_at+0xd4/0x160 [ 83.070917][ T5800] __se_sys_mount+0x31d/0x420 [ 83.070946][ T5800] ? __pfx___se_sys_mount+0x10/0x10 [ 83.070975][ T5800] ? __x64_sys_mount+0x20/0xc0 [ 83.071000][ T5800] do_syscall_64+0x166/0x520 [ 83.071019][ T5800] ? trace_irq_disable+0x3b/0x140 [ 83.071045][ T5800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.071064][ T5800] ? clear_bhb_loop+0x70/0xc0 [ 83.071088][ T5800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.071106][ T5800] RIP: 0033:0x7f362399e159 [ 83.071131][ T5800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.071147][ T5800] RSP: 002b:00007f36248bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 83.071172][ T5800] RAX: ffffffffffffffda RBX: 00007f3623c25fa0 RCX: 00007f362399e159 [ 83.071187][ T5800] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 83.071200][ T5800] RBP: 00007f36248bd090 R08: 0000000000000000 R09: 0000000000000000 [ 83.071213][ T5800] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 83.071225][ T5800] R13: 00007f3623c26038 R14: 00007f3623c25fa0 R15: 00007ffcde4701c8 [ 83.071254][ T5800] [ 83.121827][ T5802] jffs2: notice: (5802) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.414568][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.563450][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 83.566112][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 83.569212][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 83.569231][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 83.569242][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 83.570957][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.570972][ T9] usb 1-1: Product: syz [ 83.570980][ T9] usb 1-1: Manufacturer: syz [ 83.570987][ T9] usb 1-1: SerialNumber: syz [ 83.577957][ T9] usb 1-1: config 0 descriptor?? [ 83.582676][ T5805] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.590488][ T9] mceusb 1-1:0.0: mceusb_dev_probe: device setup failed! [ 83.590512][ T9] mceusb 1-1:0.0: probe with driver mceusb failed with error -12 [ 83.621229][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.635291][ T5725] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.788567][ T5725] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 83.789434][ T5814] netlink: 'syz.0.9': attribute type 4 has an invalid length. [ 83.789451][ T5814] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 83.790258][ T5814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.791513][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.791540][ T5725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 83.792979][ T5725] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 83.793010][ T5725] usb 3-1: Manufacturer: syz [ 83.802829][ T44] usb 2-1: Using ep0 maxpacket: 8 [ 83.804008][ T190] usb 1-1: USB disconnect, device number 2 [ 83.829292][ T5725] usb 3-1: config 0 descriptor?? [ 83.874082][ T52] Bluetooth: hci3: command tx timeout [ 83.874155][ T5625] Bluetooth: hci0: command tx timeout [ 83.874189][ T5624] Bluetooth: hci2: command tx timeout [ 83.877986][ T44] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 83.895375][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 83.895416][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.899796][ T44] usb 2-1: config 0 descriptor?? [ 83.953655][ T5624] Bluetooth: hci1: command tx timeout [ 84.050826][ T5811] jffs2: notice: (5811) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 84.317899][ T44] kye 0003:0458:5019.0001: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 84.321681][ T44] kye 0003:0458:5019.0001: unknown main item tag 0x6 [ 84.321765][ T44] kye 0003:0458:5019.0001: ignoring exceeding usage max [ 84.333442][ T44] kye 0003:0458:5019.0001: hidraw0: USB HID v0.81 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 84.333474][ T44] kye 0003:0458:5019.0001: tablet-enabling feature report not found [ 84.333487][ T44] kye 0003:0458:5019.0001: tablet enabling failed [ 84.482470][ T5821] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.16'. [ 84.527440][ T10] usb 2-1: USB disconnect, device number 2 [ 84.711853][ T5827] netlink: 14 bytes leftover after parsing attributes in process `syz.3.18'. [ 84.736475][ T5827] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.742320][ T5827] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.770423][ T5827] bond0 (unregistering): Released all slaves [ 85.941806][ T5851] netlink: 400 bytes leftover after parsing attributes in process `syz.1.23'. [ 86.247064][ T5859] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.25'. [ 86.456381][ T5725] usbhid 3-1:0.0: can't add hid device: -71 [ 86.456483][ T5725] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 86.512478][ T5725] usb 3-1: USB disconnect, device number 2 [ 86.678206][ T5867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.29'. [ 86.722510][ T5867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.747976][ T5867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.763342][ T5867] bond0 (unregistering): Released all slaves [ 86.816493][ T1219] cfg80211: failed to load regulatory.db [ 87.334078][ T5890] jffs2: notice: (5890) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.363416][ T5725] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.513373][ T5725] usb 2-1: Using ep0 maxpacket: 8 [ 87.515630][ T5725] usb 2-1: unable to get BOS descriptor or descriptor too short [ 87.515681][ T5725] usb 2-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 87.521272][ T5725] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.521297][ T5725] usb 2-1: Product: С [ 87.521309][ T5725] usb 2-1: SerialNumber: ⎙㑠ᥡ鋥쿵豷跹䥡䫛₌䩫吵鯖툽栤呾䄊糞ᄴ⤲⅛쇔ᵔ术鹏ﭰ䫚➍돿ḻ겫ꐊౕ踒ﬗᶊ㦈ħ냢狎䑖⇌ꎜ [ 87.615104][ T5896] jffs2: notice: (5896) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 87.629511][ T5894] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 87.726802][ T5896] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.38'. [ 87.805694][ T5725] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 87.811624][ T5725] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 87.917870][ T5725] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 87.936801][ T5725] usb 2-1: USB disconnect, device number 3 [ 87.947745][ T5903] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 88.054921][ T1219] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 88.099393][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 88.205317][ T1219] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 88.209637][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.211611][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.214140][ T1219] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 88.214163][ T1219] usb 1-1: Manufacturer: syz [ 88.225392][ T1219] usb 1-1: config 0 descriptor?? [ 88.491096][ T5901] jffs2: notice: (5901) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.947228][ T5937] FAULT_INJECTION: forcing a failure. [ 88.947228][ T5937] name failslab, interval 1, probability 0, space 0, times 0 [ 88.947261][ T5937] CPU: 0 UID: 0 PID: 5937 Comm: syz.1.57 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.947287][ T5937] Tainted: [L]=SOFTLOCKUP [ 88.947294][ T5937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.947305][ T5937] Call Trace: [ 88.947312][ T5937] [ 88.947320][ T5937] dump_stack_lvl+0xe8/0x150 [ 88.947350][ T5937] should_fail_ex+0x3eb/0x540 [ 88.947376][ T5937] should_failslab+0xa8/0x100 [ 88.947397][ T5937] __kmalloc_cache_noprof+0x9e/0x600 [ 88.947425][ T5937] ? alloc_fs_context+0x66/0xd00 [ 88.947452][ T5937] ? alloc_fs_context+0x66/0xd00 [ 88.947480][ T5937] ? __get_fs_type+0x21/0x280 [ 88.947509][ T5937] alloc_fs_context+0x66/0xd00 [ 88.947536][ T5937] ? __get_fs_type+0x267/0x280 [ 88.947561][ T5937] ? __get_fs_type+0x21/0x280 [ 88.947593][ T5937] do_new_mount+0x17f/0xdc0 [ 88.947622][ T5937] ? __pfx_do_new_mount+0x10/0x10 [ 88.947646][ T5937] ? ns_capable+0x84/0xe0 [ 88.947679][ T5937] ? path_mount+0x647/0x1050 [ 88.947705][ T5937] ? user_path_at+0xd4/0x160 [ 88.947732][ T5937] __se_sys_mount+0x31d/0x420 [ 88.947759][ T5937] ? __pfx___se_sys_mount+0x10/0x10 [ 88.947786][ T5937] ? __x64_sys_mount+0x20/0xc0 [ 88.947811][ T5937] do_syscall_64+0x166/0x520 [ 88.947829][ T5937] ? trace_irq_disable+0x3b/0x140 [ 88.947855][ T5937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.947874][ T5937] ? clear_bhb_loop+0x70/0xc0 [ 88.947907][ T5937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.947925][ T5937] RIP: 0033:0x7f00ff19e159 [ 88.947942][ T5937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.947955][ T5937] RSP: 002b:00007f00fffe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 88.947976][ T5937] RAX: ffffffffffffffda RBX: 00007f00ff425fa0 RCX: 00007f00ff19e159 [ 88.947990][ T5937] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 88.948004][ T5937] RBP: 00007f00fffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 88.948015][ T5937] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 88.948027][ T5937] R13: 00007f00ff426038 R14: 00007f00ff425fa0 R15: 00007ffd8588e368 [ 88.948059][ T5937] [ 88.987641][ T5939] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.987656][ T5939] use the actual size instead. [ 89.223885][ T5943] netlink: 48 bytes leftover after parsing attributes in process `syz.3.60'. [ 89.238912][ T5941] syz.2.59 uses obsolete (PF_INET,SOCK_PACKET) [ 89.500004][ T5957] ======================================================= [ 89.500004][ T5957] WARNING: The mand mount option has been deprecated and [ 89.500004][ T5957] and is ignored by this kernel. Remove the mand [ 89.500004][ T5957] option from the mount to silence this warning. [ 89.500004][ T5957] ======================================================= [ 89.539356][ T5725] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 89.693358][ T5725] usb 2-1: Using ep0 maxpacket: 16 [ 89.695231][ T5725] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 89.696300][ T5725] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 89.696326][ T5725] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.696368][ T5725] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.700696][ T5725] usb 2-1: config 0 descriptor?? [ 89.743706][ T5706] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.762792][ T5725] pxrc 2-1:0.0: Could not find endpoint [ 89.894349][ T5706] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 89.896765][ T5706] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.896784][ T5706] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 89.896810][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.899241][ T5706] usb 4-1: config 0 descriptor?? [ 89.959057][ T5725] usb 2-1: USB disconnect, device number 4 [ 90.305756][ T5706] Bluetooth: Can't get state to change to load configuration err [ 90.305770][ T5706] Bluetooth: Loading sysconfig file failed [ 90.305799][ T5706] ath3k 4-1:0.0: probe with driver ath3k failed with error -16 [ 90.316518][ T5706] usb 4-1: USB disconnect, device number 2 [ 90.413492][ T5725] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.510562][ T5971] netlink: 388 bytes leftover after parsing attributes in process `syz.1.71'. [ 90.574254][ T5725] usb 3-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 90.575503][ T5725] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 90.578179][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.578204][ T5725] usb 3-1: Product: syz [ 90.578218][ T5725] usb 3-1: Manufacturer: syz [ 90.578232][ T5725] usb 3-1: SerialNumber: syz [ 90.835693][ T5725] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 90.843718][ T1219] usbhid 1-1:0.0: can't add hid device: -71 [ 90.843819][ T1219] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 90.853726][ T1219] usb 1-1: USB disconnect, device number 3 [ 91.060733][ T5990] Zero length message leads to an empty skb [ 91.099188][ T5725] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 91.113649][ T5994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.117693][ T5994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.373065][ T5725] usb 3-1: USB disconnect, device number 3 [ 91.498059][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 91.499561][ T6002] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 91.499561][ T6002] program syz.1.80 not setting count and/or reply_len properly [ 91.501502][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.644431][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 91.645137][ T44] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 91.648954][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 91.648979][ T44] usb 1-1: config 0 has no interface number 0 [ 91.649026][ T44] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 91.649046][ T44] usb 1-1: config 0 interface 1 has no altsetting 0 [ 91.651130][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.651154][ T44] usb 1-1: Product: syz [ 91.651168][ T44] usb 1-1: Manufacturer: syz [ 91.651181][ T44] usb 1-1: SerialNumber: syz [ 91.660039][ T44] usb 1-1: config 0 descriptor?? [ 91.890860][ T30] audit: type=1800 audit(1788609169.467:2): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="syzkaller0" dev="sda1" ino=2043 res=0 errno=0 [ 91.898252][ T44] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 91.907467][ T44] cx231xx 1-1:0.1: Failed to read PCB config [ 91.907592][ T44] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71 [ 91.919140][ T44] usb 1-1: USB disconnect, device number 4 [ 92.013394][ T5725] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.082184][ T6021] jffs2: notice: (6021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.084073][ T6021] FAULT_INJECTION: forcing a failure. [ 92.084073][ T6021] name failslab, interval 1, probability 0, space 0, times 0 [ 92.084100][ T6021] CPU: 1 UID: 0 PID: 6021 Comm: syz.1.87 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.084125][ T6021] Tainted: [L]=SOFTLOCKUP [ 92.084132][ T6021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.084143][ T6021] Call Trace: [ 92.084150][ T6021] [ 92.084158][ T6021] dump_stack_lvl+0xe8/0x150 [ 92.084187][ T6021] should_fail_ex+0x3eb/0x540 [ 92.084212][ T6021] should_failslab+0xa8/0x100 [ 92.084235][ T6021] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 92.084263][ T6021] ? __d_alloc+0x37/0x6f0 [ 92.084286][ T6021] ? __d_alloc+0x37/0x6f0 [ 92.084315][ T6021] __d_alloc+0x37/0x6f0 [ 92.084344][ T6021] d_alloc_parallel+0xde/0x16b0 [ 92.084373][ T6021] ? lock_acquire+0x115/0x350 [ 92.084408][ T6021] ? __d_lookup+0x66/0x790 [ 92.084434][ T6021] ? __d_lookup+0x66/0x790 [ 92.084460][ T6021] ? __pfx_d_alloc_parallel+0x10/0x10 [ 92.084487][ T6021] ? d_lookup+0x1f/0xa0 [ 92.084514][ T6021] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 92.084546][ T6021] lookup_open+0x26b/0x1380 [ 92.084582][ T6021] ? lookup_fast+0x1a8/0x5d0 [ 92.084615][ T6021] path_openat+0x696/0x1e40 [ 92.084660][ T6021] do_file_open+0x23e/0x4a0 [ 92.084692][ T6021] ? __pfx_do_file_open+0x10/0x10 [ 92.084738][ T6021] ? _raw_spin_unlock+0x28/0x50 [ 92.084763][ T6021] ? alloc_fd+0x651/0x6c0 [ 92.084795][ T6021] do_sys_openat2+0x115/0x200 [ 92.084818][ T6021] ? __pfx_do_sys_openat2+0x10/0x10 [ 92.084840][ T6021] ? ksys_write+0x242/0x270 [ 92.084867][ T6021] ? __pfx_ksys_write+0x10/0x10 [ 92.084895][ T6021] __x64_sys_openat+0x138/0x170 [ 92.084921][ T6021] do_syscall_64+0x166/0x520 [ 92.084938][ T6021] ? trace_irq_disable+0x3b/0x140 [ 92.084972][ T6021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.084991][ T6021] ? clear_bhb_loop+0x70/0xc0 [ 92.085014][ T6021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.085032][ T6021] RIP: 0033:0x7f00ff19e159 [ 92.085049][ T6021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.085064][ T6021] RSP: 002b:00007f00fffe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 92.085085][ T6021] RAX: ffffffffffffffda RBX: 00007f00ff425fa0 RCX: 00007f00ff19e159 [ 92.085099][ T6021] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 92.085112][ T6021] RBP: 00007f00fffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 92.085124][ T6021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.085135][ T6021] R13: 00007f00ff426038 R14: 00007f00ff425fa0 R15: 00007ffd8588e368 [ 92.085165][ T6021] [ 92.207526][ T5725] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 92.209143][ T6026] jffs2: notice: (6026) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.223564][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.223595][ T5725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.242850][ T5725] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 92.242874][ T5725] usb 4-1: Manufacturer: syz [ 92.248939][ T5725] usb 4-1: config 0 descriptor?? [ 92.403359][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.414548][ T1219] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.474460][ T6011] jffs2: notice: (6011) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.554604][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 92.555915][ T44] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 92.559177][ T44] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.559202][ T44] usb 1-1: config 0 has no interface number 0 [ 92.559238][ T44] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 92.559258][ T44] usb 1-1: config 0 interface 1 has no altsetting 0 [ 92.562114][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.562139][ T44] usb 1-1: Product: syz [ 92.562153][ T44] usb 1-1: Manufacturer: syz [ 92.562166][ T44] usb 1-1: SerialNumber: syz [ 92.567006][ T1219] usb 3-1: Using ep0 maxpacket: 16 [ 92.567961][ T1219] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 92.570856][ T1219] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 92.570886][ T1219] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.570911][ T1219] usb 3-1: config 0 interface 0 has no altsetting 0 [ 92.570941][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.587401][ T44] usb 1-1: config 0 descriptor?? [ 92.607229][ T1219] usb 3-1: config 0 descriptor?? [ 92.608102][ T6024] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 92.650022][ T6033] netlink: Failed to add helper -22 [ 92.650078][ T6033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.802792][ T44] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 92.804345][ T44] cx231xx 1-1:0.1: bad scenario!!!!! [ 92.804345][ T44] config_info=0 [ 92.804366][ T44] cx231xx 1-1:0.1: Failed to read PCB config [ 93.011987][ T5706] usb 1-1: USB disconnect, device number 5 [ 93.037357][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037394][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037421][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037446][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037472][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037497][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037522][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037548][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037591][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.037617][ T1219] samsung 0003:0419:0001.0002: unknown main item tag 0x0 [ 93.054899][ T1219] samsung 0003:0419:0001.0002: hidraw0: USB HID v7f.fd Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 93.223164][ T5706] usb 3-1: USB disconnect, device number 4 [ 93.902727][ T6052] FAULT_INJECTION: forcing a failure. [ 93.902727][ T6052] name failslab, interval 1, probability 0, space 0, times 0 [ 93.902761][ T6052] CPU: 0 UID: 0 PID: 6052 Comm: syz.2.95 Tainted: G L syzkaller #0 PREEMPT(full) [ 93.902788][ T6052] Tainted: [L]=SOFTLOCKUP [ 93.902795][ T6052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.902806][ T6052] Call Trace: [ 93.902813][ T6052] [ 93.902824][ T6052] dump_stack_lvl+0xe8/0x150 [ 93.902863][ T6052] should_fail_ex+0x3eb/0x540 [ 93.902889][ T6052] should_failslab+0xa8/0x100 [ 93.902913][ T6052] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 93.902940][ T6052] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 93.902965][ T6052] ? vfs_parse_fs_qstr+0x11e/0x1e0 [ 93.902997][ T6052] kmemdup_nul+0x36/0xf0 [ 93.903028][ T6052] vfs_parse_fs_qstr+0x11e/0x1e0 [ 93.903054][ T6052] ? jffs2_init_fs_context+0x4f/0xc0 [ 93.903079][ T6052] ? __pfx_vfs_parse_fs_qstr+0x10/0x10 [ 93.903111][ T6052] ? alloc_fs_context+0x9b2/0xd00 [ 93.903146][ T6052] do_new_mount+0x2a6/0xdc0 [ 93.903175][ T6052] ? __pfx_do_new_mount+0x10/0x10 [ 93.903199][ T6052] ? ns_capable+0x84/0xe0 [ 93.903223][ T6052] ? path_mount+0x647/0x1050 [ 93.903248][ T6052] ? user_path_at+0xd4/0x160 [ 93.903272][ T6052] __se_sys_mount+0x31d/0x420 [ 93.903299][ T6052] ? __pfx___se_sys_mount+0x10/0x10 [ 93.903328][ T6052] ? __x64_sys_mount+0x20/0xc0 [ 93.903353][ T6052] do_syscall_64+0x166/0x520 [ 93.903371][ T6052] ? trace_irq_disable+0x3b/0x140 [ 93.903397][ T6052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.903417][ T6052] ? clear_bhb_loop+0x70/0xc0 [ 93.903440][ T6052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.903460][ T6052] RIP: 0033:0x7fc0a4f9e159 [ 93.903477][ T6052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.903493][ T6052] RSP: 002b:00007fc0a31f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 93.903514][ T6052] RAX: ffffffffffffffda RBX: 00007fc0a5225fa0 RCX: 00007fc0a4f9e159 [ 93.903529][ T6052] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 93.903542][ T6052] RBP: 00007fc0a31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 93.903554][ T6052] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 93.903566][ T6052] R13: 00007fc0a5226038 R14: 00007fc0a5225fa0 R15: 00007ffe2837cf08 [ 93.903596][ T6052] [ 94.769721][ T5725] usbhid 4-1:0.0: can't add hid device: -71 [ 94.769813][ T5725] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 94.789466][ T5725] usb 4-1: USB disconnect, device number 3 [ 94.861653][ T6076] netlink: 400 bytes leftover after parsing attributes in process `syz.3.103'. [ 94.874304][ T5706] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.024413][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.027000][ T5706] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 95.027037][ T5706] usb 2-1: can't read configurations, error -22 [ 95.163394][ T5706] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.319165][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.334123][ T5706] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 95.334161][ T5706] usb 2-1: can't read configurations, error -22 [ 95.334410][ T5706] usb usb2-port1: attempt power cycle [ 95.683343][ T5706] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 95.704766][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.707214][ T5706] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 95.707250][ T5706] usb 2-1: can't read configurations, error -22 [ 95.844758][ T5706] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.865614][ T5706] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.870240][ T5706] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 95.870277][ T5706] usb 2-1: can't read configurations, error -22 [ 95.870596][ T5706] usb usb2-port1: unable to enumerate USB device [ 95.953497][ T6094] jffs2: notice: (6094) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.130705][ T6099] netlink: 'syz.2.112': attribute type 10 has an invalid length. [ 96.244006][ T190] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 96.396134][ T190] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 96.397179][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.397209][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.398193][ T190] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 96.398215][ T190] usb 1-1: Manufacturer: syz [ 96.401626][ T190] usb 1-1: config 0 descriptor?? [ 96.463604][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.489901][ T6108] xt_cluster: you have exceeded the maximum number of cluster nodes (2621472 > 32) [ 96.616587][ T10] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 96.617027][ T6097] jffs2: notice: (6097) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 96.620983][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.621009][ T10] usb 3-1: Product: syz [ 96.621017][ T10] usb 3-1: Manufacturer: syz [ 96.621025][ T10] usb 3-1: SerialNumber: syz [ 96.633163][ T10] usb 3-1: config 0 descriptor?? [ 96.640074][ T10] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 005 [ 96.838058][ T10] (null): failure reading functionality [ 97.144630][ T6103] nvme nvme0: failed to connect socket: -111 [ 97.290870][ T6097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.292440][ T6097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.310869][ T190] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71 [ 97.310930][ T190] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 97.311051][ T190] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 97.341658][ T190] usb 1-1: USB disconnect, device number 6 [ 97.695666][ T6129] overlayfs: failed to resolve './file1': -2 [ 97.711524][ T10] i2c i2c-1: failure reading functionality [ 97.734874][ T10] i2c i2c-1: connected i2c-tiny-usb device [ 97.738553][ T10] usb 3-1: USB disconnect, device number 5 [ 98.021265][ T6142] FAULT_INJECTION: forcing a failure. [ 98.021265][ T6142] name failslab, interval 1, probability 0, space 0, times 0 [ 98.021296][ T6142] CPU: 0 UID: 0 PID: 6142 Comm: syz.1.128 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.021323][ T6142] Tainted: [L]=SOFTLOCKUP [ 98.021330][ T6142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.021340][ T6142] Call Trace: [ 98.021347][ T6142] [ 98.021355][ T6142] dump_stack_lvl+0xe8/0x150 [ 98.021387][ T6142] should_fail_ex+0x3eb/0x540 [ 98.021413][ T6142] should_failslab+0xa8/0x100 [ 98.021435][ T6142] __kmalloc_cache_noprof+0x9e/0x600 [ 98.021464][ T6142] ? jffs2_init_fs_context+0x4f/0xc0 [ 98.021493][ T6142] ? jffs2_init_fs_context+0x4f/0xc0 [ 98.021520][ T6142] jffs2_init_fs_context+0x4f/0xc0 [ 98.021544][ T6142] alloc_fs_context+0x99e/0xd00 [ 98.021580][ T6142] do_new_mount+0x17f/0xdc0 [ 98.021608][ T6142] ? __pfx_do_new_mount+0x10/0x10 [ 98.021631][ T6142] ? ns_capable+0x84/0xe0 [ 98.021654][ T6142] ? path_mount+0x647/0x1050 [ 98.021680][ T6142] ? user_path_at+0xd4/0x160 [ 98.021707][ T6142] __se_sys_mount+0x31d/0x420 [ 98.021736][ T6142] ? __pfx___se_sys_mount+0x10/0x10 [ 98.021765][ T6142] ? __x64_sys_mount+0x20/0xc0 [ 98.021790][ T6142] do_syscall_64+0x166/0x520 [ 98.021807][ T6142] ? trace_irq_disable+0x3b/0x140 [ 98.021833][ T6142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.021851][ T6142] ? clear_bhb_loop+0x70/0xc0 [ 98.021872][ T6142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.021889][ T6142] RIP: 0033:0x7f00ff19e159 [ 98.021907][ T6142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.021923][ T6142] RSP: 002b:00007f00fffe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.021943][ T6142] RAX: ffffffffffffffda RBX: 00007f00ff425fa0 RCX: 00007f00ff19e159 [ 98.021957][ T6142] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 98.021971][ T6142] RBP: 00007f00fffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 98.021982][ T6142] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 98.021995][ T6142] R13: 00007f00ff426038 R14: 00007f00ff425fa0 R15: 00007ffd8588e368 [ 98.022024][ T6142] [ 98.260327][ T6149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.130'. [ 98.523506][ T190] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.614531][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.640230][ T6168] syz.1.137 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.673586][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 98.674443][ T190] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 98.675484][ T190] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 98.675508][ T190] usb 1-1: config 0 has no interface number 0 [ 98.675547][ T190] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 98.675570][ T190] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 98.677489][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.677512][ T190] usb 1-1: Product: syz [ 98.677526][ T190] usb 1-1: Manufacturer: syz [ 98.677540][ T190] usb 1-1: SerialNumber: syz [ 98.683166][ T190] usb 1-1: config 0 descriptor?? [ 98.687928][ T6147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.688057][ T6147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.779012][ T10] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.781051][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.781103][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.783943][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 98.783965][ T10] usb 3-1: Manufacturer: syz [ 98.794705][ T10] usb 3-1: config 0 descriptor?? [ 98.893821][ T6147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.893944][ T6147] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.906888][ T6176] netlink: 68 bytes leftover after parsing attributes in process `syz.0.129'. [ 98.921749][ T6179] netlink: 388 bytes leftover after parsing attributes in process `syz.1.141'. [ 99.014187][ T6153] jffs2: notice: (6153) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 99.134900][ T190] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 99.135293][ T190] asix 1-1:0.34: probe with driver asix failed with error -71 [ 99.146111][ T190] usb 1-1: USB disconnect, device number 7 [ 99.804399][ T6204] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 99.804399][ T6204] program syz.1.149 not setting count and/or reply_len properly [ 100.323801][ T5706] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 100.432284][ T6220] FAULT_INJECTION: forcing a failure. [ 100.432284][ T6220] name failslab, interval 1, probability 0, space 0, times 0 [ 100.432326][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.0.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.432351][ T6220] Tainted: [L]=SOFTLOCKUP [ 100.432358][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 100.432368][ T6220] Call Trace: [ 100.432376][ T6220] [ 100.432383][ T6220] dump_stack_lvl+0xe8/0x150 [ 100.432415][ T6220] should_fail_ex+0x3eb/0x540 [ 100.432440][ T6220] should_failslab+0xa8/0x100 [ 100.432463][ T6220] __kmalloc_noprof+0xf9/0x710 [ 100.432481][ T6220] ? tomoyo_encode+0x2ad/0x570 [ 100.432494][ T6220] ? tomoyo_encode+0x2ad/0x570 [ 100.432510][ T6220] tomoyo_encode+0x2ad/0x570 [ 100.432525][ T6220] tomoyo_realpath_from_path+0x5fa/0x640 [ 100.432544][ T6220] tomoyo_check_open_permission+0x229/0x470 [ 100.432556][ T6220] ? tomoyo_check_open_permission+0x1d3/0x470 [ 100.432567][ T6220] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 100.432579][ T6220] ? __asan_memset+0x22/0x50 [ 100.432595][ T6220] ? __lock_acquire+0x747/0x2de0 [ 100.432622][ T6220] ? mnt_get_write_access+0x66/0x280 [ 100.432638][ T6220] ? tomoyo_file_open+0x163/0x220 [ 100.432654][ T6220] security_file_open+0xa9/0x240 [ 100.432665][ T6220] do_dentry_open+0x495/0x1360 [ 100.432682][ T6220] vfs_open_consume+0x4a/0x350 [ 100.432693][ T6220] ? path_openat+0x14bb/0x1e40 [ 100.432709][ T6220] path_openat+0x14d7/0x1e40 [ 100.432733][ T6220] do_file_open+0x23e/0x4a0 [ 100.432751][ T6220] ? __pfx_do_file_open+0x10/0x10 [ 100.432776][ T6220] ? _raw_spin_unlock+0x28/0x50 [ 100.432791][ T6220] ? alloc_fd+0x651/0x6c0 [ 100.432808][ T6220] do_sys_openat2+0x115/0x200 [ 100.432821][ T6220] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.432833][ T6220] ? ksys_write+0x242/0x270 [ 100.432849][ T6220] ? __pfx_ksys_write+0x10/0x10 [ 100.432864][ T6220] __x64_sys_openat+0x138/0x170 [ 100.432884][ T6220] do_syscall_64+0x166/0x520 [ 100.432899][ T6220] ? trace_irq_disable+0x3b/0x140 [ 100.432925][ T6220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.432944][ T6220] ? clear_bhb_loop+0x70/0xc0 [ 100.432964][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.432975][ T6220] RIP: 0033:0x7fb6f7b9e159 [ 100.432985][ T6220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.432994][ T6220] RSP: 002b:00007fb6f8b0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.433006][ T6220] RAX: ffffffffffffffda RBX: 00007fb6f7e25fa0 RCX: 00007fb6f7b9e159 [ 100.433014][ T6220] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 100.433021][ T6220] RBP: 00007fb6f8b0e090 R08: 0000000000000000 R09: 0000000000000000 [ 100.433027][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.433033][ T6220] R13: 00007fb6f7e26038 R14: 00007fb6f7e25fa0 R15: 00007ffd5ec0ed78 [ 100.433049][ T6220] [ 100.433097][ T6220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 100.497126][ T5706] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 100.513391][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.759625][ T5706] usb 2-1: config 0 descriptor?? [ 100.775260][ T5706] cp210x 2-1:0.0: cp210x converter detected [ 100.974700][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 100.974973][ T5706] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 100.975000][ T5706] cp210x 2-1:0.0: querying part number failed [ 101.002720][ T5706] usb 2-1: cp210x converter now attached to ttyUSB0 [ 101.148406][ T6227] netlink: Failed to add helper -22 [ 101.148474][ T6227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 101.395074][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 101.395170][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 101.421150][ T10] usb 3-1: USB disconnect, device number 6 [ 101.483190][ T6232] jffs2: notice: (6232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.500938][ T1219] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 101.654108][ T1219] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 101.655071][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.655100][ T1219] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.655118][ T1219] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 101.655155][ T1219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.659768][ T1219] usb 1-1: config 0 descriptor?? [ 101.790615][ T6239] FAULT_INJECTION: forcing a failure. [ 101.790615][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 101.790646][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.2.163 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.790672][ T6239] Tainted: [L]=SOFTLOCKUP [ 101.790678][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 101.790689][ T6239] Call Trace: [ 101.790699][ T6239] [ 101.790715][ T6239] dump_stack_lvl+0xe8/0x150 [ 101.790745][ T6239] should_fail_ex+0x3eb/0x540 [ 101.790768][ T6239] should_failslab+0xa8/0x100 [ 101.790787][ T6239] __kmalloc_cache_noprof+0x9e/0x600 [ 101.790814][ T6239] ? sget_fc+0x745/0x1a40 [ 101.790832][ T6239] ? sget_fc+0x745/0x1a40 [ 101.790856][ T6239] sget_fc+0x745/0x1a40 [ 101.790882][ T6239] ? __pfx_super_s_dev_test+0x10/0x10 [ 101.790909][ T6239] ? __pfx_super_s_dev_set+0x10/0x10 [ 101.790936][ T6239] ? __pfx_sget_fc+0x10/0x10 [ 101.790961][ T6239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 101.790991][ T6239] sget_dev+0xab/0xf0 [ 101.791016][ T6239] ? __pfx_sget_dev+0x10/0x10 [ 101.791037][ T6239] ? get_mtd_device+0x200/0x240 [ 101.791066][ T6239] ? __pfx_get_mtd_device+0x10/0x10 [ 101.791098][ T6239] mtd_get_sb+0x51/0x410 [ 101.791119][ T6239] ? __pfx_jffs2_fill_super+0x10/0x10 [ 101.791142][ T6239] ? __pfx_jffs2_fill_super+0x10/0x10 [ 101.791164][ T6239] get_tree_mtd+0x597/0x7d0 [ 101.791184][ T6239] ? __pfx_jffs2_fill_super+0x10/0x10 [ 101.791206][ T6239] ? __pfx_get_tree_mtd+0x10/0x10 [ 101.791238][ T6239] vfs_get_tree+0x92/0x2a0 [ 101.791266][ T6239] do_new_mount+0x319/0xdc0 [ 101.791295][ T6239] ? __pfx_do_new_mount+0x10/0x10 [ 101.791320][ T6239] ? ns_capable+0x84/0xe0 [ 101.791342][ T6239] ? path_mount+0x647/0x1050 [ 101.791366][ T6239] ? user_path_at+0xd4/0x160 [ 101.791391][ T6239] __se_sys_mount+0x31d/0x420 [ 101.791420][ T6239] ? __pfx___se_sys_mount+0x10/0x10 [ 101.791447][ T6239] ? __x64_sys_mount+0x20/0xc0 [ 101.791470][ T6239] do_syscall_64+0x166/0x520 [ 101.791487][ T6239] ? trace_irq_disable+0x3b/0x140 [ 101.791511][ T6239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.791537][ T6239] ? clear_bhb_loop+0x70/0xc0 [ 101.791558][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.791576][ T6239] RIP: 0033:0x7fc0a4f9e159 [ 101.791595][ T6239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.791610][ T6239] RSP: 002b:00007fc0a31f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 101.791631][ T6239] RAX: ffffffffffffffda RBX: 00007fc0a5225fa0 RCX: 00007fc0a4f9e159 [ 101.791645][ T6239] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 101.791657][ T6239] RBP: 00007fc0a31f6090 R08: 0000000000000000 R09: 0000000000000000 [ 101.791669][ T6239] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 101.791680][ T6239] R13: 00007fc0a5226038 R14: 00007fc0a5225fa0 R15: 00007ffe2837cf08 [ 101.791726][ T6239] [ 102.156090][ T1219] hid_parser_main: 470 callbacks suppressed [ 102.156114][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156144][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156169][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156194][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156220][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156245][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156269][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156294][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156325][ T1219] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 102.156349][ T1219] plantronics 0003:047F:FFFF.0004: item fetching failed at offset 12/15 [ 102.157457][ T1219] plantronics 0003:047F:FFFF.0004: parse failed [ 102.157556][ T1219] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 102.351902][ T6229] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 102.360730][ T10] usb 1-1: USB disconnect, device number 8 [ 102.451415][ T6247] syzkaller1: entered promiscuous mode [ 102.451460][ T6247] syzkaller1: entered allmulticast mode [ 102.730578][ T6253] netlink: 400 bytes leftover after parsing attributes in process `syz.2.169'. [ 102.843513][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.942417][ T6261] netlink: 14 bytes leftover after parsing attributes in process `syz.0.173'. [ 102.958813][ T6261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.961682][ T6261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.974746][ T6261] bond0 (unregistering): Released all slaves [ 102.994512][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 102.997084][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.997123][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.998926][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 102.998950][ T10] usb 4-1: Manufacturer: syz [ 103.014039][ T10] usb 4-1: config 0 descriptor?? [ 103.062117][ T5706] usb 2-1: USB disconnect, device number 9 [ 103.081909][ T5706] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 103.100821][ T5706] cp210x 2-1:0.0: device disconnected [ 103.184729][ T6261] Process accounting resumed [ 103.238623][ T6251] jffs2: notice: (6251) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 103.274366][ T6266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 103.296159][ T6269] netlink: 'syz.0.176': attribute type 28 has an invalid length. [ 103.441503][ T6272] netlink: 'syz.1.177': attribute type 10 has an invalid length. [ 103.534248][ T5725] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.673378][ T5725] usb 1-1: device descriptor read/64, error -71 [ 103.913395][ T5725] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 103.975385][ T6270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.975804][ T6270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.054790][ T5725] usb 1-1: device descriptor read/64, error -71 [ 104.163871][ T5725] usb usb1-port1: attempt power cycle [ 104.503445][ T5725] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 104.524227][ T5725] usb 1-1: device descriptor read/8, error -71 [ 104.691106][ T6286] FAULT_INJECTION: forcing a failure. [ 104.691106][ T6286] name failslab, interval 1, probability 0, space 0, times 0 [ 104.691138][ T6286] CPU: 0 UID: 0 PID: 6286 Comm: syz.2.181 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.691165][ T6286] Tainted: [L]=SOFTLOCKUP [ 104.691172][ T6286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.691181][ T6286] Call Trace: [ 104.691187][ T6286] [ 104.691197][ T6286] dump_stack_lvl+0xe8/0x150 [ 104.691226][ T6286] should_fail_ex+0x3eb/0x540 [ 104.691252][ T6286] should_failslab+0xa8/0x100 [ 104.691274][ T6286] ? do_getname+0x2e/0x250 [ 104.691295][ T6286] kmem_cache_alloc_noprof+0x9c/0x600 [ 104.691322][ T6286] ? fput+0xa0/0xd0 [ 104.691343][ T6286] ? do_getname+0x2e/0x250 [ 104.691369][ T6286] do_getname+0x2e/0x250 [ 104.691389][ T6286] ? __se_sys_rmdir+0x12/0x140 [ 104.691411][ T6286] __se_sys_rmdir+0x1e/0x140 [ 104.691434][ T6286] do_syscall_64+0x166/0x520 [ 104.691453][ T6286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.691473][ T6286] ? clear_bhb_loop+0x70/0xc0 [ 104.691497][ T6286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.691517][ T6286] RIP: 0033:0x7fc0a4f9e159 [ 104.691535][ T6286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.691550][ T6286] RSP: 002b:00007fc0a31d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 104.691572][ T6286] RAX: ffffffffffffffda RBX: 00007fc0a5226090 RCX: 00007fc0a4f9e159 [ 104.691586][ T6286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 104.691598][ T6286] RBP: 00007fc0a31d5090 R08: 0000000000000000 R09: 0000000000000000 [ 104.691610][ T6286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.691622][ T6286] R13: 00007fc0a5226128 R14: 00007fc0a5226090 R15: 00007ffe2837cf08 [ 104.691651][ T6286] [ 104.784103][ T10] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 104.784163][ T10] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 104.784261][ T10] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 104.845283][ T5725] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 104.917873][ T5725] usb 1-1: device descriptor read/8, error -71 [ 104.935676][ T10] usb 4-1: USB disconnect, device number 4 [ 105.023596][ T5725] usb usb1-port1: unable to enumerate USB device [ 105.278649][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.279045][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.452627][ T6306] MTRR 1 not used [ 105.513409][ T5706] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.676318][ T5706] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 105.677419][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.677467][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.695259][ T5706] usb 3-1: config 0 descriptor?? [ 105.702897][ T5706] pwc: Askey VC010 type 2 USB webcam detected. [ 105.901979][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.902660][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.959630][ T6327] exFAT-fs (nullb0): invalid boot record signature [ 105.959647][ T6327] exFAT-fs (nullb0): failed to read boot sector [ 105.959655][ T6327] exFAT-fs (nullb0): failed to recognize exfat type [ 105.985618][ T6327] exFAT-fs (nullb0): invalid boot record signature [ 105.985635][ T6327] exFAT-fs (nullb0): failed to read boot sector [ 105.985643][ T6327] exFAT-fs (nullb0): failed to recognize exfat type [ 106.073396][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.110499][ T6333] FAULT_INJECTION: forcing a failure. [ 106.110499][ T6333] name failslab, interval 1, probability 0, space 0, times 0 [ 106.110530][ T6333] CPU: 0 UID: 0 PID: 6333 Comm: syz.1.201 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.110557][ T6333] Tainted: [L]=SOFTLOCKUP [ 106.110564][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 106.110571][ T6333] Call Trace: [ 106.110575][ T6333] [ 106.110580][ T6333] dump_stack_lvl+0xe8/0x150 [ 106.110605][ T6333] should_fail_ex+0x3eb/0x540 [ 106.110621][ T6333] should_failslab+0xa8/0x100 [ 106.110641][ T6333] __kmalloc_cache_noprof+0x9e/0x600 [ 106.110671][ T6333] ? jffs2_init_fs_context+0x4f/0xc0 [ 106.110693][ T6333] ? jffs2_init_fs_context+0x4f/0xc0 [ 106.110720][ T6333] jffs2_init_fs_context+0x4f/0xc0 [ 106.110733][ T6333] alloc_fs_context+0x99e/0xd00 [ 106.110753][ T6333] do_new_mount+0x17f/0xdc0 [ 106.110769][ T6333] ? __pfx_do_new_mount+0x10/0x10 [ 106.110786][ T6333] ? ns_capable+0x84/0xe0 [ 106.110810][ T6333] ? path_mount+0x647/0x1050 [ 106.110835][ T6333] ? user_path_at+0xd4/0x160 [ 106.110863][ T6333] __se_sys_mount+0x31d/0x420 [ 106.110882][ T6333] ? __pfx___se_sys_mount+0x10/0x10 [ 106.110897][ T6333] ? __x64_sys_mount+0x20/0xc0 [ 106.110932][ T6333] do_syscall_64+0x166/0x520 [ 106.110952][ T6333] ? trace_irq_disable+0x3b/0x140 [ 106.110980][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.110999][ T6333] ? clear_bhb_loop+0x70/0xc0 [ 106.111022][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.111033][ T6333] RIP: 0033:0x7f00ff19e159 [ 106.111044][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.111053][ T6333] RSP: 002b:00007f00fffe6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 106.111065][ T6333] RAX: ffffffffffffffda RBX: 00007f00ff425fa0 RCX: 00007f00ff19e159 [ 106.111073][ T6333] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 106.111080][ T6333] RBP: 00007f00fffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 106.111091][ T6333] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 106.111103][ T6333] R13: 00007f00ff426038 R14: 00007f00ff425fa0 R15: 00007ffd8588e368 [ 106.111133][ T6333] [ 106.220283][ T6335] netlink: 48 bytes leftover after parsing attributes in process `syz.1.202'. [ 106.269456][ T10] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.311388][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.311420][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.321685][ T5706] pwc: recv_control_msg error -71 req 02 val 2700 [ 106.328984][ T5706] pwc: recv_control_msg error -71 req 02 val 2c00 [ 106.329571][ T5706] pwc: recv_control_msg error -71 req 04 val 1000 [ 106.330938][ T5706] pwc: recv_control_msg error -71 req 04 val 1300 [ 106.339575][ T5706] pwc: recv_control_msg error -71 req 04 val 1400 [ 106.340931][ T5706] pwc: recv_control_msg error -71 req 02 val 2000 [ 106.342524][ T5706] pwc: recv_control_msg error -71 req 02 val 2100 [ 106.346618][ T5706] pwc: recv_control_msg error -71 req 04 val 1500 [ 106.349264][ T5706] pwc: recv_control_msg error -71 req 02 val 2500 [ 106.352808][ T5706] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.353536][ T5706] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.354265][ T5706] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.354700][ T5706] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.355754][ T5706] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.357459][ T5706] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.357916][ T10] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 106.357939][ T10] usb 4-1: Manufacturer: syz [ 106.432726][ T10] usb 4-1: config 0 descriptor?? [ 106.524523][ T5706] pwc: Registered as video103. [ 106.531843][ T5706] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 106.587826][ T5706] usb 3-1: USB disconnect, device number 7 [ 106.678389][ T6322] jffs2: notice: (6322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.429780][ T6371] netlink: 388 bytes leftover after parsing attributes in process `syz.0.213'. [ 107.492131][ T6375] overlay: Unknown parameter 'fsuuid' [ 107.510675][ T6375] overlayfs: conflicting lowerdir path [ 107.525797][ T6322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.534513][ T6322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.550473][ T10] uclogic 0003:256C:006D.0006: failed retrieving Huion firmware version: -71 [ 107.550551][ T10] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 107.550645][ T10] uclogic 0003:256C:006D.0006: probe with driver uclogic failed with error -71 [ 107.583420][ T10] usb 4-1: USB disconnect, device number 5 [ 108.264160][ T6393] sg_write: data in/out 327652/1 bytes for SCSI command 0x5e-- guessing data in; [ 108.264160][ T6393] program syz.2.221 not setting count and/or reply_len properly [ 108.528147][ T6405] jffs2: notice: (6405) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.531094][ T6405] FAULT_INJECTION: forcing a failure. [ 108.531094][ T6405] name failslab, interval 1, probability 0, space 0, times 0 [ 108.531124][ T6405] CPU: 0 UID: 0 PID: 6405 Comm: syz.1.226 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.531146][ T6405] Tainted: [L]=SOFTLOCKUP [ 108.531153][ T6405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.531163][ T6405] Call Trace: [ 108.531170][ T6405] [ 108.531178][ T6405] dump_stack_lvl+0xe8/0x150 [ 108.531206][ T6405] should_fail_ex+0x3eb/0x540 [ 108.531235][ T6405] should_failslab+0xa8/0x100 [ 108.531257][ T6405] __kmalloc_noprof+0xf9/0x710 [ 108.531282][ T6405] ? tomoyo_encode+0x2ad/0x570 [ 108.531302][ T6405] ? tomoyo_encode+0x2ad/0x570 [ 108.531328][ T6405] tomoyo_encode+0x2ad/0x570 [ 108.531353][ T6405] tomoyo_realpath_from_path+0x5fa/0x640 [ 108.531385][ T6405] ? tomoyo_path_number_perm+0x219/0x5f0 [ 108.531404][ T6405] tomoyo_path_number_perm+0x246/0x5f0 [ 108.531423][ T6405] ? __lock_acquire+0x747/0x2de0 [ 108.531449][ T6405] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 108.531509][ T6405] ? __pfx_current_check_access_path+0x10/0x10 [ 108.531529][ T6405] ? d_alloc_parallel+0x1530/0x16b0 [ 108.531565][ T6405] tomoyo_path_mknod+0x14a/0x1a0 [ 108.531590][ T6405] ? d_alloc_parallel+0x39c/0x16b0 [ 108.531617][ T6405] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 108.531642][ T6405] ? __d_lookup+0x66/0x790 [ 108.531674][ T6405] security_path_mknod+0x176/0x370 [ 108.531700][ T6405] may_o_create+0xc2/0x380 [ 108.531733][ T6405] lookup_open+0x68a/0x1380 [ 108.531770][ T6405] ? lookup_fast+0x1a8/0x5d0 [ 108.531802][ T6405] path_openat+0x696/0x1e40 [ 108.531856][ T6405] do_file_open+0x23e/0x4a0 [ 108.531887][ T6405] ? __pfx_do_file_open+0x10/0x10 [ 108.531936][ T6405] ? _raw_spin_unlock+0x28/0x50 [ 108.531964][ T6405] ? alloc_fd+0x651/0x6c0 [ 108.531997][ T6405] do_sys_openat2+0x115/0x200 [ 108.532020][ T6405] ? __pfx_do_sys_openat2+0x10/0x10 [ 108.532042][ T6405] ? ksys_write+0x242/0x270 [ 108.532069][ T6405] ? __pfx_ksys_write+0x10/0x10 [ 108.532098][ T6405] __x64_sys_openat+0x138/0x170 [ 108.532125][ T6405] do_syscall_64+0x166/0x520 [ 108.532143][ T6405] ? trace_irq_disable+0x3b/0x140 [ 108.532170][ T6405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.532189][ T6405] ? clear_bhb_loop+0x70/0xc0 [ 108.532211][ T6405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.532230][ T6405] RIP: 0033:0x7f00ff19e159 [ 108.532249][ T6405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.532264][ T6405] RSP: 002b:00007f00fffe6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 108.532284][ T6405] RAX: ffffffffffffffda RBX: 00007f00ff425fa0 RCX: 00007f00ff19e159 [ 108.532298][ T6405] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 108.532310][ T6405] RBP: 00007f00fffe6090 R08: 0000000000000000 R09: 0000000000000000 [ 108.532320][ T6405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.532330][ T6405] R13: 00007f00ff426038 R14: 00007f00ff425fa0 R15: 00007ffd8588e368 [ 108.532360][ T6405] [ 108.537677][ T6405] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.766522][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 108.952236][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.225'. [ 108.964529][ T190] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 109.115078][ T190] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 109.116303][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.116396][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.117639][ T190] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 109.117662][ T190] usb 4-1: Manufacturer: syz [ 109.122827][ T190] usb 4-1: config 0 descriptor?? [ 109.193387][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 109.347332][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 109.351226][ T10] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 109.351278][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.388641][ T10] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 109.608132][ T6430] netlink: Failed to add helper -22 [ 109.608168][ T6430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.704721][ T6406] jffs2: warning: (6406) jffs2_sum_write_sumnode: Empty summary info!!! [ 109.705106][ T6406] ------------[ cut here ]------------ [ 109.705116][ T6406] kernel BUG at fs/jffs2/summary.c:868! [ 109.705156][ T6406] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 109.730721][ T6406] CPU: 1 UID: 0 PID: 6406 Comm: jffs2_gcd_mtd0 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.742007][ T6406] Tainted: [L]=SOFTLOCKUP [ 109.746329][ T6406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.756403][ T6406] RIP: 0010:jffs2_sum_write_sumnode+0x2602/0x2610 [ 109.762838][ T6406] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 89 df e8 b4 66 f2 fe 8b 33 48 c7 c7 c0 7c 48 8c 48 c7 c2 40 fb 82 8e e8 2f fa e1 fd 90 <0f> 0b e8 a7 3d 82 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 [ 109.782454][ T6406] RSP: 0018:ffffc9000bfaf360 EFLAGS: 00010246 [ 109.788546][ T6406] RAX: 0000000000000045 RBX: ffff88802e4ea580 RCX: f1d467dd25534b00 [ 109.796525][ T6406] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 109.804508][ T6406] RBP: ffffc9000bfaf4f0 R08: ffffc9000bfaf0e7 R09: 1ffff920017f5e1c [ 109.812485][ T6406] R10: dffffc0000000000 R11: fffff520017f5e1d R12: ffff8880597c6270 [ 109.820459][ T6406] R13: ffff8880597c6590 R14: 0000000000000000 R15: 1ffff920017f5e7c [ 109.828443][ T6406] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 109.837398][ T6406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 109.843983][ T6406] CR2: 0000200000000080 CR3: 0000000077fbc000 CR4: 00000000003526f0 [ 109.852042][ T6406] Call Trace: [ 109.855316][ T6406] [ 109.858244][ T6406] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 109.864056][ T6406] ? __pfx_jffs2_sum_write_sumnode+0x10/0x10 [ 109.870035][ T6406] ? jffs2_do_read_inode_internal+0x4b3b/0x6790 [ 109.876301][ T6406] ? security_inode_alloc+0x39/0x310 [ 109.881595][ T6406] ? kmem_cache_alloc_noprof+0x151/0x600 [ 109.887243][ T6406] jffs2_do_reserve_space+0x213/0x1750 [ 109.892723][ T6406] jffs2_reserve_space_gc+0x45/0xf0 [ 109.897939][ T6406] jffs2_garbage_collect_pristine+0xfa/0xe40 [ 109.903922][ T6406] ? jffs2_garbage_collect_live+0xe8/0x34d0 [ 109.909827][ T6406] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.914866][ T6406] ? __pfx_jffs2_garbage_collect_pristine+0x10/0x10 [ 109.921461][ T6406] ? do_raw_spin_unlock+0xf5/0x200 [ 109.926589][ T6406] jffs2_garbage_collect_live+0x686/0x34d0 [ 109.932414][ T6406] ? __pfx_jffs2_garbage_collect_live+0x10/0x10 [ 109.936490][ T6435] netlink: 64 bytes leftover after parsing attributes in process `syz.2.234'. [ 109.947470][ T6406] ? _raw_spin_unlock+0x28/0x50 [ 109.952331][ T6406] ? jffs2_iget+0x9fe/0xcc0 [ 109.956831][ T6406] ? __pfx_jffs2_iget+0x10/0x10 [ 109.961692][ T6406] ? do_raw_spin_lock+0x12b/0x2f0 [ 109.966725][ T6406] ? is_bad_inode+0xd/0x50 [ 109.971141][ T6406] ? jffs2_gc_fetch_inode+0x16c/0x340 [ 109.976515][ T6406] ? __pfx_jffs2_gc_fetch_inode+0x10/0x10 [ 109.982325][ T6406] ? do_raw_spin_unlock+0xf5/0x200 [ 109.987438][ T6406] jffs2_garbage_collect_pass+0x1ab0/0x2170 [ 109.993334][ T6406] ? __pfx_jffs2_garbage_collect_pass+0x10/0x10 [ 109.999569][ T6406] ? _raw_spin_unlock_irq+0x23/0x50 [ 110.004765][ T6406] ? sigprocmask+0x15c/0x1a0 [ 110.009345][ T6406] jffs2_garbage_collect_thread+0x693/0x720 [ 110.015321][ T6406] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10 [ 110.021731][ T6406] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 110.027541][ T6406] ? __kthread_parkme+0x71/0x1f0 [ 110.032485][ T6406] ? __kthread_parkme+0x199/0x1f0 [ 110.037506][ T6406] kthread+0x38b/0x480 [ 110.041580][ T6406] ? __pfx_jffs2_garbage_collect_thread+0x10/0x10 [ 110.047984][ T6406] ? __pfx_kthread+0x10/0x10 [ 110.052572][ T6406] ret_from_fork+0x514/0xb70 [ 110.057168][ T6406] ? __pfx_ret_from_fork+0x10/0x10 [ 110.062286][ T6406] ? __switch_to+0xc89/0x1420 [ 110.066957][ T6406] ? __pfx_kthread+0x10/0x10 [ 110.071555][ T6406] ret_from_fork_asm+0x1a/0x30 [ 110.076316][ T6406] [ 110.079335][ T6406] Modules linked in: [ 110.086320][ T6406] ---[ end trace 0000000000000000 ]--- [ 110.094975][ T6409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.095222][ T6409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.102502][ T190] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 110.102541][ T190] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 110.102607][ T190] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 110.105721][ T190] usb 4-1: USB disconnect, device number 6 [ 110.146308][ T6406] RIP: 0010:jffs2_sum_write_sumnode+0x2602/0x2610 [ 110.146342][ T6406] Code: 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 89 df e8 b4 66 f2 fe 8b 33 48 c7 c7 c0 7c 48 8c 48 c7 c2 40 fb 82 8e e8 2f fa e1 fd 90 <0f> 0b e8 a7 3d 82 fe 90 0f 0b cc cc cc cc 90 90 90 90 90 90 90 90 [ 110.146357][ T6406] RSP: 0018:ffffc9000bfaf360 EFLAGS: 00010246 [ 110.146375][ T6406] RAX: 0000000000000045 RBX: ffff88802e4ea580 RCX: f1d467dd25534b00 [ 110.146389][ T6406] RDX: 0000000000000000 RSI: 8000000000000000 RDI: 0000000000000000 [ 110.146401][ T6406] RBP: ffffc9000bfaf4f0 R08: ffffc9000bfaf0e7 R09: 1ffff920017f5e1c [ 110.146415][ T6406] R10: dffffc0000000000 R11: fffff520017f5e1d R12: ffff8880597c6270 [ 110.146429][ T6406] R13: ffff8880597c6590 R14: 0000000000000000 R15: 1ffff920017f5e7c [ 110.146442][ T6406] FS: 0000000000000000(0000) GS:ffff88812495b000(0000) knlGS:0000000000000000 [ 110.146456][ T6406] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.146468][ T6406] CR2: 00007fb6f8aecff8 CR3: 0000000033178000 CR4: 00000000003526f0 [ 110.146487][ T6406] Kernel panic - not syncing: Fatal exception [ 110.247998][ T6406] Kernel Offset: disabled [ 110.252331][ T6406] Rebooting in 86400 seconds..